Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

PostgreSQL 13 Security Update for Linux

published 1 year ago

Summary

A security update is available for PostgreSQL 13 on Linux systems. This update fixes a vulnerability that could allow an attacker to execute arbitrary code on a database server. It is recommended to apply this update to ensure the security and integrity of your PostgreSQL database.

What to do

Update redhat pgaudit to version 0:1.5.0-1.module+el8.4.0+8873+b821c30a.
Update redhat pgaudit-debuginfo to version 0:1.5.0-1.module+el8.4.0+8873+b821c30a.
Update redhat pgaudit-debugsource to version 0:1.5.0-1.module+el8.4.0+8873+b821c30a.
Update redhat postgres-decoderbufs to version 0:0.10.0-2.module+el8.4.0+8873+b821c30a.
Update redhat postgres-decoderbufs-debuginfo to version 0:0.10.0-2.module+el8.4.0+8873+b821c30a.
Update redhat postgres-decoderbufs-debugsource to version 0:0.10.0-2.module+el8.4.0+8873+b821c30a.
Update redhat postgresql to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-contrib to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-contrib-debuginfo to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-debuginfo to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-debugsource to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-docs to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-docs-debuginfo to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-plperl to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-plperl-debuginfo to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-plpython3 to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-plpython3-debuginfo to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-pltcl to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-pltcl-debuginfo to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-server to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-server-debuginfo to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-server-devel to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-server-devel-debuginfo to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-static to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-test to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-test-debuginfo to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-test-rpm-macros to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-upgrade to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-upgrade-debuginfo to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-upgrade-devel to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.
Update redhat postgresql-upgrade-devel-debuginfo to version 0:13.22-1.module+el8.4.0+23428+e8cf4671.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_aus:8.4::appstream	redhat	pgaudit	< 0:1.5.0-1.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:1.5.0-1.module+el8.4.0+8873+b821c30a
Red Hat:rhel_aus:8.4::appstream	redhat	pgaudit-debuginfo	< 0:1.5.0-1.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:1.5.0-1.module+el8.4.0+8873+b821c30a
Red Hat:rhel_aus:8.4::appstream	redhat	pgaudit-debugsource	< 0:1.5.0-1.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:1.5.0-1.module+el8.4.0+8873+b821c30a
Red Hat:rhel_aus:8.4::appstream	redhat	postgres-decoderbufs	< 0:0.10.0-2.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:0.10.0-2.module+el8.4.0+8873+b821c30a
Red Hat:rhel_aus:8.4::appstream	redhat	postgres-decoderbufs-debuginfo	< 0:0.10.0-2.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:0.10.0-2.module+el8.4.0+8873+b821c30a
Red Hat:rhel_aus:8.4::appstream	redhat	postgres-decoderbufs-debugsource	< 0:0.10.0-2.module+el8.4.0+8873+b821c30a Fix: upgrade to 0:0.10.0-2.module+el8.4.0+8873+b821c30a
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-contrib	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-contrib-debuginfo	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-debuginfo	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-debugsource	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-docs	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-docs-debuginfo	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-plperl	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-plperl-debuginfo	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-plpython3	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-plpython3-debuginfo	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-pltcl	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-pltcl-debuginfo	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-server	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-server-debuginfo	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-server-devel	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-server-devel-debuginfo	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-static	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-test	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-test-debuginfo	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-test-rpm-macros	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-upgrade	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-upgrade-debuginfo	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-upgrade-devel	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671
Red Hat:rhel_aus:8.4::appstream	redhat	postgresql-upgrade-devel-debuginfo	< 0:13.22-1.module+el8.4.0+23428+e8cf4671 Fix: upgrade to 0:13.22-1.module+el8.4.0+23428+e8cf4671

Original advisory text

Red Hat Security Advisory: postgresql:13 security update

References

https://access.redhat.com/errata/RHSA-2025:15057 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2388551 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2388553 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15057.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-8713 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2388550 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-8713 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-8713 Vendor Advisory
https://www.postgresql.org/support/security/CVE-2025-8713/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-8714 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-8714 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-8714 Vendor Advisory
https://www.postgresql.org/support/security/CVE-2025-8714/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-8715 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-8715 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-8715 Vendor Advisory
https://www.postgresql.org/support/security/CVE-2025-8715/ Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published3 Sep 2025

Updated12 Jul 2026

First seen12 Jul 2026

Sources

RHSA-2025:15057 · OSV

Track software like this

Free during beta