Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat PostgreSQL Security Update - Data Exposure Risk

published 1 year ago

Summary

A security update is available for Red Hat's PostgreSQL database software. This update addresses a vulnerability that could allow unauthorized access to sensitive data. To protect your system, apply the update as soon as possible.

What to do

Update redhat postgresql-server-debuginfo to version 0:13.22-1.el9_0.
Update redhat postgresql to version 0:13.22-1.el9_0.
Update redhat postgresql-contrib to version 0:13.22-1.el9_0.
Update redhat postgresql-contrib-debuginfo to version 0:13.22-1.el9_0.
Update redhat postgresql-debuginfo to version 0:13.22-1.el9_0.
Update redhat postgresql-debugsource to version 0:13.22-1.el9_0.
Update redhat postgresql-docs-debuginfo to version 0:13.22-1.el9_0.
Update redhat postgresql-plperl to version 0:13.22-1.el9_0.
Update redhat postgresql-plperl-debuginfo to version 0:13.22-1.el9_0.
Update redhat postgresql-plpython3 to version 0:13.22-1.el9_0.
Update redhat postgresql-plpython3-debuginfo to version 0:13.22-1.el9_0.
Update redhat postgresql-pltcl to version 0:13.22-1.el9_0.
Update redhat postgresql-pltcl-debuginfo to version 0:13.22-1.el9_0.
Update redhat postgresql-private-libs to version 0:13.22-1.el9_0.
Update redhat postgresql-private-libs-debuginfo to version 0:13.22-1.el9_0.
Update redhat postgresql-server to version 0:13.22-1.el9_0.
Update redhat postgresql-server-devel-debuginfo to version 0:13.22-1.el9_0.
Update redhat postgresql-test-debuginfo to version 0:13.22-1.el9_0.
Update redhat postgresql-upgrade to version 0:13.22-1.el9_0.
Update redhat postgresql-upgrade-debuginfo to version 0:13.22-1.el9_0.
Update redhat postgresql-upgrade-devel-debuginfo to version 0:13.22-1.el9_0.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-server-debuginfo	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-contrib	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-contrib-debuginfo	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-debuginfo	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-debugsource	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-docs-debuginfo	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-plperl	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-plperl-debuginfo	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-plpython3	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-plpython3-debuginfo	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-pltcl	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-pltcl-debuginfo	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-private-libs	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-private-libs-debuginfo	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-server	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-server-devel-debuginfo	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-test-debuginfo	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-upgrade	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-upgrade-debuginfo	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	postgresql-upgrade-devel-debuginfo	< 0:13.22-1.el9_0 Fix: upgrade to 0:13.22-1.el9_0

Original advisory text

Red Hat Security Advisory: postgresql security update

References

https://access.redhat.com/errata/RHSA-2025:14870 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2388551 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2388553 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14870.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-8713 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2388550 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-8713 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-8713 Vendor Advisory
https://www.postgresql.org/support/security/CVE-2025-8713/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-8714 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-8714 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-8714 Vendor Advisory
https://www.postgresql.org/support/security/CVE-2025-8714/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-8715 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-8715 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-8715 Vendor Advisory
https://www.postgresql.org/support/security/CVE-2025-8715/ Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published31 Aug 2025

Updated12 Jul 2026

First seen12 Jul 2026

Sources

RHSA-2025:14870 · OSV

Track software like this

Free during beta