PostgreSQL 12 on Red Hat Enterprise Linux 8 contains two vulnerabilities (CVE-2025-8714 and CVE-2025-8715) that allow arbitrary code execution during restore operations. These vulnerabilities are addressed by an important security update released by Red Hat (RHSA-2025:15115). The advisory covers multiple architectures and provides updated packages to fix the issues. No CVSS scores are included in the advisory, but the impact is considered significant due to the ability to execute arbitrary code. The update is available through Red Hat's package repositories and should be applied promptly.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code during the database restore process, potentially compromising the affected system. This poses a high risk to the confidentiality, integrity, and availability of the database and underlying system. The vulnerabilities affect PostgreSQL 12 on Red Hat Enterprise Linux 8 across multiple hardware architectures.

Red Hat has released an official security update (RHSA-2025:15115) that addresses these vulnerabilities. Users should apply the updated PostgreSQL 12 packages for Red Hat Enterprise Linux 8 as soon as possible. For detailed update instructions, refer to the Red Hat article at https://access.redhat.com/articles/11258. No additional mitigations are indicated by the vendor advisory.