Red Hat Product Security released an advisory (RHSA-2025:15361) addressing two vulnerabilities in PostgreSQL 12 related to arbitrary code execution during the restore operation (CVE-2025-8714 and CVE-2025-8715). These vulnerabilities could allow an attacker to execute code when a database restore is performed. The advisory targets Red Hat Enterprise Linux 8.2 AUS and provides updated PostgreSQL 12 packages to fix these issues. The advisory references bugzilla entries BZ-2388551 and BZ-2388553 for the respective CVEs. No CVSS score is provided in the advisory or CVE data. The update is rated as important by Red Hat.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code during the PostgreSQL restore operation, potentially compromising the affected system. This represents a significant security risk for systems running the vulnerable PostgreSQL 12 version on Red Hat Enterprise Linux 8.2 AUS.

Red Hat has released updated PostgreSQL 12 packages for Red Hat Enterprise Linux 8.2 AUS that address these vulnerabilities. Users should apply the security update as described in the Red Hat advisory and the referenced article (https://access.redhat.com/articles/11258). Since an official fix is available, applying the update is the recommended mitigation. No additional vendor guidance indicates alternative mitigations or that no action is required.