Red Hat Product Security released an advisory (RHSA-2025:15361) addressing two vulnerabilities in PostgreSQL 12 (CVE-2025-8714 and CVE-2025-8715) that allow arbitrary code execution during the restore operation. These vulnerabilities affect PostgreSQL 12 packages on Red Hat Enterprise Linux 8.2 AUS. The advisory includes updated packages to fix these issues. The vulnerabilities are related to improper handling in the restore process, potentially allowing code execution. No detailed CVSS score is provided in the advisory, but the impact is considered important/high.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code during the database restore operation, potentially compromising the affected system. This could lead to unauthorized control over the database server or data manipulation. The advisory rates the security impact as important, indicating a high severity level for affected systems running PostgreSQL 12 on Red Hat Enterprise Linux 8.2 AUS.

Red Hat has released updated PostgreSQL 12 packages (version 12.22-1 and related modules) that address these vulnerabilities. Users should apply the security update as described in the Red Hat advisory RHSA-2025:15361 and the referenced article https://access.redhat.com/articles/11258 to remediate the issue. No indication is given that no action is required; therefore, applying the official update is the recommended mitigation.