Red Hat Product Security issued an advisory (RHSA-2025:15057) for PostgreSQL 13 on Red Hat Enterprise Linux 8.4 addressing multiple vulnerabilities (CVE-2025-8713, CVE-2025-8714, CVE-2025-8715) that enable arbitrary code execution during the restore operation. These vulnerabilities are related to improper handling of restore operations in PostgreSQL, potentially allowing code execution. The advisory classifies the update as important and provides updated packages to remediate the issues. No CVSS base scores are provided in the advisory or CVE entries. The advisory references fixes available in updated PostgreSQL 13.22 packages for RHEL 8.4.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code on the affected system during PostgreSQL database restore operations. This could lead to full compromise of the database server and potentially the underlying host system. The advisory rates the impact as important, indicating significant security risk if unpatched.

Red Hat has released updated PostgreSQL 13 packages for Red Hat Enterprise Linux 8.4 that address these vulnerabilities. Users should apply the security update as detailed in the Red Hat advisory RHSA-2025:15057 and the linked article https://access.redhat.com/articles/11258. Applying the official patch is the recommended mitigation. No additional vendor mitigation or temporary workarounds are indicated. Patch status is confirmed as an official fix available from Red Hat.