This advisory addresses multiple vulnerabilities in PostgreSQL 15 related to arbitrary code execution during database restore operations, specifically CVE-2025-8713, CVE-2025-8714, and CVE-2025-8715. These vulnerabilities could allow an attacker to execute arbitrary code when a restore operation is performed. The advisory is issued by Red Hat Product Security and targets Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions and related variants. The update fixes these issues by providing patched packages for PostgreSQL 15. No detailed CVSS scores are provided in the advisory, but the severity is rated as Important.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code during PostgreSQL restore operations, potentially compromising the affected system. This could lead to unauthorized control or disruption of database services. The advisory rates the impact as Important, indicating a significant security risk.

A security update for PostgreSQL 15 is available from Red Hat for affected Red Hat Enterprise Linux 9.2 systems and related variants. Users should apply the update as described in the Red Hat advisory RHSA-2025:15062 and the referenced article https://access.redhat.com/articles/11258 to remediate these vulnerabilities. No indication is given that the issues are already mitigated or require no action. Patch status is confirmed by the vendor advisory.