This Red Hat security advisory addresses multiple vulnerabilities in PostgreSQL 16 that enable arbitrary code execution during restore operations, specifically CVE-2025-8713, CVE-2025-8714, and CVE-2025-8715. The advisory is classified as Important by Red Hat and applies to Red Hat Enterprise Linux 9.4 Extended Update Support and associated packages. The advisory references fixes available via updated packages and provides links to Red Hat resources for applying the update. No CVSS base scores are provided in the advisory, but the severity is indicated as high. There are no known exploits in the wild at the time of publication.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code during the PostgreSQL restore operation, potentially compromising the affected system. The advisory rates the security impact as Important, indicating a significant risk if unpatched. No evidence of active exploitation is reported.

Red Hat has released updated PostgreSQL 16 packages for Red Hat Enterprise Linux 9.4 Extended Update Support that address these vulnerabilities. Users should apply the provided security update as detailed in the Red Hat advisory (RHSA-2025:15015) and the referenced article https://access.redhat.com/articles/11258. Since this is an on-premises product, remediation requires manual update by system administrators. Patch status is confirmed by the vendor advisory.