VDB
ALSA-2025%3A14899
ALSA-2025%3A14899
PUBLISHED
Important: postgresql:16 security update
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:8 | postgresql-private-libs | 0, 0 |
| AlmaLinux:8 | postgresql-pltcl | 0, 0 |
| AlmaLinux:8 | postgresql-test-rpm-macros | 0, 0 |
| AlmaLinux:8 | postgresql-private-devel | 0, 0 |
| AlmaLinux:8 | postgresql-server | 0, 0 |
| AlmaLinux:8 | postgresql-docs | 0, 0 |
| AlmaLinux:8 | pgaudit | 0, 0 |
| AlmaLinux:8 | postgres-decoderbufs | 0, 0 |
| AlmaLinux:8 | postgresql-upgrade | 0, 0 |
| AlmaLinux:8 | postgresql-server-devel | 0, 0 |
| AlmaLinux:8 | postgresql-contrib | 0, 0 |
| AlmaLinux:8 | postgresql-upgrade-devel | 0, 0 |
| AlmaLinux:8 | postgresql-test | 0, 0 |
| AlmaLinux:8 | postgresql-static | 0, 0 |
| AlmaLinux:8 | postgresql-plperl | 0, 0 |
| AlmaLinux:8 | postgresql | 0, 0 |
| AlmaLinux:8 | postgresql-plpython3 | 0, 0 |
| AlmaLinux:8 | pg_repack | 0, 0 |
Exploit Intelligence
- PoC de RCE en PostgreSQL — CVE-2025-8714 (github-poc)
- PoC de RCE en PostgreSQL — CVE-2025-8714 (github-poc)
- dbutil.go (github-poc)
- dbutil.go (github-poc)
- context.go (github-poc)
- context.go (github-poc)
- schema_cleaner_spec.rb (github-poc)
- schema_cleaner_spec.rb (github-poc)
- ghost_report_20260112_192608.json (github-poc)
- ghost_report_20260112_192608.json (github-poc)
…and 4 more exploits
Timeline
- Aug 28, 2025 CVE Published
- Aug 29, 2025 CVE Updated
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:14899 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2025-8714 third-party-advisory
- https://access.redhat.com/security/cve/CVE-2025-8715 third-party-advisory
- https://bugzilla.redhat.com/2388551 third-party-advisory
- https://bugzilla.redhat.com/2388553 third-party-advisory
- https://errata.almalinux.org/8/ALSA-2025-14899.html vendor-advisory