BSD PortsPostgreSQL -- vulnerabilities
· CVE-2025-8713, CVE-2025-8714, CVE-2025-8715 · VuXML entry
PostgreSQL project reports: Tighten security checks in planner estimation functions. Prevent pg_dump scripts from being used to attack the user running the restore. Convert newlines to spaces in names included in comments in pg_dump output.
Affected versions
- postgresql17-server < 17.6
- postgresql16-server < 16.10
- postgresql15-server < 14.14
- postgresql14-server < 14.19
- postgresql13-server < 13.22
By system
3 still vulnerable, 5 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | databases/postgresql17-server | 17.11 | fixed | (367 days after) |
| NetBSD | databases/postgresql17-server | 17.11 | not listed | |
| MidnightBSD | databases/postgresql17-server | 17.11 | out of range, by version | |
| FreeBSD | databases/postgresql16-server | 16.15 | fixed | (367 days after) |
| NetBSD | databases/postgresql16-server | 16.15 | not listed | |
| MidnightBSD | databases/postgresql16-server | 16.15 | out of range, by version | |
| DragonFly | databases/postgresql16-server | 16.9 | vulnerable since 2025-08-14 | |
| FreeBSD | databases/postgresql15-server | 15.19 | fixed | (367 days after) |
| NetBSD | databases/postgresql15-server | 15.19 | not listed | |
| MidnightBSD | databases/postgresql15-server | 15.19 | out of range, by version | |
| DragonFly | databases/postgresql15-server | 15.13 | fixed | |
| FreeBSD | databases/postgresql14-server | 14.24 | fixed | (367 days after) |
| NetBSD | databases/postgresql14-server | 14.24 | not listed | |
| MidnightBSD | databases/postgresql14-server | 14.24 | out of range, by version | |
| DragonFly | databases/postgresql14-server | 14.18 | vulnerable since 2025-08-14 | |
| DragonFly | databases/postgresql13-server | 13.21 | vulnerable since 2025-08-14 |