Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 43: pgAdmin 4 Critical Remote Code Exec Issues 2025-8a81153971

fedora
Calendar Grey December 1, 2025
Dist Fedora Esm H88
Fedora 43 update for pgAdmin 4 addresses Remote Code Execution and LDAP authentication vulnerabilities.
Update to pgadmin-9.10

Summary

pgAdmin is the most popular and feature rich Open Source administration and development

platform for PostgreSQL, the most advanced Open Source database in the world.

Update Information:

Update to pgadmin-9.10

Topics%20covered

Topics Covered

security advisory fedora remote code execution vulnerability ldap authentication pgadmin4

Change Log

* Sun Nov 16 2025 Sandro Mani - 9.10-1 - Update to 9.10 * Sun Nov 16 2025 Sandro Mani - 9.9-4 - Relax flask-babel and flask-security-too dependencies

References


[ 1 ] Bug #2415411 - CVE-2025-12762 pgadmin4: Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4) [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2415411 [ 2 ] Bug #2415412 - CVE-2025-12762 pgadmin4: Remote Code Execution vulnerability when restoring PLAIN-format SQL dumps in server mode (pgAdmin 4) [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2415412 [ 3 ] Bug #2415415 - CVE-2025-12764 pgadmin4: pgAdmin 4: LDAP injection vulnerability in LDAP authentication flow. [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2415415 [ 4 ] Bug #2415416 - CVE-2025-12764 pgadmin4: pgAdmin 4: LDAP injection vulnerability in LDAP authentication flow. [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2415416 [ 5 ] Bug #2415419 - CVE-2025-12765 pgadmin4: pgAdmin 4: LDAP authentication flow vulnerable to TLS certificate verification bypass. [fedora-42] https://bugzi...

Read the Full Advisory

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-8a81153971' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: pgadmin4
Product: Fedora 43
Version: 9.10
Release: 1.fc43
URL: https://www.pgadmin.org/
Summary: Administration tool for PostgreSQL

Topics%20covered

Topics Covered

security advisory fedora remote code execution vulnerability ldap authentication pgadmin4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here