Red Hat Security AdvisoryRHSA-2025:1726
postgresql security update
Released 2025-02-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.4) postgresql-docs-13.20-1.el9_4, postgresql-private-devel-13.20-1.el9_4, postgresql-server-devel-13.20-1.el9_4 +3
- Red Hat Enterprise Linux AppStream EUS (v.9.4) postgresql-13.20-1.el9_4, postgresql-contrib-13.20-1.el9_4, postgresql-plperl-13.20-1.el9_4 +5
Fixes 1 record
Priority HIGH 80
Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in cer…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.9003 · Published 2025-02-13 · Partial fix · 17.3, 16.7 +3 CWE-149
