Red Hat Security AdvisoryRHSA-2025:1742
postgresql security update
Released 2025-02-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 9) postgresql-docs-13.20-1.el9_5, postgresql-private-devel-13.20-1.el9_5, postgresql-server-devel-13.20-1.el9_5 +4
- Red Hat Enterprise Linux AppStream (v. 9) postgresql-13.20-1.el9_5, postgresql-contrib-13.20-1.el9_5, postgresql-plperl-13.20-1.el9_5 +5
Fixes 1 record
Priority HIGH 80
Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in cer…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.9003 · Published 2025-02-13 · Partial fix · 17.3, 16.7 +3 CWE-149
