Red Hat Security Advisory

RHSA-2025:1745

libpq security update

Released 2025-02-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) libpq-13.20-1.el8_6, libpq-devel-13.20-1.el8_6
Red Hat Enterprise Linux AppStream E4S (v.8.6) libpq-13.20-1.el8_6, libpq-devel-13.20-1.el8_6
Red Hat Enterprise Linux AppStream TUS (v.8.6) libpq-13.20-1.el8_6, libpq-devel-13.20-1.el8_6

Fixes 1 record

TI-2025-00929 CVE-2025-1094 · GHSA-mhw9-x46c-v6q4

PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

HIGH 80

Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in cer…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.9003 Published 2025-02-13 Partial fix · 17.3, 16.7 +3 CWE-149