Red Hat Security AdvisoryRHSA-2025:3063
postgresql:12 security update
Released 2025-03-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.src::postgresql:12, pgaudit-1.4.0-4.module+el8.2.0+9043+1dbb5661.x86_64::postgresql:12, postgres-decoderbufs-0.10.0-2.module+el8.2.0+9043+1dbb5661.src::postgresql:12 +15
Fixes 1 record
Priority HIGH 80
Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in cer…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.9003 · Published 2025-02-13 · Partial fix · 17.3, 16.7 +3 CWE-149
