Red Hat Security AdvisoryRHSA-2025:3978
postgresql security update
Released 2025-04-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) postgresql-9.2.24-9.el7_9.3, postgresql-9.2.24-9.el7_9.3.ppc, postgresql-contrib-9.2.24-9.el7_9.3 +10
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) postgresql-static-9.2.24-9.el7_9.3, postgresql-static-9.2.24-9.el7_9.3.ppc, postgresql-upgrade-9.2.24-9.el7_9.3
Fixes 1 record
Priority HIGH 80
Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in cer…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.9003 · Published 2025-02-13 · Partial fix · 17.3, 16.7 +3 CWE-149
