Skip to content
OpenAdvisories
High ELSA-2025-1737 1 CVE

Important: libpq security update (Oracle Linux 8)

Published Feb 21, 2025 · Updated Feb 21, 2025

Ecosystem: Oracle Linux

Summary

[13.20-1]
- Update to 13.20

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 libpq 0:13.20-1.el8_10
Oracle Linux · 8 libpq-devel 0:13.20-1.el8_10

Vulnerabilities 1

  • High 8.1
    CVE-2025-1094 Public exploit EPSS 90%

    PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

    Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL …

    postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Azure Linux Alpine Wolfi