Skip to content
OpenAdvisories
High ELSA-2025-1739 1 CVE

Important: postgresql:15 security update (Oracle Linux 8)

Published Feb 21, 2025 · Updated Feb 21, 2025

Summary

pgaudit
[1.7.0-1]
- Update to 1.7.0
- Support postgresql 15
- Related: #2128241

pg_repack
[1.4.8-1]
- Update to version 1.4.8
- Postgresql 15 is supported
- Related: #2128241

postgres-decoderbufs
[1.9.7-1.Final]
- Iitial import for postgresql 15 stream
- Related: #2128241

postgresql
[15.12-1]
- Update to 15.12
- Fix CVE-2025-1094

Fixed packages 18

ReleasePackageFixed in
Oracle Linux · 8 pg_repack 0:1.4.8-1.module+el8.9.0+90110+d8a562d5
Oracle Linux · 8 pgaudit 0:1.7.0-1.module+el8.9.0+90110+d8a562d5
Oracle Linux · 8 postgres-decoderbufs 0:1.9.7-1.Final.module+el8.9.0+90110+d8a562d5
Oracle Linux · 8 postgresql 0:15.12-1.module+el8.10.0+90529+917d02ef
Oracle Linux · 8 postgresql-contrib 0:15.12-1.module+el8.10.0+90529+917d02ef
Oracle Linux · 8 postgresql-docs 0:15.12-1.module+el8.10.0+90529+917d02ef
Oracle Linux · 8 postgresql-plperl 0:15.12-1.module+el8.10.0+90529+917d02ef
Oracle Linux · 8 postgresql-plpython3 0:15.12-1.module+el8.10.0+90529+917d02ef
Oracle Linux · 8 postgresql-pltcl 0:15.12-1.module+el8.10.0+90529+917d02ef
Oracle Linux · 8 postgresql-private-devel 0:15.12-1.module+el8.10.0+90529+917d02ef
Oracle Linux · 8 postgresql-private-libs 0:15.12-1.module+el8.10.0+90529+917d02ef
Oracle Linux · 8 postgresql-server 0:15.12-1.module+el8.10.0+90529+917d02ef
Oracle Linux · 8 postgresql-server-devel 0:15.12-1.module+el8.10.0+90529+917d02ef
Oracle Linux · 8 postgresql-static 0:15.12-1.module+el8.10.0+90529+917d02ef
Oracle Linux · 8 postgresql-test 0:15.12-1.module+el8.10.0+90529+917d02ef
Oracle Linux · 8 postgresql-test-rpm-macros 0:15.12-1.module+el8.10.0+90529+917d02ef
Oracle Linux · 8 postgresql-upgrade 0:15.12-1.module+el8.10.0+90529+917d02ef
Oracle Linux · 8 postgresql-upgrade-devel 0:15.12-1.module+el8.10.0+90529+917d02ef

Vulnerabilities 1

  • High 8.1
    CVE-2025-1094 Public exploit EPSS 90%

    PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

    Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL …