Skip to content
OpenAdvisories
High ELSA-2025-1741 1 CVE

Important: postgresql:15 security update (Oracle Linux 9)

Published Feb 21, 2025 · Updated Feb 21, 2025

Summary

pgaudit
[1.7.0-1]
- Initial import for postgresql 15 module
- Update to 1.7.0
- Support postgresql 15
- Related: #2128410

pg_repack
[1.4.8-2]
- Add new build dependencies to fix build with lz4 enabled
- Related: RHEL-47350

[1.4.8-1]
- Update to version 1.4.8
- Postgresql 15 is supported
- Related: #2128410

postgres-decoderbufs
[1.9.7-1.Final]
- Iitial import for postgresql 15 stream
- Related: #2128410

postgresql
[15.12-1]
- Update to 15.12

[15.10-1]
- Update to 15.10
- Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979

[15.8-2]
- Fix build on 15.8

[15.8-1]
- Update to 15.8

[15.6-3]
- Remove /var/run/postgresql
- Related: RHEL-51271

[15.6-2]
- Enable lz4 and zstd support

[15.6-1]
- Update to 15.6 and 13.14
- Fix CVE-2024-0985

[15.5-1]
- update to 15.5
- Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418

[15.3-1]
- update to 15.3
- Fixes CVE-2023-2454 and CVE-2023-2455
Resolves: #2214875

Fixed packages 18

ReleasePackageFixed in
Oracle Linux · 9 pg_repack 0:1.4.8-2.module+el9.5.0+90424+300303e9
Oracle Linux · 9 pgaudit 0:1.7.0-1.module+el9.2.0+21134+ceb95ed9
Oracle Linux · 9 postgres-decoderbufs 0:1.9.7-1.Final.module+el9.2.0+21134+ceb95ed9
Oracle Linux · 9 postgresql 0:15.12-1.module+el9.5.0+90527+e70c9846
Oracle Linux · 9 postgresql-contrib 0:15.12-1.module+el9.5.0+90527+e70c9846
Oracle Linux · 9 postgresql-docs 0:15.12-1.module+el9.5.0+90527+e70c9846
Oracle Linux · 9 postgresql-plperl 0:15.12-1.module+el9.5.0+90527+e70c9846
Oracle Linux · 9 postgresql-plpython3 0:15.12-1.module+el9.5.0+90527+e70c9846
Oracle Linux · 9 postgresql-pltcl 0:15.12-1.module+el9.5.0+90527+e70c9846
Oracle Linux · 9 postgresql-private-devel 0:15.12-1.module+el9.5.0+90527+e70c9846
Oracle Linux · 9 postgresql-private-libs 0:15.12-1.module+el9.5.0+90527+e70c9846
Oracle Linux · 9 postgresql-server 0:15.12-1.module+el9.5.0+90527+e70c9846
Oracle Linux · 9 postgresql-server-devel 0:15.12-1.module+el9.5.0+90527+e70c9846
Oracle Linux · 9 postgresql-static 0:15.12-1.module+el9.5.0+90527+e70c9846
Oracle Linux · 9 postgresql-test 0:15.12-1.module+el9.5.0+90527+e70c9846
Oracle Linux · 9 postgresql-test-rpm-macros 0:15.12-1.module+el9.5.0+90527+e70c9846
Oracle Linux · 9 postgresql-upgrade 0:15.12-1.module+el9.5.0+90527+e70c9846
Oracle Linux · 9 postgresql-upgrade-devel 0:15.12-1.module+el9.5.0+90527+e70c9846

Vulnerabilities 1

  • High 8.1
    CVE-2025-1094 Public exploit EPSS 90%

    PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

    Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL …