Skip to content
OpenAdvisories
High ELSA-2025-1742 1 CVE

Important: postgresql security update (Oracle Linux 9)

Published Feb 20, 2025 · Updated Feb 20, 2025

Ecosystem: Oracle Linux

Summary

[13.18-1]
- Update to 13.18

Fixed packages 15

ReleasePackageFixed in
Oracle Linux · 9 postgresql 0:13.20-1.el9_5
Oracle Linux · 9 postgresql-contrib 0:13.20-1.el9_5
Oracle Linux · 9 postgresql-docs 0:13.20-1.el9_5
Oracle Linux · 9 postgresql-plperl 0:13.20-1.el9_5
Oracle Linux · 9 postgresql-plpython3 0:13.20-1.el9_5
Oracle Linux · 9 postgresql-pltcl 0:13.20-1.el9_5
Oracle Linux · 9 postgresql-private-devel 0:13.20-1.el9_5
Oracle Linux · 9 postgresql-private-libs 0:13.20-1.el9_5
Oracle Linux · 9 postgresql-server 0:13.20-1.el9_5
Oracle Linux · 9 postgresql-server-devel 0:13.20-1.el9_5
Oracle Linux · 9 postgresql-static 0:13.20-1.el9_5
Oracle Linux · 9 postgresql-test 0:13.20-1.el9_5
Oracle Linux · 9 postgresql-test-rpm-macros 0:13.20-1.el9_5
Oracle Linux · 9 postgresql-upgrade 0:13.20-1.el9_5
Oracle Linux · 9 postgresql-upgrade-devel 0:13.20-1.el9_5

Vulnerabilities 1

  • High 8.1
    CVE-2025-1094 Public exploit EPSS 90%

    PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

    Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL …

    postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Azure Linux Alpine Wolfi