Skip to content
OpenAdvisories
High ELSA-2025-1743 1 CVE

Important: postgresql:16 security update (Oracle Linux 9)

Published Feb 21, 2025 · Updated Feb 21, 2025

Summary

pgaudit
pg_repack
[1.5.1-1]
- Update to v1.5.1

pgvector
[0.6.2-1]
- Initial packaging

postgres-decoderbufs
postgresql
[16.8-1]
- Update to 16.8
- Fix CVE-2025-1094

Fixed packages 19

ReleasePackageFixed in
Oracle Linux · 9 pg_repack 0:1.5.1-1.module+el9.5.0+90450+cb2feb1d
Oracle Linux · 9 pgaudit 0:16.0-1.module+el9.4.0+90394+9e4f3cba
Oracle Linux · 9 pgvector 0:0.6.2-1.module+el9.5.0+90425+0820a3c3
Oracle Linux · 9 postgres-decoderbufs 0:2.4.0-1.Final.module+el9.4.0+90394+9e4f3cba
Oracle Linux · 9 postgresql 0:16.8-1.module+el9.5.0+90528+7da48ca1
Oracle Linux · 9 postgresql-contrib 0:16.8-1.module+el9.5.0+90528+7da48ca1
Oracle Linux · 9 postgresql-docs 0:16.8-1.module+el9.5.0+90528+7da48ca1
Oracle Linux · 9 postgresql-plperl 0:16.8-1.module+el9.5.0+90528+7da48ca1
Oracle Linux · 9 postgresql-plpython3 0:16.8-1.module+el9.5.0+90528+7da48ca1
Oracle Linux · 9 postgresql-pltcl 0:16.8-1.module+el9.5.0+90528+7da48ca1
Oracle Linux · 9 postgresql-private-devel 0:16.8-1.module+el9.5.0+90528+7da48ca1
Oracle Linux · 9 postgresql-private-libs 0:16.8-1.module+el9.5.0+90528+7da48ca1
Oracle Linux · 9 postgresql-server 0:16.8-1.module+el9.5.0+90528+7da48ca1
Oracle Linux · 9 postgresql-server-devel 0:16.8-1.module+el9.5.0+90528+7da48ca1
Oracle Linux · 9 postgresql-static 0:16.8-1.module+el9.5.0+90528+7da48ca1
Oracle Linux · 9 postgresql-test 0:16.8-1.module+el9.5.0+90528+7da48ca1
Oracle Linux · 9 postgresql-test-rpm-macros 0:16.8-1.module+el9.5.0+90528+7da48ca1
Oracle Linux · 9 postgresql-upgrade 0:16.8-1.module+el9.5.0+90528+7da48ca1
Oracle Linux · 9 postgresql-upgrade-devel 0:16.8-1.module+el9.5.0+90528+7da48ca1

Vulnerabilities 1

  • High 8.1
    CVE-2025-1094 Public exploit EPSS 90%

    PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

    Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL …