Summary
pgaudit
postgres-decoderbufs
postgresql
[12.22-3]
- Fix backport for CVE-2025-1094
[12.22-2]
- Backport fix for CVE-2025-1094
Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | pg_repack | 0:1.4.6-3.module+el8.9.0+90107+c48bae1a |
| Oracle Linux · 8 | pgaudit | 0:1.4.0-7.module+el8.10.0+90397+67dad74f |
| Oracle Linux · 8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.9.0+90107+c48bae1a |
| Oracle Linux · 8 | postgresql | 0:12.22-3.module+el8.10.0+90540+03ca8735 |
| Oracle Linux · 8 | postgresql-contrib | 0:12.22-3.module+el8.10.0+90540+03ca8735 |
| Oracle Linux · 8 | postgresql-docs | 0:12.22-3.module+el8.10.0+90540+03ca8735 |
| Oracle Linux · 8 | postgresql-plperl | 0:12.22-3.module+el8.10.0+90540+03ca8735 |
| Oracle Linux · 8 | postgresql-plpython3 | 0:12.22-3.module+el8.10.0+90540+03ca8735 |
| Oracle Linux · 8 | postgresql-pltcl | 0:12.22-3.module+el8.10.0+90540+03ca8735 |
| Oracle Linux · 8 | postgresql-server | 0:12.22-3.module+el8.10.0+90540+03ca8735 |
| Oracle Linux · 8 | postgresql-server-devel | 0:12.22-3.module+el8.10.0+90540+03ca8735 |
| Oracle Linux · 8 | postgresql-static | 0:12.22-3.module+el8.10.0+90540+03ca8735 |
| Oracle Linux · 8 | postgresql-test | 0:12.22-3.module+el8.10.0+90540+03ca8735 |
| Oracle Linux · 8 | postgresql-test-rpm-macros | 0:12.22-3.module+el8.10.0+90540+03ca8735 |
| Oracle Linux · 8 | postgresql-upgrade | 0:12.22-3.module+el8.10.0+90540+03ca8735 |
| Oracle Linux · 8 | postgresql-upgrade-devel | 0:12.22-3.module+el8.10.0+90540+03ca8735 |
Vulnerabilities 1
-
High 8.1
PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL …