Linux · Security advisory · February 20, 2025

ELSA-2025-1742: Security update for 15 packages

ELSA-2025-1742, released February 20, 2025, fixes 1 CVE across 15 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9003
99th percentile

Fixed package versions

ProductReleaseFixed in
postgresqlol 90:13.20-1.el9_5
postgresql-contribol 90:13.20-1.el9_5
postgresql-docsol 90:13.20-1.el9_5
postgresql-plperlol 90:13.20-1.el9_5
postgresql-plpython3ol 90:13.20-1.el9_5
postgresql-pltclol 90:13.20-1.el9_5
postgresql-private-develol 90:13.20-1.el9_5
postgresql-private-libsol 90:13.20-1.el9_5
postgresql-serverol 90:13.20-1.el9_5
postgresql-server-develol 90:13.20-1.el9_5
postgresql-staticol 90:13.20-1.el9_5
postgresql-testol 90:13.20-1.el9_5
postgresql-test-rpm-macrosol 90:13.20-1.el9_5
postgresql-upgradeol 90:13.20-1.el9_5
postgresql-upgrade-develol 90:13.20-1.el9_5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-1094 libecpg-compat3: Improper neutralization of quoting syntax in PostgreSQL libpq functionsPQescapeLiteral(), PQescapeIdentifier(), PQesc... 8.1 0.9003 None reported
Showing 1 to 1 of 1 1