postgresql-9.2.24-9.0.5.el7.AXS7
エラータID: AXSA:2025-11539:05
PostgreSQL is an advanced Object-Relational database management system (DBMS).
The base postgresql package contains the client programs that you'll need to
access a PostgreSQL DBMS server, as well as HTML documentation for the whole
system. These client programs can be located on the same machine as the
PostgreSQL server, or on a remote machine that accesses a PostgreSQL server
over a network connection. The PostgreSQL server can be found in the
postgresql-server sub-package.
Security Fix(es):
* CVE-2025-1094: fix potential SQL injections allowed by an improper encoding
validation in data quoting functions
CVE(s):
CVE-2025-1094
Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the function result to construct input to psql, the PostgreSQL interactive terminal. Similarly, improper neutralization of quoting syntax in PostgreSQL command line utility programs allows a source of command line arguments to achieve SQL injection when client_encoding is BIG5 and server_encoding is one of EUC_TW or MULE_INTERNAL. Versions before PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19 are affected.
Update packages.
Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL injection requires the application to use the function result to construct input to psql, the PostgreSQL interactive terminal. Similarly, improper neutralization of quoting syntax in PostgreSQL command line utility programs allows a source of command line arguments to achieve SQL injection when client_encoding is BIG5 and server_encoding is one of EUC_TW or MULE_INTERNAL. Versions before PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19 are affected.
N/A
Asianux Server 7 for x86_64
- postgresql-9.2.24-9.0.5.el7.AXS7.i686.rpm
MD5: dc50ce70832206bda66bc56b69b17a17
SHA-256: 49e8823517adeec3cfca0848ce9794821e1ba043681c17ce9db96e2bdb925543
Size: 3.04 MB - postgresql-9.2.24-9.0.5.el7.AXS7.x86_64.rpm
MD5: b12199a4efe310e4d4e95a6dd94881fa
SHA-256: 21c587d835b53d4bb8c4d5c58ec03222638e57d1d7e008c68c1b96d75610d5ed
Size: 3.05 MB - postgresql-contrib-9.2.24-9.0.5.el7.AXS7.x86_64.rpm
MD5: 997186f0b119f92b551493e620c9de6d
SHA-256: 274064ed859df2e4d40d6c845dafefbbb227f6513d503875ceb40a2d6a85a4fd
Size: 552.70 kB - postgresql-devel-9.2.24-9.0.5.el7.AXS7.i686.rpm
MD5: cd703cf0fcc2c472ca9077384c8e84d1
SHA-256: da9479dd6c8faa9e3feb37a1ee5e1c6862898973182314b138c46e18524eccea
Size: 956.40 kB - postgresql-devel-9.2.24-9.0.5.el7.AXS7.x86_64.rpm
MD5: 84a3388ef649737a5bf0428b1df16185
SHA-256: 3fd438879be1163f9a3b47c995d4783d6525812ccd76000c4a5164762a8beaa0
Size: 962.09 kB - postgresql-docs-9.2.24-9.0.5.el7.AXS7.x86_64.rpm
MD5: 7e3bb31d8152f84a78cd160f8ffafb80
SHA-256: 2cad0becf585f834f1ea3b3c01d1cede3e455df633c1e6cebc0b05ec4c286857
Size: 6.87 MB - postgresql-libs-9.2.24-9.0.5.el7.AXS7.i686.rpm
MD5: 224b6d218f267eb5d15cece1e48286a8
SHA-256: 10e09dce6c3ff5b131aa7699262b56b9f642312b4beda629bea077794dd5d820
Size: 236.91 kB - postgresql-libs-9.2.24-9.0.5.el7.AXS7.x86_64.rpm
MD5: 8853f1e8da9c8196e0470c674a8074d8
SHA-256: bebbde63764b51232fe3764a6ee3f2b00670ca4ea2be619f902f933f253bc511
Size: 236.85 kB - postgresql-plperl-9.2.24-9.0.5.el7.AXS7.x86_64.rpm
MD5: 1d4a721e20c0d0faf20832c68305f649
SHA-256: 1a0272572efd2a02a73e5ca4b2b5a5d0e12dc63a12775b85609187a65130fc8b
Size: 84.16 kB - postgresql-plpython-9.2.24-9.0.5.el7.AXS7.x86_64.rpm
MD5: 0c6129926fa162bd8eb77f5d6f5e9b89
SHA-256: ffba92be5ee385c2c6d1ca354c8d3a9d02485e6a21523753d5aeeac9b9027a02
Size: 96.91 kB - postgresql-pltcl-9.2.24-9.0.5.el7.AXS7.x86_64.rpm
MD5: 527c9750facccf4b501f36229e0164cd
SHA-256: 198b7154065fe4b9cd11875c3b13506db2d48b726dead24c3c21462d56a60050
Size: 60.21 kB - postgresql-server-9.2.24-9.0.5.el7.AXS7.x86_64.rpm
MD5: 13c941e0869580300920a28cc8ac9936
SHA-256: aaf96c1c94557cc40c3f6096b1d5ad24cb02a7dc9461614f0c785ac9463738d8
Size: 3.82 MB - postgresql-test-9.2.24-9.0.5.el7.AXS7.x86_64.rpm
MD5: ba6e0e76d9dcec31119d2865ad9ee240
SHA-256: 43bdc3a604a634b91aaf28b937ed2d9b782bd5b86ee2a011446fc0c474a79b63
Size: 1.77 MB