RedHat: RHSA-2022-1891:01 Low: libpq security update | LinuxSecurit...
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

=====================================================================
                   Red Hat Security Advisory

Synopsis:          Low: libpq security update
Advisory ID:       RHSA-2022:1891-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2022:1891
Issue date:        2022-05-10
CVE Names:         CVE-2021-23222 
=====================================================================

1. Summary:

An update for libpq is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact
of Low. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64

3. Description:

The libpq package provides the PostgreSQL client library, which allows
client programs to connect to PostgreSQL servers.

Security Fix(es):

* postgresql: libpq processes unencrypted bytes from man-in-the-middle
(CVE-2021-23222)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 8.6 Release Notes linked from the References section.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

5. Bugs fixed (https://bugzilla.redhat.com/):

2022675 - CVE-2021-23222 postgresql: libpq processes unencrypted bytes from man-in-the-middle

6. Package List:

Red Hat Enterprise Linux AppStream (v. 8):

Source:
libpq-13.5-1.el8.src.rpm

aarch64:
libpq-13.5-1.el8.aarch64.rpm
libpq-debuginfo-13.5-1.el8.aarch64.rpm
libpq-debugsource-13.5-1.el8.aarch64.rpm
libpq-devel-13.5-1.el8.aarch64.rpm
libpq-devel-debuginfo-13.5-1.el8.aarch64.rpm

ppc64le:
libpq-13.5-1.el8.ppc64le.rpm
libpq-debuginfo-13.5-1.el8.ppc64le.rpm
libpq-debugsource-13.5-1.el8.ppc64le.rpm
libpq-devel-13.5-1.el8.ppc64le.rpm
libpq-devel-debuginfo-13.5-1.el8.ppc64le.rpm

s390x:
libpq-13.5-1.el8.s390x.rpm
libpq-debuginfo-13.5-1.el8.s390x.rpm
libpq-debugsource-13.5-1.el8.s390x.rpm
libpq-devel-13.5-1.el8.s390x.rpm
libpq-devel-debuginfo-13.5-1.el8.s390x.rpm

x86_64:
libpq-13.5-1.el8.i686.rpm
libpq-13.5-1.el8.x86_64.rpm
libpq-debuginfo-13.5-1.el8.i686.rpm
libpq-debuginfo-13.5-1.el8.x86_64.rpm
libpq-debugsource-13.5-1.el8.i686.rpm
libpq-debugsource-13.5-1.el8.x86_64.rpm
libpq-devel-13.5-1.el8.i686.rpm
libpq-devel-13.5-1.el8.x86_64.rpm
libpq-devel-debuginfo-13.5-1.el8.i686.rpm
libpq-devel-debuginfo-13.5-1.el8.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2021-23222
https://access.redhat.com/security/updates/classification/#low
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/

8. Contact:

The Red Hat security contact is . More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2022 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=tjct
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
[email protected]
https://listman.redhat.com/mailman/listinfo/rhsa-announce

RedHat: RHSA-2022-1891:01 Low: libpq security update

An update for libpq is now available for Red Hat Enterprise Linux 8

Summary

The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers.
Security Fix(es):
* postgresql: libpq processes unencrypted bytes from man-in-the-middle (CVE-2021-23222)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changesdescribed in this advisory, refer to:https://access.redhat.com/articles/11258

References

https://access.redhat.com/security/cve/CVE-2021-23222 https://access.redhat.com/security/updates/classification/#low https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/

Package List

Red Hat Enterprise Linux AppStream (v. 8):
Source: libpq-13.5-1.el8.src.rpm
aarch64: libpq-13.5-1.el8.aarch64.rpm libpq-debuginfo-13.5-1.el8.aarch64.rpm libpq-debugsource-13.5-1.el8.aarch64.rpm libpq-devel-13.5-1.el8.aarch64.rpm libpq-devel-debuginfo-13.5-1.el8.aarch64.rpm
ppc64le: libpq-13.5-1.el8.ppc64le.rpm libpq-debuginfo-13.5-1.el8.ppc64le.rpm libpq-debugsource-13.5-1.el8.ppc64le.rpm libpq-devel-13.5-1.el8.ppc64le.rpm libpq-devel-debuginfo-13.5-1.el8.ppc64le.rpm
s390x: libpq-13.5-1.el8.s390x.rpm libpq-debuginfo-13.5-1.el8.s390x.rpm libpq-debugsource-13.5-1.el8.s390x.rpm libpq-devel-13.5-1.el8.s390x.rpm libpq-devel-debuginfo-13.5-1.el8.s390x.rpm
x86_64: libpq-13.5-1.el8.i686.rpm libpq-13.5-1.el8.x86_64.rpm libpq-debuginfo-13.5-1.el8.i686.rpm libpq-debuginfo-13.5-1.el8.x86_64.rpm libpq-debugsource-13.5-1.el8.i686.rpm libpq-debugsource-13.5-1.el8.x86_64.rpm libpq-devel-13.5-1.el8.i686.rpm libpq-devel-13.5-1.el8.x86_64.rpm libpq-devel-debuginfo-13.5-1.el8.i686.rpm libpq-devel-debuginfo-13.5-1.el8.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/

Severity
Advisory ID: RHSA-2022:1891-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2022:1891
Issued Date: : 2022-05-10
CVE Names: CVE-2021-23222

Topic

An update for libpq is now available for Red Hat Enterprise Linux 8.Red Hat Product Security has rated this update as having a security impactof Low. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.

Relevant Releases Architectures

Red Hat Enterprise Linux AppStream (v. 8) - aarch64, ppc64le, s390x, x86_64

Bugs Fixed

2022675 - CVE-2021-23222 postgresql: libpq processes unencrypted bytes from man-in-the-middle

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.