Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 538
Alerts This Week
Warning Icon 1 538

Ubuntu 21.10: USN-5042-1 Important: OpenSSL Vulnerability Exploit

ubuntu
Calendar Grey August 12, 2021
Dist Ubuntu Esm H88
Critical notice regarding PostgreSQL security flaws in Ubuntu. Make sure your servers are protected with the most recent patches.
Several security issues were fixed in PostgreSQL.

Summary

Several security issues were fixed in PostgreSQL.

Software Description:

- postgresql-13: Object-relational SQL database

- postgresql-12: Object-relational SQL database

- postgresql-10: Object-relational SQL database

Details:

It was discovered that the PostgresQL planner could create incorrect plans

in certain circumstances. A remote attacker could use this issue to cause

PostgreSQL to crash, resulting in a denial of service, or possibly obtain

sensitive information from memory. This issue only affected Ubuntu 20.04

LTS and Ubuntu 21.04. (CVE-2021-3677)

It was discovered that PostgreSQL incorrectly handled certain SSL

renegotiation ClientHello messages from clients. A remote attacker could

possibly use this issue to cause PostgreSQL to crash, resulting in a denial

of service. (CVE-2021-3449)

Topics%20covered

Topics Covered

security advisory moderate denial of service Ubuntu PostgreSQL

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.04:
  postgresql-13                   13.4-0ubuntu0.21.04.1

Ubuntu 20.04 LTS:
  postgresql-12                   12.8-0ubuntu0.20.04.1

Ubuntu 18.04 LTS:
  postgresql-10                   10.18-0ubuntu0.18.04.1

This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart PostgreSQL to
make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5038-1

CVE-2021-3449, CVE-2021-3677

Severity
important
Lowest
Low
Medium
High
Critical

August 12, 2021

Topics%20covered

Topics Covered

security advisory moderate denial of service Ubuntu PostgreSQL

Package Information

https://launchpad.net/ubuntu/+source/postgresql-13/13.4-0ubuntu0.21.04.1
https://launchpad.net/ubuntu/+source/postgresql-12/12.8-0ubuntu0.20.04.1
https://launchpad.net/ubuntu/+source/postgresql-10/10.18-0ubuntu0.18.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.