Re: OpenSSL Vulnerabilities

Поиск
Список
Период
Сортировка
От Magnus Hagander
Тема Re: OpenSSL Vulnerabilities
Дата
Msg-id CABUevExQnGCfGHF3xFL=zuVNTfqBeWAsrJ1=_oU3ofOU==VRuQ@mail.gmail.com
обсуждение исходный текст
Ответ на OpenSSL Vulnerabilities  (Saravanan Subramaniyan <sara1479@gmail.com>)
Ответы Re: OpenSSL Vulnerabilities
Список pgsql-general
Дерево обсуждения
On Thu, Jun 12, 2014 at 8:43 AM, Saravanan Subramaniyan <sara1479@gmail.com> wrote:
Hi All,
  Recently OpenSSL released Security Advisory. Please refer below link


We are using postgresql version 9.2.8 which is vulnerable. Is postgresql planning to release new version which include OpenSSL 1.0.1h?


PostgreSQL itself is not vulnerable, so we will not release a new version.

If you are using the EnterpriseDB graphical installers, they are indeed bundling the OpenSSL and it at least used to be the vulnerable version. Unfortunately they don't seem to have information about the updates yet - I will see if i can ping them about making sure that goes on there. I think they have already patched it - but it's not confirmed on the website.

--
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/

В списке pgsql-general по дате отправления:

Предыдущее
От: Saravanan Subramaniyan
Дата:
Сообщение: OpenSSL Vulnerabilities
Следующее
От: Krystian Bigaj
Дата:
Сообщение: Re: Re: Cannot start Postgresql 9.3 as a service in Windows 2012 Server with a domain account