| From: | Laura Smith <n5d9xq3ti233xiyif2vp(at)protonmail(dot)ch> |
|---|---|
| To: | pgsql-general(at)lists(dot)postgresql(dot)org |
| Subject: | Re: Open SSL Version Query |
| Date: | 2022-03-23 14:23:55 |
| Message-ID: | yVWAWG494oeCa71clO0AL4cH_7EjdlSTC5w-I7Cz1V4MJbrRat9paVy60cZYTQyYzP-cJIgX0tblit_9qkUTD0pg8y-o2Kn_nwzC-TGDWOs=@protonmail.ch |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-general |
Hi Sahaj
AFAIK this is a question for you to ask your chosen OS provider.
Postgres will be compiled against the system library (dynamic linking) therefore whether your version of OpenSSL has been patched against the vulnerability is a question for your OS provider, not Postgres.
Unless of course you've installed your own version of OpenSSL, in which case you need to ask yourself. ;-)
Laura
------- Original Message -------
On Wednesday, March 23rd, 2022 at 11:48, Sahaj Diwan <diwansahaj(at)gmail(dot)com> wrote:
> Hi Team,
>
> Do we use openssl version 1.0.2, 1.1.1 or 3.0 in postgre 13.If yes then these version are vulnerable CVE-2022-0778 which is now fixed in later ssl version.
>
> Regards,Sahaj
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Viliam Ďurina | 2022-03-23 16:56:09 | Unexpected zero results |
| Previous Message | Sahaj Diwan | 2022-03-23 11:48:27 | Open SSL Version Query |