[ubuntu/bionic-updates] postgresql-10 10.18-0ubuntu0.18.04.1 (Accepted)
Ubuntu Archive Robot
ubuntu-archive-robot at lists.canonical.com
Thu Aug 12 17:58:32 UTC 2021
postgresql-10 (10.18-0ubuntu0.18.04.1) bionic-security; urgency=medium
* New upstream version (LP: #1939396).
+ Disallow SSL renegotiation more completely (Michael Paquier)
SSL renegotiation has been disabled for some time, but the server
would still cooperate with a client-initiated renegotiation request.
A maliciously crafted renegotiation request could result in a server
crash (see OpenSSL issue CVE-2021-3449). Disable the feature
altogether on OpenSSL versions that permit doing so, which are
1.1.0h and newer.
(CVE-2021-3449)
+ Details about these and many further changes can be found at:
https://www.postgresql.org/docs/10/release-10-18.html
+ d/p/reproducible-bki: refreshed for 10.18
Date: 2021-08-12 11:00:10.169000+00:00
Changed-By: Christian Ehrhardt <christian.ehrhardt at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/postgresql-10/10.18-0ubuntu0.18.04.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Bionic-changes
mailing list