Moderate: postgresql:13 security update

2021-12-2109:10:35

errata.almalinux.org

0.002 Low

EPSS

Percentile

57.0%

JSON

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (13.5).

Security Fix(es):

postgresql: memory disclosure in certain queries (CVE-2021-3677)
postgresql: server processes unencrypted bytes from man-in-the-middle (CVE-2021-23214)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8aarch64pg_repack< 1.4.6-3.module_el8.6.0+2758+4f4474dfpg_repack-1.4.6-3.module_el8.6.0+2758+4f4474df.aarch64.rpm
almalinux8aarch64pgaudit< 1.5.0-1.module_el8.6.0+2760+1746ec94pgaudit-1.5.0-1.module_el8.6.0+2760+1746ec94.aarch64.rpm
almalinux8aarch64postgres-decoderbufs< 0.10.0-2.module_el8.6.0+2758+4f4474dfpostgres-decoderbufs-0.10.0-2.module_el8.6.0+2758+4f4474df.aarch64.rpm
almalinux8x86_64postgresql-server< 13.5-1.module_el8.5.0+2607+8c0fd184postgresql-server-13.5-1.module_el8.5.0+2607+8c0fd184.x86_64.rpm
almalinux8x86_64postgresql-plperl< 13.5-1.module_el8.5.0+2607+8c0fd184postgresql-plperl-13.5-1.module_el8.5.0+2607+8c0fd184.x86_64.rpm
almalinux8x86_64postgresql-static< 13.5-1.module_el8.5.0+2607+8c0fd184postgresql-static-13.5-1.module_el8.5.0+2607+8c0fd184.x86_64.rpm
almalinux8x86_64postgresql-contrib< 13.5-1.module_el8.5.0+2607+8c0fd184postgresql-contrib-13.5-1.module_el8.5.0+2607+8c0fd184.x86_64.rpm
almalinux8x86_64postgres-decoderbufs< 0.10.0-2.module_el8.5.0+2607+8c0fd184postgres-decoderbufs-0.10.0-2.module_el8.5.0+2607+8c0fd184.x86_64.rpm
almalinux8x86_64postgresql-test< 13.5-1.module_el8.5.0+2607+8c0fd184postgresql-test-13.5-1.module_el8.5.0+2607+8c0fd184.x86_64.rpm
almalinux8x86_64postgresql-upgrade-devel< 13.5-1.module_el8.5.0+2607+8c0fd184postgresql-upgrade-devel-13.5-1.module_el8.5.0+2607+8c0fd184.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	aarch64	pg_repack	< 1.4.6-3.module_el8.6.0+2758+4f4474df	pg_repack-1.4.6-3.module_el8.6.0+2758+4f4474df.aarch64.rpm
almalinux	8	aarch64	pgaudit	< 1.5.0-1.module_el8.6.0+2760+1746ec94	pgaudit-1.5.0-1.module_el8.6.0+2760+1746ec94.aarch64.rpm
almalinux	8	aarch64	postgres-decoderbufs	< 0.10.0-2.module_el8.6.0+2758+4f4474df	postgres-decoderbufs-0.10.0-2.module_el8.6.0+2758+4f4474df.aarch64.rpm
almalinux	8	x86_64	postgresql-server	< 13.5-1.module_el8.5.0+2607+8c0fd184	postgresql-server-13.5-1.module_el8.5.0+2607+8c0fd184.x86_64.rpm
almalinux	8	x86_64	postgresql-plperl	< 13.5-1.module_el8.5.0+2607+8c0fd184	postgresql-plperl-13.5-1.module_el8.5.0+2607+8c0fd184.x86_64.rpm
almalinux	8	x86_64	postgresql-static	< 13.5-1.module_el8.5.0+2607+8c0fd184	postgresql-static-13.5-1.module_el8.5.0+2607+8c0fd184.x86_64.rpm
almalinux	8	x86_64	postgresql-contrib	< 13.5-1.module_el8.5.0+2607+8c0fd184	postgresql-contrib-13.5-1.module_el8.5.0+2607+8c0fd184.x86_64.rpm
almalinux	8	x86_64	postgres-decoderbufs	< 0.10.0-2.module_el8.5.0+2607+8c0fd184	postgres-decoderbufs-0.10.0-2.module_el8.5.0+2607+8c0fd184.x86_64.rpm
almalinux	8	x86_64	postgresql-test	< 13.5-1.module_el8.5.0+2607+8c0fd184	postgresql-test-13.5-1.module_el8.5.0+2607+8c0fd184.x86_64.rpm
almalinux	8	x86_64	postgresql-upgrade-devel	< 13.5-1.module_el8.5.0+2607+8c0fd184	postgresql-upgrade-devel-13.5-1.module_el8.5.0+2607+8c0fd184.x86_64.rpm