postgres database library vulnerabilities

Products

• CA Application Performance Management (APM / Wily / Introscope)

Issue/Introduction

vulnerabilities with libssl.so and libcrypto.so libraries with postgres database.

/opt/introscope/1738016168049_introscope107/database/lib/libssl.so.1.0.0

/opt/introscope/Introscope10.8.0.27/database/lib/libcrypto.so.1.0.0

Resolution

We have researched on these vulnerabilities and these all vulnerabilities do not belong to APM Introscope release 10.8 SP1.

To address these vulnerabilities, you can take following steps.

Based on the names of these directories, it looks like these may belong to Postgres database. 

Upgrading the libssl.so/libcrypto.so package in Linux typically involves updating the OpenSSL library, as libssl.so/libcrypto.so is a shared library provided by OpenSSL. The specific method for upgrading depends on the Linux distribution being used.

You need to check with Linux System Admin to upgrade the OpenSSL library on the system, and then use the new shared library provided by OpenSSL