Re: Security Release

From: Alvaro Herrera <alvherre(at)dcc(dot)uchile(dot)cl>
To: Lee Wu <Lwu(at)mxlogic(dot)com>
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: Security Release
Date: 2005-03-30 18:05:58
Message-ID: 20050330180558.GA27426@dcc.uchile.cl
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

On Wed, Mar 30, 2005 at 10:21:00AM -0700, Lee Wu wrote:

> I have some questions regarding post date on Feb 1, 2005

> 1. What is "LOAD" option it referred?

The SQL command used to load dynamic libraries.

> 2. Which versions does the security hole affect? (Back from 7.2
> till 8.0?)
>
> Link
> http://archives.postgresql.org/pgsql-general/2005-02/msg00384.php
> <http://archives.postgresql.org/pgsql-general/2005-02/msg00384.php>
> says "Version(s): 8.0.1, 7.4.7, 7.3.9, 7.2.7",
> does that mean this security only occur in those versions?

Releases previous to 7.2 are not supported, so no patch is produced even
if they are affected.

--
Alvaro Herrera (<alvherre[(at)]dcc(dot)uchile(dot)cl>)
"Now I have my system running, not a byte was off the shelf;
It rarely breaks and when it does I fix the code myself.
It's stable, clean and elegant, and lightning fast as well,
And it doesn't cost a nickel, so Bill Gates can go to hell."

In response to

Browse pgsql-admin by date

  From Date Subject
Next Message Dario Pudlo 2005-03-30 18:26:49 postgres 7.2.1 pg_restore large objects
Previous Message Joel Fradkin 2005-03-30 17:34:15 Re: connectivity to database been an issue for me.