Skip site navigation (1) Skip section navigation (2)

Re: [HACKERS] BUG #2052: Federal Agency Tech Hub Refuses to Accept

From: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
To: Peter Eisentraut <peter_e(at)gmx(dot)net>
Cc: pgsql-hackers(at)postgresql(dot)org, Simon Riggs <simon(at)2ndquadrant(dot)com>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Stephen Frost <sfrost(at)snowman(dot)net>, Ferindo Middleton <fmiddleton(at)verizon(dot)net>, pgsql-bugs(at)postgresql(dot)org
Subject: Re: [HACKERS] BUG #2052: Federal Agency Tech Hub Refuses to Accept
Date: 2005-11-25 20:18:01
Message-ID: 200511252018.jAPKI1I28934@candle.pha.pa.us (view raw or flat)
Thread:
Lists: pgsql-bugspgsql-hackerspgsql-www
If someone wants to create a separate web page to track fixes related to
CVE number, that is fine.  My guess is that most people reading the
release notes don't care about the CVE numbers themselves (just that
each release has all known security bugs fixed), and most bugs that are
fixed don't have CVE numbers at commit time.

---------------------------------------------------------------------------

Peter Eisentraut wrote:
> Bruce Momjian wrote:
> > I am not excited about referencing error numbers from someone else. 
> > We know our errors better than anyone else, so I don't see the point.
> 
> The point is, *we* might know our error numbers, but the rest of the 
> world doesn't.
> 
> And CVE isn't just "someone".  A large number of security groups, 
> government agencies, and OS distributors are involved there.  Using CVE 
> numbers, the public can, say, correlate bugtraq or CERT announcements 
> or Red Hat or Debian bugs to PostgreSQL patches and releases.  
> Copy-and-pasting the CVE number into the patch message or release note 
> entry really isn't that much to ask for that service.
> 
> -- 
> Peter Eisentraut
> http://developer.postgresql.org/~petere/
> 

-- 
  Bruce Momjian                        |  http://candle.pha.pa.us
  pgman(at)candle(dot)pha(dot)pa(dot)us               |  (610) 359-1001
  +  If your life is a hard drive,     |  13 Roberts Road
  +  Christ can be your backup.        |  Newtown Square, Pennsylvania 19073

In response to

Responses

pgsql-hackers by date

Next:From: Bruce MomjianDate: 2005-11-25 20:30:02
Subject: Re: SHOW ALL output too wide
Previous:From: Alvaro HerreraDate: 2005-11-25 20:11:42
Subject: Re: PL/php in pg_pltemplate

pgsql-bugs by date

Next:From: Bruce MomjianDate: 2005-11-25 20:33:51
Subject: Re: BUG #2065: Problem with language conversion in pg_dump
Previous:From: Tom LaneDate: 2005-11-25 19:18:32
Subject: Re: BUG #2052: Federal Agency Tech Hub Refuses to Accept

pgsql-www by date

Next:From: Simon RiggsDate: 2005-11-25 20:38:57
Subject: Re: [BUGS] BUG #2052: Federal Agency Tech Hub Refuses to Accept
Previous:From: Tom LaneDate: 2005-11-25 19:18:32
Subject: Re: BUG #2052: Federal Agency Tech Hub Refuses to Accept

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group