"Neil Conway" <neilc(at)samurai(dot)com> writes:

> Christopher Kings-Lynne said:
>> There have been HEAPS of security fixes between 7.2 and 7.3.
>
> That's only the case if your definition of a "security fix" is pretty fast
> and loose -- as yours seems to be.

Hmm?  On 7.2, an unpriviliged database user can read the more or less
the whole memory image of the server process.  On 7.3, this has been
fixed.

-- 
Florian Weimer 	                  Weimer(at)CERT(dot)Uni-Stuttgart(dot)DE
University of Stuttgart           http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT                          fax +49-711-685-5898

In response to

• Re: why was libpq.so's version number bumped? at 2002-12-30 21:31:45 from Neil Conway

Responses

• Re: why was libpq.so's version number bumped? at 2003-01-03 23:15:28 from Bruce Momjian

pgsql-hackers by date

Next:	From: Florian Weimer	Date: 2003-01-03 09:58:13
	Subject: Re: why was libpq.so's version number bumped?
Previous:	From: Joe Conway	Date: 2003-01-03 01:10:03
	Subject: targetlist functions proposals (was SETOF input parameters)