Re: Postgresql packages in Solaris

From: Scott Marlowe <scott(dot)marlowe(at)gmail(dot)com>
To: Paul Baker <paul(dot)r(dot)baker(at)oracle(dot)com>
Cc: pgsql-general(at)postgresql(dot)org, Chris Apostolopoulos <chris(dot)apostolopoulos(at)oracle(dot)com>, james(dot)gates(at)oracle(dot)com
Subject: Re: Postgresql packages in Solaris
Date: 2010-06-10 21:04:59
Message-ID: AANLkTimMhsOYp5KmD6YVtOwOPixVNZOGQz4acGV2P-aZ@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On Thu, Jun 10, 2010 at 9:46 AM, Paul Baker <paul(dot)r(dot)baker(at)oracle(dot)com> wrote:
>
> All,
>
> I received this question from a customer yesterday (below), and unfortunately I do not have the answer. Please let us know if you know the answer, it would be greatly appreciated...
>
> "What we are trying to figure out is if removing the packages SUNWpostgr-83-devel, SUNWpostgr-83-pl, SUNWpostgr-devel, SUNWpostgr-pl will cause any harm to our systems. For example, in the PDF that you sent yesterday, it states that package SUNWpostgr-pl is part of the core server package.
>
> I am not sure as to what the core server package is, but when you try to remove those packages from prodreg it gives about 2 or 3 warnings on the performing the action.
>
> Just to be on the cautious side, we want to verify that removing those packages will not have any negative impact on our systems. The reasons behind wanting to perform these actions are CVE-2010-1169, CVE-2010-1170, and CVE-2010-1447."

1: Do you use pl/perl and pl/tcl? (these only affect them)
2: Is there not an updated pgsql 83 package for solaris yet to fix this?

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Scott Marlowe 2010-06-10 21:07:46 Re: Postgresql packages in Solaris
Previous Message John Gage 2010-06-10 20:57:36 Re: Cognitive dissonance