| From: | "Marc G(dot) Fournier" <scrappy(at)hub(dot)org> |
|---|---|
| To: | Neil Conway <neilc(at)samurai(dot)com> |
| Cc: | Vince Vielhaber <vev(at)michvhf(dot)com>, <pgsql-hackers(at)postgreSQL(dot)org> |
| Subject: | Re: @(#)Mordred Labs advisory 0x0003: Buffer overflow in |
| Date: | 2002-08-21 06:41:32 |
| Message-ID: | 20020821034054.A36114-100000@mail1.hub.org |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
On 20 Aug 2002, Neil Conway wrote:
> Vince Vielhaber <vev(at)michvhf(dot)com> writes:
> > Here's yet another.
>
> Should someone from the core team perhaps get in contact with this guy
> and ask if he could get in contact with the development team before
> publicizing any further security holes? AFAIK that is standard
> operating procedure in most cases...
>
> Second, it might be worth pushing a 7.2.2 release containing the fix
> for this bug, as well as the datetime problem. If that sounds
> reasonable to the people who have to do the most work on a new release
> (e.g. Marc), I can volunteer to backport a fix for the datetime
> problem.
I have no problems doing a v7.2.2 release for something like this ...
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Zeugswetter Andreas SB SD | 2002-08-21 08:02:21 | Re: @(#) Mordred Labs advisory 0x0001: Buffer overflow in |
| Previous Message | Joe Conway | 2002-08-21 06:29:07 | Re: Proposal: make "opaque" obsolete |