| From: | Amit Langote <amitlangote09(at)gmail(dot)com> |
|---|---|
| To: | ZhangChi <798604270(at)qq(dot)com> |
| Cc: | Etsuro Fujita <etsuro(dot)fujita(at)gmail(dot)com>, Richard Guo <guofenglinux(at)gmail(dot)com>, Matheus Alcantara <matheusssilv97(at)gmail(dot)com>, Ayush Tiwari <ayushtiwari(dot)slg01(at)gmail(dot)com>, Rafia Sabih <rafia(dot)pghackers(at)gmail(dot)com>, pgsql-bugs <pgsql-bugs(at)lists(dot)postgresql(dot)org>, Amit Langote <amitlan(at)postgresql(dot)org> |
| Subject: | Re: BUG #19484: Segmentation fault triggered by FDW |
| Date: | 2026-08-04 07:56:41 |
| Message-ID: | CA+HiwqFREy1B++fCr17ZzZngdLKKAZVQb6mJ1out=mpfuXB+mw@mail.gmail.com |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-bugs |
Hi,
On Tue, Aug 4, 2026 at 8:54 ZhangChi <798604270(at)qq(dot)com> wrote:
> Thanks all for fixing this issue and making pg better. Since this issue
> can reliably crash the PostgreSQL server, I would like to ask whether it
> should be treated as a security vulnerability and whether it is eligible
> for CVE assignment.
>
Reading:
https://www.postgresql.org/support/security/
Based on the policy there, I don’t think this qualifies for CVE
assignment. It’s
a DoS from an authenticated user issuing a valid SQL statement, which the
policy explicitly excludes.
- Amit
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Andrey Rachitskiy | 2026-08-04 08:05:42 | Re: BUG #19593: area(circle) silently returns Infinity instead of raising "value out of range: overflow" |
| Previous Message | David Rowley | 2026-08-04 06:02:57 | Re: BUG #19586: money division overflow |