Re: Post-CVE Wishlist

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Robert Haas <robertmhaas(at)gmail(dot)com>
Cc: Jacob Champion <pchampion(at)vmware(dot)com>, "hlinnaka(at)iki(dot)fi" <hlinnaka(at)iki(dot)fi>, "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Post-CVE Wishlist
Date: 2021-11-24 20:14:03
Message-ID: 189112.1637784843@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Robert Haas <robertmhaas(at)gmail(dot)com> writes:
> On Wed, Nov 24, 2021 at 2:53 PM Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:
>> One other point to be made here is that it seems like a stretch to call
>> these particular bugs "high-severity".

> Well, I was referring to the CVSS score, which was in the "high" range.

The server CVE is; the client CVE, not so much, precisely because we
couldn't find exciting exploits.

regards, tom lane

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Robert Haas 2021-11-24 20:19:33 Re: Post-CVE Wishlist
Previous Message Jacob Champion 2021-11-24 20:00:13 Re: Post-CVE Wishlist