Re: [Bug] Server Crash, possible security exploit, where to send security report?

On Mon, Dec 12, 2005 at 06:26:25PM -0200, Francisco Figueiredo Jr. wrote:
>
>
>
> Hi all,
>
> while playing with Npgsql I faced an
> strange behavior of Postgresql server.
>
>
> I have all the details of it and I thought it could be a severe security
> exploit, so I don't send it in clear to this mailing list directly as, I
> think, anybody with this information could Dos postgresql servers.

Well, you're not giving any details but if you can cause the server to
dump core in a standard installation, we're interested. You didn't
specify your version BTW.

Here has instructions, including for security related stuff:
http://www.postgresql.org/docs/current/static/bug-reporting.html

Have a nice day,
--
Martijn van Oosterhout <kleptog(at)svana(dot)org> http://svana.org/kleptog/
> Patent. n. Genius is 5% inspiration and 95% perspiration. A patent is a
> tool for doing 5% of the work and then sitting around waiting for someone
> else to do the other 95% so you can sue them.