Re: CVE-2024-10979 Vulnerability Impact on PostgreSQL 11.10

From: Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com>
To: "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>
Cc: Subhash Udata <subhashudata(at)gmail(dot)com>, 김주연 <mysylph(at)gmail(dot)com>, "pgsql-general(at)lists(dot)postgresql(dot)org" <pgsql-general(at)lists(dot)postgresql(dot)org>
Subject: Re: CVE-2024-10979 Vulnerability Impact on PostgreSQL 11.10
Date: 2024-11-22 05:21:50
Message-ID: 3aefd383-8f42-4f31-80a9-40f3d9bda7c3@aklaver.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

On 11/21/24 20:53, David G. Johnston wrote:
> On Thursday, November 21, 2024, Adrian Klaver <adrian(dot)klaver(at)aklaver(dot)com
> <mailto:adrian(dot)klaver(at)aklaver(dot)com>> wrote:
>
> On 11/21/24 20:31, Subhash Udata wrote:
>
> Thank you for your detailed response. I would like to clarify my
> situation further to ensure I take the appropriate steps.
>
> Currently, my environment is running *PostgreSQL 15.0*. I
> understand that version *15.9* contains the fix for
> CVE-2024-10979, as mentioned in the release notes.
>
>
> Whoa, I thought the topic of discussion from your first post and the
> email subject was:
>
> "I am currently using PostgreSQL 11.10 and would like to know if the
> CVE-2024-10979 vulnerability affects this version."
>
>
> No, I just think Subhash hijacked this thread.  At least the email
> address of the OP is a different one.

Oops missed that, now it makes sense.

>
> David J.
>

--
Adrian Klaver
adrian(dot)klaver(at)aklaver(dot)com

In response to

Browse pgsql-general by date

  From Date Subject
Next Message prashant sinha 2024-11-22 05:40:50 License question
Previous Message David G. Johnston 2024-11-22 05:19:43 Re: PostgreSQL Log Info