Re: [GENERAL] PostgreSQL 7.2.2: Security Release

From: Neil Conway <neilc(at)samurai(dot)com>
To: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
Cc: Neil Conway <neilc(at)samurai(dot)com>, "Marc G(dot) Fournier" <scrappy(at)hub(dot)org>, PostgreSQL Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: [GENERAL] PostgreSQL 7.2.2: Security Release
Date: 2002-08-24 04:47:16
Message-ID: 87k7mgamnf.fsf@mailbox.samurai.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-announce pgsql-general pgsql-hackers

Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:
> The issue is data-provoked crashes vs. query-invoked crashes. Marc's
> point, and I think it was clear enough, is that you can't just poke at
> the TCP port and hope to do anything bad, which was the thrust of the
> argument, I think.

The point I objected to is the suggestion that only those running
"shared" or "open" systems are vulnerable to the security
problem. That is simply incorrect.

Cheers,

Neil

--
Neil Conway <neilc(at)samurai(dot)com> || PGP Key ID: DB3C29FC

In response to

Responses

Browse pgsql-announce by date

  From Date Subject
Next Message Bruce Momjian 2002-08-24 11:23:48 Re: [GENERAL] PostgreSQL 7.2.2: Security Release
Previous Message Lamar Owen 2002-08-24 04:44:55 Re: [GENERAL] PostgreSQL 7.2.2: Security Release

Browse pgsql-general by date

  From Date Subject
Next Message Bruce Momjian 2002-08-24 11:23:48 Re: [GENERAL] PostgreSQL 7.2.2: Security Release
Previous Message Lamar Owen 2002-08-24 04:44:55 Re: [GENERAL] PostgreSQL 7.2.2: Security Release

Browse pgsql-hackers by date

  From Date Subject
Next Message Mark Kirkwood 2002-08-24 04:57:07 Re: Large file support available
Previous Message Tom Lane 2002-08-24 04:45:46 Re: Large file support available