Re: Postgres upgrade, security release, where?

2013/4/2 Bruce Momjian <bruce(at)momjian(dot)us>:
> On Mon, Apr 1, 2013 at 05:10:22PM -0700, Tory M Blue wrote:
>> So It was announced that there would be a security patch for all versions
>> released on the 4th. I see it's been announced/released on the website, but the
>> versions available show Feb dates.
>>
>> Should the source be current? Or does it take a while for source and other to
>> be made available?
>>
>> Figured if the site says released, it should be available.
>>
>> Thanks
>> Tory
>>
>> postgresql-9.2.3.tar.bz2 2013-02-07 15.6
>> postgresql-9.2.3.tar.bz2 10:25:10 MB
>> postgresql-9.2.3.tar.bz2.md5 2013-02-07 59
>> postgresql-9.2.3.tar.bz2.md5 10:25:10 bytes
>> postgresql-9.2.3.tar.gz postgresql-9.2.3.tar.gz 2013-02-07 20.5
>> 10:25:12 MB
>> postgresql-9.2.3.tar.gz.md5 2013-02-07 58
>> postgresql-9.2.3.tar.gz.md5 10:25:13 bytes
>
> Due to the security nature of the release, the source and binaries will
> only be publicly available on April 4 --- there are no pre-release
> versions available.

The PostgreSQL homepage has a big announcement saying
"PostgreSQL minor versions released!", including a mention of a
"security issue";
unfortunately it's not obvious that this is for the prior 9.2.3 release and as
the announcement of the upcoming security release
( http://www.postgresql.org/about/news/1454/ ) does not mention the
new release number, methinks there is plenty of room for confusion :(

It might be an idea to update the "splash box" with details of the upcoming
release.

Regards

Ian Barwick