Re: CVE-2022-2625

From: "David G(dot) Johnston" <david(dot)g(dot)johnston(at)gmail(dot)com>
To: misha1966 misha1966 <mmisha1966(at)bk(dot)ru>
Cc: "pgsql-bugs(at)lists(dot)postgresql(dot)org" <pgsql-bugs(at)lists(dot)postgresql(dot)org>
Subject: Re: CVE-2022-2625
Date: 2022-09-14 13:44:49
Message-ID: CAKFQuwYgG=4Ojh3_38eh5HzBijgC7QykURV1BQUeSPu+j5bSzg@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

On Wednesday, September 14, 2022, misha1966 misha1966 <mmisha1966(at)bk(dot)ru>
wrote:
>
>
> Tell me, is there a CVE-2022-2625 vulnerability in posgresql 9.5? If so,
> who knows how to patch it? Patches from version 10 are not suitable at
> all...
>

I suggest you simply test the described behavior (you can view the source
for test code) and see what happens. I suspect the problem exists quite
far back.

As for a request to have someone write you custom code, that is not
on-topic for a bug report. Nor is reporting against unsupported releases a
known fixed bug in all supported releases. I suggest you direct your
request for assistance to the -general list, or better yet, take this as
evidence on why it is important to upgrade.

David J.

In response to

Browse pgsql-bugs by date

  From Date Subject
Next Message PG Bug reporting form 2022-09-15 12:35:33 BUG #17614: "variable not found in subplan target lists" on grouping query
Previous Message Jonathan S. Katz 2022-09-14 13:18:48 Re: BUG #17613: in the postgresql 15beta4,there are lack of many extensions