Re: [EXTERNAL] Re: Asking for OK for a nasty trick to resolve PG CVE-2025-1094 i

From: Laurenz Albe <laurenz(dot)albe(at)cybertec(dot)at>
To: "Abraham, Danny" <danny_abraham(at)bmc(dot)com>, "pgsql-general(at)lists(dot)postgresql(dot)org" <pgsql-general(at)lists(dot)postgresql(dot)org>
Subject: Re: [EXTERNAL] Re: Asking for OK for a nasty trick to resolve PG CVE-2025-1094 i
Date: 2025-03-06 12:32:14
Message-ID: a141ae990b72eadcdbcf79efaa268ac5696f7bdb.camel@cybertec.at
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general pgsql-performance

On Thu, 2025-03-06 at 09:33 +0000, Abraham, Danny wrote:
> We have hundreds of pg servers (mainly linux).
> App is 7×24.
> We think that patching the server to 15.12.will cost about 30 times
> more compared to patching the pg client ( mainly qa effort).

I don't think so. Don't do any QA when installing a PostgreSQL patch
(just roll it out on the test systems first to see if your installation
procedure works).

Down time because of data corruption will cost *way* more than patching.

Yours,
Laurenz Albe

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Greg Sabino Mullane 2025-03-06 13:31:54 Re: Quesion about querying distributed databases
Previous Message Laurenz Albe 2025-03-06 12:01:32 Re: Quesion about querying distributed databases

Browse pgsql-performance by date

  From Date Subject
Next Message Greg Sabino Mullane 2025-03-07 13:24:57 Re: [EXTERNAL] Re: Asking for OK for a nasty trick to resolve PG CVE-2025-1094 i
Previous Message Ron Johnson 2025-03-06 10:08:42 Re: [EXTERNAL] Re: Asking for OK for a nasty trick to resolve PG CVE-2025-1094 i