MIME-Version: 1.0
References: 
 <CAFLwmF_-=UOpmquSCYG1_L4EffmNKE7FCw8FGRrTF0PHfy=xbA@mail.gmail.com>
In-Reply-To: 
 <CAFLwmF_-=UOpmquSCYG1_L4EffmNKE7FCw8FGRrTF0PHfy=xbA@mail.gmail.com>
From: Dave Page <dpage@pgadmin.org>
Date: Wed, 3 Jun 2026 13:19:56 +0100
Message-ID: 
 <CA+OCxozAAWgSzf139nGKpgwow6esOUt1Li0+K0PFCDr6XvpvcQ@mail.gmail.com>
Subject: Re: Help with remediation for vulnerabilities for pgadmin4 version
 9.x in RH8
To: Kristen Delack <kristen.delack@noaa.gov>
Cc: pgadmin-support@lists.postgresql.org,
	"Jensen, Nate RTX" <nate.jensen@rtx.com>, "RUEBENS,
 MARK A RTX" <Mark.A.Ruebens@rtx.com>
Content-Type: multipart/alternative; boundary="000000000000bf1d850653587245"
Archived-At: 
 <https://www.postgresql.org/message-id/CA%2BOCxozAAWgSzf139nGKpgwow6esOUt1Li0%2BK0PFCDr6XvpvcQ%40mail.gmail.com>
Precedence: bulk

--000000000000bf1d850653587245
Content-Type: text/plain; charset="UTF-8"

Hi

On Wed, 3 Jun 2026 at 09:19, Kristen Delack <kristen.delack@noaa.gov> wrote:

> Hello pgadmin list,
>
> I am the Operations & Maintenance software development team lead on the
> National Weather Service's (NWS) Advanced Weather Interactive Processing
> System (AWIPS) program. We use pgadmin4 on RHEL8. We just recently upgraded
> to version 9.12 before a new vulnerability
> <https://www.cve.org/CVERecord?id=CVE-2026-7820> in versions up through
> 9.14 was announced. We see that version 9.15 mitigates this vulnerability,
> but according to your page
> <https://www.pgadmin.org/download/pgadmin-4-rpm/>, 9.14 is the last
> supported release for RH8. Does this mean that no further versions of 9.x
> for RH8 will be released when vulnerabilities are found?
>

Correct, there will be no more releases for RH8 as it's beyond it's
standard support lifetime, and we have limited resources to maintain builds.

-- 
Dave Page
pgAdmin: https://www.pgadmin.org
PostgreSQL: https://www.postgresql.org
pgEdge: https://www.pgedge.com

--000000000000bf1d850653587245
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hi</div><br><div class=3D"gmail_quote gmail_quote_con=
tainer"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, 3 Jun 2026 at 09:19, =
Kristen Delack &lt;<a href=3D"mailto:kristen.delack@noaa.gov">kristen.delac=
k@noaa.gov</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=
=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding=
-left:1ex"><div dir=3D"ltr"><div>Hello pgadmin list,</div><div><br></div><d=
iv>I am the Operations &amp; Maintenance software development team lead on =
the National Weather Service&#39;s (NWS) Advanced Weather Interactive Proce=
ssing System (AWIPS) program. We use pgadmin4 on RHEL8. We just recently up=
graded to version 9.12 before=C2=A0<a href=3D"https://www.cve.org/CVERecord=
?id=3DCVE-2026-7820" target=3D"_blank">a new vulnerability</a> in versions =
up through 9.14 was announced. We see that version 9.15 mitigates this vuln=
erability, but according to your <a href=3D"https://www.pgadmin.org/downloa=
d/pgadmin-4-rpm/" target=3D"_blank">page</a>, 9.14 is the last supported re=
lease for RH8. Does this mean that no further versions of 9.x for RH8 will =
be released when vulnerabilities are=C2=A0found?</div></div></blockquote><d=
iv><br></div><div>Correct, there will be no more releases for RH8 as it&#39=
;s beyond it&#39;s standard support lifetime, and we have limited resources=
 to maintain builds.</div><div>=C2=A0</div></div><span class=3D"gmail_signa=
ture_prefix">-- </span><br><div dir=3D"ltr" class=3D"gmail_signature"><div =
dir=3D"ltr">Dave Page<div>pgAdmin: <a href=3D"https://www.pgadmin.org" targ=
et=3D"_blank">https://www.pgadmin.org</a></div><div>PostgreSQL: <a href=3D"=
https://www.postgresql.org" target=3D"_blank">https://www.postgresql.org</a=
></div><div>pgEdge: <a href=3D"https://www.pgedge.com" target=3D"_blank">ht=
tps://www.pgedge.com</a><br><div></div><div><br></div></div></div></div></d=
iv>

--000000000000bf1d850653587245--