Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1raZAV-00ANAa-PU for pgsql-admin@arkaria.postgresql.org; Thu, 15 Feb 2024 10:40:39 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1raZAU-00CQmj-3b for pgsql-admin@arkaria.postgresql.org; Thu, 15 Feb 2024 10:40:38 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1raZAT-00CQma-ON for pgsql-admin@lists.postgresql.org; Thu, 15 Feb 2024 10:40:37 +0000 Received: from mail-wm1-x335.google.com ([2a00:1450:4864:20::335]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1raZAQ-006rbH-Nn for pgsql-admin@lists.postgresql.org; Thu, 15 Feb 2024 10:40:36 +0000 Received: by mail-wm1-x335.google.com with SMTP id 5b1f17b1804b1-412078e983aso5491995e9.1 for ; Thu, 15 Feb 2024 02:40:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1707993633; x=1708598433; darn=lists.postgresql.org; h=user-agent:in-reply-to:content-disposition:mime-version:references :subject:cc:to:from:date:sender:message-id:from:to:cc:subject:date :message-id:reply-to; bh=0PTXOQGdnIWGQ8ihtxrfvepXrigLy6UOd5CAqV7XGp4=; b=YDAxgFh3qEhzMotbBCYXErvG4Do9Y0GvBTemZi+S1k3vSKZBc36nB5Yr+vHxyf4wgm zbyP9uFNBYgQJjIa0nJOAjiW1YQH9T5CZJu0qRay2L9uJ88ZdFD1O0x6ZlzeenRsKHKm hdr69XIjdoPMk6Bt1qX8+Zduh/VtCuyMSQPOzS3gWbzB6H0Gtl0ahgzN2j1+MakaSRFG BkxB3EVb9aPz4R3F4mCxNkkHma5WfwThxZB2LlvFPcHLeeoB2GOo7PKnSJmVe4Cl2kon 0IQ3iHwKXlYnY7oVTA+KKeekETy07DONAle509o2glXZU6Po9AjcRz6ciTAGZ6GRRboO 4AZw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1707993633; x=1708598433; h=user-agent:in-reply-to:content-disposition:mime-version:references :subject:cc:to:from:date:sender:message-id:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=0PTXOQGdnIWGQ8ihtxrfvepXrigLy6UOd5CAqV7XGp4=; b=XldI/0pzaSWUJ/5mJ5Z7hpQVJyYsFU9khXrlSskqEtDuiggVKQh0gKeYCdcO6h2vXH dPpSCvW/FLay/hM++cUvBmufkPd3sdHTVxOaIEcI93K2Ng7te3dRIiyYVIn9WpkRgHhQ o6Dk8MBpD1jQom5g6JXoA1P3ixdpy3kCwCyEUjta7qoXpnRHlLkcq4B72qfeZYQwlKUS 2IEkZo+2GMBcl4qMqq4vPAMPxCkuiUruoQxWWI3LlwFIs+sCreNjnaZ5rqXP71x4cT8L 6B1opEbQMq+eXps4vuxJQo/rDlSAKBzeAwCMsL3L4GfyVTtmbesnIkIineaFm+wZct6p n2pQ== X-Gm-Message-State: AOJu0YyvsJZ/2yhGtKoK+Yt4FayjW0l4843ShscFX5VVu0cXQkk5OsGY 1RRfJ/K62XaYirvE7VLU00p88Po3k0Mb2GC7+yXZsRWb4+7XubRS X-Google-Smtp-Source: AGHT+IGnhJl019d+x0wykRiFogPpGhCEnyyIURNfwX2UjHnCqFV7JT1dye9WH11WiuiMTl/z6mpvNw== X-Received: by 2002:a05:600c:3554:b0:411:fc94:ac99 with SMTP id i20-20020a05600c355400b00411fc94ac99mr1233124wmq.9.1707993633015; Thu, 15 Feb 2024 02:40:33 -0800 (PST) Received: from lightning.caipicrew.dd-dns.de ([2001:a61:a2b:8001:a460:3aa4:1e21:cd50]) by smtp.gmail.com with ESMTPSA id hn32-20020a05600ca3a000b00410ebcf8180sm4597167wmb.43.2024.02.15.02.40.32 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 15 Feb 2024 02:40:32 -0800 (PST) Message-ID: <65cdea20.050a0220.640b0.2208@mx.google.com> X-Google-Original-Message-ID: <20240215103947.GB13087@caipicrew.dd-dns.de;lightning.caipicrew.dd-dns.de> Sender: Michael Banck Received: from mbanck by lightning.caipicrew.dd-dns.de with local (Exim 4.92) (envelope-from ) id 1raZAN-000085-UX; Thu, 15 Feb 2024 11:40:31 +0100 Date: Thu, 15 Feb 2024 11:40:31 +0100 From: Michael Banck To: Rakesh Nashine Cc: Pgsql-admin Subject: Re: Regarding cve-2024-0985 References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.10.1 (2018-07-13) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Hi, On Thu, Feb 15, 2024 at 03:53:27PM +0530, Rakesh Nashine wrote: > I would like to apply the latest patch as remediation of cve-2024-0985: > Can anyone please help me with the steps to apply these patches ? or may be > any documents. Just install the latest point release/minor version of Postgres and restart the instance. Michael