From: Ron Johnson <ronljohnsonjr@gmail.com>
To: Pgsql-admin <pgsql-admin@lists.postgresql.org>
Subject: Re: Regarding cve-2024-0985
Date: Thu, 15 Feb 2024 15:13:54 -0500
Message-ID: <CANzqJaBBe4Svm2yOjGEn9BDShZuymUtB98JQS-gh9Y-Rn0MPYw@mail.gmail.com> (raw)
In-Reply-To: <CAP_RtMQCzCdihADKeQ2h5v0=QKr-htf+R_V+DUm570o_Qzom5Q@mail.gmail.com>
References: <CAP_RtMS5D-KBZSZyUcDsDrS-evFZRNMce_r4HWsmzuH+Rpb+0g@mail.gmail.com>
<CANzqJaDSapTnF9reUbPt2ym5fFLk295Nz2u_uGjONwn95maz=w@mail.gmail.com>
<CAP_RtMQCzCdihADKeQ2h5v0=QKr-htf+R_V+DUm570o_Qzom5Q@mail.gmail.com>
1) What OS? "yum list installed | grep postgresql" or "dpkg -l | grep
postgresql" should show you what's installed.
2) PG 12.3 is *really old*.
3) Applying the latest 12 release (.18) is pretty trivial, *IF* you have
reasonable Linux sysadmin skills.
On Thu, Feb 15, 2024 at 9:46 AM Rakesh Nashine <nashine.rakesh@gmail.com>
wrote:
> Hi Ron,
> Actually i wasn't aware about it, as someone has done the postgresql
> installation long back . Now since we need to get out of this ve-2024-0985,
> I am looking for some assistance to roll this out in existing environment.
> Currently we are on *Postgres (PostgreSQL) 12.3. *
>
> Thanks
>
>
> On Thu, Feb 15, 2024 at 7:58 PM Ron Johnson <ronljohnsonjr@gmail.com>
> wrote:
>
>> On Thu, Feb 15, 2024 at 5:23 AM Rakesh Nashine <nashine.rakesh@gmail.com>
>> wrote:
>>
>>> Hello All,
>>> Good afternoon !
>>> I would like to apply the latest patch as remediation of cve-2024-0985:
>>> Can anyone please help me with the steps to apply these patches ? or may
>>> be any documents.
>>>
>>
>> https://www.postgresql.org/support/security/CVE-2024-0985/
>>
>> From what source did you install Postgresql?
>>
>>
>
> --
> Thanks & Regards
> Rakesh Nashine
>
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: ronljohnsonjr@gmail.com, pgsql-admin@lists.postgresql.org
Subject: Re: Regarding cve-2024-0985
In-Reply-To: <CANzqJaBBe4Svm2yOjGEn9BDShZuymUtB98JQS-gh9Y-Rn0MPYw@mail.gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox