MIME-Version: 1.0
References: 
 <CAP_RtMS5D-KBZSZyUcDsDrS-evFZRNMce_r4HWsmzuH+Rpb+0g@mail.gmail.com>
 <CANzqJaDSapTnF9reUbPt2ym5fFLk295Nz2u_uGjONwn95maz=w@mail.gmail.com>
 <CAP_RtMQCzCdihADKeQ2h5v0=QKr-htf+R_V+DUm570o_Qzom5Q@mail.gmail.com>
In-Reply-To: 
 <CAP_RtMQCzCdihADKeQ2h5v0=QKr-htf+R_V+DUm570o_Qzom5Q@mail.gmail.com>
From: Ron Johnson <ronljohnsonjr@gmail.com>
Date: Thu, 15 Feb 2024 15:13:54 -0500
Message-ID: 
 <CANzqJaBBe4Svm2yOjGEn9BDShZuymUtB98JQS-gh9Y-Rn0MPYw@mail.gmail.com>
Subject: Re: Regarding cve-2024-0985
To: Pgsql-admin <pgsql-admin@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="000000000000e8859706117144f2"
Archived-At: 
 <https://www.postgresql.org/message-id/CANzqJaBBe4Svm2yOjGEn9BDShZuymUtB98JQS-gh9Y-Rn0MPYw%40mail.gmail.com>
Precedence: bulk

--000000000000e8859706117144f2
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

1) What OS?  "yum list installed | grep postgresql" or "dpkg -l | grep
postgresql" should show you what's installed.
2) PG 12.3 is *really old*.
3) Applying the latest 12 release (.18) is pretty trivial, *IF* you have
reasonable Linux sysadmin skills.

On Thu, Feb 15, 2024 at 9:46=E2=80=AFAM Rakesh Nashine <nashine.rakesh@gmai=
l.com>
wrote:

> Hi Ron,
> Actually i wasn't aware about it, as someone has done the postgresql
> installation long back . Now since we need to get out of this ve-2024-098=
5,
> I am looking for some assistance to roll this out in existing environment=
.
> Currently we are on *Postgres (PostgreSQL) 12.3. *
>
> Thanks
>
>
> On Thu, Feb 15, 2024 at 7:58=E2=80=AFPM Ron Johnson <ronljohnsonjr@gmail.=
com>
> wrote:
>
>> On Thu, Feb 15, 2024 at 5:23=E2=80=AFAM Rakesh Nashine <nashine.rakesh@g=
mail.com>
>> wrote:
>>
>>> Hello All,
>>> Good afternoon !
>>> I would like to apply the latest patch as remediation of cve-2024-0985:
>>> Can anyone please help me with the steps to apply these patches ? or ma=
y
>>> be any documents.
>>>
>>
>> https://www.postgresql.org/support/security/CVE-2024-0985/
>>
>> From what source did you install Postgresql?
>>
>>
>
> --
> Thanks & Regards
> Rakesh Nashine
>

--000000000000e8859706117144f2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">1) What OS?=C2=A0 &quot;yum list installe=
d | grep postgresql&quot; or &quot;dpkg -l | grep postgresql&quot; should s=
how you what&#39;s installed.<div>2) PG 12.3 is <b>really old</b>.</div><di=
v>3) Applying the latest 12 release=C2=A0(.18) is pretty trivial, <b>IF</b>=
=C2=A0you have reasonable Linux sysadmin skills.</div></div><br><div class=
=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, Feb 15, 2024=
 at 9:46=E2=80=AFAM Rakesh Nashine &lt;<a href=3D"mailto:nashine.rakesh@gma=
il.com">nashine.rakesh@gmail.com</a>&gt; wrote:<br></div><blockquote class=
=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg=
b(204,204,204);padding-left:1ex"><div dir=3D"ltr">Hi Ron,<div>Actually i wa=
sn&#39;t aware about it, as someone has done the postgresql installation lo=
ng back . Now since we need to get out of this ve-2024-0985, I am looking f=
or some assistance to roll this out in existing=C2=A0environment. Currently=
 we are on=C2=A0<b><span lang=3D"EN-IN" style=3D"font-size:11pt;font-family=
:Calibri,sans-serif">Postgres (PostgreSQL) 12.3.=C2=A0</span></b></div><div=
><br></div><div>Thanks=C2=A0</div><div><br></div></div><br><div class=3D"gm=
ail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Thu, Feb 15, 2024 at 7:=
58=E2=80=AFPM Ron Johnson &lt;<a href=3D"mailto:ronljohnsonjr@gmail.com" ta=
rget=3D"_blank">ronljohnsonjr@gmail.com</a>&gt; wrote:<br></div><blockquote=
 class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px so=
lid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div dir=3D"ltr">On=
 Thu, Feb 15, 2024 at 5:23=E2=80=AFAM Rakesh Nashine &lt;<a href=3D"mailto:=
nashine.rakesh@gmail.com" target=3D"_blank">nashine.rakesh@gmail.com</a>&gt=
; wrote:<br></div><div class=3D"gmail_quote"><blockquote class=3D"gmail_quo=
te" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204=
);padding-left:1ex"><div dir=3D"ltr">Hello All,=C2=A0<div>Good afternoon !=
=C2=A0</div><div>I would like to apply the latest patch as remediation of=
=C2=A0cve-2024-0985:</div><div>Can anyone please help me with the steps to =
apply these patches ? or may be any documents.=C2=A0<br clear=3D"all"></div=
></div></blockquote><div><br></div><div><a href=3D"https://www.postgresql.o=
rg/support/security/CVE-2024-0985/" target=3D"_blank">https://www.postgresq=
l.org/support/security/CVE-2024-0985/</a><br></div><div><br></div><div>From=
 what source did you install Postgresql?</div><div><br></div><blockquote cl=
ass=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid=
 rgb(204,204,204);padding-left:1ex">
</blockquote></div></div>
</blockquote></div><br clear=3D"all"><div><br></div><span class=3D"gmail_si=
gnature_prefix">-- </span><br><div dir=3D"ltr" class=3D"gmail_signature"><d=
iv dir=3D"ltr">Thanks &amp; Regards<div>Rakesh Nashine</div></div></div>
</blockquote></div></div>

--000000000000e8859706117144f2--