public inbox for [email protected]  

help / color / mirror / Atom feed

From: PostgreSQL Global Development Group <[email protected]>
To: PostgreSQL Announce <[email protected]>
Subject: PostgreSQL is now a CVE Numbering Authority (CNA)
Date: Thu, 18 Jan 2024 20:00:39 +0000
Message-ID: <[email protected]> (raw)

The PostgreSQL Security team is pleased to announce that PostgreSQL is now a CVE Numbering Authority (CNA). A CNA has responsibilities for assigning CVE IDs and participating in responsible disclosure with projects within its scope. You can find out more information about the role of PostgreSQL as a CNA on the [PostgreSQL security](https://www.postgresql.org/support/security/) page:

[https://www.postgresql.org/support/security/](https://www.postgresql.org/support/security/)

The process for reporting a security vulnerability in PostgreSQL has not changed. If you believe you have discovered a security vulnerability in PostgreSQL, please send an email to [[email protected]](mailto:[email protected]). For more information on what is considered a vulnerability and the reporting process, please review the [PostgreSQL security](https://www.postgresql.org/support/security/) page:

[https://www.postgresql.org/support/security/](https://www.postgresql.org/support/security/)

You can find the original announcement on PostgreSQL being added as a CNA on the CVE page:

[https://www.cve.org/Media/News/item/news/2024/01/16/PostgreSQL-Added-as-CNA](https://www.cve.org/Media/News/item/news/2024/01/16/PostgreSQL-Added-as-CNA)

Attachments:

  [image/png] slonik.png (20.7K, 3-slonik.png)
  download | view image

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected]
  Subject: Re: PostgreSQL is now a CVE Numbering Authority (CNA)
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox