From: Tom Lane <tgl@sss.pgh.pa.us>
To: sumanth.vankineni@gmail.com
Cc: pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #18193: CVE-2019-9193
Date: Mon, 13 Nov 2023 10:20:30 -0500
Message-ID: <1985242.1699888830@sss.pgh.pa.us> (raw)
In-Reply-To: <18193-9d57393593895996@postgresql.org>
References: <18193-9d57393593895996@postgresql.org>
PG Bug reporting form <noreply@postgresql.org> writes:
> Just wanted to give an update, I'm not sure if it's mentioned anywhere on
> the website. The PostgreSQl version 13.7 is also vuln to the
> CVE-2019-9193.
> The CVE states only In PostgreSQL 9.3 through 11.2.
Please see
https://www.postgresql.org/about/news/cve-2019-9193-not-a-security-vulnerability-1935/
That CVE is erroneous in full, and so the fact that it also misstates
relevant versions is hardly surprising.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: tgl@sss.pgh.pa.us, sumanth.vankineni@gmail.com, pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #18193: CVE-2019-9193
In-Reply-To: <1985242.1699888830@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox