Date: Mon, 13 Nov 2023 13:17:22 +0100
From: hubert depesz lubaczewski <depesz@depesz.com>
Sender: depesz@depesz.com
To: sumanth.vankineni@gmail.com, pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #18193: CVE-2019-9193
Message-ID: <ZVIT0tk4iwgRugfQ@depesz.com>
Reply-To: depesz@depesz.com
References: <18193-9d57393593895996@postgresql.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <18193-9d57393593895996@postgresql.org>
Archived-At: 
 <https://www.postgresql.org/message-id/ZVIT0tk4iwgRugfQ%40depesz.com>
Precedence: bulk

On Mon, Nov 13, 2023 at 06:30:43AM +0000, PG Bug reporting form wrote:
> The following bug has been logged on the website:
> 
> Bug reference:      18193
> Logged by:          Sumanth Vankineni
> Email address:      sumanth.vankineni@gmail.com
> PostgreSQL version: 13.7
> Operating system:   Linux
> Description:        
> 
> Just wanted to give an update, I'm not sure if it's mentioned anywhere on
> the website. The PostgreSQl version 13.7 is also vuln to the
> CVE-2019-9193.
> The CVE states only In PostgreSQL 9.3 through 11.2.

You might want to read
https://www.postgresql.org/about/news/cve-2019-9193-not-a-security-vulnerability-1935/

depesz