pg.ddx.io  pgsql-bugs@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Michael Paquier <michael@paquier.xyz>
To: Павел Некрасов <p.nekrasov@fobos-nt.ru>
Cc: Bruce Momjian <bruce@momjian.us>
Cc: pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #18614: [ECPG] out of bound in DecodeDateTime
Date: Fri, 25 Oct 2024 07:25:26 +0900
Message-ID: <ZxrJVlqAc07ES-qM@paquier.xyz> (raw)
In-Reply-To: <1964872402.1671046.1729760950957.JavaMail.zimbra@fobos-nt.ru>
References: <18614-6bbe00117352309e@postgresql.org>
	<Zw2Su7kkYYF8nHQY@momjian.us>
	<Zw8GQrLHlgJlz3Qc@paquier.xyz>
	<ZxFJX8Jjoy8T-67v@momjian.us>
	<ZxH3ZGK19VxTJcpU@paquier.xyz>
	<Zxc97vmDiFzNYylT@paquier.xyz>
	<Zxg3P25sHvqhW6KG@paquier.xyz>
	<1964872402.1671046.1729760950957.JavaMail.zimbra@fobos-nt.ru>

On Thu, Oct 24, 2024 at 12:09:10PM +0300, Павел Некрасов wrote:
> I would like to clarify two points:
> 
> 1. Are there any known examples of large open-source projects that
> actively use the ecpg?

Yes, some large organizations use it.

> 2. Do you think it would be appropriate to assign a CVE for this bug?

Nope, this issue does not qualify as worth a CVE when it comes to
PostgreSQL.
--
Michael

Attachments:

  signature.asc (application/pgp-signature, 832B) download

view thread (12+ messages)  latest in thread

Message-ID: <ZxrJVlqAc07ES-qM@paquier.xyz>
Permalink:  ../ZxrJVlqAc07ES-qM@paquier.xyz/
Also on:    postgresql.org/message-id/ZxrJVlqAc07ES-qM@paquier.xyz

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-bugs@postgresql.org
  Cc: michael@paquier.xyz, p.nekrasov@fobos-nt.ru, bruce@momjian.us, pgsql-bugs@lists.postgresql.org
  Subject: Re: BUG #18614: [ECPG] out of bound in DecodeDateTime
  In-Reply-To: <ZxrJVlqAc07ES-qM@paquier.xyz>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox