agora inbox for pgsql-bugs@postgresql.org  

help / color / mirror / Atom feed

From: Álvaro Herrera <alvherre@kurilemu.de>
To: ZhangChi <798604270@qq.com>
Cc: Srinath Reddy Sadipiralla <srinath2133@gmail.com>
Cc: Ayush Tiwari <ayushtiwari.slg01@gmail.com>
Cc: pgsql-bugs <pgsql-bugs@lists.postgresql.org>
Subject: Re: BUG #19491: Segmentation fault triggered by IS NULL
Date: Tue, 4 Aug 2026 11:29:29 +0200
Message-ID: <anGwARIffUrihqrP@alvherre.pgsql> (raw)
In-Reply-To: <tencent_A24B9C54A8C092E0EED1B5FA3C3599884906@qq.com>

On 2026-Aug-04, ZhangChi wrote:

> Thanks all for fixing this issue and making pg better. Since this
> issue can reliably crash the PostgreSQL server, I would like to ask
> whether it should be treated as a security vulnerability and whether
> it is eligible for CVE assignment.

Hello,

Server crashes ("denial of service") requiring an authenticated user are
not, by themselves, considered security vulnerabilities.  See "What is a
Security Vulnerability in PostgreSQL?" here:

https://www.postgresql.org/support/security/

Thanks

-- 
Álvaro Herrera               48°01'N 7°57'E  —  https://www.EnterpriseDB.com/
"People get annoyed when you try to debug them."  (Larry Wall)

view thread (9+ messages)

Message-ID: <anGwARIffUrihqrP@alvherre.pgsql>
Permalink:  ../anGwARIffUrihqrP@alvherre.pgsql/
Also on:    postgresql.org/message-id/anGwARIffUrihqrP@alvherre.pgsql

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-bugs@postgresql.org
  Cc: alvherre@kurilemu.de, 798604270@qq.com, srinath2133@gmail.com, ayushtiwari.slg01@gmail.com, pgsql-bugs@lists.postgresql.org
  Subject: Re: BUG #19491: Segmentation fault triggered by IS NULL
  In-Reply-To: <anGwARIffUrihqrP@alvherre.pgsql>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox