Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1rxVWC-009HYB-6Y for pgsql-bugs@arkaria.postgresql.org; Thu, 18 Apr 2024 17:25:52 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1rxVW9-007Rsa-MZ for pgsql-bugs@arkaria.postgresql.org; Thu, 18 Apr 2024 17:25:49 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1rxVW9-007RqF-CM for pgsql-bugs@lists.postgresql.org; Thu, 18 Apr 2024 17:25:49 +0000 Received: from meldrar.postgresql.org ([2a02:c0:301:0:ffff::31]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1rxVW6-001f1t-Nt for pgsql-bugs@lists.postgresql.org; Thu, 18 Apr 2024 17:25:48 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Content-Type:In-Reply-To:From:References:To: Subject:MIME-Version:Date:Message-ID:Sender:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description; bh=74c3VtdulyvKwbyqy67hPuN4Wou0fH6MKpqhBt5YPhE=; b=Y+Ebc/kLR0q2GHA9tofWYpFKwa YfaXNFPaUUmJbI81YwmHK9NTc35FtqH55l/mSg6ItFGvVIXIGKfxacLA4J9yf+3AuePrZikhSJW2Y MqCXsa3fhCGgX3ZivFCAY+Bqebo4O330ZIPbl6MgvoVchzh//ojEONVB+qatvO5YitopS2+bfiIt7 YGUxsz8sXwaSmiIxOM49cbrjBjYyqi+eW1znOZBSpcApxYfL0CepS/+CWW3M6W58EapLiUTy3FCZ/ IGFoKlviHAIzTi4BETOvmaEMHDhwb6Pq6Ei5BuGaDtj5u0UBRWaagTaLZz+QVDaQBJOD5raxsfL0O H3ZziqPg==; Received: from [108.176.26.82] (helo=[172.24.3.214]) by meldrar.postgresql.org with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1rxVW1-003j8c-Kb; Thu, 18 Apr 2024 17:25:44 +0000 Message-ID: Date: Thu, 18 Apr 2024 13:25:38 -0400 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: CVE-2024-28849 To: "Mathews, Rob" , "pgsql-bugs@lists.postgresql.org" References: Content-Language: en-US From: "Jonathan S. Katz" Autocrypt: addr=jkatz@postgresql.org; keydata= xsFNBFtShwABEAC7PNHDUOTYuifpUCk23KqfxdQQkn4nkoxOXRK0+rAj36FiwqGB4TJFuOVZ sDFAEiSlC8Jt4y5Cs7B5tetT8JNd2cs6zp/udMJJDz9d65O9PDpdlMgAmIiTzpLlSdx8FG56 DTksaDv1d8j3cTJPSE4/fWSxqzA7o3Y9UuL7atZPrzfImgpRKs0of7elIHwOa8GucjyhYqcR h60wFBJc2KXqQdDYRTZy43DSnY/0VNc0omiH355fustvpm+m5HjD3w7qZyfN3fpKJpnX1LCF f3MnPHaDGITIYGRCBXvf0UqUtD6OEVWPv2C2gyqWMIpWmZTOgDufltKyIByKBoS9x0PlFkij 04X3KODCngt+N8Ssc9OICc6QSxhjoP48PYPdmiTmkrGuf0LX084wj1xeo1NX7XxZK39F6dTJ DhsIiW0sNS0xMxQHLHG9VLbPjx3SANQBh6BuryPz5ZupW9/TIDmkvprtU/oXfKgtfYm3fxmk EctxbWrEPsFTFPyuMqQu6l+xyQv0s1VLZfjNWaua6H1/gGoIt6kRnn5qMXDVVpijuWkHbv7G ngaQMd258UrrOEHnnjzhQ7jxMWV9D+emxbAtlIxnYvCWlV4IwAQhEHfvudqYaIY3hNWrvQ6H GB2KXoTZYN9g5djm14/5nj1IU5zOcovkjJnKhoo9iStnpFF2cwARAQABzSdKb25hdGhhbiBT LiBLYXR6IDxqa2F0ekBwb3N0Z3Jlc3FsLm9yZz7CwY4EEwEIADgCGwMFCwkIBwIGFQoJCAsC BBYCAwECHgECF4AWIQT6hLaVryv3miBkP/HxBJxynxxlJwUCYvBxpgAKCRDxBJxynxxlJ/Us EACe5W9aBAJGdFjbHc+yEy/0UVcDhDeNeJC8vGuyuMwj6cZgm8HmVddaGKWaumaDziOnGj5B zBUB9cZBPuM+j8Gli2F5hdSTeLZseHqNtuj2sGpTaZ+6utCt3iMIh+ZrHq2ufqMj9m6uA93+ SziFGcA+8+qKFTjqTUgZUxEgLnInk9191NaQT/LiH34JRlFY009XIQWRfDBYB8kJHpDQbp9y 9gsyzgYEMO4bxsXgD4BeHKW+s9OmP/zlDyHOLtyrsXLZHZA42TR/tnSTTwC9Xcx99eh5AS+u t1orACYzZfTEWph2of8AI0cuAT3c3MZNw7ypLcejr/Y71wAXQeiC55ZKrx6rsmsICXohx8be l0Lsnm+oHqSzfbVxZe/2teHLfaupD4P1OPnM9ljeqvIyhvHFlrc6LUHzMv0jf97TUCcWmmo9 qWmzT8wFkSDbFMj5Vk0hJ/nexipTqTzWQo5G9yN6aUDiOBDTvWeMGAvso01/11M/Tf7Ouq/S kcHFhpZgm7EzakFrmMD1l0DsyXUM4AtErvEC/4M5ZMNvwmvXUC3ndrSv00k3wrtQ2t9OGT4h NciB7uqiU+DrxoEZHx+AUC0MhKE96E3KQ+XYjUHfVr+ribl/2oiwazdCjVrkVyKoyMs5IQ1X gaOhxsLp2uBCdzQqMOmGxplc+K03KhJZ6TiU9s7BTQRbUocAARAAv8ho/toQ9DG3j4f9h9n1 aRHr2FlviN2Utpy6L8+dfDggO0geilmkGQOolZ2E60gGfye/kUtF9W3NByO4hxDR9u6qbOXc dqnuA+cc68EfqlWFJrVtYFxt0h4ElWYOYnIezKthriWch/FY70FGrxs3z8UHOHq50wBW433e TvZm90WixBiXEt2v1DgW4Vr3ymfO7Aap/IYyPuE4JzgudAuAl0HKPyNEHWHG1dAbjX1RiCw9 gknIDWQOF0B4UAaJctWGVcnZ3A2ULwNGMa1P9ZJlBWf1vcj01aiHMU0yQ7JjJiSpvfm9eM0u SLwRdDrJjyl5ZZqVumjdv2SMNQ8GvYRbEMys3GGDSt9zXgfCSUnPnJfYxjzBHRI6x44Wfsx8 S6hWxepOogCJJ/g67Bk9mY8YV4klWIXDJVOL5jnBC09DbsZG81JaE2QxB8Y7W36ZMroi9XMx g3s805hQAQUvdG/poU8hN8BWdrnTm/+4eQQp7gDY1ePDmGM6bJC+OHOSnFtR/f+70zpKJ10c c7cBygGnl1yR3KjhFyAWUFvP4ZGziKCcpMwXZfe9PGuyA/YOubMphxIn3YsK2wrdfaKZYX2G MZCZhMMcvx9IpQrxIJgU+VlwXu/O+Lk10VIPcxPJJwmpdI6HzcS8ZgG6IMcC444XXTuLaP8j 2mgcMvYak3ScCykAEQEAAcLBdgQYAQgAIBYhBPqEtpWvK/eaIGQ/8fEEnHKfHGUnBQJi8HGn AhsMAAoJEPEEnHKfHGUneVcQALCswm06CgJjQ+lFmjYaw/OFZ9LJgHbaqGrfyNmjIXOhRiqt 65VWmC8/yetWCfLtXzCsPrQGXjon1IuKZUfcvVQ39lh8apvfUweNWH9xCpHkWmai8rKbjTkd 0YXyK9dYVPw7ATKSpMzM61QvPIndjQ7iTT1SnCINj7zMDuMSuyiTUGr57VmXzFW466BJ/XGg P5+mLYrbjpbsB0ByUbral6XBs57LYSRFzQ17SekWlAlFSlW6xTCdKq7VKYd+Utb8N7uXejNG qjDCXmcPB45+pYC9ckSKyWceFpSqjO7OzMK8Q1OfGIAuQQ3UegGefuhIV06mWXsrgLOGSbM8 ZH9GT1OxkFiDneSSCmjHRzTWgPSH7c/9r5cG5Uo5GIfVDIgirhcgKwUgullb2r3vZDBRKi9N 44NeTkaE7KdfEkziDhe96OMdrCLnH4Kt2Gcgc4R/sibjqtvxX/YvmaiimK1H6fa74sstqSlZ w8Jbr9hQvk0P4UzySrlmsuOGwHodeM8R/Tklke6AJkYANcyP4r8xRfAe/pTH7zz4usdlncgP Z/WieSo1zvU6VEh6TAwakocfUDIcpqSxcZAs2pfjjNz+owqoFWMbn6BEO0J0xX65p//J9vd3 LZLjN6yBvXCRDoSD+B85thpxQSoI+jXC8d7DiejNLaHqxkgUeyfq9n99cyl3 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------aRah5b9sbg0o0n4aAEJYdxag" X-Host-Lookup-Failed: Reverse DNS lookup failed for 108.176.26.82 (failed) List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------aRah5b9sbg0o0n4aAEJYdxag Content-Type: multipart/mixed; boundary="------------NEIojQFv7n5T2i6CUs7g53f4"; protected-headers="v1" From: "Jonathan S. Katz" To: "Mathews, Rob" , "pgsql-bugs@lists.postgresql.org" Message-ID: Subject: Re: CVE-2024-28849 References: In-Reply-To: --------------NEIojQFv7n5T2i6CUs7g53f4 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gNC8xOC8yNCAxMToyNyBBTSwgTWF0aGV3cywgUm9iIHdyb3RlOg0KPiBBbGwsDQo+IA0K PiAgwqDCoCBDVkUtMjAyNC0yODg0OSB3YXMgZm91bmQgaW4gVmVyc2lvbiAxNS42IGFuZCAx Ni4yIHRoaXMgd2Vlay4gUGxlYXNlIA0KPiByZWZlciB0byBodHRwczovL2N2ZS5taXRyZS5v cmcvY2dpLWJpbi9jdmVuYW1lLmNnaT9uYW1lPUNWRS0yMDI0LTI4ODQ5IA0KPiA8aHR0cHM6 Ly9jdmUubWl0cmUub3JnL2NnaS1iaW4vY3ZlbmFtZS5jZ2k/bmFtZT1DVkUtMjAyNC0yODg0 OT4gZm9yIA0KPiBpc3N1ZXMgYW5kIGNvcnJlY3Rpb25zLg0KPiANCj4gVGhlIEJpbmFyaWVz IC56aXAgZmlsZXMgd2VyZSB0aGUgZmlsZXMgc2Nhbm5lZCBhbmQgZm91bmQgd2l0aCB0aGUg DQo+IHZ1bG5lcmFiaWxpdHkuIFRoZXJlIGFyZSBubyBrbm93biB3b3JrYXJvdW5kcyBmb3Ig dGhpcyB2dWxuZXJhYmlsaXR5Lg0KDQpQb3N0Z3JlU1FMIGRvZXNuJ3QgaGF2ZSBhbnkgZGVw ZW5kZW5jaWVzIG9uIG5vZGUuanMsIGxldCBhbG9uZSANCkphdmFTY3JpcHQuIFRoaXMgQ1ZF IGRvZXNuJ3QgYXBwbHkgdG8gUG9zdGdyZVNRTC4NCg0KSWYgeW91IGFyZSB1c2luZyBhIHBh Y2thZ2UgdG8gaW5zdGFsbCBQb3N0Z3JlU1FMIChhcyBpdCBzb3VuZHMgbGlrZSB5b3UgDQph cmUpLCB5b3UnbGwgbmVlZCB0byByZWFjaCBvdXQgdG8gdGhlIHBhY2thZ2UgbWFpbnRhaW5l cnMuDQoNCkpvbmF0aGFuDQoNCg== --------------NEIojQFv7n5T2i6CUs7g53f4-- --------------aRah5b9sbg0o0n4aAEJYdxag Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEE+oS2la8r95ogZD/x8QSccp8cZScFAmYhV5MFAwAAAAAACgkQ8QSccp8cZScJ +xAApPV+w4AT6n9Bj4EBmumOQQVlxW7XW+PzWd6ItUlQNcTF31ztDBNG7/JAL1TlTvhBfwpRUzPR dn/dY8oqkITrXoJnOwG40qEuqGzhk6qlojziFDQS71AH21LO+3U6zf3v2f4ktJP1Cd280JkmZkwo SaUGpFmXpHDHEhzbjdTsP2N2oYHuTMAkCKM86Kv2mtvJbn6KczuJ4jHak3SxZa8tgzvg2FV6AJkX dzVPS5LBndM2v4f1kiaIP05yfm1dT3ssAAsN3Em+nORbufaKbpVloU8hMQo4ldPApOqe5XALHHME Nh344dWYC/DIEh0GUwmwjK9Zp36RNLYMjl/vM3PGNXiMr6BawCQbnWdC/4XamABLn83v3tA4xfD7 4f6gDTql9dBwm8D3K05HSJjhA+HdCQ/5C4lUF4Wbk+atNbV+XMEPlc67Vr9tW2NFpNH2Atac0NJG u9HeuWddrAiKtixN2OO4t4uWMF0Q5X7Ppw/GbxFnh88UpnBP9jkgONulPijftA8GJEZYxcbkJN8W o5TudAg1tNGvYUM9PEIKovRZPoU6Ev5lyKq6Htwk4xcNhVpYknlcUsrFgPOvgrt4xE+563xtE66c mXTeamnj8NPCTwwUtf0A8d4OaEZLpgA2CKLHgZCmUI/BObSWTSh6XVHl1Wdrtv9XCmR7Cu2IWGN8 H2k= =uXsO -----END PGP SIGNATURE----- --------------aRah5b9sbg0o0n4aAEJYdxag--