MIME-Version: 1.0
References: <SA1PR02MB969837F0BEDE8CD64AE703958ECA2@SA1PR02MB9698.namprd02.prod.outlook.com>
 <b76f0f54cbf8bd4ebe84eecea44168f23fcc2074.camel@cybertec.at> <14fc085b-1d48-4bc0-9d44-1d11507c0ded@bmc.com>
In-Reply-To: <14fc085b-1d48-4bc0-9d44-1d11507c0ded@bmc.com>
From: Greg Sabino Mullane <htamfids@gmail.com>
Date: Fri, 7 Mar 2025 08:24:57 -0500
Message-ID: <CAKAnmmJgHvPooiXZ5vzvONMWjcazg+Z4VEPrHW_NVFmUvYAX2g@mail.gmail.com>
Subject: Re: [EXTERNAL] Re: Asking for OK for a nasty trick to resolve PG
 CVE-2025-1094 i
To: "Abraham, Danny" <danny_abraham@bmc.com>
Cc: Laurenz Albe <laurenz.albe@cybertec.at>, 
	"pgsql-general@lists.postgresql.org" <pgsql-general@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="000000000000b9ad50062fc08ebc"
Archived-At: <https://www.postgresql.org/message-id/CAKAnmmJgHvPooiXZ5vzvONMWjcazg%2BZ4VEPrHW_NVFmUvYAX2g%40mail.gmail.com>
Precedence: bulk

--000000000000b9ad50062fc08ebc
Content-Type: text/plain; charset="UTF-8"

CVE-2025-1094 has a narrow blast radius. If you are not directly affected,
I would focus your efforts on getting to 17. But the lack of an existing
process to smoothly upgrade minor revisions is worrying and something that
needs to get addressed as well.

Cheers,
Greg

--
Crunchy Data - https://www.crunchydata.com
Enterprise Postgres Software Products & Tech Support

--000000000000b9ad50062fc08ebc
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">CVE-2025-1094 has a narrow blast radius. If you are not di=
rectly affected, I would focus your efforts on getting to 17. But the lack =
of an existing process to smoothly upgrade minor revisions is worrying and =
something that needs to get addressed as well.<div><br></div><div>Cheers,<b=
r>Greg<br><br>--<br>Crunchy Data - <a href=3D"https://www.crunchydata.com">=
https://www.crunchydata.com</a><br>Enterprise Postgres Software Products &a=
mp; Tech Support</div></div>

--000000000000b9ad50062fc08ebc--