MIME-Version: 1.0
References: <CAONZJQkaLtHeNz3P5wO8-EWPjOJ1M5fgyp8x4Mc4bb_U9n9_6g@mail.gmail.com>
 <7b5846ac-c16e-48d3-b548-99a772a528c5@aklaver.com> <CAD=40Z3G8z6d1BMDmQVAAPWzCzK5kbU9wWTCZA58qmq8-L=eoA@mail.gmail.com>
 <CAKFQuwbW-5yyVPCjyTJ0uwZZvn9J94s1XzuFnoBbMXp3BC3XyQ@mail.gmail.com>
 <CAD=40Z2+84YNSM7oMb4QBpuAaadk=9XRw3PGEu5Ui_YsWpmtFA@mail.gmail.com>
 <6c898e6499036ce70ac113b52df5c3ff06286a6a.camel@cybertec.at>
 <Z0A6Eg2FH2Nb5sWO@pureos> <6bcf33ea-f856-41d0-912e-9468dbf3af13@cloud.gatewaynet.com>
In-Reply-To: <6bcf33ea-f856-41d0-912e-9468dbf3af13@cloud.gatewaynet.com>
From: Ron Johnson <ronljohnsonjr@gmail.com>
Date: Fri, 22 Nov 2024 04:18:02 -0500
Message-ID: <CANzqJaDVzQu2-44WRW-8wSw9bP9CSjAwe34+PKdt9Q86vYr3Rg@mail.gmail.com>
Subject: Re: CVE-2024-10979 Vulnerability Impact on PostgreSQL 11.10
To: "pgsql-generallists.postgresql.org" <pgsql-general@lists.postgresql.org>
Content-Type: multipart/alternative; boundary="000000000000c9c86606277cdc6a"
Archived-At: <https://www.postgresql.org/message-id/CANzqJaDVzQu2-44WRW-8wSw9bP9CSjAwe34%2BPKdt9Q86vYr3Rg%40mail.gmail.com>
Precedence: bulk

--000000000000c9c86606277cdc6a
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Fri, Nov 22, 2024 at 4:01=E2=80=AFAM Achilleas Mantzios - cloud <
a.mantzios@cloud.gatewaynet.com> wrote:

>
> On 11/22/24 10:00, Matthias Apitz wrote:
>
[snip]

>
> Why not decouple client libs from the server ? i.e. psql works great
> with many versions greater than its own. And certainly with same major
> versions. You could retain the same client libs and just upgrade the
> PgSQL server to the highest minor version of the major version that you
> support.
>

Small VARs that sell turnkey solutions would rather bundle everything
together.  One application version, one database version, one OS version,
one set of hardware, all bundled up and sold to a tech-illiterate customer
that doesn't employ a DBA or SysAdmin.  That way, when something
stops working, you aren't guessing if it's this patch, that patch, etc etc.

Not saying that Matthias works for such a VAR, but such companies
definitely exist.

--=20
Death to <Redacted>, and butter sauce.
Don't boil me, I'm still alive.
<Redacted> lobster!

--000000000000c9c86606277cdc6a
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">On Fri, Nov 22, 2024 at 4:01=E2=80=AFAM A=
chilleas Mantzios - cloud &lt;<a href=3D"mailto:a.mantzios@cloud.gatewaynet=
.com">a.mantzios@cloud.gatewaynet.com</a>&gt; wrote:</div><div class=3D"gma=
il_quote"><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8=
ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><br>
On 11/22/24 10:00, Matthias Apitz wrote:<br></blockquote><div>[snip]=C2=A0<=
/div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bo=
rder-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
Why not decouple client libs from the server ? i.e. psql works great <br>
with many versions greater than its own. And certainly with same major <br>
versions. You could retain the same client libs and just upgrade the <br>
PgSQL server to the highest minor version of the major version that you <br=
>
support.<br>
</blockquote></div><div><br clear=3D"all"></div><div>Small VARs that sell t=
urnkey solutions would rather bundle everything together.=C2=A0 One applica=
tion version, one database version, one OS version, one set of hardware, al=
l bundled up and sold to a tech-illiterate customer that doesn&#39;t employ=
 a DBA or SysAdmin.=C2=A0 That way, when something stops=C2=A0working, you =
aren&#39;t guessing if it&#39;s this patch, that patch, etc etc.</div><div>=
<br></div><div>Not saying that Matthias works for such a VAR, but such comp=
anies definitely exist.</div><div><br></div><span class=3D"gmail_signature_=
prefix">-- </span><br><div dir=3D"ltr" class=3D"gmail_signature"><div dir=
=3D"ltr">Death to &lt;Redacted&gt;, and butter sauce.<div>Don&#39;t boil me=
, I&#39;m still alive.<br><div><div>&lt;Redacted&gt; lobster!</div></div></=
div></div></div></div>

--000000000000c9c86606277cdc6a--