From: "Abraham, Danny" <danny_abraham@bmc.com>
To: "pgsql-performance@lists.postgresql.org"
	<pgsql-performance@lists.postgresql.org>
CC: "Abraham, Danny" <danny_abraham@bmc.com>
Subject: Asking for OK for a nasty trick to resolve PG CVE-2025-1094 i
Thread-Topic: Asking for OK for a nasty trick to resolve PG CVE-2025-1094 i
Thread-Index: AduOaq+oBG+0sgRgSkednXepiY1Y/A==
Date: Thu, 6 Mar 2025 07:39:17 +0000
Message-ID:
 <SA1PR02MB969837F0BEDE8CD64AE703958ECA2@SA1PR02MB9698.namprd02.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
 =?us-ascii?Q?GUBebIDbtPPWqLpFV5iqY8oBi2X/27ejcBmD/MdonpTTZrU4z1MMzsjFuCWL?=
 =?us-ascii?Q?1x0A06z9UcFjryuS3oc2vu0QxvlD8MtrXtOWAcwnb4oKFgG6wlavVZoOf6Up?=
 =?us-ascii?Q?RWbumVfyJIlkhettTV795PMz3j/IkmW+kXz8bp4cXd0zAneQqRec2qckbJMu?=
 =?us-ascii?Q?XzSG4StN3kce6TfmENJycyNFRoTnxDGJ042bNy6zZLm9oH1VTRJhkiHg6h8b?=
 =?us-ascii?Q?nS4JiNcCRaXJ3tuH0V/x4KjO3exXiCZ9CKFymj1J05x8Zlg83bj9mqufwbmy?=
 =?us-ascii?Q?1kz7mdN8OlNeCu/YtUCKh+A0lRzRrMAI4iSoFlr4YHG41XrlNgIK2dfbrS0V?=
 =?us-ascii?Q?qXl05ZM8wWaj405QBVi0aeIhmTNWgYnRU1Vmx1fYSKm0ZUw/iBalQ/ark1Vv?=
 =?us-ascii?Q?Y0l/iJezKfaQnMMXjd/L0WSchYUJWjksEbTsGJYkE6y/aR3mB7KcE4Gwc/XE?=
 =?us-ascii?Q?ludv7v8EqAALZnLn1aFLOcSJ7G595Cbm+3DMxjY2X8W42w2JRdWBHVBuAlUy?=
 =?us-ascii?Q?0IwSfPaSgMWBebPmhNakA4tq+rSPNb58FPp4lefFjoAFPPP5sQsFgGp+kML7?=
 =?us-ascii?Q?y+JQ6St9yJWKPnQEHQ/TOjXmxk5vrtzEjkhjD5B6EfdhICAnNcBKxlcGJF6n?=
 =?us-ascii?Q?9fiHFHIjqQQJ8lMCcmQUU5pczbu7gx07D6daeEEb6KvAeciIE1hph7siqUff?=
 =?us-ascii?Q?7GU5Q7fSpOgahLOMlluICRCUauA9nOZ0wUBkDI8GEejBD5cnuoINBDCd3A5Q?=
 =?us-ascii?Q?77KiGtPOOS4VAcSHzVaLH5Q8g4JhqQFbl4X5mNC7KulAU1J4iG0eJV/2Mbns?=
 =?us-ascii?Q?gqZ1H/z85HJQWw7wROXW+MNvH2ymfgxFx5NSd4vE16YW3vipiGDX2gsZlf3S?=
 =?us-ascii?Q?Q4MRt7esozNds8BxpRvcbwo5xTcnDfIUpZp5i6emtehJWAdnE7VmRQ4Txu+E?=
 =?us-ascii?Q?veB8ijcFpl52ZIFpJOElsLyNQl9K6zGhgo802a4zgQKd7/Ud+cDrR5VIo/hc?=
 =?us-ascii?Q?t1G9K283zrGoZq7rGTELBCkeVeQvcauV82UCAUK1GtzPsmwdQoYesURadXuR?=
 =?us-ascii?Q?vgjXz0CzuH1v2l4l7VsopNT81x+3faC5+nSi7w3iwaxKipF4XBjX3wqWsYUP?=
 =?us-ascii?Q?nvZA4w9pWp99GrSaGsujLxDE+ETINWe3Kic0xhywYN0a9JfF4k1gM42r34iy?=
 =?us-ascii?Q?5OpJlO0nPPzG3DyPss0+W3usePyZYNbKxkDPqw49C5w8JdY/GbnXoOnyDCuF?=
 =?us-ascii?Q?AHJcsQbXskmLfkIO1xBLmxVUTkVbp8OuId+pATg40MsucCO+creyvYIOX0Us?=
 =?us-ascii?Q?EWJi+dkRBAn7kwc6nCv3aUxy8dTe6hhg0PDEsnlAslgiOQ6RsBmNjjbjNCNo?=
 =?us-ascii?Q?4jX1+rqfznQlj5DRGHUGKJrtWp6x1eOncB5KEdeBEDdXS9kmecQzBExqf9yt?=
 =?us-ascii?Q?xhm4stMSc9vXe8A/+k9x3tAvuhRWQAJdBYVXuga60MgokVRaS5gtuG3MBQpE?=
 =?us-ascii?Q?VmiMzzVET/wOJFLXHQPBFViHKHYMmxa291VHtZCVSGRd8amVyK4v9iNZevqb?=
 =?us-ascii?Q?wiQcNyosEws8xtDUkpc=3D?=
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: bmc.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: SA1PR02MB9698.namprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: b47f212a-decc-42b0-4ecb-08dd5c820080
X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Mar 2025 07:39:18.0035
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92b796c5-5839-40a6-8dd9-c1fad320c69b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: 9Vuku684Sg4ZG4LF3/MhZ20eWIbO9hrsqDBCBsRdSdBTlSgneEV53/eOntaJ8SeeH/5uUBnZFT0p0nyv+EiQJA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL3PR02MB8052
X-Authority-Analysis: v=2.4 cv=HtmMG1TS c=1 sm=1 tr=0 ts=67c95128 cx=c_pps a=Kq952KYlFoMAqHE57MuLQQ==:117 a=lCpzRmAYbLLaTzLvsPZ7Mbvzbb8=:19 a=wKuvFiaSGQ0qltdbU6+NXLB8nM8=:19 a=Ol13hO9ccFRV9qXi2t6ftBPywas=:19 a=Kqp1oTVpMCRLoH_f:21 a=xqWC_Br6kY4A:10
 a=kj9zAlcOel0A:10 a=Vs1iUdzkB0EA:10 a=uF0kXBFlZFoA:10 a=d3EI0Ksnvr7dlnRzR_cA:9 a=CjuIK1q_8ugA:10 a=iFS0Xi_KNk6JYoBecTCZ:22
X-Proofpoint-GUID: oCDbc3ykxeoQvN5--pKr6pwzB_pvXMhm
X-Proofpoint-ORIG-GUID: oCDbc3ykxeoQvN5--pKr6pwzB_pvXMhm
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.293,Aquarius:18.0.1093,Hydra:6.0.680,FMLib:17.12.68.34
 definitions=2025-03-06_03,2025-03-06_01,2024-11-22_01
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501
 suspectscore=0 bulkscore=0 spamscore=0 impostorscore=0 clxscore=1011
 malwarescore=0 phishscore=0 adultscore=0 mlxlogscore=385
 lowpriorityscore=0 mlxscore=0 classifier=spam authscore=0 authtc=n/a
 authcc= route=outbound adjust=0 reason=mlx scancount=1
 engine=8.19.0-2502100000 definitions=main-2503060056
List-Id: <pgsql-performance.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-performance@lists.postgresql.org>
List-Owner: <mailto:pgsql-performance-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-performance>
Archived-At: <https://www.postgresql.org/message-id/SA1PR02MB969837F0BEDE8CD64AE703958ECA2%40SA1PR02MB9698.namprd02.prod.outlook.com>
Precedence: bulk

Hi,

I have many customers using PG 15.3 happily, and I cannot just snap upgrade=
 them all to 15.12.

I have tested a nasty trick of replacing PSQL,LIBPQ and several other DLL's=
 so that I have a PG client 15.12 within the folders of Server 15.3.

All working just fine.

I plan to ship it as a patch - but would like to hear you opinion on this "=
merge".

(Of course, the next version will use PG 17.4, so this is just an SOS actio=
n).

Thanks

Danny=20
BMC Software


Directory of C:\Users\dbauser\Desktop\15.12

02/20/2025  11:48 AM         4,696,576 libcrypto-3-x64.dll
02/20/2025  11:48 AM         1,850,401 libiconv-2.dll
02/20/2025  11:48 AM           475,769 libintl-9.dll
02/20/2025  11:48 AM           323,584 libpq.dll
02/20/2025  11:48 AM           779,776 libssl-3-x64.dll
02/20/2025  11:48 AM            52,736 libwinpthread-1.dll
02/20/2025  11:48 AM           604,160 psql.exe


=3D=3D
C:\Program Files\BMC Software\Control-M Server\pgsql\bin>postgres -V
postgres (PostgreSQL) 15.3

C:\Program Files\BMC Software\Control-M Server\pgsql\bin>psql -V
psql (PostgreSQL) 15.12