From: Tom Lane <tgl@sss.pgh.pa.us>
To: Roberto C. Sánchez <roberto@debian.org>
Cc: pgsql-hackers@lists.postgresql.org
Subject: Re: Request for assistance to backport CVE-2022-1552 fixes to 9.6 and 9.4
Date: Wed, 08 Jun 2022 16:15:47 -0400
Message-ID: <1740804.1654719347@sss.pgh.pa.us> (raw)
In-Reply-To: <YqDIdN1nn6wS8+tZ@connexer.com>
References: <YqDIdN1nn6wS8+tZ@connexer.com>
Roberto =?iso-8859-1?Q?C=2E_S=E1nchez?= <roberto@debian.org> writes:
> I am investigating backporting the fixes for CVE-2022-1552 to 9.6 and
> 9.4 as part of Debian LTS and Extended LTS. I am aware that these
> releases are no longer supported upstream, but I have made an attempt at
> adapting commits ef792f7856dea2576dcd9cab92b2b05fe955696b and
> f26d5702857a9c027f84850af48b0eea0f3aa15c from the REL_10_STABLE branch.
> I would appreciate a review of the attached patches and any comments on
> things that may have been missed and/or adapted improperly.
FWIW, I would not recommend being in a huge hurry to back-port those
changes, pending the outcome of this discussion:
https://www.postgresql.org/message-id/flat/f8a4105f076544c180a87ef0c4822352%40stmuk.bayern.de
We're going to have to tweak that code somehow, and it's not yet
entirely clear how.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: tgl@sss.pgh.pa.us, roberto@debian.org, pgsql-hackers@lists.postgresql.org
Subject: Re: Request for assistance to backport CVE-2022-1552 fixes to 9.6 and 9.4
In-Reply-To: <1740804.1654719347@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox