Date: Mon, 30 Dec 2024 16:50:12 -0500
From: Roberto =?iso-8859-1?Q?C=2E_S=E1nchez?= <roberto@debian.org>
To: pgsql-hackers@lists.postgresql.org
Subject: Re: Backport of CVE-2024-10978 fix to older pgsql versions (11, 9.6,
 and 9.4)
Message-ID: <Z3MVlEHp3yNutuHH@localhost>
References: <Z15D7-HHXweXI2so@localhost>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <Z15D7-HHXweXI2so@localhost>
Archived-At: <https://www.postgresql.org/message-id/Z3MVlEHp3yNutuHH%40localhost>
Precedence: bulk

On Sat, Dec 14, 2024 at 09:50:23PM -0500, Roberto C. Sánchez wrote:
> Greetings pgsql devs,
> 
> I would appreciate a review of my strategy for backporting the commits
> related to CVE-2024-10978. (I am working with versions 11, 9.6, and 9.4,
> for some older Debian releases.)
> 
> My conclusion is that of the two commits associated with CVE-2024-10978,
> both are required in 11 and 9.6, but only one is required in 9.4.
> 
I wonder if someone might be able to look at my original message and
help validate my analysis.

Regards,

-Roberto

-- 
Roberto C. Sánchez