public inbox for [email protected]  

help / color / mirror / Atom feed

From: Bruce Momjian <[email protected]>
To: Roberto C. Sánchez <[email protected]>
Cc: [email protected]
Subject: Re: Backport of CVE-2024-10978 fix to older pgsql versions (11, 9.6, and 9.4)
Date: Mon, 30 Dec 2024 22:25:14 -0500
Message-ID: <[email protected]> (raw)
In-Reply-To: <Z3Neui8ucbQ47MNy@localhost>
References: <Z15D7-HHXweXI2so@localhost>
	<Z3MVlEHp3yNutuHH@localhost>
	<[email protected]>
	<Z3Neui8ucbQ47MNy@localhost>

On Mon, Dec 30, 2024 at 10:02:18PM -0500, Roberto C. Sánchez wrote:
> Do you mean that branches for releases which are EOL are not looked at?
> I understand that completely. What I was hoping for here was that
> someone who was familiar with the old code might be able to look at my
> analysis and either confirm that my conclusion is correct (the behavior
> affected by the regression in the first commit was only introduced after
> 9.4) or not.
> 
> I did my best to structure my request in such a way that it would only
> entail minimal effort to answer, assuming that it was viewed by someone
> who had worked on those parts of the code that far back in the past.

Agreed.

> As far as the five year support timeframe, that is amazing and much
> more robust than many (most?) projects. Especially considering the size
> and pace of development here. We do have a small (paid) team that tries
> to support a specific subset of packages going back longer than 5 years.
> 
> If my request is not reasonable or somehow inappropriate, then please
> consider it withdrawn.

I think it is good you are asking --- I just don't know if anyone can
help.

-- 
  Bruce Momjian  <[email protected]>        https://momjian.us
  EDB                                      https://enterprisedb.com

  Do not let urgent matters crowd out time for investment in the future.

view thread (10+ messages)  latest in thread

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected]
  Subject: Re: Backport of CVE-2024-10978 fix to older pgsql versions (11, 9.6, and 9.4)
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox