Date: Mon, 30 Dec 2024 22:25:14 -0500
From: Bruce Momjian <bruce@momjian.us>
To: Roberto =?utf-8?B?Qy4gU8OhbmNoZXo=?= <roberto@debian.org>
Cc: pgsql-hackers@lists.postgresql.org
Subject: Re: Backport of CVE-2024-10978 fix to older pgsql versions (11, 9.6,
 and 9.4)
Message-ID: <Z3NkGiJ19nf9h3TZ@momjian.us>
References: <Z15D7-HHXweXI2so@localhost>
 <Z3MVlEHp3yNutuHH@localhost>
 <Z3MXgpG64kYxefiG@momjian.us>
 <Z3Neui8ucbQ47MNy@localhost>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <Z3Neui8ucbQ47MNy@localhost>
Archived-At: <https://www.postgresql.org/message-id/Z3NkGiJ19nf9h3TZ%40momjian.us>
Precedence: bulk

On Mon, Dec 30, 2024 at 10:02:18PM -0500, Roberto C. Sánchez wrote:
> Do you mean that branches for releases which are EOL are not looked at?
> I understand that completely. What I was hoping for here was that
> someone who was familiar with the old code might be able to look at my
> analysis and either confirm that my conclusion is correct (the behavior
> affected by the regression in the first commit was only introduced after
> 9.4) or not.
> 
> I did my best to structure my request in such a way that it would only
> entail minimal effort to answer, assuming that it was viewed by someone
> who had worked on those parts of the code that far back in the past.

Agreed.

> As far as the five year support timeframe, that is amazing and much
> more robust than many (most?) projects. Especially considering the size
> and pace of development here. We do have a small (paid) team that tries
> to support a specific subset of packages going back longer than 5 years.
> 
> If my request is not reasonable or somehow inappropriate, then please
> consider it withdrawn.

I think it is good you are asking --- I just don't know if anyone can
help.

-- 
  Bruce Momjian  <bruce@momjian.us>        https://momjian.us
  EDB                                      https://enterprisedb.com

  Do not let urgent matters crowd out time for investment in the future.