Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wLFSy-001eRq-1s for pgsql-hackers@arkaria.postgresql.org; Fri, 08 May 2026 07:17:45 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1wLFSx-008Tcz-1W for pgsql-hackers@arkaria.postgresql.org; Fri, 08 May 2026 07:17:43 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wLFSw-008TcW-2Q for pgsql-hackers@lists.postgresql.org; Fri, 08 May 2026 07:17:43 +0000 Received: from fhigh-b6-smtp.messagingengine.com ([202.12.124.157]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1wLFSt-00000000lgi-3XLk for pgsql-hackers@lists.postgresql.org; Fri, 08 May 2026 07:17:41 +0000 Received: from phl-compute-05.internal (phl-compute-05.internal [10.202.2.45]) by mailfhigh.stl.internal (Postfix) with ESMTP id 751AB7A00AB; Fri, 8 May 2026 03:17:39 -0400 (EDT) Received: from phl-frontend-03 ([10.202.2.162]) by phl-compute-05.internal (MEProxy); Fri, 08 May 2026 03:17:39 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paquier.xyz; h= cc:cc:content-type:content-type:date:date:from:from:in-reply-to :in-reply-to:message-id:mime-version:references:reply-to:subject :subject:to:to; s=fm3; t=1778224659; x=1778311059; bh=msZAu5/Km5 /gYm19XOazt0HikjpO97Lvcj/KKWqfIXs=; b=a6QSxyzlLbGFSMoFLGXMWz83NZ E0MkL230EYfg5GmIq6RMjypjtbYJZXYLHcCI4lw0NvnAudzGE/9k33DpNmfb4yV9 BhLVNA5jwvCTyUyfteWuBUEk4UOAU/m3CaQr20iXPMD2zQdjpH1nd+/8jtaptkGf h5zFuqIyq1Jta7OLgv7Yy16l6I8vNuw43n5boV2l362feJ6bWTC3v6Zsg7hDzp/I /vJaE5PNZGhs32XPWuo0pTXUC7xj+MhZIrEKieXDz5b+kyiCCWTu3aCJVjYO9KVl qpEpelF9J0JW1rnwJdbgU0g3pfLFVxDqPiCkuJtPZ95BCseiP6opPWsZRzbw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1778224659; x=1778311059; bh=msZAu5/Km5/gYm19XOazt0HikjpO97Lvcj/ KKWqfIXs=; b=ipf/ttYgsEsvNp2zVzDkB7FEi0wUHHjV8IhTAMI52ZTr8wGcuHz fkjv5qToUdqnYNhDPDE/LJhkXMic5VreuJuO6SzSb8G0hJPzMki0J5wvjg69SzAG RWtITcJ7ybd7DhWrROf7Viaur13xdy2lZALIHNFYSCnugk/9dlLrfYx62gQCCBwA lpNto2ZELL6XoAta+URbnrKqlN64JzDmr42zBRJYruFZkLmaYJhCdXhQbSz1aICo Mz065pmY/FLRo7p+6SwctA10JZie2Zkg3SwrTBkllDkNK6CqCEYqK2hFJ4WKyRnS n+BzatfggcpG0f0S8sPkFOPqOeq852fDdkA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefhedrtddtgddutdeljeefucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfurfetoffkrfgpnffqhgenuceu rghilhhouhhtmecufedttdenuceurggutfgvphhuthdqgfhmrghilhculddutdejmdenuc fjughrpeffhffvvefukfhfgggtuggjsehgtderredttddvnecuhfhrohhmpefoihgthhgr vghlucfrrghquhhivghruceomhhitghhrggvlhesphgrqhhuihgvrhdrgiihiieqnecugg ftrfgrthhtvghrnhepteelieefudffhffhtdetleeggeegfffhkeeuveetiefgudduvedu tefggeeivdejnecuuegrugftvghpuhhtgfhmrghilhepmhhitghhrggvlhesphgrqhhuih gvrhdrgiihiienucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhr ohhmpehmihgthhgrvghlsehprghquhhivghrrdighiiipdhnsggprhgtphhtthhopeefpd hmohguvgepshhmthhpohhuthdprhgtphhtthhopegurghnihgvlheshigvshhqlhdrshgv pdhrtghpthhtohepthhglhesshhsshdrphhghhdrphgrrdhushdprhgtphhtthhopehpgh hsqhhlqdhhrggtkhgvrhhssehlihhsthhsrdhpohhsthhgrhgvshhqlhdrohhrgh X-ME-Proxy: Feedback-ID: i0fe9450f:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Fri, 8 May 2026 03:17:37 -0400 (EDT) Date: Fri, 8 May 2026 16:17:32 +0900 From: Michael Paquier To: Daniel Gustafsson Cc: Tom Lane , PostgreSQL-development Subject: Re: PostgreSQL and OpenSSL 4.0.0 Message-ID: References: <066B07BB-85FA-487C-BE8C-40F791CFC3C4@yesql.se> <65C5DC15-DE27-4D36-8AEE-A854C23B3834@yesql.se> <898414.1778192534@sss.pgh.pa.us> <1A5104C0-E9EF-4D90-9627-23D3D909104B@yesql.se> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="I2Hhxnk8ET7o4aJo" Content-Disposition: inline In-Reply-To: <1A5104C0-E9EF-4D90-9627-23D3D909104B@yesql.se> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --I2Hhxnk8ET7o4aJo Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, May 08, 2026 at 09:07:41AM +0200, Daniel Gustafsson wrote: > Not sure I follow, anyone still building with a X years out of support Op= enSSL > will most likely keep doing so regardless of what CVE's are published. It > could of course make backpatching trickier if thats what you mean? Argh. I've misread you here, reading a "lowest" rather than "highest". Documenting that 3.6 is the highest version support on=20 14-stable would also work here. My apologies for the confusion. If the patches for REL_14_STABLE to add support for 4.0 prove to be low-risk while messing with 1.0.1, that would the best course of action, of course. -- Michael --I2Hhxnk8ET7o4aJo Content-Type: application/pgp-signature; name=signature.asc -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEG72nH6vTowiyblFKnvQgOdbyQH0FAmn9jgwACgkQnvQgOdby QH2v0Q//X3/aXNkEoNBJ3gAiw9OGbBpQqOXNi52OdVKeKbXoLisHBi3maDNuivZL /gY1FKirEVswGU+pqGKGc4vWvlbAAiB1usdkuyWhsmHcAkJ8qOPWm0SA0OrsFWk0 e1OyeRNPdZhyts58L1Tibuwf+KpWx2tQcpwYyJtiVmi+c5r9pgR/vYbHhmhK4aTG vb5+y8T5D/JkZVDSTku5ZYvGo3BNSFOJBkVIazs82U22cZB5Cfbmd+Kc31C8sWB4 yAWtdnqJA+5Jbg/7JqU1/+rCEYi5LivKPWsuaV4InfAIgPAm7HZFD5M3yLkoG4sF 76BSZ0FdF9f7fDi8CY/eOU5i7/Ah6zvddTHdUsOAruRUAHGkCmDT0xxYs6K1mxq3 5ehDOitPdz0hDVI2GcGUPRCNsPFgymmpFyT0oBfMI24+5wyVD3/PwgcVyY4W6frG jkOFH0//oMqyRGQ9Vt2f8reuSudI9GlIJyw45GRkkMRFFMjWa9WCwRLfzuqVQo4b hi3ZhDfW/WQb9DH6nmGw5aVa2wHaA22AkKWClbABppg+mNdoLnPJk77uNeYbCvOw guFUwPJZGiHKp8jZiCWG37ViTo984Jas/A6GQ4Fp2XBI6MmqFjPJwaNW8guCe+2E 8juXjOXvnV0lQx4iKLAy7YHHroLxnbkw3LjNKouGY/OdC8bPVmQ= =1Dah -----END PGP SIGNATURE----- --I2Hhxnk8ET7o4aJo--