pg.ddx.io pgsql-performance@postgresql.org mailing list archive
help / color / mirror / Atom feedPostgres upgrade, security release, where?
10+ messages / 5 participants
[nested] [flat]
* Postgres upgrade, security release, where?
@ 2013-04-02 00:10 Tory M Blue <tmblue@gmail.com>
0 siblings, 1 reply; 10+ messages in thread
From: Tory M Blue @ 2013-04-02 00:10 UTC (permalink / raw)
To: pgsql-performance
So It was announced that there would be a security patch for all versions
released on the 4th. I see it's been announced/released on the website, but
the versions available show Feb dates.
Should the source be current? Or does it take a while for source and other
to be made available?
Figured if the site says released, it should be available.
Thanks
Tory
[image: postgresql-9.2.3.tar.bz2]<http://ftp.postgresql.org/pub/source/v9.2.3/postgresql-9.2.3.tar.bz2;
postgresql-9.2.3.tar.bz2<http://ftp.postgresql.org/pub/source/v9.2.3/postgresql-9.2.3.tar.bz2>2013-02-07
10:25:1015.6 MB [image:
postgresql-9.2.3.tar.bz2.md5]<http://ftp.postgresql.org/pub/source/v9.2.3/postgresql-9.2.3.tar.bz2.md5;
postgresql-9.2.3.tar.bz2.md5<http://ftp.postgresql.org/pub/source/v9.2.3/postgresql-9.2.3.tar.bz2.md5>2013-02-07
10:25:1059 bytes [image:
postgresql-9.2.3.tar.gz]<http://ftp.postgresql.org/pub/source/v9.2.3/postgresql-9.2.3.tar.gz;
postgresql-9.2.3.tar.gz<http://ftp.postgresql.org/pub/source/v9.2.3/postgresql-9.2.3.tar.gz>2013-02-07
10:25:1220.5 MB [image:
postgresql-9.2.3.tar.gz.md5]<http://ftp.postgresql.org/pub/source/v9.2.3/postgresql-9.2.3.tar.gz.md5;
postgresql-9.2.3.tar.gz.md5<http://ftp.postgresql.org/pub/source/v9.2.3/postgresql-9.2.3.tar.gz.md5>2013-02-07
10:25:1358 bytes
^ permalink raw reply [nested|flat] 10+ messages in thread
* Re: Postgres upgrade, security release, where?
@ 2013-04-02 00:27 Bruce Momjian <bruce@momjian.us>
parent: Tory M Blue <tmblue@gmail.com>
0 siblings, 1 reply; 10+ messages in thread
From: Bruce Momjian @ 2013-04-02 00:27 UTC (permalink / raw)
To: Tory M Blue <tmblue@gmail.com>; +Cc: pgsql-performance
On Mon, Apr 1, 2013 at 05:10:22PM -0700, Tory M Blue wrote:
> So It was announced that there would be a security patch for all versions
> released on the 4th. I see it's been announced/released on the website, but the
> versions available show Feb dates.
>
> Should the source be current? Or does it take a while for source and other to
> be made available?
>
> Figured if the site says released, it should be available.
>
> Thanks
> Tory
>
> postgresql-9.2.3.tar.bz2 2013-02-07 15.6
> postgresql-9.2.3.tar.bz2 10:25:10 MB
> postgresql-9.2.3.tar.bz2.md5 2013-02-07 59
> postgresql-9.2.3.tar.bz2.md5 10:25:10 bytes
> postgresql-9.2.3.tar.gz postgresql-9.2.3.tar.gz 2013-02-07 20.5
> 10:25:12 MB
> postgresql-9.2.3.tar.gz.md5 2013-02-07 58
> postgresql-9.2.3.tar.gz.md5 10:25:13 bytes
Due to the security nature of the release, the source and binaries will
only be publicly available on April 4 --- there are no pre-release
versions available.
--
Bruce Momjian <bruce@momjian.us> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ It's impossible for everything to be true. +
--
Sent via pgsql-performance mailing list (pgsql-performance@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-performance
^ permalink raw reply [nested|flat] 10+ messages in thread
* Re: Postgres upgrade, security release, where?
@ 2013-04-02 00:40 Ian Lawrence Barwick <barwick@gmail.com>
parent: Bruce Momjian <bruce@momjian.us>
0 siblings, 1 reply; 10+ messages in thread
From: Ian Lawrence Barwick @ 2013-04-02 00:40 UTC (permalink / raw)
To: Bruce Momjian <bruce@momjian.us>; +Cc: Tory M Blue <tmblue@gmail.com>; pgsql-performance
2013/4/2 Bruce Momjian <bruce@momjian.us>:
> On Mon, Apr 1, 2013 at 05:10:22PM -0700, Tory M Blue wrote:
>> So It was announced that there would be a security patch for all versions
>> released on the 4th. I see it's been announced/released on the website, but the
>> versions available show Feb dates.
>>
>> Should the source be current? Or does it take a while for source and other to
>> be made available?
>>
>> Figured if the site says released, it should be available.
>>
>> Thanks
>> Tory
>>
>> postgresql-9.2.3.tar.bz2 2013-02-07 15.6
>> postgresql-9.2.3.tar.bz2 10:25:10 MB
>> postgresql-9.2.3.tar.bz2.md5 2013-02-07 59
>> postgresql-9.2.3.tar.bz2.md5 10:25:10 bytes
>> postgresql-9.2.3.tar.gz postgresql-9.2.3.tar.gz 2013-02-07 20.5
>> 10:25:12 MB
>> postgresql-9.2.3.tar.gz.md5 2013-02-07 58
>> postgresql-9.2.3.tar.gz.md5 10:25:13 bytes
>
> Due to the security nature of the release, the source and binaries will
> only be publicly available on April 4 --- there are no pre-release
> versions available.
The PostgreSQL homepage has a big announcement saying
"PostgreSQL minor versions released!", including a mention of a
"security issue";
unfortunately it's not obvious that this is for the prior 9.2.3 release and as
the announcement of the upcoming security release
( http://www.postgresql.org/about/news/1454/ ) does not mention the
new release number, methinks there is plenty of room for confusion :(
It might be an idea to update the "splash box" with details of the upcoming
release.
Regards
Ian Barwick
--
Sent via pgsql-performance mailing list (pgsql-performance@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-performance
^ permalink raw reply [nested|flat] 10+ messages in thread
* Re: Postgres upgrade, security release, where?
@ 2013-04-02 00:55 Bruce Momjian <bruce@momjian.us>
parent: Ian Lawrence Barwick <barwick@gmail.com>
0 siblings, 2 replies; 10+ messages in thread
From: Bruce Momjian @ 2013-04-02 00:55 UTC (permalink / raw)
To: Ian Lawrence Barwick <barwick@gmail.com>; +Cc: Tory M Blue <tmblue@gmail.com>; pgsql-performance
On Tue, Apr 2, 2013 at 09:40:07AM +0900, Ian Lawrence Barwick wrote:
> > Due to the security nature of the release, the source and binaries will
> > only be publicly available on April 4 --- there are no pre-release
> > versions available.
>
> The PostgreSQL homepage has a big announcement saying
> "PostgreSQL minor versions released!", including a mention of a
> "security issue";
> unfortunately it's not obvious that this is for the prior 9.2.3 release and as
> the announcement of the upcoming security release
> ( http://www.postgresql.org/about/news/1454/ ) does not mention the
> new release number, methinks there is plenty of room for confusion :(
>
> It might be an idea to update the "splash box" with details of the upcoming
> release.
I agree updating the "spash box" would make sense.
--
Bruce Momjian <bruce@momjian.us> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ It's impossible for everything to be true. +
--
Sent via pgsql-performance mailing list (pgsql-performance@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-performance
^ permalink raw reply [nested|flat] 10+ messages in thread
* Re: Postgres upgrade, security release, where?
@ 2013-04-02 03:35 Tory M Blue <tmblue@gmail.com>
parent: Bruce Momjian <bruce@momjian.us>
1 sibling, 0 replies; 10+ messages in thread
From: Tory M Blue @ 2013-04-02 03:35 UTC (permalink / raw)
To: pgsql-performance
On Mon, Apr 1, 2013 at 5:55 PM, Bruce Momjian <bruce@momjian.us> wrote:
> On Tue, Apr 2, 2013 at 09:40:07AM +0900, Ian Lawrence Barwick wrote:
> > > Due to the security nature of the release, the source and binaries will
> > > only be publicly available on April 4 --- there are no pre-release
> > > versions available.
> >
> > The PostgreSQL homepage has a big announcement saying
> > "PostgreSQL minor versions released!", including a mention of a
> > "security issue";
> > unfortunately it's not obvious that this is for the prior 9.2.3 release
> and as
> > the announcement of the upcoming security release
> > ( http://www.postgresql.org/about/news/1454/ ) does not mention the
> > new release number, methinks there is plenty of room for confusion :(
> >
> > It might be an idea to update the "splash box" with details of the
> upcoming
> > release.
>
> >I agree updating the "spash box" would make sense.
>
Thanks all
My confusion was due to the fact that the other day there was a splash box
or other indication regarding the security fix release of April 4th and
when I went back today (just because), the message had changed citing there
was a security fix etc and no mention of a major fix coming in a few days.
My apologies for the confusion
Tory
^ permalink raw reply [nested|flat] 10+ messages in thread
* Re: Postgres upgrade, security release, where?
@ 2013-04-02 03:43 Mark Kirkwood <mark.kirkwood@catalyst.net.nz>
parent: Bruce Momjian <bruce@momjian.us>
1 sibling, 1 reply; 10+ messages in thread
From: Mark Kirkwood @ 2013-04-02 03:43 UTC (permalink / raw)
To: pgsql-performance
On 02/04/13 13:55, Bruce Momjian wrote:
> On Tue, Apr 2, 2013 at 09:40:07AM +0900, Ian Lawrence Barwick wrote:
>>> Due to the security nature of the release, the source and binaries will
>>> only be publicly available on April 4 --- there are no pre-release
>>> versions available.
>>
>> The PostgreSQL homepage has a big announcement saying
>> "PostgreSQL minor versions released!", including a mention of a
>> "security issue";
>> unfortunately it's not obvious that this is for the prior 9.2.3 release and as
>> the announcement of the upcoming security release
>> ( http://www.postgresql.org/about/news/1454/ ) does not mention the
>> new release number, methinks there is plenty of room for confusion :(
>>
>> It might be an idea to update the "splash box" with details of the upcoming
>> release.
>
> I agree updating the "spash box" would make sense.
>
Or perhaps include a date on said splashes, so we know when to panic :-)
--
Sent via pgsql-performance mailing list (pgsql-performance@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-performance
^ permalink raw reply [nested|flat] 10+ messages in thread
* Re: Postgres upgrade, security release, where?
@ 2013-04-02 08:34 Dave Page <dpage@pgadmin.org>
parent: Mark Kirkwood <mark.kirkwood@catalyst.net.nz>
0 siblings, 1 reply; 10+ messages in thread
From: Dave Page @ 2013-04-02 08:34 UTC (permalink / raw)
To: Mark Kirkwood <mark.kirkwood@catalyst.net.nz>; +Cc: pgsql-performance
On Mon, Apr 1, 2013 at 11:43 PM, Mark Kirkwood
<mark.kirkwood@catalyst.net.nz> wrote:
> On 02/04/13 13:55, Bruce Momjian wrote:
>>
>> On Tue, Apr 2, 2013 at 09:40:07AM +0900, Ian Lawrence Barwick wrote:
>>>>
>>>> Due to the security nature of the release, the source and binaries will
>>>> only be publicly available on April 4 --- there are no pre-release
>>>> versions available.
>>>
>>>
>>> The PostgreSQL homepage has a big announcement saying
>>> "PostgreSQL minor versions released!", including a mention of a
>>> "security issue";
>>> unfortunately it's not obvious that this is for the prior 9.2.3 release
>>> and as
>>> the announcement of the upcoming security release
>>> ( http://www.postgresql.org/about/news/1454/ ) does not mention the
>>> new release number, methinks there is plenty of room for confusion :(
>>>
>>> It might be an idea to update the "splash box" with details of the
>>> upcoming
>>> release.
>>
>>
>> I agree updating the "spash box" would make sense.
>>
>
> Or perhaps include a date on said splashes, so we know when to panic :-)
I've added the date to the splash. You can cease panicing now :-)
--
Dave Page
Blog: http://pgsnake.blogspot.com
Twitter: @pgsnake
EnterpriseDB UK: http://www.enterprisedb.com
The Enterprise PostgreSQL Company
--
Sent via pgsql-performance mailing list (pgsql-performance@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-performance
^ permalink raw reply [nested|flat] 10+ messages in thread
* Re: Postgres upgrade, security release, where?
@ 2013-04-02 08:47 Mark Kirkwood <mark.kirkwood@catalyst.net.nz>
parent: Dave Page <dpage@pgadmin.org>
0 siblings, 1 reply; 10+ messages in thread
From: Mark Kirkwood @ 2013-04-02 08:47 UTC (permalink / raw)
To: Dave Page <dpage@pgadmin.org>; +Cc: pgsql-performance
On 02/04/13 21:34, Dave Page wrote:
> On Mon, Apr 1, 2013 at 11:43 PM, Mark Kirkwood
> <mark.kirkwood@catalyst.net.nz> wrote:
>> On 02/04/13 13:55, Bruce Momjian wrote:
>>>
>>> On Tue, Apr 2, 2013 at 09:40:07AM +0900, Ian Lawrence Barwick wrote:
>>>>>
>>>>> Due to the security nature of the release, the source and binaries will
>>>>> only be publicly available on April 4 --- there are no pre-release
>>>>> versions available.
>>>>
>>>>
>>>> The PostgreSQL homepage has a big announcement saying
>>>> "PostgreSQL minor versions released!", including a mention of a
>>>> "security issue";
>>>> unfortunately it's not obvious that this is for the prior 9.2.3 release
>>>> and as
>>>> the announcement of the upcoming security release
>>>> ( http://www.postgresql.org/about/news/1454/ ) does not mention the
>>>> new release number, methinks there is plenty of room for confusion :(
>>>>
>>>> It might be an idea to update the "splash box" with details of the
>>>> upcoming
>>>> release.
>>>
>>>
>>> I agree updating the "spash box" would make sense.
>>>
>>
>> Or perhaps include a date on said splashes, so we know when to panic :-)
>
> I've added the date to the splash. You can cease panicing now :-)
>
...wipes forehead...
--
Sent via pgsql-performance mailing list (pgsql-performance@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-performance
^ permalink raw reply [nested|flat] 10+ messages in thread
* Re: Postgres upgrade, security release, where?
@ 2013-04-04 08:52 Mark Kirkwood <mark.kirkwood@catalyst.net.nz>
parent: Mark Kirkwood <mark.kirkwood@catalyst.net.nz>
0 siblings, 1 reply; 10+ messages in thread
From: Mark Kirkwood @ 2013-04-04 08:52 UTC (permalink / raw)
To: pgsql-performance
On 02/04/13 21:47, Mark Kirkwood wrote:
> On 02/04/13 21:34, Dave Page wrote:
>> On Mon, Apr 1, 2013 at 11:43 PM, Mark Kirkwood
>> <mark.kirkwood@catalyst.net.nz> wrote:
>>> On 02/04/13 13:55, Bruce Momjian wrote:
>>>>
>>>> On Tue, Apr 2, 2013 at 09:40:07AM +0900, Ian Lawrence Barwick wrote:
>>>>>>
>>>>>> Due to the security nature of the release, the source and binaries
>>>>>> will
>>>>>> only be publicly available on April 4 --- there are no pre-release
>>>>>> versions available.
>>>>>
>>>>>
>>>>> The PostgreSQL homepage has a big announcement saying
>>>>> "PostgreSQL minor versions released!", including a mention of a
>>>>> "security issue";
>>>>> unfortunately it's not obvious that this is for the prior 9.2.3
>>>>> release
>>>>> and as
>>>>> the announcement of the upcoming security release
>>>>> ( http://www.postgresql.org/about/news/1454/ ) does not mention the
>>>>> new release number, methinks there is plenty of room for confusion :(
>>>>>
>>>>> It might be an idea to update the "splash box" with details of the
>>>>> upcoming
>>>>> release.
>>>>
>>>>
>>>> I agree updating the "spash box" would make sense.
>>>>
>>>
>>> Or perhaps include a date on said splashes, so we know when to panic :-)
>>
>> I've added the date to the splash. You can cease panicing now :-)
>>
>
> ...wipes forehead...
>
Nice - but at the risk of seeming ungrateful, it would be good to know
what timezone said date referred to...in case people were waiting on an
important announcement or something... :-)
--
Sent via pgsql-performance mailing list (pgsql-performance@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-performance
^ permalink raw reply [nested|flat] 10+ messages in thread
* Re: Postgres upgrade, security release, where?
@ 2013-04-04 09:11 Ian Lawrence Barwick <barwick@gmail.com>
parent: Mark Kirkwood <mark.kirkwood@catalyst.net.nz>
0 siblings, 0 replies; 10+ messages in thread
From: Ian Lawrence Barwick @ 2013-04-04 09:11 UTC (permalink / raw)
To: Mark Kirkwood <mark.kirkwood@catalyst.net.nz>; +Cc: pgsql-performance
2013/4/4 Mark Kirkwood <mark.kirkwood@catalyst.net.nz>:
> On 02/04/13 21:47, Mark Kirkwood wrote:
>>
>> On 02/04/13 21:34, Dave Page wrote:
>>>
>>> On Mon, Apr 1, 2013 at 11:43 PM, Mark Kirkwood
>>> <mark.kirkwood@catalyst.net.nz> wrote:
>>>>
>>>> On 02/04/13 13:55, Bruce Momjian wrote:
>>>>>
>>>>>
>>>>> On Tue, Apr 2, 2013 at 09:40:07AM +0900, Ian Lawrence Barwick wrote:
>>>>>>>
>>>>>>>
>>>>>>> Due to the security nature of the release, the source and binaries
>>>>>>> will
>>>>>>> only be publicly available on April 4 --- there are no pre-release
>>>>>>> versions available.
>>>>>>
>>>>>>
>>>>>>
>>>>>> The PostgreSQL homepage has a big announcement saying
>>>>>> "PostgreSQL minor versions released!", including a mention of a
>>>>>> "security issue";
>>>>>> unfortunately it's not obvious that this is for the prior 9.2.3
>>>>>> release
>>>>>> and as
>>>>>> the announcement of the upcoming security release
>>>>>> ( http://www.postgresql.org/about/news/1454/ ) does not mention the
>>>>>> new release number, methinks there is plenty of room for confusion :(
>>>>>>
>>>>>> It might be an idea to update the "splash box" with details of the
>>>>>> upcoming
>>>>>> release.
>>>>>
>>>>>
>>>>>
>>>>> I agree updating the "spash box" would make sense.
>>>>>
>>>>
>>>> Or perhaps include a date on said splashes, so we know when to panic :-)
>>>
>>>
>>> I've added the date to the splash. You can cease panicing now :-)
>>>
>>
>> ...wipes forehead...
>>
>
> Nice - but at the risk of seeming ungrateful, it would be good to know what
> timezone said date referred to...in case people were waiting on an important
> announcement or something... :-)
I'm guessing somewhere around the start of the business day US time on their
east coast? Which means a late night for those of us on the early side of
the International Date Line (I'm in Japan). I'll want to at least find out what
the nature of the problem is before deciding whether I need to burn some
late-nite oil...
Regards
Ian Barwick
--
Sent via pgsql-performance mailing list (pgsql-performance@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-performance
^ permalink raw reply [nested|flat] 10+ messages in thread
end of thread, other threads:[~2013-04-04 09:11 UTC | newest]
Thread overview: 10+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2013-04-02 00:10 Postgres upgrade, security release, where? Tory M Blue <tmblue@gmail.com>
2013-04-02 00:27 ` Bruce Momjian <bruce@momjian.us>
2013-04-02 00:40 ` Ian Lawrence Barwick <barwick@gmail.com>
2013-04-02 00:55 ` Bruce Momjian <bruce@momjian.us>
2013-04-02 03:35 ` Tory M Blue <tmblue@gmail.com>
2013-04-02 03:43 ` Mark Kirkwood <mark.kirkwood@catalyst.net.nz>
2013-04-02 08:34 ` Dave Page <dpage@pgadmin.org>
2013-04-02 08:47 ` Mark Kirkwood <mark.kirkwood@catalyst.net.nz>
2013-04-04 08:52 ` Mark Kirkwood <mark.kirkwood@catalyst.net.nz>
2013-04-04 09:11 ` Ian Lawrence Barwick <barwick@gmail.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox