public inbox for [email protected]
help / color / mirror / Atom feedFrom: Ferindo Middleton Jr <[email protected]>
To: Tom Lane <[email protected]>
Cc: [email protected]
Cc: [email protected]
Cc: [email protected]
Subject: Re: BUG #2052: Federal Agency Tech Hub Refuses to Accept
Date: Mon, 21 Nov 2005 19:00:15 -0500
Message-ID: <[email protected]> (raw)
In-Reply-To: <[email protected]>
References: <[email protected]>
<[email protected]>
Tom Lane wrote:
> "Ferindo Middleton" <[email protected]> writes:
>
>> This bug report involves more than one proposed bug. I work at a federal
>> government agency. The information technology division at this agency
>> refuses to allow the database version 8.0.4 on their network because of
>> several security vulnerabilities they noticed when testing the software
>> application.
>>
>
> They obviously haven't "tested" anything --- they are merely reading the
> CVE reports for old Postgres versions. All known CVE problems are
> resolved in 8.0.4.
>
> (If they were actually serious about security, they wouldn't be letting
> you run Windows 2000 inside their network, but I digress.)
>
> regards, tom lane
>
>
Thanks for your support with this. I had presented the IT support team
at this agency with the information you all provided that these
CVEs/bugs were resolved in previous versions to 8.0.4 and they suddenly
argued that it wasn’t the CVE’s that were the problem (without admitting
that they never really tested 8.0.4 in the first place)… I’m sorry if I
wasted anybody’s time or irritated anyone by assuming that these bugs
were actually valid in 8.0.4… I’m starting to get tied up in a bunch of
bureaucratic tape dealing with these people. I think their just scared
of having to deal with the support overhead they think they'll have to
assume if they introduce another DBMS on their network…
Thank you,
Ferindo Middleton
view thread (16+ messages) latest in thread
reply
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: [email protected]
Cc: [email protected], [email protected], [email protected], [email protected], [email protected]
Subject: Re: BUG #2052: Federal Agency Tech Hub Refuses to Accept
In-Reply-To: <[email protected]>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox