MIME-Version: 1.0
References: <20260326183158.98.noahmisch@microsoft.com>
 <d569103d598c4293012257fb61209a9f88904552.camel@gunduz.org>
In-Reply-To: <d569103d598c4293012257fb61209a9f88904552.camel@gunduz.org>
From: Andrew Kane <andrew@ankane.org>
Date: Thu, 26 Mar 2026 13:32:13 -0700
Message-ID: 
 <CAOdR5yFoEM+72CE1w9RiD7E6_C0ngiRX=B6xysc0=L_vxEW4rQ@mail.gmail.com>
Subject: Re: /support/security scope += pgvector
To: =?UTF-8?B?RGV2cmltIEfDvG5kw7x6?= <devrim@gunduz.org>
Cc: Noah Misch <noah@leadboat.com>, pgsql-www@postgresql.org,
 cna@postgresql.org
Content-Type: multipart/mixed; boundary="00000000000082b36a064df3480f"
Archived-At: 
 <https://www.postgresql.org/message-id/CAOdR5yFoEM%2B72CE1w9RiD7E6_C0ngiRX%3DB6xysc0%3DL_vxEW4rQ%40mail.gmail.com>
Precedence: bulk

--00000000000082b36a064df3480f
Content-Type: multipart/alternative; boundary="00000000000082b369064df3480d"

--00000000000082b369064df3480d
Content-Type: text/plain; charset="UTF-8"

Thanks Noah and Devrim.

I think it'd be good to include reporting instructions as well like pgAdmin
(possible patch attached).

- Andrew

--00000000000082b369064df3480d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div>Thanks Noah and Devrim.</div><div><b=
r></div><div>I think it&#39;d be good to include reporting instructions as =
well like=C2=A0pgAdmin</div><div>(possible patch attached).</div><div><br><=
/div><div>- Andrew</div></div></div>

--00000000000082b369064df3480d--

--00000000000082b36a064df3480f
Content-Type: application/octet-stream;
	name="0001-Add-instructions-for-reporting-security-vulnerabilit.patch"
Content-Disposition: attachment;
	filename="0001-Add-instructions-for-reporting-security-vulnerabilit.patch"
Content-Transfer-Encoding: base64
Content-ID: <f_mn7x7o160>
X-Attachment-Id: f_mn7x7o160

RnJvbSA0OTBiZTBmNzk4ZmM3NGFkMWFkMThlMjdlMTI1YjA1ZDZiYWE0YmMyIE1vbiBTZXAgMTcg
MDA6MDA6MDAgMjAwMQpGcm9tOiBBbmRyZXcgS2FuZSA8YW5kcmV3QGFua2FuZS5vcmc+CkRhdGU6
IFRodSwgMjYgTWFyIDIwMjYgMTM6MTk6NTAgLTA3MDAKU3ViamVjdDogW1BBVENIXSBBZGQgaW5z
dHJ1Y3Rpb25zIGZvciByZXBvcnRpbmcgc2VjdXJpdHkgdnVsbmVyYWJpbGl0aWVzIGluCiBwZ3Zl
Y3RvcgoKLS0tCiB0ZW1wbGF0ZXMvc2VjdXJpdHkvc2VjdXJpdHkuaHRtbCB8IDQgKysrKwogMSBm
aWxlIGNoYW5nZWQsIDQgaW5zZXJ0aW9ucygrKQoKZGlmZiAtLWdpdCBhL3RlbXBsYXRlcy9zZWN1
cml0eS9zZWN1cml0eS5odG1sIGIvdGVtcGxhdGVzL3NlY3VyaXR5L3NlY3VyaXR5Lmh0bWwKaW5k
ZXggMjg3MzUwYzcuLmI4OTMwZWNiIDEwMDY0NAotLS0gYS90ZW1wbGF0ZXMvc2VjdXJpdHkvc2Vj
dXJpdHkuaHRtbAorKysgYi90ZW1wbGF0ZXMvc2VjdXJpdHkvc2VjdXJpdHkuaHRtbApAQCAtMTMy
LDYgKzEzMiwxMCBAQAogICAgIEZvciBzZWN1cml0eSB2dWxuZXJhYmlsaXRpZXMgaW4gPGEgaHJl
Zj0iaHR0cHM6Ly93d3cucGdhZG1pbi5vcmcvIj5wZ0FkbWluPC9hPiwKICAgICBwbGVhc2UgZW1h
aWwgPGEgaHJlZj0ibWFpbHRvOnNlY3VyaXR5QHBnYWRtaW4ub3JnIj5zZWN1cml0eUBwZ2FkbWlu
Lm9yZzwvYT4uCiAgIDwvbGk+CisgIDxsaT4KKyAgICBGb3Igc2VjdXJpdHkgdnVsbmVyYWJpbGl0
aWVzIGluIDxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9wZ3ZlY3Rvci9wZ3ZlY3Rvci8iPnBn
dmVjdG9yPC9hPiwKKyAgICBwbGVhc2UgZW1haWwgPGEgaHJlZj0ibWFpbHRvOnNlY3VyaXR5QHBn
dmVjdG9yLm9yZyI+c2VjdXJpdHlAcGd2ZWN0b3Iub3JnPC9hPi4KKyAgPC9saT4KICAgPGxpPgog
ICAgIElmIHlvdSB3aXNoIHRvIHJlcG9ydCBhIHNlY3VyaXR5IHZ1bG5lcmFiaWxpdHkgZm9yIGFu
eSBvdGhlciBvcGVuIHNvdXJjZSBwcm9qZWN0IGluCiAgICAgdGhlIFBvc3RncmVTUUwgZWNvc3lz
dGVtIChlLmcuIGEgZHJpdmVyLCBhbiBleHRlbnNpb24sIG9yIGFuIGluc3RhbGxlcikgYW5kCi0t
IAoyLjUyLjAKCg==
--00000000000082b36a064df3480f--