Re: Post-CVE Wishlist

Поиск
Список
Период
Сортировка
От Robert Haas
Тема Re: Post-CVE Wishlist
Дата
Msg-id CA+TgmoaauW4abqkZ-zbmMu+3ALjjUcb0uYQmwV43nb7ZMRsFKg@mail.gmail.com
обсуждение исходный текст
Ответ на Re: Post-CVE Wishlist  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
On Wed, Nov 24, 2021 at 3:14 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
> Robert Haas <robertmhaas@gmail.com> writes:
> > On Wed, Nov 24, 2021 at 2:53 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
> >> One other point to be made here is that it seems like a stretch to call
> >> these particular bugs "high-severity".
>
> > Well, I was referring to the CVSS score, which was in the "high" range.
>
> The server CVE is; the client CVE, not so much, precisely because we
> couldn't find exciting exploits.

Right, I understand that.

-- 
Robert Haas
EDB: http://www.enterprisedb.com



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: Post-CVE Wishlist
Следующее
От: Chapman Flack
Дата:
Сообщение: internal subtransactions, memory contexts, resource owners