Обсуждение: PostgreSQL security release 7.2.2 hasn't been announced on pgsql-announce
PostgreSQL security release 7.2.2 hasn't been announced on pgsql-announce
От
Aleksander Adamowski
Дата:
That's a serious issue. Like many other admins, I rely on announce
mailing lists for all the daemons I run on my servers, to be informed
about fixed security problems in new releases.
On the Postgres announce list I get plenty of release information about
PgSQL-related projects, but the most important thing - a security
release from 2002-Aug-24 - is not there.
I've only today (5 days after the fact!) noticed a message on a Mandrake
Linux mailing list that informed me about this security release.
What's the use of an announce list if it doesn't announce new releases?
Best Regards,
--
Olo
GG#: 274614
ICQ UIN: 19780575
http://olo.office.altkom.com.pl
Aleksander Adamowski <olo@altkom.com.pl> writes: > What's the use of an announce list if it doesn't announce new releases? It did, according to the archives: http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php However, I see from my mail logs that I never got a copy of that. I am subscribed (just checked majordomo), and given that you have a similar complaint it would seem pgsql-announce is pretty lossy. Marc, any ideas? regards, tom lane
I received the announcement today, seems it was stuck somewhere:
>From pgsql-announce-owner+M187@postgresql.org Thu Aug 29 13:48:26 2002
Return-Path: <pgsql-announce-owner+M187@postgresql.org>
Received: from internet.csl.co.uk by euphrates.csl.co.uk (8.9.3/ConceptI 2.4)
id NAA11884; Thu, 29 Aug 2002 13:48:25 +0100 (BST)
Received: from postgresql.org (postgresql.org [64.49.215.8])
by internet.csl.co.uk (8.12.6/8.12.6) with ESMTP id g7TCmN9m025305
for <lkindness@csl.co.uk>; Thu, 29 Aug 2002 13:48:24 +0100
Received: from localhost (postgresql.org [64.49.215.8])
by postgresql.org (Postfix) with ESMTP
id 9A603476776; Thu, 29 Aug 2002 08:40:20 -0400 (EDT)
Received: from postgresql.org (postgresql.org [64.49.215.8])
by postgresql.org (Postfix) with SMTP
id 0DE58476812; Thu, 29 Aug 2002 08:38:55 -0400 (EDT)
Received: from localhost (postgresql.org [64.49.215.8])
by postgresql.org (Postfix) with ESMTP
id 78E2B475A69; Fri, 23 Aug 2002 23:22:19 -0400 (EDT)
Received: from earth.hub.org (earth.hub.org [64.49.215.11])
by postgresql.org (Postfix) with ESMTP
id 0DC75475A19; Fri, 23 Aug 2002 23:22:19 -0400 (EDT)
Received: from earth.hub.org (earth.hub.org [64.49.215.11])
by earth.hub.org (Postfix) with ESMTP
id 7A11B2CCAB2; Sat, 24 Aug 2002 00:22:17 -0300 (ADT)
Message-ID: <20020824000845.Q1769-100000@mail1.hub.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Virus-Scanned: by AMaViS new-20020517
Precedence: bulk
X-Virus-Scanned: by AMaViS new-20020517
Content-Length: 1153
From: "Marc G. Fournier" <scrappy@hub.org>
Sender: pgsql-announce-owner@postgresql.org
To: pgsql-announce@postgresql.org
Cc: freebsd-databases@freebsd.org, <pgsql-general@postgresql.org>,
Vince Vielhaber <vev@michvhf.com>
Subject: [ANNOUNCE] PostgreSQL 7.2.2: Security Release
Date: Sat, 24 Aug 2002 00:22:17 -0300 (ADT)
Lee.
Tom Lane writes:
> Aleksander Adamowski <olo@altkom.com.pl> writes:
> > What's the use of an announce list if it doesn't announce new releases?
>
> It did, according to the archives:
>
> http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php
>
> However, I see from my mail logs that I never got a copy of that.
> I am subscribed (just checked majordomo), and given that you have
> a similar complaint it would seem pgsql-announce is pretty lossy.
>
> Marc, any ideas?
>
> regards, tom lane
>
> ---------------------------(end of broadcast)---------------------------
> TIP 2: you can get off all lists at once with the unregister command
> (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)
I received the announcement today, seems it was stuck somewhere:
From pgsql-announce-owner+M187@postgresql.org Thu Aug 29 13:48:26 2002
Return-Path: <pgsql-announce-owner+M187@postgresql.org>
Received: from internet.csl.co.uk by euphrates.csl.co.uk (8.9.3/ConceptI 2.4)
id NAA11884; Thu, 29 Aug 2002 13:48:25 +0100 (BST)
Received: from postgresql.org (postgresql.org [64.49.215.8])
by internet.csl.co.uk (8.12.6/8.12.6) with ESMTP id g7TCmN9m025305
for <lkindness@csl.co.uk>; Thu, 29 Aug 2002 13:48:24 +0100
Received: from localhost (postgresql.org [64.49.215.8])
by postgresql.org (Postfix) with ESMTP
id 9A603476776; Thu, 29 Aug 2002 08:40:20 -0400 (EDT)
Received: from postgresql.org (postgresql.org [64.49.215.8])
by postgresql.org (Postfix) with SMTP
id 0DE58476812; Thu, 29 Aug 2002 08:38:55 -0400 (EDT)
Received: from localhost (postgresql.org [64.49.215.8])
by postgresql.org (Postfix) with ESMTP
id 78E2B475A69; Fri, 23 Aug 2002 23:22:19 -0400 (EDT)
Received: from earth.hub.org (earth.hub.org [64.49.215.11])
by postgresql.org (Postfix) with ESMTP
id 0DC75475A19; Fri, 23 Aug 2002 23:22:19 -0400 (EDT)
Received: from earth.hub.org (earth.hub.org [64.49.215.11])
by earth.hub.org (Postfix) with ESMTP
id 7A11B2CCAB2; Sat, 24 Aug 2002 00:22:17 -0300 (ADT)
Message-ID: <20020824000845.Q1769-100000@mail1.hub.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Virus-Scanned: by AMaViS new-20020517
Precedence: bulk
X-Virus-Scanned: by AMaViS new-20020517
Content-Length: 1153
From: "Marc G. Fournier" <scrappy@hub.org>
Sender: pgsql-announce-owner@postgresql.org
To: pgsql-announce@postgresql.org
Cc: freebsd-databases@freebsd.org, <pgsql-general@postgresql.org>,
Vince Vielhaber <vev@michvhf.com>
Subject: [ANNOUNCE] PostgreSQL 7.2.2: Security Release
Date: Sat, 24 Aug 2002 00:22:17 -0300 (ADT)
Lee.
Tom Lane writes:
> Aleksander Adamowski <olo@altkom.com.pl> writes:
> > What's the use of an announce list if it doesn't announce new releases?
>
> It did, according to the archives:
>
> http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php
>
> However, I see from my mail logs that I never got a copy of that.
> I am subscribed (just checked majordomo), and given that you have
> a similar complaint it would seem pgsql-announce is pretty lossy.
>
> Marc, any ideas?
>
> regards, tom lane
>
> ---------------------------(end of broadcast)---------------------------
> TIP 2: you can get off all lists at once with the unregister command
> (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)
> Tom Lane writes: >>> However, I see from my mail logs that I never got a copy of that. I have to take that back; I was grepping for ANNOUNCE and missed this log entry: Subject: [GENERAL] PostgreSQL 7.2.2: Security Release Apparently the announcement was cross-posted between -announce and -general, and my copy got delivered with the GENERAL tag. So, I withdraw the "lossy" complaint, and substitute a new one: Marc, would it be possible for the archives to show the full To: line of postings? If it had been visible at http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php that the posting was cross-posted to -general, I would have thought to check both tags. regards, tom lane
Tom Lane wrote: > > Tom Lane writes: > >>> However, I see from my mail logs that I never got a copy of that. > > I have to take that back; I was grepping for ANNOUNCE and missed > this log entry: > > Subject: [GENERAL] PostgreSQL 7.2.2: Security Release > > Apparently the announcement was cross-posted between -announce and > -general, and my copy got delivered with the GENERAL tag. Yes, but you have the 'duplicate remove' setting in your majordomo settings. Did it actually appear in Announce? Seems one person is reporting it just appeared today. -- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610) 359-1001 + If your life is a hard drive, | 13 Roberts Road + Christ can be your backup. | Newtown Square, Pennsylvania 19073
Tom Lane wrote: >So, I withdraw the "lossy" complaint, and substitute a new one: >Marc, would it be possible for the archives to show the full To: line >of postings? If it had been visible at >http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php >that the posting was cross-posted to -general, I would have thought >to check both tags. > > I had looked at announce archive today morning before I've posted to bugs (to see if it's a problem with my mail server or Postgres') and the announcement wasn't in the archive. Now it is.