Обсуждение: PostgreSQL security release 7.2.2 hasn't been announced on pgsql-announce
PostgreSQL security release 7.2.2 hasn't been announced on pgsql-announce
От
Aleksander Adamowski
Дата:
That's a serious issue. Like many other admins, I rely on announce mailing lists for all the daemons I run on my servers, to be informed about fixed security problems in new releases. On the Postgres announce list I get plenty of release information about PgSQL-related projects, but the most important thing - a security release from 2002-Aug-24 - is not there. I've only today (5 days after the fact!) noticed a message on a Mandrake Linux mailing list that informed me about this security release. What's the use of an announce list if it doesn't announce new releases? Best Regards, -- Olo GG#: 274614 ICQ UIN: 19780575 http://olo.office.altkom.com.pl
Aleksander Adamowski <olo@altkom.com.pl> writes: > What's the use of an announce list if it doesn't announce new releases? It did, according to the archives: http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php However, I see from my mail logs that I never got a copy of that. I am subscribed (just checked majordomo), and given that you have a similar complaint it would seem pgsql-announce is pretty lossy. Marc, any ideas? regards, tom lane
I received the announcement today, seems it was stuck somewhere: >From pgsql-announce-owner+M187@postgresql.org Thu Aug 29 13:48:26 2002 Return-Path: <pgsql-announce-owner+M187@postgresql.org> Received: from internet.csl.co.uk by euphrates.csl.co.uk (8.9.3/ConceptI 2.4) id NAA11884; Thu, 29 Aug 2002 13:48:25 +0100 (BST) Received: from postgresql.org (postgresql.org [64.49.215.8]) by internet.csl.co.uk (8.12.6/8.12.6) with ESMTP id g7TCmN9m025305 for <lkindness@csl.co.uk>; Thu, 29 Aug 2002 13:48:24 +0100 Received: from localhost (postgresql.org [64.49.215.8]) by postgresql.org (Postfix) with ESMTP id 9A603476776; Thu, 29 Aug 2002 08:40:20 -0400 (EDT) Received: from postgresql.org (postgresql.org [64.49.215.8]) by postgresql.org (Postfix) with SMTP id 0DE58476812; Thu, 29 Aug 2002 08:38:55 -0400 (EDT) Received: from localhost (postgresql.org [64.49.215.8]) by postgresql.org (Postfix) with ESMTP id 78E2B475A69; Fri, 23 Aug 2002 23:22:19 -0400 (EDT) Received: from earth.hub.org (earth.hub.org [64.49.215.11]) by postgresql.org (Postfix) with ESMTP id 0DC75475A19; Fri, 23 Aug 2002 23:22:19 -0400 (EDT) Received: from earth.hub.org (earth.hub.org [64.49.215.11]) by earth.hub.org (Postfix) with ESMTP id 7A11B2CCAB2; Sat, 24 Aug 2002 00:22:17 -0300 (ADT) Message-ID: <20020824000845.Q1769-100000@mail1.hub.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Virus-Scanned: by AMaViS new-20020517 Precedence: bulk X-Virus-Scanned: by AMaViS new-20020517 Content-Length: 1153 From: "Marc G. Fournier" <scrappy@hub.org> Sender: pgsql-announce-owner@postgresql.org To: pgsql-announce@postgresql.org Cc: freebsd-databases@freebsd.org, <pgsql-general@postgresql.org>, Vince Vielhaber <vev@michvhf.com> Subject: [ANNOUNCE] PostgreSQL 7.2.2: Security Release Date: Sat, 24 Aug 2002 00:22:17 -0300 (ADT) Lee. Tom Lane writes: > Aleksander Adamowski <olo@altkom.com.pl> writes: > > What's the use of an announce list if it doesn't announce new releases? > > It did, according to the archives: > > http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php > > However, I see from my mail logs that I never got a copy of that. > I am subscribed (just checked majordomo), and given that you have > a similar complaint it would seem pgsql-announce is pretty lossy. > > Marc, any ideas? > > regards, tom lane > > ---------------------------(end of broadcast)--------------------------- > TIP 2: you can get off all lists at once with the unregister command > (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)
I received the announcement today, seems it was stuck somewhere: From pgsql-announce-owner+M187@postgresql.org Thu Aug 29 13:48:26 2002 Return-Path: <pgsql-announce-owner+M187@postgresql.org> Received: from internet.csl.co.uk by euphrates.csl.co.uk (8.9.3/ConceptI 2.4) id NAA11884; Thu, 29 Aug 2002 13:48:25 +0100 (BST) Received: from postgresql.org (postgresql.org [64.49.215.8]) by internet.csl.co.uk (8.12.6/8.12.6) with ESMTP id g7TCmN9m025305 for <lkindness@csl.co.uk>; Thu, 29 Aug 2002 13:48:24 +0100 Received: from localhost (postgresql.org [64.49.215.8]) by postgresql.org (Postfix) with ESMTP id 9A603476776; Thu, 29 Aug 2002 08:40:20 -0400 (EDT) Received: from postgresql.org (postgresql.org [64.49.215.8]) by postgresql.org (Postfix) with SMTP id 0DE58476812; Thu, 29 Aug 2002 08:38:55 -0400 (EDT) Received: from localhost (postgresql.org [64.49.215.8]) by postgresql.org (Postfix) with ESMTP id 78E2B475A69; Fri, 23 Aug 2002 23:22:19 -0400 (EDT) Received: from earth.hub.org (earth.hub.org [64.49.215.11]) by postgresql.org (Postfix) with ESMTP id 0DC75475A19; Fri, 23 Aug 2002 23:22:19 -0400 (EDT) Received: from earth.hub.org (earth.hub.org [64.49.215.11]) by earth.hub.org (Postfix) with ESMTP id 7A11B2CCAB2; Sat, 24 Aug 2002 00:22:17 -0300 (ADT) Message-ID: <20020824000845.Q1769-100000@mail1.hub.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Virus-Scanned: by AMaViS new-20020517 Precedence: bulk X-Virus-Scanned: by AMaViS new-20020517 Content-Length: 1153 From: "Marc G. Fournier" <scrappy@hub.org> Sender: pgsql-announce-owner@postgresql.org To: pgsql-announce@postgresql.org Cc: freebsd-databases@freebsd.org, <pgsql-general@postgresql.org>, Vince Vielhaber <vev@michvhf.com> Subject: [ANNOUNCE] PostgreSQL 7.2.2: Security Release Date: Sat, 24 Aug 2002 00:22:17 -0300 (ADT) Lee. Tom Lane writes: > Aleksander Adamowski <olo@altkom.com.pl> writes: > > What's the use of an announce list if it doesn't announce new releases? > > It did, according to the archives: > > http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php > > However, I see from my mail logs that I never got a copy of that. > I am subscribed (just checked majordomo), and given that you have > a similar complaint it would seem pgsql-announce is pretty lossy. > > Marc, any ideas? > > regards, tom lane > > ---------------------------(end of broadcast)--------------------------- > TIP 2: you can get off all lists at once with the unregister command > (send "unregister YourEmailAddressHere" to majordomo@postgresql.org)
> Tom Lane writes: >>> However, I see from my mail logs that I never got a copy of that. I have to take that back; I was grepping for ANNOUNCE and missed this log entry: Subject: [GENERAL] PostgreSQL 7.2.2: Security Release Apparently the announcement was cross-posted between -announce and -general, and my copy got delivered with the GENERAL tag. So, I withdraw the "lossy" complaint, and substitute a new one: Marc, would it be possible for the archives to show the full To: line of postings? If it had been visible at http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php that the posting was cross-posted to -general, I would have thought to check both tags. regards, tom lane
Tom Lane wrote: > > Tom Lane writes: > >>> However, I see from my mail logs that I never got a copy of that. > > I have to take that back; I was grepping for ANNOUNCE and missed > this log entry: > > Subject: [GENERAL] PostgreSQL 7.2.2: Security Release > > Apparently the announcement was cross-posted between -announce and > -general, and my copy got delivered with the GENERAL tag. Yes, but you have the 'duplicate remove' setting in your majordomo settings. Did it actually appear in Announce? Seems one person is reporting it just appeared today. -- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610) 359-1001 + If your life is a hard drive, | 13 Roberts Road + Christ can be your backup. | Newtown Square, Pennsylvania 19073
Tom Lane wrote: >So, I withdraw the "lossy" complaint, and substitute a new one: >Marc, would it be possible for the archives to show the full To: line >of postings? If it had been visible at >http://archives.postgresql.org/pgsql-announce/2002-08/msg00004.php >that the posting was cross-posted to -general, I would have thought >to check both tags. > > I had looked at announce archive today morning before I've posted to bugs (to see if it's a problem with my mail server or Postgres') and the announcement wasn't in the archive. Now it is.