Release of CVEs

Поиск
Список
Период
Сортировка
От Greg Sabino Mullane
Тема Release of CVEs
Дата
Msg-id 20151011115453.GB11699@broken.home
обсуждение исходный текст
Ответы Re: Release of CVEs  (Michael Paquier <michael.paquier@gmail.com>)
Список pgsql-hackers
The release notes for the new version reference some CVEs that
have not been publically released yet. Are they slow, or is
this something that needs to be added to the release
process checklist?

For example, see the CVE hyperlink for json parsing at:

https://bucardo.org/postgres_all_versions.html#version_9.4.5

which leads to:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5289

It's also possible the wrong CVE was entered, but I don't see
one that seems to pertain to the issue described (and
CVE-2015-5288, -3166, -3167, -0243, -0244 are in the same boat).

--
Greg Sabino Mullane greg@endpoint.com
End Point Corporation
PGP Key: 0x14964AC8

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Amir Rohan
Дата:
Сообщение: Re: Re: In-core regression tests for replication, cascading, archiving, PITR, etc.
Следующее
От: Jinyu
Дата:
Сообщение: Re: Improve the concurency of vacuum full table and select statement on the same relation