PostgreSQL Security Release

Started by The Hermit Hackerabout 21 years ago12 messagesgeneral
Jump to latest
#1The Hermit Hacker
scrappy@hub.org

In order to address a potential security hole recently identified with the
"LOAD" option, the PostgreSQL Global Development Group is announcing the
release of new versions of PostgreSQL going back to the 7.2.x version.

As always, these releases are available on all mirrors, as listed at:

http://wwwmaster.postgresql.org/download/mirrors-ftp

For those using Bittorrent, David Fetter has updated the .torrents, which
can be accessed from:

http://www.postgresql.org/download/bittorrent

----
Marc G. Fournier Hub.Org Networking Services (http://www.hub.org)
Email: scrappy@hub.org Yahoo!: yscrappy ICQ: 7615664

#2Geoffrey
esoteric@3times25.net
In reply to: The Hermit Hacker (#1)
Re: PostgreSQL Security Release

Marc G. Fournier wrote:

In order to address a potential security hole recently identified with
the "LOAD" option, the PostgreSQL Global Development Group is announcing
the release of new versions of PostgreSQL going back to the 7.2.x version.

I want to make sure I understand this post. Does this mean that the
patch will be included in all the source/binaries back to 7.2.x that are
available on the mirrors? Visiting the mirrors, I only see updates
reflected in the v.8.0.1 directory. Does this mean the patch is only
going to be found in that version?

--
Until later, Geoffrey

#3Peter Eisentraut
peter_e@gmx.net
In reply to: Geoffrey (#2)
Re: PostgreSQL Security Release

Geoffrey wrote:

I want to make sure I understand this post. Does this mean that the
patch will be included in all the source/binaries back to 7.2.x that
are available on the mirrors? Visiting the mirrors, I only see
updates reflected in the v.8.0.1 directory.

You must be using a broken mirror then.

--
Peter Eisentraut
http://developer.postgresql.org/~petere/

#4Geoffrey
esoteric@3times25.net
In reply to: Peter Eisentraut (#3)
Re: PostgreSQL Security Release

Peter Eisentraut wrote:

Geoffrey wrote:

I want to make sure I understand this post. Does this mean that the
patch will be included in all the source/binaries back to 7.2.x that
are available on the mirrors? Visiting the mirrors, I only see
updates reflected in the v.8.0.1 directory.

You must be using a broken mirror then.

Checked three. I'll look again.

--
Until later, Geoffrey

#5Richard Huxton
dev@archonet.com
In reply to: Geoffrey (#4)
Re: PostgreSQL Security Release

Geoffrey wrote:

Peter Eisentraut wrote:

Geoffrey wrote:

I want to make sure I understand this post. Does this mean that the
patch will be included in all the source/binaries back to 7.2.x that
are available on the mirrors? Visiting the mirrors, I only see
updates reflected in the v.8.0.1 directory.

You must be using a broken mirror then.

Checked three. I'll look again.

Some of the mirrors seem to take longer than others. The source folder
at ftp://ftp8.uk.postgresql.org/sites/ftp.postgresql.org/source/ has
7.4.7 in it and 7.3.9 and 7.2.7

Binaries may of course take a while, depending on how eager their
packagers are to update.
--
Richard Huxton
Archonet Ltd

#6Burak B&B
burakb44@hotmail.com
In reply to: The Hermit Hacker (#1)
delphi -> postgresql database connect ???

hi,
delphi to postgresql database connect commands and source code free download
. Please.
Tanks.

Burak B�T�K��

_________________________________________________________________
Yagmura yakalanmamak i�in sadece semsiyenize degil, MSN hava durumuna
g�venin! http://www.msn.com.tr/havadurumu/

#7Andrey V. Semyonov
wilfre@mail.ru
In reply to: The Hermit Hacker (#1)
Re: PostgreSQL Security Release

Marc G. Fournier wrote:

In order to address a potential security hole recently identified with
the "LOAD" option, the PostgreSQL Global Development Group is
announcing the release of new versions of PostgreSQL going back to the
7.2.x version.

As always, these releases are available on all mirrors...

I have never used PGSQL before 8.0.0 Release. So, make me understand
such a thing: do the developers team make any quick-patch sets for
patching source tree from 8.0.0 to 8.0.1 for example? Or do I need to
download the whole tarball of 8.0.1 from scratch?

#8The Hermit Hacker
scrappy@hub.org
In reply to: Andrey V. Semyonov (#7)
Re: PostgreSQL Security Release

On Wed, 2 Feb 2005, Andrey V. Semyonov wrote:

Marc G. Fournier wrote:

In order to address a potential security hole recently identified with the
"LOAD" option, the PostgreSQL Global Development Group is announcing the
release of new versions of PostgreSQL going back to the 7.2.x version.

As always, these releases are available on all mirrors...

I have never used PGSQL before 8.0.0 Release. So, make me understand such a
thing: do the developers team make any quick-patch sets for patching source
tree from 8.0.0 to 8.0.1 for example? Or do I need to download the whole
tarball of 8.0.1 from scratch?

You need to download the whole tarball ...

----
Marc G. Fournier Hub.Org Networking Services (http://www.hub.org)
Email: scrappy@hub.org Yahoo!: yscrappy ICQ: 7615664

#9Geoffrey
esoteric@3times25.net
In reply to: The Hermit Hacker (#1)
Re: PostgreSQL Security Release

Marc G. Fournier wrote:

In order to address a potential security hole recently identified with
the "LOAD" option, the PostgreSQL Global Development Group is announcing
the release of new versions of PostgreSQL going back to the 7.2.x version.

As always, these releases are available on all mirrors, as listed at:

http://wwwmaster.postgresql.org/download/mirrors-ftp

Anyone know what's up with the mirrors?

"We could not query the database or no mirrors could be found!"

Is what I get.

--
Until later, Geoffrey

#10The Hermit Hacker
scrappy@hub.org
In reply to: Geoffrey (#9)
Re: PostgreSQL Security Release

On Wed, 2 Feb 2005, Geoffrey wrote:

Marc G. Fournier wrote:

In order to address a potential security hole recently identified with the
"LOAD" option, the PostgreSQL Global Development Group is announcing the
release of new versions of PostgreSQL going back to the 7.2.x version.

As always, these releases are available on all mirrors, as listed at:

http://wwwmaster.postgresql.org/download/mirrors-ftp

Anyone know what's up with the mirrors?

"We could not query the database or no mirrors could be found!"

Is what I get.

Should be fixed now ...

----
Marc G. Fournier Hub.Org Networking Services (http://www.hub.org)
Email: scrappy@hub.org Yahoo!: yscrappy ICQ: 7615664

#11Daniel Schuchardt
daniel_schuchardt@web.de
In reply to: Burak B&B (#6)
Re: delphi -> postgresql database connect ???

Burak B&B wrote:

hi,
delphi to postgresql database connect commands and source code free
download . Please.
Tanks.

Burak B�T�K��

_________________________________________________________________
Yagmura yakalanmamak i�in sadece semsiyenize degil, MSN hava durumuna
g�venin! http://www.msn.com.tr/havadurumu/

---------------------------(end of broadcast)---------------------------
TIP 8: explain analyze is your friend

free is only

www.zeoslib.net

or

ODBC and BDE
OLEDB and ADO (never tried, don't like Delphi - ADO)

Daniel.

#12Geoffrey
esoteric@3times25.net
In reply to: The Hermit Hacker (#10)
Re: PostgreSQL Security Release

Marc G. Fournier wrote:

On Wed, 2 Feb 2005, Geoffrey wrote:

Marc G. Fournier wrote:

In order to address a potential security hole recently identified
with the "LOAD" option, the PostgreSQL Global Development Group is
announcing the release of new versions of PostgreSQL going back to
the 7.2.x version.

As always, these releases are available on all mirrors, as listed at:

http://wwwmaster.postgresql.org/download/mirrors-ftp

Anyone know what's up with the mirrors?

"We could not query the database or no mirrors could be found!"

Is what I get.

Should be fixed now ...

Yes, thank you.

--
Until later, Geoffrey