Prev: Unknown Facts
Next: FreeBSD Port: assp-1.5.1.2_4
From: Alexander Pyhalov on 25 Mar 2010 09:12
Hello.
Could someone look at http://www.freebsd.org/cgi/query-pr.cgi?pr=144863
? There is quite serious security issue in postgres, which allow any
user to kill others' sessions.
--
Best regards,
Alexander Pyhalov,
system administrator of Computer Center of South Federal University
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"

From: Mark Linimon on 25 Mar 2010 12:28
On Thu, Mar 25, 2010 at 03:44:20PM +0100, Gary Jennejohn wrote:
> It's only been a week since it was assigned to the maintainer (girgen@)
> to look at.
>
> It's too soon for a maintainer timeout, although I suppose if this is
> considered to be an enormous security risk it could be committed without
> waiting.

I'd say go ahead and commit it. We often waive the two-week period for
security problems.

mcl
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"

From: Andrea Venturoli on 11 Apr 2010 09:32
On 03/25/10 17:28, Mark Linimon wrote:
> On Thu, Mar 25, 2010 at 03:44:20PM +0100, Gary Jennejohn wrote:
>> It's only been a week since it was assigned to the maintainer (girgen@)
>> to look at.
>>
>> It's too soon for a maintainer timeout, although I suppose if this is
>> considered to be an enormous security risk it could be committed without
>> waiting.
>
> I'd say go ahead and commit it. We often waive the two-week period for
> security problems.

Sorry to step in.
8.4 has been corrected since a while, but what about 8.2 and 8.3?
Is the new (non vulnerable) version going to arrive in the port tree
anytime soon or should we plan a version upgrade?

bye & Thanks
av.
_______________________________________________
freebsd-ports(a)freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-ports
To unsubscribe, send any mail to "freebsd-ports-unsubscribe(a)freebsd.org"

 | 
Pages: 1
Prev: Unknown Facts
Next: FreeBSD Port: assp-1.5.1.2_4