Postgres Pro
Downloads
Home   >   mailing lists

Impact of CVE-2014-2669 - Mailing list pgadmin-support

From HEARNE, TIMOTHY S
Subject Impact of CVE-2014-2669
Date
Msg-id 00CF4A25E32E204B8968E067CE2BB0D9020C2F98@CAFRFD1MSGUSRJB.ITServices.sbc.com
Whole thread Raw
Responses Re: Impact of CVE-2014-2669  (Dave Page <dpage@pgadmin.org>)
List pgadmin-support
Tree view
We received notice of the following :
advisory:
31864 postgresql92-postgresql security update
http://www.securityfocus.com/advisories/31864
 
Web Page:Bug 1082154 - (CVE-2014-2669) CVE-2014-2669 postgresql: multiple integer overflo
https://bugzilla.redhat.com/show_bug.cgi?id=1082154
 
From what I can tell in reading it, it impacts the database engine not the client tools such as pgAdmin III.  I have the latest version installed on my PC, 1.18.1, yet my company is requesting me to update or remove the tool.  As this is the current release, this is obviously not possible. 
 
Is pgAdmin III version 1.18.1 impacted by this threat? 
 
If release 1.18.1 is impacted, is there an estimate as to when a solution will be released?
Thank you,
Tim Hearne
 
 

pgadmin-support by date:

Previous
From: Andreas
Date:
Subject: How to set option for search & replace
Next
From: Dave Page
Date:
Subject: Re: Impact of CVE-2014-2669