Re: Reporting a security hole - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: Reporting a security hole
Date
Msg-id 200404210155.i3L1t2U27566@candle.pha.pa.us
Whole thread Raw
In response to Reporting a security hole  (ken@coverity.com)
List pgsql-hackers
You can send it to core@postgresql.org, but I already saw your report on
the hackers list.

---------------------------------------------------------------------------

ken@coverity.com wrote:
> I work at Coverity where we make a static analysis tool to find bugs in
> software at compile time.  I think I found a security hole in
> postgresql-7.4.1, but I don't want to just report it to a public list.  I
> sent email to security@postgresql.org, hoping that the address existed,
> but I got no response.
> 
> So where can I report a potential security hole?
> 
> thanks,
> Ken Ashcraft
> 
> ---------------------------(end of broadcast)---------------------------
> TIP 6: Have you searched our list archives?
> 
>                http://archives.postgresql.org
> 

--  Bruce Momjian                        |  http://candle.pha.pa.us pgman@candle.pha.pa.us               |  (610)
359-1001+  If your life is a hard drive,     |  13 Roberts Road +  Christ can be your backup.        |  Newtown Square,
Pennsylvania19073
 


pgsql-hackers by date:

Previous
From: Christopher Kings-Lynne
Date:
Subject: Re: pg_autovacuum crashes when query fails for temp tables
Next
From: Tom Lane
Date:
Subject: Re: [PERFORM] pgbench written in Pro*C