Re: CAN-2005-0247 - Mailing list pgsql-hackers

yo mero <debianier@gmail.com> writes:
> Hello  I saw this :
> http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2005-0247
> is  8.0.1  Safe ?

No --- at least not the source-code releases.  Red Hat's 8.0.1 RPMs
include the patch, and I think the latest community RPMs do too.

> is there a patch ?


http://developer.postgresql.org/cvsweb.cgi/pgsql/src/pl/plpgsql/src/gram.y.diff?r1=text&tr1=1.64.4.1&r2=text&tr2=1.64.4.3

The patches for other branches besides 8.0 are available from CVS
as well.
        regards, tom lane