postgresql command line exploit found in the wild - Mailing list pgsql-general

From Merlin Moncure
Subject postgresql command line exploit found in the wild
Date
Msg-id CAHyXU0xJMZHd62ozJkUjzduKY4u0SWgv16bda2cLOZ3J_tyZuQ@mail.gmail.com
Whole thread Raw
Responses Re: postgresql command line exploit found in the wild
List pgsql-general
see: http://schemaverse.tumblr.com/post/47312545952/the-schemaverse-was-hacked

if you have an internet facing database, patch it immediately!
(personally, I would only do this through a service such as pgbouncer
runnning under extremely limited account).  do not delay!

merlin


pgsql-general by date:

Previous
From: Richard Harley
Date:
Subject: Re: Selecting timestamp from Database
Next
From: Jared Beck
Date:
Subject: Re: [Maintainers] REL/Centos4 release of 8.4.17?