Postgres Pro
Downloads
Home   >   mailing lists

Re: Heartbleed Impact - Mailing list pgsql-general

From Dev Kumkar
Subject Re: Heartbleed Impact
Date
Msg-id CALSLE1PdseUJa6YKdA_n3+A5fNi5BuC-xtfdjQ0CyY=g=haCnw@mail.gmail.com
Whole thread Raw
In response to Re: Heartbleed Impact  (John R Pierce <pierce@hogranch.com>)
Responses Re: Heartbleed Impact  (Stephen Frost <sfrost@snowman.net>)
List pgsql-general
Tree view
On Thu, Apr 17, 2014 at 1:31 AM, John R Pierce <pierce@hogranch.com> wrote:
do you enable SSL  and expose it to an insecure network ?   if not, no exposure to the heartbleed bug.

No, SSL is not enabled in my case but also wanted to make sure there is no binary available which can later result into any potential issue.
 
AFAIK, the binary name is postgres.exe, from what I've read they are static linking openssl.  the updated versions on the site linked in another message are fixed per the note on that page. http://www.enterprisedb.com/products-services-training/pgdownload
I was able to verify for Linux binaries looking at STRINGS of so file but was not sure about the windows side and hence was looking for confirmation.

Regards...

pgsql-general by date:

Previous
From: John R Pierce
Date:
Subject: Re: Heartbleed Impact
Next
From: Andy Colson
Date:
Subject: Re: hot standby data folder bigger than primary