Re: CVE-2024-10979 Vulnerability Impact on PostgreSQL 11.10 - Mailing list pgsql-general

From Ron Johnson
Subject Re: CVE-2024-10979 Vulnerability Impact on PostgreSQL 11.10
Date
Msg-id CANzqJaDVzQu2-44WRW-8wSw9bP9CSjAwe34+PKdt9Q86vYr3Rg@mail.gmail.com
Whole thread Raw
In response to Re: CVE-2024-10979 Vulnerability Impact on PostgreSQL 11.10  (Achilleas Mantzios - cloud <a.mantzios@cloud.gatewaynet.com>)
List pgsql-general
On Fri, Nov 22, 2024 at 4:01 AM Achilleas Mantzios - cloud <a.mantzios@cloud.gatewaynet.com> wrote:

On 11/22/24 10:00, Matthias Apitz wrote:
[snip] 

Why not decouple client libs from the server ? i.e. psql works great
with many versions greater than its own. And certainly with same major
versions. You could retain the same client libs and just upgrade the
PgSQL server to the highest minor version of the major version that you
support.

Small VARs that sell turnkey solutions would rather bundle everything together.  One application version, one database version, one OS version, one set of hardware, all bundled up and sold to a tech-illiterate customer that doesn't employ a DBA or SysAdmin.  That way, when something stops working, you aren't guessing if it's this patch, that patch, etc etc.

Not saying that Matthias works for such a VAR, but such companies definitely exist.

--
Death to <Redacted>, and butter sauce.
Don't boil me, I'm still alive.
<Redacted> lobster!

pgsql-general by date:

Previous
From: Matthias Apitz
Date:
Subject: Re: CVE-2024-10979 Vulnerability Impact on PostgreSQL 11.10
Next
From: hubert depesz lubaczewski
Date:
Subject: Re: PostgreSQL Log Info