Re: CVE-2019-9193 about COPY FROM/TO PROGRAM - Mailing list pgsql-general

From Jonathan S. Katz
Subject Re: CVE-2019-9193 about COPY FROM/TO PROGRAM
Date
Msg-id cf1c698a-3ac5-46f4-cffe-d235acd8f6e0@postgresql.org
Whole thread Raw
In response to Re: CVE-2019-9193 about COPY FROM/TO PROGRAM  (Michael Paquier <michael@paquier.xyz>)
List pgsql-general
On 4/2/19 1:05 AM, Michael Paquier wrote:
> On Mon, Apr 01, 2019 at 10:04:32AM -0400, Jonathan S. Katz wrote:
>> +1, though I’d want to see if people get noisier about it before we rule
>> out an official response.
>>
>> A blog post from a reputable author who can speak to security should
>> be good enough and we can make noise through our various channels.
>
> Need a hand?  Not sure if I am reputable enough though :)

I believe you are, and any blog entries helping the matter are welcome :)

> By the way, it could be the occasion to consider an official
> PostgreSQL blog on the main website.  News are not really a model
> adapted for problem analysis and for entering into technical details.

I think this is warrants a longer discussion, albeit for a different day.

Jonathan


Attachment

pgsql-general by date:

Previous
From: "Brad Nicholson"
Date:
Subject: Re: CVE-2019-9193 about COPY FROM/TO PROGRAM
Next
From: Tom Lane
Date:
Subject: Re: logical replication - negative bitmapset member not allowed