Thread: Regarding cve-2024-0985

Regarding cve-2024-0985

From
Rakesh Nashine
Date:
Hello All, 
Good afternoon ! 
I would like to apply the latest patch as remediation of cve-2024-0985:
Can anyone please help me with the steps to apply these patches ? or may be any documents. 

--
Thanks & Regards
Rakesh Nashine

Re: Regarding cve-2024-0985

From
Michael Banck
Date:
Hi,

On Thu, Feb 15, 2024 at 03:53:27PM +0530, Rakesh Nashine wrote:
> I would like to apply the latest patch as remediation of cve-2024-0985:
> Can anyone please help me with the steps to apply these patches ? or may be
> any documents.

Just install the latest point release/minor version of Postgres and
restart the instance.


Michael



Re: Regarding cve-2024-0985

From
Ron Johnson
Date:
On Thu, Feb 15, 2024 at 5:23 AM Rakesh Nashine <nashine.rakesh@gmail.com> wrote:
Hello All, 
Good afternoon ! 
I would like to apply the latest patch as remediation of cve-2024-0985:
Can anyone please help me with the steps to apply these patches ? or may be any documents. 


From what source did you install Postgresql?

Re: Regarding cve-2024-0985

From
Rakesh Nashine
Date:
Hi Ron,
Actually i wasn't aware about it, as someone has done the postgresql installation long back . Now since we need to get out of this ve-2024-0985, I am looking for some assistance to roll this out in existing environment. Currently we are on Postgres (PostgreSQL) 12.3. 

Thanks 


On Thu, Feb 15, 2024 at 7:58 PM Ron Johnson <ronljohnsonjr@gmail.com> wrote:
On Thu, Feb 15, 2024 at 5:23 AM Rakesh Nashine <nashine.rakesh@gmail.com> wrote:
Hello All, 
Good afternoon ! 
I would like to apply the latest patch as remediation of cve-2024-0985:
Can anyone please help me with the steps to apply these patches ? or may be any documents. 


From what source did you install Postgresql?



--
Thanks & Regards
Rakesh Nashine

Re: Regarding cve-2024-0985

From
"David G. Johnston"
Date:
On Thursday, February 15, 2024, Rakesh Nashine <nashine.rakesh@gmail.com> wrote:
Hi Ron,
Actually i wasn't aware about it, as someone has done the postgresql installation long back . Now since we need to get out of this ve-2024-0985, I am looking for some assistance to roll this out in existing environment. Currently we are on Postgres (PostgreSQL) 12.3. 


Otherwise, spend your time acquiring the skills and knowledge to perform quarterly minor release updates and get this bug fix via doing one of those.

David J.

Re: Regarding cve-2024-0985

From
Ron Johnson
Date:
1) What OS?  "yum list installed | grep postgresql" or "dpkg -l | grep postgresql" should show you what's installed.
2) PG 12.3 is really old.
3) Applying the latest 12 release (.18) is pretty trivial, IF you have reasonable Linux sysadmin skills.

On Thu, Feb 15, 2024 at 9:46 AM Rakesh Nashine <nashine.rakesh@gmail.com> wrote:
Hi Ron,
Actually i wasn't aware about it, as someone has done the postgresql installation long back . Now since we need to get out of this ve-2024-0985, I am looking for some assistance to roll this out in existing environment. Currently we are on Postgres (PostgreSQL) 12.3. 

Thanks 


On Thu, Feb 15, 2024 at 7:58 PM Ron Johnson <ronljohnsonjr@gmail.com> wrote:
On Thu, Feb 15, 2024 at 5:23 AM Rakesh Nashine <nashine.rakesh@gmail.com> wrote:
Hello All, 
Good afternoon ! 
I would like to apply the latest patch as remediation of cve-2024-0985:
Can anyone please help me with the steps to apply these patches ? or may be any documents. 


From what source did you install Postgresql?



--
Thanks & Regards
Rakesh Nashine