Re: Vulnerability identified with Postgres 13.4 for Windows

Поиск
Список
Период
Сортировка
От David G. Johnston
Тема Re: Vulnerability identified with Postgres 13.4 for Windows
Дата
Msg-id CAKFQuwYJAUOZ-qeGX6pf7MPXNBc0M4TN=AoT4vjw2xobAEZAFw@mail.gmail.com
обсуждение исходный текст
Ответ на Vulnerability identified with Postgres 13.4 for Windows  ("Joel Mariadasan (jomariad)" <jomariad@cisco.com>)
Список pgsql-hackers
Дерево обсуждения
On Friday, October 29, 2021, Joel Mariadasan (jomariad) <jomariad@cisco.com> wrote:

Detected by Automated Scanning tool:

libxml   2.9.10

 

Can you confirm if this is the same version of libxml used in Postgres?

We want to confirm if the detection is a false positive or a vulnerability.



IIUC (though I’m more familiar with Linux) the core project has now control over which versions of external libraries get installed onto ones machine.  In particular the core project only supports compiled from source installation.

David J.

В списке pgsql-hackers по дате отправления:

Предыдущее
От: tomas@tuxteam.de
Дата:
Сообщение: Re: plpgsql: can I use a variable in a DECLARE later whithin the DECLARE?
Следующее
От: Tom Lane
Дата:
Сообщение: Re: Extension ownership and misuse of SET ROLE/SET SESSION AUTHORIZATION