Re: CVE-2024-10979 - Does this affect Postgres built without --with-perl option?

Поиск
Список
Период
Сортировка
От David G. Johnston
Тема Re: CVE-2024-10979 - Does this affect Postgres built without --with-perl option?
Дата
Msg-id CAKFQuwaura8869fQeGXem2Jkpj1JTdWbdqwN4G2B+4G6e4ARdw@mail.gmail.com
обсуждение исходный текст
Ответ на CVE-2024-10979 - Does this affect Postgres built without --with-perl option?  (Mark Hill <Mark.Hill@sas.com>)
Список pgsql-hackers
Дерево обсуждения
On Wed, Dec 4, 2024 at 10:07 AM Mark Hill <Mark.Hill@sas.com> wrote:

Does the CVE-2024-10979 affect Postgres that is NOT built with the --with-perl  option?


It requires the attacker being able to write and get executed a PL function in the server written in pl/perl.  That is impossible if the server hasn't been compiled using the --with-perl option.

David J.

В списке pgsql-hackers по дате отправления: