Обсуждение: MAT. VIEW security problems and PG 10-11 versions?

Поиск
Список
Период
Сортировка

MAT. VIEW security problems and PG 10-11 versions?

От
Durumdara
Дата:
Dear Members!

I would like to ask if the PG 10-11 versions are also affected by MAT VIEW security problems?

They aren't listed in this page:


But maybe that's because PG 10 and 11 are no longer supported - and not because they aren't affected by the issues.

Thanks for the reply!

Best regards
dd


Re: MAT. VIEW security problems and PG 10-11 versions?

От
Daniel Gustafsson
Дата:
> On 13 Feb 2024, at 08:56, Durumdara <durumdara@gmail.com> wrote:

> But maybe that's because PG 10 and 11 are no longer supported - and not because they aren't affected by the issues.

EOL versions do not recieve security updates and are not verified during
security analysis and fixing, so hence they aren't listed.  Anyone still
running 10 or 11 is encouraged to upgrade to a supported version.

--
Daniel Gustafsson




Re: MAT. VIEW security problems and PG 10-11 versions?

От
Ron Johnson
Дата:
On Tue, Feb 13, 2024 at 3:44 AM Daniel Gustafsson <daniel@yesql.se> wrote:
> On 13 Feb 2024, at 08:56, Durumdara <durumdara@gmail.com> wrote:

> But maybe that's because PG 10 and 11 are no longer supported - and not because they aren't affected by the issues.

EOL versions do not recieve security updates and are not verified during
security analysis and fixing, so hence they aren't listed.  Anyone still
running 10 or 11 is encouraged to upgrade to a supported version.

I wonder if MSFT and Oracle test EOL versions of their software for discovered bugs.   Maybe, but I doubt it, for the very same reason the PGDG doesn't do it.

But even if they do... how far back would they go?  Unless they go back to Windows 1.0, and Oracle 1.0, _someone_ would complain.