Forum Moderators: open

Message Too Old, No Replies

PostgreSQL security update

Particularly affects users of multi-byte character sets

         

zCat

2:26 pm on May 24, 2006 (gmt 0)

10+ Year Member



This update is important if you're using PostgreSQL as a website backend, especially with PHP. Details are here:

[postgresql.org...]

AFAICT the vulnerability does not affect anyone using single-byte character sets such as ISO-8859-1 (LATIN1 in PostgreSQL parlance).

coopster

6:34 pm on May 25, 2006 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



Thanks for the heads up zCat.


AFAICT the vulnerability does not affect anyone using single-byte character sets such as ISO-8859-1 (LATIN1 in PostgreSQL parlance).

Except in the "both" case I guess:

Q: Who is not affected?
A: Several kinds of applications:

1. Users whose database applications are not exposed to untrusted input, such as single-user applications not exposed to the Internet.
2. Databases which are set up with "LATIN-1" or other single-byte encoding, on both client and server.
...