Re: [HACKERS] pgsql: Fix backend crash in parsing incorrect tsquery.

2007-02-12 Thread Jeremy Drake
On Mon, 12 Feb 2007, Tom Lane wrote: > Jeremy Drake <[EMAIL PROTECTED]> writes: > > On Mon, 12 Feb 2007, Teodor Sigaev wrote: > >> Fix backend crash in parsing incorrect tsquery. > > > Is this a security issue? Does it need a new security release? > > We looked at this and determined that the wor

Re: [HACKERS] pgsql: Fix backend crash in parsing incorrect tsquery.

2007-02-12 Thread Tom Lane
Jeremy Drake <[EMAIL PROTECTED]> writes: > On Mon, 12 Feb 2007, Teodor Sigaev wrote: >> Fix backend crash in parsing incorrect tsquery. > Is this a security issue? Does it need a new security release? We looked at this and determined that the worst that could be done with it is crash the backend

Re: [HACKERS] pgsql: Fix backend crash in parsing incorrect tsquery.

2007-02-12 Thread Jeremy Drake
On Tue, 13 Feb 2007, Peter Eisentraut wrote: > We don't treat crashes to be security issues of the kind that calls for > the full security exercise. But if a "security issue", by whatever definition of the term applies to core, is found in contrib, it would result in the full security exercise, c

Re: [HACKERS] pgsql: Fix backend crash in parsing incorrect tsquery.

2007-02-12 Thread Peter Eisentraut
Jeremy Drake wrote: > On Mon, 12 Feb 2007, Teodor Sigaev wrote: > > Log Message: > > --- > > Fix backend crash in parsing incorrect tsquery. > > > > Per report from Jon Rosebaugh <[EMAIL PROTECTED]> > > Is this a security issue? Does it need a new security release? We don't treat crashes

Re: [HACKERS] pgsql: Fix backend crash in parsing incorrect tsquery.

2007-02-12 Thread Jeremy Drake
On Mon, 12 Feb 2007, Teodor Sigaev wrote: > Log Message: > --- > Fix backend crash in parsing incorrect tsquery. > > Per report from Jon Rosebaugh <[EMAIL PROTECTED]> Is this a security issue? Does it need a new security release? I hope that the answer is not "this is contrib, it isn't