PostgreSQL 9.2.4, 9.1.9, 9.0.13 and 8.4.17 released

Re:PostgreSQL 9.2.4, 9.1.9, 9.0.13 and 8.4.17 released by gingerlime on Thursday April 04, 2013 @09:52AM (#5492619)

as far as I understand from the FAQ page, as long as connections to your PG database are blocked from external sources, you should be safe. Seems like a good idea to upgrade as soon as possible anyway though.

  > How can users protect themselves?
  > * Download the update release and update all of your servers as soon as possible.
  > * Ensure that PostgreSQL is not open to connections from untrusted networks.
  > * Audit your database users to be certain that all logins require proper credentials, and that the only logins which exist are legitimate and in current use.

EDIT: added a quote from the FAQ for clarity.

[ Parent | on HN ]

Re:PostgreSQL 9.2.4, 9.1.9, 9.0.13 and 8.4.17 released by buttscicles on Thursday April 04, 2013 @10:04AM (#5492689)

It doesn't specify whether pg_hba.conf is sufficient to protect against this, anybody have any word on that?

[ Parent | on HN ]

Re:PostgreSQL 9.2.4, 9.1.9, 9.0.13 and 8.4.17 released by selenamarie on Thursday April 04, 2013 @10:40AM (#5492912)

No, pg_hba.conf is not sufficient. I'll work on adding that to the FAQ.

[ Parent | on HN ]

Re:PostgreSQL 9.2.4, 9.1.9, 9.0.13 and 8.4.17 released by symfoniq on Thursday April 04, 2013 @10:27AM (#5492834)

I'm wondering this as well.

[ Parent | on HN ]