From: Andreas Hasenack (ahasenackterra.com.br)
Date: Tue Jul 25 2006 - 08:32:33 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Tue, Jul 25, 2006 at 10:27:39AM -0300, Leandro Santi wrote:
> On 7/25/06, Andreas Hasenack <ahasenackterra.com.br> wrote:
>
> >> - The PostgreSQL client was updated after major database API changes
> >> in response to PostgreSQL security issues. This breaks support for
> >> PGSQL versions prior to 8.1.4, 8.0.8, 7.4.13, and 7.3.15. Support
> >> for these older releases requires major code changes that will have
> >> to wait until Postfix 2.4.
> >
> >A question about the PostgreSQL changes: the versions quoted are for the
> >libraries that postfix links against or for the servers postfix will talk
> >to?
>
> AFAIK 8.1.4, 8.0.8, 7.4.13 and 7.3.15 are the only versions that
> include safe quoting mechanisms with multiple active connections.
>
> Current dict_pgsql use these routines in order to execute the SQL
> statements properly. Previous (i.e. pre-8.1.4, pre-8.0.8, ...) libpq
> versions didn't include these routines, hence current Postfix won't
> build against these.

Ok, I would be worried if this meant that postfix 2.2.11 couldn't talk to those
pre-* servers, but it's the compiling we are talking about (the release note
was a bit ambiguous).

> Alternatively, we could switch interfaces in order to use the prepared
> statement methods. With these changes in place, you could use
> for example 8.1.3 or 8.0.7 and rest peacefully. A bouns extra problem
> is that libpq <= 7.4.x does not seem to include these routines
> (please do correct me if wrong).
>
> See http://www.postgresql.org/docs/techdocs.48 and
> http://www.postgresql.org/docs/techdocs.52 for more information.
 
Thanks for the clarification.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]