Re: Security question
Tom Lane <[email protected]> Thu, 26 Sep 2019 12:34:11 -0400
| Newsgroups | gmane.comp.db.postgresql.novice |
|---|---|
| Message-ID | <[email protected]> |
=?iso-8859-1?Q?Potvin=2C_J=E9r=E9mi?= <[email protected]> writes: > I would like to know what's the best way to track PostgreSQL security patches / CVE notifications. > Should I subscribe to any particular mailing list(s)? RSS feed(s)? pgsql-announce is what to read for release notices. > I just want to make sure I get notified as soon as possible whenever a security vulnerability is identified with PostgreSQL. Our release notices generally mention any new CVEs fixed in a release set. For historical data see https://www.postgresql.org/support/security/ regards, tom lane