Re: [Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] CVE-2018-1057: postgresql-10, postgresql-9.6, postgresql-9.4, postgresql-9.1

[Brian May <bam@debian.org>]

Christoph Berg <myon@debian.org> writes:

> +	[jessie] - postgresql-9.1 <not-affected> (postgresql-9.1 in jessie is PL/Perl only)

Hello,

What did you mean by "jessie is PL/Perl only"?

I am not sure I see the connection between CVE-2018-1058 (was
incorrectly labeled as CVE-2018-1057) which is for issues concerning the
search_path (as far as I can tell) and PL/Perl.

Just trying to confirm if Wheezy is vulnerable or not. As Wheezy is
using postgresql-9.1, and postgresql-9.1 is not vulnerable in Jessie, I
am guessing wheezy is not vulnerable too.

Thanks.
-- 
Brian May <bam@debian.org>