[Pkg-postgresql-public] About the security issues affecting postgresql-pljava in Wheezy

Christoph Berg myon at debian.org
Wed Jun 21 08:47:50 UTC 2017


Re: Raphael Hertzog 2017-06-20 <20170620162214.kxf3y2ksrxkaikkf at home.ouaza.com>
> That said the wheezy users would most certainly benefit from a fixed
> package and it looks like the issues have all been fixed in 1.5.0 and
> 1.5.1 so it should be possible to apply upstream fixes.

Last time I checked, packaging 1.5 is tantamount to packaging half of
the java world due to missing dependencies.

I haven't checked the necessary patches, but unless someone wants to
put in the effort of properly bringing pljava back to unstable, we
should probably just declare wheezy dead and not fix pljava 1.4 in
there.

Christoph



More information about the Pkg-postgresql-public mailing list