[Osgeo4w-trac] [osgeo4w] #813: Vulnerable PostgreSQL 15.2.0 executable exists after install latest of QGIS LTR 3.28.15 using the OSGEO4W installer

OSGeo4W trac_osgeo4w at osgeo.org
Fri Feb 2 02:45:12 PST 2024


#813: Vulnerable PostgreSQL 15.2.0 executable exists after install latest of QGIS
LTR 3.28.15 using the OSGEO4W installer
------------------------------------------------+--------------------------
Reporter:  ascottwwf                            |       Owner:  osgeo4w-
                                                |  dev@…
    Type:  defect                               |      Status:  closed
Priority:  major                                |   Component:  Package
 Version:                                       |  Resolution:  fixed
Keywords:  PostgreSQL, OSGEO, QGIS LTR 3.28.15  |
------------------------------------------------+--------------------------
Comment (by ascottwwf):

 As confirmation, I have just updated my QGIS LTR 3.28.15 install, and all
 the PostgreSQL files have been successfully updated to PostgreSQL v16.1

 PowerShell evidence:
 {{{
 PS C:\Program Files\OSGeo4W_v2\bin> Get-ChildItem *.dll,*.exe | %
 {$_.VersionInfo} | Select-Object * | Where-Object CompanyName -like
 "PostgreSQL*" | Select-Object
 ProductVersion,FileVersionRaw,FileName,FileDescription | Format-Table
 -AutoSize

 ProductVersion FileVersionRaw FileName
 FileDescription
 -------------- -------------- --------
 ---------------
 16.1           16.0.1.0       C:\Program Files\OSGeo4W_v2\bin\libpq.dll
 PostgreSQL Access Library
 16.1           16.0.1.0       C:\Program Files\OSGeo4W_v2\bin\pg_dump.exe
 pg_dump/pg_restore/pg_dumpall - backup and restore PostgreSQL databases
 16.1           16.0.1.0       C:\Program
 Files\OSGeo4W_v2\bin\pg_dumpall.exe pg_dump/pg_restore/pg_dumpall - backup
 and restore PostgreSQL databases
 16.1           16.0.1.0       C:\Program
 Files\OSGeo4W_v2\bin\pg_restore.exe pg_dump/pg_restore/pg_dumpall - backup
 and restore PostgreSQL databases
 16.1           16.0.1.0       C:\Program Files\OSGeo4W_v2\bin\psql.exe
 psql - the PostgreSQL interactive terminal

 }}}

 Thanks again :-)
-- 
Ticket URL: <https://trac.osgeo.org/osgeo4w/ticket/813#comment:6>
OSGeo4W <http://trac.osgeo.org/osgeo4w>
OSGeo4W is the Windows installer and package environment for the OSGeo stack.


More information about the Osgeo4w-trac mailing list