chore: add newly disclosed PostgreSQL CVEs - #42
Open
github-actions[bot] wants to merge 3 commits into
Open
Conversation
Author
Neon Before/After Validation
No new critical issues -- safe to deploy.
|
- testing/local-workflows/test_managed_db_validate.sh: DROP TABLE IF EXISTS
_snap before CREATE TEMP TABLE so the second psql invocation in the same
job doesn't trip 'relation _snap already exists'.
- testing/seed_and_validate.py:
* Add time-threshold patches (5m -> 1h, 30s -> 5m) so the seed workload's
deliberately long-running / idle-in-transaction sessions don't trip
the CI matrix (PG16 Neon run was failing the 5-minute checks).
* Retry classify_pss_state once on OperationalError to recover from Neon
closing the connection during the multi-minute psql seed step.
Refs: #42
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated PGDG security-index scrape.
The scraper (
tools/scrape_pgdg.py) ran againsthttps://www.postgresql.org/support/security/?cve=title and
found CVE entries newer than what's in
data/cves.json. Theproposed additions are in
proposed-cves.jsonbelow.Action items for a human:
PostgreSQL 15-18.
data/cves.json:bash uv run python tools/scrape_pgdg.py --write --yes uv run python tools/generate_cve_sql.py git add data/cves.json pgFirstAid.sql view_pgFirstAid.sql view_pgFirstAid_managed.sql git commit -m "chore: refresh CVE catalog"proposed-cves.jsonbefore merge.scraper exit code: true (non-zero = additions pending)