Practical Timing Side Channel Attacks on Memory Compression

Hi all, A few months ago a group of researchers published a paper about LZ77 vulnerability[1]. And it also affects PGLZ. From my point of view, it could be a really dangerous issue for some kind of application. If I understand it correctly there is a possibility of leaking approx. 24B secret data p

Re: Practical Timing Side Channel Attacks on Memory Compression

Thanks for all of your opinions. I have almost the same feeling. The best layer for mitigation should be probably a user application. There can be arranged the correct data layout in the database, set up access limit for the app, and many other mitigation mechanisms. -Filip- st 6. 4. 2022 v

Ecpg dependency

Hello, After upgrade from 11.2 to 12.2 I found, that build of ecpg component depends on pgcommon_shlib and pgport_shlib. But build of ecpg doesn't include build of pgcommon_shlib and pgport_shlib. That means, if I want to build ecpg, first I need to build pgcommon_shlib and pgport_shlib and after

SHA-1 FIPS - compliance

Hi all, I am a new maintainer of PostgreSQL in Fedora and RHEL. Currently, I am solving usage SHA-1 for key-derivation in pgcrypto (the s2k-digest-algo). In the documentation , I have found that there are options SHA-1 or MD5. Unfortunately, none

Possible dependency issue in makefile

Hi all, I am building libecpg 13.1 but 13.3 behaves in the same manner and my build fails with: path.c: In function 'get_html_path': path.c:787:38: error: 'HTMLDIR' undeclared (first use in this function) 787 | make_relative_path(ret_path, HTMLDIR, PGBINDIR, my_exec_path); |

Re: Possible dependency issue in makefile

21 v 15:46 odesílatel Tom Lane napsal: > Filip Janus writes: > > I am building libecpg 13.1 but 13.3 behaves in the same manner and my > build > > fails with: > > ... > > Complete build log: log < > https://fjanus.fedorapeople.org/postgresql/build.log> &g

Re: Proposal: Adding compression of temporary files

-Filip- po 17. 3. 2025 v 23:13 odesílatel Tomas Vondra napsal: > On 3/15/25 11:40, Alexander Korotkov wrote: > > On Sun, Jan 5, 2025 at 1:43 AM Filip Janus wrote: > >> > >> I apologize for multiple messages, but I found a small bug in the > previous

Re: Proposal: Adding compression of temporary files

Since the patch was prepared months ago, it needs to be rebased. -Filip- ne 13. 4. 2025 v 21:53 odesílatel Dmitry Dolgov <9erthali...@gmail.com> napsal: > > On Fri, Mar 28, 2025 at 09:23:13AM GMT, Filip Janus wrote: > > > +else > > > +if (n