Sorry, I don't read that as a pot shot -- it's just a clarification on standard expectations for the severity of a security flaw. Otherwise the complaint would be "PRETTY CLASSY, not owning up to a design flaw in Postgres."
Posted Apr 4, 2013 22:41 UTC (Thu) by price (subscriber, #59790)
[Link]
The "good general rule" comment is the clarification you describe.
Saying other unnamed database systems are worse -- in that they may have more of exactly the kind of flaw the PostgreSQL developers had here -- is unhelpful and makes them sound childish and defensive. Red Hat doesn't warn about Windows security in an RHSA.
A serious PostgreSQL security fix
Posted Apr 5, 2013 8:18 UTC (Fri) by mbanck (subscriber, #9035)
[Link]
That comment was taken from the FAQ corresponding to the security alert, not the alert itself.