database/postgres
database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-05-29 16:21:20 +03:00
Code

Stamp

Browse Source
This commit is contained in:
Bruce Momjian 2007-09-11 17:19:36 +00:00
parent 4603c29e3a
commit 07403e67dd
1 changed files with 800 additions and 529 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

427
doc/src/sgml/release.sgml
View File

@ -1,24 +1,130 @@
<!-- $PostgreSQL: pgsql/doc/src/sgml/release.sgml,v 1.400.2.43 2007/04/20 03:27:43 tgl Exp $ --> <!-- $PostgreSQL: pgsql/doc/src/sgml/release.sgml,v 1.400.2.44 2007/09/11 17:19:36 momjian Exp $ -->
<!-- <!--
Typical markup: Typical markup:
&<> use & escapes
[A-Z][A-Z ]+[A-Z] <command> [A-Z][A-Z ]+[A-Z] <command>
[A-Za-z_][A-Za-z0-9_]+() <function> [A-Za-z_][A-Za-z0-9_]+() <function>
[A-Za-z_]/[A-Za-z_]+ <filename> [A-Za-z_]/[A-Za-z_]+ <filename>
PostgreSQL <productname> PostgreSQL <productname>
pg_[A-Za-z0-9_] <application> pg_[A-Za-z0-9_] <application>
[A-Z][A-Z] <type>, <envar>, <literal> [A-Z][A-Z] <type>, <envar>, <literal>
&<> use &
non-ascii convert to & escapes
For new features, add links to the documentation sections. non-ASCII characters convert to HTML4 entity (&) escapes
official: http://www.w3.org/TR/html4/sgml/entities.html
one page: http://www.zipcon.net/~swhite/docs/computers/browsers/entities_page.html
other lists: http://www.zipcon.net/~swhite/docs/computers/browsers/entities.html
http://www.zipcon.net/~swhite/docs/computers/browsers/entities_page.html
http://en.wikipedia.org/wiki/List_of_XML_and_HTML_character_entity_references
we cannot use UTF8 because SGML Docbook
does not support it
http://www.pemberley.com/janeinfo/latin1.html#latexta
wrap long lines
For new features, add links to the documentation sections. Use </link>
so that perl can remove it so HISTORY.html can be created with no
links to the main documentation. This was added only in 8.2, so don't
do it for earlier branch release files.
--> -->
<appendix id="release"> <appendix id="release">
<title>Release Notes</title> <title>Release Notes</title>
<sect1 id="release-8-1-10">
<title>Release 8.1.10</title>
<note>
<title>Release date</title>
<simpara>2007-09-17</simpara>
</note>
<para>
This release contains a variety of fixes from 8.1.9.
</para>
<sect2>
<title>Migration to version 8.1.10</title>
<para>
A dump/restore is not required for those running 8.1.X.
However, if you are upgrading from a version earlier than 8.1.2,
see the release notes for 8.1.2.
</para>
</sect2>
<sect2>
<title>Changes</title>
<itemizedlist>
<listitem>
<para>
Fix excessively <acronym>SSL</> log error messages (Tom)
</para>
</listitem>
<listitem>
<para>
Allow the <type>interval</> data type to accept values consisting only of
milliseconds or microseconds (Neil)
</para>
</listitem>
<listitem>
<para>
Win32 socket improvements (Magnus)
</para>
</listitem>
<listitem>
<para>
Fix <application>syslog</> so log messages are never partially written (Tom, Andrew)
</para>
</listitem>
<listitem>
<para>
Allow <command>CREATE DOMAIN ... DEFAULT NULL</> (Tom)
</para>
</listitem>
<listitem>
<para>
Require non-superusers who use <filename>/contrib/dblink</> to use only password
authentication, as a security measure (Joe)
</para>
</listitem>
<listitem>
<para>
Suppress timezone name (<literal>%Z</>) in log timestamps on Win32 because of
possible improperly encoded names (Tom)
</para>
</listitem>
<listitem>
<para>
Speed up rtree index additions (Teodor)
</para>
</listitem>
<listitem>
<para>
Update the time zone database rules, particularly New Zealand's upcoming changes (Tom)
</para>
</listitem>
</itemizedlist>
</sect2>
</sect1>
<sect1 id="release-8-1-9"> <sect1 id="release-8-1-9">
<title>Release 8.1.9</title> <title>Release 8.1.9</title>
@ -361,11 +467,13 @@ For new features, add links to the documentation sections.
<para> <para>
<function>to_number()</> and <function>to_char(numeric)</> <function>to_number()</> and <function>to_char(numeric)</>
are now <literal>STABLE</>, not <literal>IMMUTABLE</>, for are now <literal>STABLE</>, not <literal>IMMUTABLE</>, for
new <application>initdb</> installs (Tom) new <link linkend="APP-INITDB"><application>initdb</></link>
installs (Tom)
</para> </para>
<para> <para>
This is because <varname>lc_numeric</> can potentially This is because <link
linkend="guc-lc-numeric"><varname>lc_numeric</></link> can potentially
change the output of these functions. change the output of these functions.
</para> </para>
</listitem> </listitem>
@ -495,7 +603,7 @@ compilers (Hiroshi Saito)</para></listitem>
<para> <para>
Full security against the SQL-injection attacks described in Full security against the SQL-injection attacks described in
CVE-2006-2313 and CVE-2006-2314 may require changes in application CVE-2006-2313 and CVE-2006-2314 might require changes in application
code. If you have applications that embed untrustworthy strings code. If you have applications that embed untrustworthy strings
into SQL commands, you should examine them as soon as possible to into SQL commands, you should examine them as soon as possible to
ensure that they are using recommended escaping techniques. In ensure that they are using recommended escaping techniques. In
@ -527,7 +635,7 @@ literals. By default, <literal>\'</> is rejected only when
GB18030, or UHC), which is the scenario in which SQL injection is possible. GB18030, or UHC), which is the scenario in which SQL injection is possible.
A new configuration parameter <varname>backslash_quote</> is available to A new configuration parameter <varname>backslash_quote</> is available to
adjust this behavior when needed. Note that full security against adjust this behavior when needed. Note that full security against
CVE-2006-2314 may require client-side changes; the purpose of CVE-2006-2314 might require client-side changes; the purpose of
<varname>backslash_quote</> is in part to make it obvious that insecure <varname>backslash_quote</> is in part to make it obvious that insecure
clients are insecure. clients are insecure.
</para></listitem> </para></listitem>
@ -794,7 +902,7 @@ to ensure that <application>plperl</> won't change the locale later</para>
<para>This fixes a problem that occurred if the <application>postmaster</> was <para>This fixes a problem that occurred if the <application>postmaster</> was
started with environment variables specifying a different locale than what started with environment variables specifying a different locale than what
<application>initdb</> had been told. Under these conditions, any use of <application>initdb</> had been told. Under these conditions, any use of
<application>plperl</> was likely to lead to corrupt indexes. You may need <application>plperl</> was likely to lead to corrupt indexes. You might need
<command>REINDEX</> to fix existing indexes on <command>REINDEX</> to fix existing indexes on
textual columns if this has happened to you.</para></listitem> textual columns if this has happened to you.</para></listitem>
@ -1192,7 +1300,7 @@ DISTINCT query</para></listitem>
</para> </para>
<para> <para>
It may be necessary to set <varname>add_missing_from</> to true It might be necessary to set <varname>add_missing_from</> to true
in order to load an existing dump file, if the dump contains any in order to load an existing dump file, if the dump contains any
views or rules created using the implicit-<literal>FROM</> syntax. views or rules created using the implicit-<literal>FROM</> syntax.
This should be a one-time annoyance, because This should be a one-time annoyance, because
@ -1414,7 +1522,7 @@ psql -t -f fixseq.sql db1 | psql -e db1
<listitem> <listitem>
<para> <para>
<command>CREATE LANGUAGE</> may ignore the provided arguments <command>CREATE LANGUAGE</> can ignore the provided arguments
in favor of information from <structname>pg_pltemplate</> in favor of information from <structname>pg_pltemplate</>
(Tom) (Tom)
</para> </para>
@ -3056,6 +3164,83 @@ psql -t -f fixseq.sql db1 | psql -e db1
</sect2> </sect2>
</sect1> </sect1>
<sect1 id="release-8-0-14">
<title>Release 8.0.14</title>
<note>
<title>Release date</title>
<simpara>2007-09-17</simpara>
</note>
<para>
This release contains a variety of fixes from 8.0.13.
</para>
<sect2>
<title>Migration to version 8.0.14</title>
<para>
A dump/restore is not required for those running 8.0.X. However,
if you are upgrading from a version earlier than 8.0.6, see the release
notes for 8.0.6.
</para>
</sect2>
<sect2>
<title>Changes</title>
<itemizedlist>
<listitem>
<para>
Fix excessively <acronym>SSL</> log error messages (Tom)
</para>
</listitem>
<listitem>
<para>
Win32 socket improvements (Magnus)
</para>
</listitem>
<listitem>
<para>
Fix <application>syslog</> so log messages are never partially written (Tom, Andrew)
</para>
</listitem>
<listitem>
<para>
Allow <command>CREATE DOMAIN ... DEFAULT NULL</> (Tom)
</para>
</listitem>
<listitem>
<para>
Require non-superusers who use <filename>/contrib/dblink</> to use only password
authentication, as a security measure (Joe)
</para>
</listitem>
<listitem>
<para>
Suppress timezone name (<literal>%Z</>) in log timestamps on Win32 because of
possible improperly encoded names (Tom)
</para>
</listitem>
<listitem>
<para>
Update the time zone database rules, particularly New Zealand's upcoming changes (Tom)
</para>
</listitem>
</itemizedlist>
</sect2>
</sect1>
<sect1 id="release-8-0-13"> <sect1 id="release-8-0-13">
<title>Release 8.0.13</title> <title>Release 8.0.13</title>
@ -3322,11 +3507,13 @@ psql -t -f fixseq.sql db1 | psql -e db1
<para> <para>
<function>to_number()</> and <function>to_char(numeric)</> <function>to_number()</> and <function>to_char(numeric)</>
are now <literal>STABLE</>, not <literal>IMMUTABLE</>, for are now <literal>STABLE</>, not <literal>IMMUTABLE</>, for
new <application>initdb</> installs (Tom) new <link linkend="APP-INITDB"><application>initdb</></link>
installs (Tom)
</para> </para>
<para> <para>
This is because <varname>lc_numeric</> can potentially This is because <link
linkend="guc-lc-numeric"><varname>lc_numeric</></link> can potentially
change the output of these functions. change the output of these functions.
</para> </para>
</listitem> </listitem>
@ -3435,7 +3622,7 @@ Wieland)</para></listitem>
<para> <para>
Full security against the SQL-injection attacks described in Full security against the SQL-injection attacks described in
CVE-2006-2313 and CVE-2006-2314 may require changes in application CVE-2006-2313 and CVE-2006-2314 might require changes in application
code. If you have applications that embed untrustworthy strings code. If you have applications that embed untrustworthy strings
into SQL commands, you should examine them as soon as possible to into SQL commands, you should examine them as soon as possible to
ensure that they are using recommended escaping techniques. In ensure that they are using recommended escaping techniques. In
@ -3467,7 +3654,7 @@ literals. By default, <literal>\'</> is rejected only when
GB18030, or UHC), which is the scenario in which SQL injection is possible. GB18030, or UHC), which is the scenario in which SQL injection is possible.
A new configuration parameter <varname>backslash_quote</> is available to A new configuration parameter <varname>backslash_quote</> is available to
adjust this behavior when needed. Note that full security against adjust this behavior when needed. Note that full security against
CVE-2006-2314 may require client-side changes; the purpose of CVE-2006-2314 might require client-side changes; the purpose of
<varname>backslash_quote</> is in part to make it obvious that insecure <varname>backslash_quote</> is in part to make it obvious that insecure
clients are insecure. clients are insecure.
</para></listitem> </para></listitem>
@ -3673,7 +3860,7 @@ to ensure that <application>plperl</> won't change the locale later</para>
<para>This fixes a problem that occurred if the <application>postmaster</> was <para>This fixes a problem that occurred if the <application>postmaster</> was
started with environment variables specifying a different locale than what started with environment variables specifying a different locale than what
<application>initdb</> had been told. Under these conditions, any use of <application>initdb</> had been told. Under these conditions, any use of
<application>plperl</> was likely to lead to corrupt indexes. You may need <application>plperl</> was likely to lead to corrupt indexes. You might need
<command>REINDEX</> to fix existing indexes on <command>REINDEX</> to fix existing indexes on
textual columns if this has happened to you.</para></listitem> textual columns if this has happened to you.</para></listitem>
@ -3924,7 +4111,7 @@ code</para></listitem>
It is strongly recommended that all installations repair these errors, It is strongly recommended that all installations repair these errors,
either by initdb or by following the manual repair procedure given either by initdb or by following the manual repair procedure given
below. The errors at least allow unprivileged database users to crash below. The errors at least allow unprivileged database users to crash
their server process, and may allow unprivileged users to gain the their server process, and might allow unprivileged users to gain the
privileges of a database superuser. privileges of a database superuser.
</para> </para>
@ -4593,8 +4780,7 @@ typedefs (Michael)</para></listitem>
behavior across all platforms. In most cases, there should be behavior across all platforms. In most cases, there should be
little noticeable difference in time zone behavior, except that little noticeable difference in time zone behavior, except that
the time zone names used by <command>SET</>/<command>SHOW</> the time zone names used by <command>SET</>/<command>SHOW</>
<varname>TimeZone</> may <varname>TimeZone</> might be different from what your platform provides.
be different from what your platform provides.
</para> </para>
</listitem> </listitem>
@ -5023,7 +5209,7 @@ typedefs (Michael)</para></listitem>
Some logging-related configuration parameters could formerly be adjusted Some logging-related configuration parameters could formerly be adjusted
by ordinary users, but only in the <quote>more verbose</> direction. by ordinary users, but only in the <quote>more verbose</> direction.
They are now treated more strictly: only superusers can set them. They are now treated more strictly: only superusers can set them.
However, a superuser may use <command>ALTER USER</> to provide per-user However, a superuser can use <command>ALTER USER</> to provide per-user
settings of these values for non-superusers. Also, it is now possible settings of these values for non-superusers. Also, it is now possible
for superusers to set values of superuser-only configuration parameters for superusers to set values of superuser-only configuration parameters
via <literal>PGOPTIONS</>. via <literal>PGOPTIONS</>.
@ -6564,6 +6750,58 @@ typedefs (Michael)</para></listitem>
</sect2> </sect2>
</sect1> </sect1>
<sect1 id="release-7-4-18">
<title>Release 7.4.18</title>
<note>
<title>Release date</title>
<simpara>2007-09-17</simpara>
</note>
<para>
This release contains fixes from 7.4.17.
</para>
<sect2>
<title>Migration to version 7.4.18</title>
<para>
A dump/restore is not required for those running 7.4.X. However,
if you are upgrading from a version earlier than 7.4.11, see the release
notes for 7.4.11.
</para>
</sect2>
<sect2>
<title>Changes</title>
<itemizedlist>
<listitem>
<para>
Fix excessively <acronym>SSL</> log error messages (Tom)
</para>
</listitem>
<listitem>
<para>
Allow <command>CREATE DOMAIN ... DEFAULT NULL</> (Tom)
</para>
</listitem>
<listitem>
<para>
Require non-superusers who use <filename>/contrib/dblink</> to use only password
authentication, as a security measure (Joe)
</para>
</listitem>
</itemizedlist>
</sect2>
</sect1>
<sect1 id="release-7-4-17"> <sect1 id="release-7-4-17">
<title>Release 7.4.17</title> <title>Release 7.4.17</title>
@ -6765,11 +7003,13 @@ typedefs (Michael)</para></listitem>
<para> <para>
<function>to_number()</> and <function>to_char(numeric)</> <function>to_number()</> and <function>to_char(numeric)</>
are now <literal>STABLE</>, not <literal>IMMUTABLE</>, for are now <literal>STABLE</>, not <literal>IMMUTABLE</>, for
new <application>initdb</> installs (Tom) new <link linkend="APP-INITDB"><application>initdb</></link>
installs (Tom)
</para> </para>
<para> <para>
This is because <varname>lc_numeric</> can potentially This is because <link
linkend="guc-lc-numeric"><varname>lc_numeric</></link> can potentially
change the output of these functions. change the output of these functions.
</para> </para>
</listitem> </listitem>
@ -6858,7 +7098,7 @@ ANYARRAY</para></listitem>
<para> <para>
Full security against the SQL-injection attacks described in Full security against the SQL-injection attacks described in
CVE-2006-2313 and CVE-2006-2314 may require changes in application CVE-2006-2313 and CVE-2006-2314 might require changes in application
code. If you have applications that embed untrustworthy strings code. If you have applications that embed untrustworthy strings
into SQL commands, you should examine them as soon as possible to into SQL commands, you should examine them as soon as possible to
ensure that they are using recommended escaping techniques. In ensure that they are using recommended escaping techniques. In
@ -6890,7 +7130,7 @@ literals. By default, <literal>\'</> is rejected only when
GB18030, or UHC), which is the scenario in which SQL injection is possible. GB18030, or UHC), which is the scenario in which SQL injection is possible.
A new configuration parameter <varname>backslash_quote</> is available to A new configuration parameter <varname>backslash_quote</> is available to
adjust this behavior when needed. Note that full security against adjust this behavior when needed. Note that full security against
CVE-2006-2314 may require client-side changes; the purpose of CVE-2006-2314 might require client-side changes; the purpose of
<varname>backslash_quote</> is in part to make it obvious that insecure <varname>backslash_quote</> is in part to make it obvious that insecure
clients are insecure. clients are insecure.
</para></listitem> </para></listitem>
@ -7043,7 +7283,7 @@ to ensure that <application>plperl</> won't change the locale later</para>
<para>This fixes a problem that occurred if the <application>postmaster</> was <para>This fixes a problem that occurred if the <application>postmaster</> was
started with environment variables specifying a different locale than what started with environment variables specifying a different locale than what
<application>initdb</> had been told. Under these conditions, any use of <application>initdb</> had been told. Under these conditions, any use of
<application>plperl</> was likely to lead to corrupt indexes. You may need <application>plperl</> was likely to lead to corrupt indexes. You might need
<command>REINDEX</> to fix existing indexes on <command>REINDEX</> to fix existing indexes on
textual columns if this has happened to you.</para></listitem> textual columns if this has happened to you.</para></listitem>
@ -7229,7 +7469,7 @@ code</para></listitem>
It is strongly recommended that all installations repair these errors, It is strongly recommended that all installations repair these errors,
either by initdb or by following the manual repair procedures given either by initdb or by following the manual repair procedures given
below. The errors at least allow unprivileged database users to crash below. The errors at least allow unprivileged database users to crash
their server process, and may allow unprivileged users to gain the their server process, and might allow unprivileged users to gain the
privileges of a database superuser. privileges of a database superuser.
</para> </para>
@ -7247,7 +7487,7 @@ WHERE pronamespace = 11 AND pronargs = 5
COMMIT; COMMIT;
</programlisting> </programlisting>
Next, if you have installed <filename>contrib/tsearch2</>, do Next, if you have installed <filename>contrib/tsearch2</>, do:
<programlisting> <programlisting>
BEGIN; BEGIN;
@ -7276,12 +7516,12 @@ COMMIT;
template databases then any subsequently created databases will contain template databases then any subsequently created databases will contain
the same errors. <literal>template1</> can be fixed in the same way the same errors. <literal>template1</> can be fixed in the same way
as any other database, but fixing <literal>template0</> requires as any other database, but fixing <literal>template0</> requires
additional steps. First, from any database issue additional steps. First, from any database issue:
<programlisting> <programlisting>
UPDATE pg_database SET datallowconn = true WHERE datname = 'template0'; UPDATE pg_database SET datallowconn = true WHERE datname = 'template0';
</programlisting> </programlisting>
Next connect to <literal>template0</> and perform the above repair Next connect to <literal>template0</> and perform the above repair
procedures. Finally, do procedures. Finally, do:
<programlisting> <programlisting>
-- re-freeze template0: -- re-freeze template0:
VACUUM FREEZE; VACUUM FREEZE;
@ -7653,7 +7893,7 @@ names from outer query levels.
<para> <para>
A dump/restore is not required for those running 7.4.X. However, A dump/restore is not required for those running 7.4.X. However,
it may be advisable as the easiest method of incorporating fixes for it might be advisable as the easiest method of incorporating fixes for
two errors that have been found in the initial contents of 7.4.X system two errors that have been found in the initial contents of 7.4.X system
catalogs. A dump/initdb/reload sequence using 7.4.2's initdb will catalogs. A dump/initdb/reload sequence using 7.4.2's initdb will
automatically correct these problems. automatically correct these problems.
@ -7719,12 +7959,12 @@ GRANT SELECT, UPDATE ON pg_settings TO PUBLIC;
template databases then any subsequently created databases will contain template databases then any subsequently created databases will contain
the same errors. <literal>template1</> can be fixed in the same way the same errors. <literal>template1</> can be fixed in the same way
as any other database, but fixing <literal>template0</> requires as any other database, but fixing <literal>template0</> requires
additional steps. First, from any database issue additional steps. First, from any database issue:
<programlisting> <programlisting>
UPDATE pg_database SET datallowconn = true WHERE datname = 'template0'; UPDATE pg_database SET datallowconn = true WHERE datname = 'template0';
</programlisting> </programlisting>
Next connect to <literal>template0</> and perform the above repair Next connect to <literal>template0</> and perform the above repair
procedures. Finally, do procedures. Finally, do:
<programlisting> <programlisting>
-- re-freeze template0: -- re-freeze template0:
VACUUM FREEZE; VACUUM FREEZE;
@ -8207,7 +8447,7 @@ DROP SCHEMA information_schema CASCADE;
<listitem> <listitem>
<para> <para>
Inner joins using the explicit <literal>JOIN</literal> syntax Inner joins using the explicit <literal>JOIN</literal> syntax
may behave differently because they are now better might behave differently because they are now better
optimized. optimized.
</para> </para>
</listitem> </listitem>
@ -9174,7 +9414,7 @@ DROP SCHEMA information_schema CASCADE;
<listitem> <listitem>
<para> <para>
Arrays may now be specified as <literal>ARRAY[1,2,3]</literal>, Arrays can now be specified as <literal>ARRAY[1,2,3]</literal>,
<literal>ARRAY[['a','b'],['c','d']]</literal>, or <literal>ARRAY[['a','b'],['c','d']]</literal>, or
<literal>ARRAY[ARRAY[ARRAY[2]]]</literal> (Joe) <literal>ARRAY[ARRAY[ARRAY[2]]]</literal> (Joe)
</para> </para>
@ -9748,6 +9988,52 @@ DROP SCHEMA information_schema CASCADE;
</sect2> </sect2>
</sect1> </sect1>
<sect1 id="release-7-3-20">
<title>Release 7.3.20</title>
<note>
<title>Release date</title>
<simpara>2007-09-17</simpara>
</note>
<para>
This release contains fixes from 7.3.19.
</para>
<sect2>
<title>Migration to version 7.3.20</title>
<para>
A dump/restore is not required for those running 7.3.X. However,
if you are upgrading from a version earlier than 7.3.13, see the release
notes for 7.3.13.
</para>
</sect2>
<sect2>
<title>Changes</title>
<itemizedlist>
<listitem>
<para>
Allow <command>CREATE DOMAIN ... DEFAULT NULL</> (Tom)
</para>
</listitem>
<listitem>
<para>
Require non-superusers who use <filename>/contrib/dblink</> to use only password
authentication, as a security measure (Joe)
</para>
</listitem>
</itemizedlist>
</sect2>
</sect1>
<sect1 id="release-7-3-19"> <sect1 id="release-7-3-19">
<title>Release 7.3.19</title> <title>Release 7.3.19</title>
@ -9898,11 +10184,13 @@ DROP SCHEMA information_schema CASCADE;
<para> <para>
<function>to_number()</> and <function>to_char(numeric)</> <function>to_number()</> and <function>to_char(numeric)</>
are now <literal>STABLE</>, not <literal>IMMUTABLE</>, for are now <literal>STABLE</>, not <literal>IMMUTABLE</>, for
new <application>initdb</> installs (Tom) new <link linkend="APP-INITDB"><application>initdb</></link>
installs (Tom)
</para> </para>
<para> <para>
This is because <varname>lc_numeric</> can potentially This is because <link
linkend="guc-lc-numeric"><varname>lc_numeric</></link> can potentially
change the output of these functions. change the output of these functions.
</para> </para>
</listitem> </listitem>
@ -9988,7 +10276,7 @@ DROP SCHEMA information_schema CASCADE;
<para> <para>
Full security against the SQL-injection attacks described in Full security against the SQL-injection attacks described in
CVE-2006-2313 and CVE-2006-2314 may require changes in application CVE-2006-2313 and CVE-2006-2314 might require changes in application
code. If you have applications that embed untrustworthy strings code. If you have applications that embed untrustworthy strings
into SQL commands, you should examine them as soon as possible to into SQL commands, you should examine them as soon as possible to
ensure that they are using recommended escaping techniques. In ensure that they are using recommended escaping techniques. In
@ -10020,7 +10308,7 @@ literals. By default, <literal>\'</> is rejected only when
GB18030, or UHC), which is the scenario in which SQL injection is possible. GB18030, or UHC), which is the scenario in which SQL injection is possible.
A new configuration parameter <varname>backslash_quote</> is available to A new configuration parameter <varname>backslash_quote</> is available to
adjust this behavior when needed. Note that full security against adjust this behavior when needed. Note that full security against
CVE-2006-2314 may require client-side changes; the purpose of CVE-2006-2314 might require client-side changes; the purpose of
<varname>backslash_quote</> is in part to make it obvious that insecure <varname>backslash_quote</> is in part to make it obvious that insecure
clients are insecure. clients are insecure.
</para></listitem> </para></listitem>
@ -10153,7 +10441,7 @@ to ensure that <application>plperl</> won't change the locale later</para>
<para>This fixes a problem that occurred if the <application>postmaster</> was <para>This fixes a problem that occurred if the <application>postmaster</> was
started with environment variables specifying a different locale than what started with environment variables specifying a different locale than what
<application>initdb</> had been told. Under these conditions, any use of <application>initdb</> had been told. Under these conditions, any use of
<application>plperl</> was likely to lead to corrupt indexes. You may need <application>plperl</> was likely to lead to corrupt indexes. You might need
<command>REINDEX</> to fix existing indexes on <command>REINDEX</> to fix existing indexes on
textual columns if this has happened to you.</para></listitem> textual columns if this has happened to you.</para></listitem>
@ -10308,7 +10596,7 @@ the variable is of pass-by-reference type</para></listitem>
It is strongly recommended that all installations repair this error, It is strongly recommended that all installations repair this error,
either by initdb or by following the manual repair procedure given either by initdb or by following the manual repair procedure given
below. The error at least allows unprivileged database users to crash below. The error at least allows unprivileged database users to crash
their server process, and may allow unprivileged users to gain the their server process, and might allow unprivileged users to gain the
privileges of a database superuser. privileges of a database superuser.
</para> </para>
@ -10334,12 +10622,12 @@ COMMIT;
template databases then any subsequently created databases will contain template databases then any subsequently created databases will contain
the same error. <literal>template1</> can be fixed in the same way the same error. <literal>template1</> can be fixed in the same way
as any other database, but fixing <literal>template0</> requires as any other database, but fixing <literal>template0</> requires
additional steps. First, from any database issue additional steps. First, from any database issue:
<programlisting> <programlisting>
UPDATE pg_database SET datallowconn = true WHERE datname = 'template0'; UPDATE pg_database SET datallowconn = true WHERE datname = 'template0';
</programlisting> </programlisting>
Next connect to <literal>template0</> and perform the above repair Next connect to <literal>template0</> and perform the above repair
procedure. Finally, do procedure. Finally, do:
<programlisting> <programlisting>
-- re-freeze template0: -- re-freeze template0:
VACUUM FREEZE; VACUUM FREEZE;
@ -10892,7 +11180,7 @@ operations on bytea columns (Joe)</para></listitem>
A dump/restore is <emphasis>not</emphasis> required for those A dump/restore is <emphasis>not</emphasis> required for those
running version 7.3. However, it should be noted that the main running version 7.3. However, it should be noted that the main
<productname>PostgreSQL</productname> interface library, libpq, <productname>PostgreSQL</productname> interface library, libpq,
has a new major version number for this release, which may require has a new major version number for this release, which might require
recompilation of client code in certain cases. recompilation of client code in certain cases.
</para> </para>
</sect2> </sect2>
@ -11128,7 +11416,7 @@ operations on bytea columns (Joe)</para></listitem>
<para> <para>
<command>COPY</command> no longer considers missing trailing <command>COPY</command> no longer considers missing trailing
columns to be null. All columns need to be specified. columns to be null. All columns need to be specified.
(However, one may achieve a similar effect by specifying a (However, one can achieve a similar effect by specifying a
column list in the <command>COPY</command> command.) column list in the <command>COPY</command> command.)
</para> </para>
</listitem> </listitem>
@ -12029,7 +12317,7 @@ since <productname>PostgreSQL</productname> 7.1.
<listitem> <listitem>
<para> <para>
The semantics of the <command>VACUUM</command> command have The semantics of the <command>VACUUM</command> command have
changed in this release. You may wish to update your changed in this release. You might wish to update your
maintenance procedures accordingly. maintenance procedures accordingly.
</para> </para>
</listitem> </listitem>
@ -12624,7 +12912,7 @@ previous releases of <productname>PostgreSQL</productname> have forced
all data modifications to disk before each transaction commit. With all data modifications to disk before each transaction commit. With
WAL, only one log file must be flushed to disk, greatly improving WAL, only one log file must be flushed to disk, greatly improving
performance. If you have been using -F in previous releases to performance. If you have been using -F in previous releases to
disable disk flushes, you may want to consider discontinuing its use. disable disk flushes, you might want to consider discontinuing its use.
</para> </para>
</listitem> </listitem>
</varlistentry> </varlistentry>
@ -12665,7 +12953,7 @@ outer join syntax.
The previous C function manager did not The previous C function manager did not
handle null values properly, nor did it support 64-bit <acronym>CPU</acronym>'s (Alpha). The new handle null values properly, nor did it support 64-bit <acronym>CPU</acronym>'s (Alpha). The new
function manager does. You can continue using your old custom function manager does. You can continue using your old custom
functions, but you may want to rewrite them in the future to use the new functions, but you might want to rewrite them in the future to use the new
function manager call interface. function manager call interface.
</para> </para>
</listitem> </listitem>
@ -13138,7 +13426,7 @@ ecpg changes (Michael)
A dump/restore using <application>pg_dump</application> A dump/restore using <application>pg_dump</application>
is required for those wishing to migrate data from any is required for those wishing to migrate data from any
previous release of <productname>PostgreSQL</productname>. previous release of <productname>PostgreSQL</productname>.
For those upgrading from 6.5.*, you may instead use For those upgrading from 6.5.*, you can instead use
<application>pg_upgrade</application> to upgrade to this <application>pg_upgrade</application> to upgrade to this
release; however, a full dump/reload installation is always the release; however, a full dump/reload installation is always the
most robust method for upgrades. most robust method for upgrades.
@ -13159,7 +13447,7 @@ ecpg changes (Michael)
ease the transition by allowing ease the transition by allowing
<productname>PostgreSQL</productname> to recognize <productname>PostgreSQL</productname> to recognize
the deprecated type names and translate them to the new type the deprecated type names and translate them to the new type
names, this mechanism may not be completely transparent to names, this mechanism cannot be completely transparent to
your existing application. your existing application.
</para> </para>
</listitem> </listitem>
@ -13171,8 +13459,8 @@ ecpg changes (Michael)
decreased query times as the optimizer makes a better choice decreased query times as the optimizer makes a better choice
for the preferred plan. However, in a small number of cases, for the preferred plan. However, in a small number of cases,
usually involving pathological distributions of data, your usually involving pathological distributions of data, your
query times may go up. If you are dealing with large amounts query times might go up. If you are dealing with large amounts
of data, you may want to check your queries to verify of data, you might want to check your queries to verify
performance. performance.
</para> </para>
</listitem> </listitem>
@ -13410,7 +13698,7 @@ Fix for SELECT timespan('21:11:26'::time) (Tom)
netmask('x.x.x.x/0') is 255.255.255.255 instead of 0.0.0.0 (Oleg Sharoiko) netmask('x.x.x.x/0') is 255.255.255.255 instead of 0.0.0.0 (Oleg Sharoiko)
Add btree index on NUMERIC (Jan) Add btree index on NUMERIC (Jan)
Perl fix for large objects containing NUL characters (Douglas Thomson) Perl fix for large objects containing NUL characters (Douglas Thomson)
ODBC fix for for large objects (free) ODBC fix for large objects (free)
Fix indexing of cidr data type Fix indexing of cidr data type
Fix for Ethernet MAC addresses (macaddr type) comparisons Fix for Ethernet MAC addresses (macaddr type) comparisons
Fix for date/time types when overflows happened in computations (Tom) Fix for date/time types when overflows happened in computations (Tom)
@ -14336,7 +14624,7 @@ Jdbc cleanups(Peter)
Show backend status on ps command line(only works on some platforms)(Bruce) Show backend status on ps command line(only works on some platforms)(Bruce)
Pg_hba.conf now has a sameuser option in the database field Pg_hba.conf now has a sameuser option in the database field
Make lo_unlink take oid param, not int4 Make lo_unlink take oid param, not int4
New DISABLE_COMPLEX_MACRO for compilers that can't handle our macros(Bruce) New DISABLE_COMPLEX_MACRO for compilers that cannot handle our macros(Bruce)
Libpgtcl now handles NOTIFY as a Tcl event, need not send dummy queries(Tom) Libpgtcl now handles NOTIFY as a Tcl event, need not send dummy queries(Tom)
libpgtcl cleanups(Tom) libpgtcl cleanups(Tom)
Add -error option to libpgtcl's pg_result command(Tom) Add -error option to libpgtcl's pg_result command(Tom)
@ -14653,7 +14941,7 @@ Better identify tcl and tk libs and includes(Bruce)
<listitem> <listitem>
<para> <para>
Socket interface for client/server connection. This is the default now Socket interface for client/server connection. This is the default now
so you may need to start <application>postmaster</application> with the so you might need to start <application>postmaster</application> with the
<option>-i</option> flag. <option>-i</option> flag.
</para> </para>
</listitem> </listitem>
@ -14689,9 +14977,9 @@ Better identify tcl and tk libs and includes(Bruce)
mention that without subselects, SQL is a very limited language. mention that without subselects, SQL is a very limited language.
Subselects are a major feature, and you should review your code for Subselects are a major feature, and you should review your code for
places where subselects provide a better solution for your queries. I places where subselects provide a better solution for your queries. I
think you will find that there are more uses for subselects than you may think you will find that there are more uses for subselects than you might
think. Vadim has put us on the big SQL map with subselects, and fully think. Vadim has put us on the big SQL map with subselects, and fully
functional ones too. The only thing you can't do with subselects is to functional ones too. The only thing you cannot do with subselects is to
use them in the target list. use them in the target list.
</para> </para>
<para> <para>
@ -14704,7 +14992,7 @@ Better identify tcl and tk libs and includes(Bruce)
Third, <type>char()</type> fields will now allow faster access than <type>varchar()</type> or Third, <type>char()</type> fields will now allow faster access than <type>varchar()</type> or
<type>text</type>. Specifically, the <type>text</> and <type>varchar()</type> have a penalty for access to <type>text</type>. Specifically, the <type>text</> and <type>varchar()</type> have a penalty for access to
any columns after the first column of this type. <type>char()</type> used to also any columns after the first column of this type. <type>char()</type> used to also
have this access penalty, but it no longer does. This may suggest that have this access penalty, but it no longer does. This might suggest that
you redesign some of your tables, especially if you have short character you redesign some of your tables, especially if you have short character
columns that you have defined as <type>varchar()</type> or <type>text</type>. This and other columns that you have defined as <type>varchar()</type> or <type>text</type>. This and other
changes make 6.3 even faster than earlier releases. changes make 6.3 even faster than earlier releases.
@ -15253,7 +15541,7 @@ optimizer which uses <firstterm>genetic</firstterm>
The interpretation of array specifiers (the curly braces around atomic The interpretation of array specifiers (the curly braces around atomic
values) appears to have changed sometime after the original regression values) appears to have changed sometime after the original regression
tests were generated. The current <filename>./expected/*.out</filename> files reflect this tests were generated. The current <filename>./expected/*.out</filename> files reflect this
new interpretation, which may not be correct! new interpretation, which might not be correct!
</para> </para>
<para> <para>
@ -15741,7 +16029,7 @@ If you do, you must create a file name <literal>pg_hba</literal> in your top-lev
<step> <step>
<para> <para>
If you do not want host-based authentication, you can comment out If you do not want host-based authentication, you can comment out
the line the line:
<programlisting> <programlisting>
HBA = 1 HBA = 1
</programlisting> </programlisting>
@ -15967,7 +16255,7 @@ Incompatible changes:
* float literals (eg. 3.14) are now of type float4 (instead of float8 in * float literals (eg. 3.14) are now of type float4 (instead of float8 in
previous releases); you might have to do typecasting if you depend on it previous releases); you might have to do typecasting if you depend on it
being of type float8. If you neglect to do the typecasting and you assign being of type float8. If you neglect to do the typecasting and you assign
a float literal to a field of type float8, you may get incorrect values a float literal to a field of type float8, you might get incorrect values
stored! stored!
* LIBPQ has been totally revamped so that frontend applications * LIBPQ has been totally revamped so that frontend applications
can connect to multiple backends can connect to multiple backends
@ -16003,7 +16291,7 @@ more compliant to the SQL-92 standard):
"WITH GRANT OPTION" is not supported. Only class owners can change "WITH GRANT OPTION" is not supported. Only class owners can change
access control access control
- The default access control is to to grant users readonly access. - The default access control is to grant users readonly access.
You must explicitly grant insert/update access to users. To change You must explicitly grant insert/update access to users. To change
this, modify the line in this, modify the line in
src/backend/utils/acl.h src/backend/utils/acl.h
@ -16230,20 +16518,3 @@ In general, however, 6.3 is substantially faster than previous releases (thanks,
</sect1> </sect1>
]]> ]]>
</appendix> </appendix>
<!-- Keep this comment at the end of the file
Local variables:
mode:sgml
sgml-omittag:nil
sgml-shorttag:t
sgml-minimize-attributes:nil
sgml-always-quote-attributes:t
sgml-indent-step:1
sgml-indent-data:t
sgml-parent-document:nil
sgml-default-dtd-file:"./reference.ced"
sgml-exposed-tags:nil
sgml-local-catalogs:("/usr/lib/sgml/catalog")
sgml-local-ecat-files:nil
End:
-->