database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-07-30 11:03:19 +03:00
Code Activity

Last-minute updates for release notes.

Browse Source 
Security: CVE-2018-16850
This commit is contained in:
Tom Lane
2018-11-05 10:48:23 -05:00
parent 5d846a2dd7
commit 613373b52b
1 changed files with 33 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

41
doc/src/sgml/release-10.sgml
View File

@ -38,6 +38,20 @@
<itemizedlist>
<listitem>
<para>
Ensure proper quoting of transition table names
when <application>pg_dump</application> emits <command>CREATE TRIGGER
... REFERENCING</command> commands (Tom Lane)
</para>
<para>
This oversight could be exploited by an unprivileged user to gain
superuser privileges during the next dump/reload
or <application>pg_upgrade</application> run. (CVE-2018-16850)
</para>
</listitem>
<listitem>
<!--
Author: Tom Lane <tgl@sss.pgh.pa.us>
@ -202,6 +216,25 @@ Branch: REL9_3_STABLE [591d0ac88] 2018-09-15 13:42:34 -0400
</para>
</listitem>
<listitem>
<para>
Prevent creation of a partition in a trigger attached to its parent
table (Amit Langote)
</para>
<para>
Ideally we'd allow that, but for the moment it has to be blocked to
avoid crashes.
</para>
</listitem>
<listitem>
<para>
Fix problems with applying <literal>ON COMMIT DELETE ROWS</literal> to
a partitioned temporary table (Amit Langote)
</para>
</listitem>
<listitem>
<para>
Fix character-class checks to not fail on Windows for Unicode
@ -899,14 +932,6 @@ Branch: REL_10_STABLE [cb282eab1] 2018-08-22 14:23:03 +0900
</para>
</listitem>
<listitem>
<para>
Ensure proper quoting of transition table names
when <application>pg_dump</application> emits <command>CREATE TRIGGER
... REFERENCING</command> commands (Tom Lane)
</para>
</listitem>
<listitem>
<!--
Author: Tom Lane <tgl@sss.pgh.pa.us>