diff --git a/doc/src/sgml/release-14.sgml b/doc/src/sgml/release-14.sgml
index 76102e88aae..f32f4d5f0d4 100644
--- a/doc/src/sgml/release-14.sgml
+++ b/doc/src/sgml/release-14.sgml
@@ -24,7 +24,7 @@
However, if you use BRIN indexes, it may be advisable to reindex them;
- see the first changelog entry below.
+ see the second changelog entry below.
@@ -40,6 +40,35 @@
+
+ Disallow substituting a schema or owner name into an extension script
+ if the name contains a quote, backslash, or dollar sign (Noah Misch)
+
+
+
+ This restriction guards against SQL-injection hazards for trusted
+ extensions.
+
+
+
+ The PostgreSQL Project thanks Micah Gate,
+ Valerie Woolard, Tim Carey-Smith, and Christoph Berg for reporting
+ this problem.
+ (CVE-2023-39417)
+
+
+
+
+
+
+ Don't Memoize lateral joins with volatile join conditions
+ (Richard Guo)
+
+
+
+ Applying Memoize to a sub-plan that contains volatile filter
+ conditions is likely to lead to wrong answers. The check to avoid
+ doing this missed some cases that can arise when
+ using LATERAL.
+
+
+
+
+