1
0
mirror of https://github.com/postgres/postgres.git synced 2025-05-15 19:15:29 +03:00
Noah Misch 64a71062e0 Empty search_path in logical replication apply worker and walsender.
This is like CVE-2018-1058 commit
582edc369cdbd348d68441fc50fa26a84afd0c1a.  Today, a malicious user of a
publisher or subscriber database can invoke arbitrary SQL functions
under an identity running replication, often a superuser.  This fix may
cause "does not exist" or "no schema has been selected to create in"
errors in a replication process.  After upgrading, consider watching
server logs for these errors.  Objects accruing schema qualification in
the wake of the earlier commit are unlikely to need further correction.
Back-patch to v10, which introduced logical replication.

Security: CVE-2020-14349
2020-08-10 09:22:58 -07:00
..
2020-08-06 14:55:00 -04:00
2019-01-02 12:44:25 -05:00
2020-08-10 15:21:18 +02:00
2019-05-22 13:04:48 -04:00
2019-01-02 12:44:25 -05:00
2020-07-23 21:17:47 +12:00
2018-03-30 17:33:04 -07:00
2020-08-10 15:21:18 +02:00