delta/postgresql.git, branch REL7_3_STABLE git.postgresql.org: git/postgresql.git Check to ensure the number of primary key fields supplied does not 2010-02-03T23:02:39+00:00 Joe Conway mail@joeconway.com 2010-02-03T23:02:39+00:00 c3f8e037c0238a8132ed4245ced956a20db82635 exceed the total number of non-dropped source table fields for dblink_build_sql_*(). Addresses bug report from Rushabh Lathia. Backpatch all the way to the 7.3 branch. 
exceed the total number of non-dropped source table fields for
dblink_build_sql_*(). Addresses bug report from Rushabh Lathia.

Backpatch all the way to the 7.3 branch.
Stamp release 7.3.21. 2008-01-03T21:42:44+00:00 Tom Lane tgl@sss.pgh.pa.us 2008-01-03T21:42:44+00:00 9d4269f087d94c868d4da72d14bdf89617b0246c Security: CVE-2007-4769, CVE-2007-4772, CVE-2007-6067, CVE-2007-6600, CVE-2007-6601 
Security: CVE-2007-4769, CVE-2007-4772, CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
Update release notes for security releases. 2008-01-03T21:36:29+00:00 Tom Lane tgl@sss.pgh.pa.us 2008-01-03T21:36:29+00:00 d66dcb144a3a5b8fd5cc76018bdbee2ef9f21f5f Security: CVE-2007-4769, CVE-2007-4772, CVE-2007-6067, CVE-2007-6600, CVE-2007-6601 
Security: CVE-2007-4769, CVE-2007-4772, CVE-2007-6067, CVE-2007-6600, CVE-2007-6601
The original patch to disallow non-passworded connections to non-superusers 2008-01-03T21:29:07+00:00 Tom Lane tgl@sss.pgh.pa.us 2008-01-03T21:29:07+00:00 6689ac7db925e0830ee88da8b2f8a2ca341b9c13 failed to cover all the ways in which a connection can be initiated in dblink. Plug the remaining holes. Also, disallow transient connections in functions for which that feature makes no sense (because they are only sensible as part of a sequence of operations on the same connection). Joe Conway Security: CVE-2007-6601 
failed to cover all the ways in which a connection can be initiated in dblink.
Plug the remaining holes.  Also, disallow transient connections in functions
for which that feature makes no sense (because they are only sensible as
part of a sequence of operations on the same connection).  Joe Conway

Security: CVE-2007-6601
Make standard maintenance operations (including VACUUM, ANALYZE, REINDEX, 2008-01-03T21:25:58+00:00 Tom Lane tgl@sss.pgh.pa.us 2008-01-03T21:25:58+00:00 218cf59b60c526258f14e672000f59496b227639 and CLUSTER) execute as the table owner rather than the calling user, using the same privilege-switching mechanism already used for SECURITY DEFINER functions. The purpose of this change is to ensure that user-defined functions used in index definitions cannot acquire the privileges of a superuser account that is performing routine maintenance. While a function used in an index is supposed to be IMMUTABLE and thus not able to do anything very interesting, there are several easy ways around that restriction; and even if we could plug them all, there would remain a risk of reading sensitive information and broadcasting it through a covert channel such as CPU usage. To prevent bypassing this security measure, execution of SET SESSION AUTHORIZATION and SET ROLE is now forbidden within a SECURITY DEFINER context. Thanks to Itagaki Takahiro for reporting this vulnerability. Security: CVE-2007-6600 
and CLUSTER) execute as the table owner rather than the calling user, using
the same privilege-switching mechanism already used for SECURITY DEFINER
functions.  The purpose of this change is to ensure that user-defined
functions used in index definitions cannot acquire the privileges of a
superuser account that is performing routine maintenance.  While a function
used in an index is supposed to be IMMUTABLE and thus not able to do anything
very interesting, there are several easy ways around that restriction; and
even if we could plug them all, there would remain a risk of reading sensitive
information and broadcasting it through a covert channel such as CPU usage.

To prevent bypassing this security measure, execution of SET SESSION
AUTHORIZATION and SET ROLE is now forbidden within a SECURITY DEFINER context.

Thanks to Itagaki Takahiro for reporting this vulnerability.

Security: CVE-2007-6600
Provide a more helpful error message when there is an autoconf version 2007-12-31T17:27:48+00:00 Bruce Momjian bruce@momjian.us 2007-12-31T17:27:48+00:00 7146fab2a8b02ffe9e6c715519d59cc12ca4a57a mismatch; backpatch. 
mismatch;  backpatch.
Require a specific Autoconf version, instead of a lower bound only. 2007-11-26T12:04:54+00:00 Peter Eisentraut peter_e@gmx.net 2007-11-26T12:04:54+00:00 70777be20c6f45e81bec45bce9271b863efe02c1 






Fix "Page Layout" table. The second row should be ItemIdData, not
2007-11-23T00:42:56+00:00

Tatsuo Ishii
ishii@postgresql.org

2007-11-23T00:42:56+00:00

a6b6e71fa65c074affa9f15f97a2edeafe1455b7

ItemPointerData.





ItemPointerData.







Have crosstab variants treat NULL rowid as a category in its own right,
2007-11-10T05:02:41+00:00

Joe Conway
mail@joeconway.com

2007-11-10T05:02:41+00:00

75ffb44e7f57e4a993e387c9727b2e9c9d08269d

per suggestion from Tom Lane. This fixes crash-bug reported by Stefan
Schwarzer.





per suggestion from Tom Lane. This fixes crash-bug reported by Stefan
Schwarzer.







Ensure that the result of evaluating a function during constant-expression
2007-10-11T21:28:39+00:00

Tom Lane
tgl@sss.pgh.pa.us

2007-10-11T21:28:39+00:00

b7f1fe6c46c971a89e6a6cfcc629b1ccffeef58f

simplification gets detoasted before it is incorporated into a Const node.
Otherwise, if an immutable function were to return a TOAST pointer (an
unlikely case, but it can be made to happen), we would end up with a plan
that depends on the continued existence of the out-of-line toast datum.





simplification gets detoasted before it is incorporated into a Const node.
Otherwise, if an immutable function were to return a TOAST pointer (an
unlikely case, but it can be made to happen), we would end up with a plan
that depends on the continued existence of the out-of-line toast datum.