diff options
Diffstat (limited to 'doc/src/sgml/release-9.4.sgml')
| -rw-r--r-- | doc/src/sgml/release-9.4.sgml | 42 |
1 files changed, 42 insertions, 0 deletions
diff --git a/doc/src/sgml/release-9.4.sgml b/doc/src/sgml/release-9.4.sgml index ab47dc50ddd..d8b6b1777c7 100644 --- a/doc/src/sgml/release-9.4.sgml +++ b/doc/src/sgml/release-9.4.sgml @@ -35,6 +35,48 @@ <listitem> <para> + Fix crash due to rowtype mismatch + in <function>json{b}_populate_recordset()</function> + (Michael Paquier, Tom Lane) + </para> + + <para> + These functions used the result rowtype specified in the <literal>FROM + ... AS</literal> clause without checking that it matched the actual + rowtype of the supplied tuple value. If it didn't, that would usually + result in a crash, though disclosure of server memory contents seems + possible as well. + (CVE-2017-15098) + </para> + </listitem> + + <listitem> + <para> + Fix sample server-start scripts to become <literal>$PGUSER</literal> + before opening <literal>$PGLOG</literal> (Noah Misch) + </para> + + <para> + Previously, the postmaster log file was opened while still running as + root. The database owner could therefore mount an attack against + another system user by making <literal>$PGLOG</literal> be a symbolic + link to some other file, which would then become corrupted by appending + log messages. + </para> + + <para> + By default, these scripts are not installed anywhere. Users who have + made use of them will need to manually recopy them, or apply the same + changes to their modified versions. If the + existing <literal>$PGLOG</literal> file is root-owned, it will need to + be removed or renamed out of the way before restarting the server with + the corrected script. + (CVE-2017-12172) + </para> + </listitem> + + <listitem> + <para> Fix crash when logical decoding is invoked from a SPI-using function, in particular any function written in a PL language (Tom Lane) |