has_column_privilege() was additionally capable of crashing on some platforms.įix pg_get_partition_constraintdef() to return NULL rather than fail when passed an invalid relation OID (Tom Lane)Īvoid O(N^2) slowdown in regular expression match/split functions on long strings (Andrew Gierth)įix parsing of standard multi-character operators that are immediately followed by a comment or + or - (Andrew Gierth) Some of these functions got that right already, but not all. Return NULL rather than throwing an error when an invalid object OID is provided. (CVE-2018-16850)įix corner-case failures in has_ foo_privilege() family of functions (Tom Lane) This oversight could be exploited by an unprivileged user to gain superuser privileges during the next dump/reload or pg_upgrade run. However, if you use the pg_stat_statements extension, see the changelog entry below about that.Īlso, if you are upgrading from a version earlier than 10.4, see Section E.15.Įnsure proper quoting of transition table names when pg_dump emits CREATE TRIGGER. For information about new features in major release 10, see Section E.19.Ī dump/restore is not required for those running 10.X.
This release contains a variety of fixes from 10.5.
0 kommentar(er)
