<!--
-$Header: /cvsroot/pgsql/doc/src/sgml/release.sgml,v 1.163.2.42 2007/04/20 02:38:57 tgl Exp $
+$Header: /cvsroot/pgsql/doc/src/sgml/release.sgml,v 1.163.2.43 2007/04/20 03:28:17 tgl Exp $
-->
<appendix id="release">
truly secure value of <varname>search_path</>. Without it,
an unprivileged SQL user can use temporary objects to execute code
with the privileges of the security-definer function (CVE-2007-2138).
- See <xref linkend="sql-createfunction"
- endterm="sql-createfunction-title"> for more information.
+ See <command>CREATE FUNCTION</> for more information.
</para>
</listitem>