From 934b8508472a6b7175fd49bb2a8e719cb5560be8 Mon Sep 17 00:00:00 2001 From: Tom Lane Date: Mon, 8 Feb 2021 11:10:40 -0500 Subject: [PATCH] Last-minute updates for release notes. Security: CVE-2021-3393, CVE-2021-20229 --- doc/src/sgml/release-11.sgml | 26 +++++++++++++++++++++++++- 1 file changed, 25 insertions(+), 1 deletion(-) diff --git a/doc/src/sgml/release-11.sgml b/doc/src/sgml/release-11.sgml index 2f8bb5a5c04..c655a7f25dd 100644 --- a/doc/src/sgml/release-11.sgml +++ b/doc/src/sgml/release-11.sgml @@ -23,7 +23,7 @@ - However, see the first changelog item below, + However, see the second changelog item below, which describes cases in which reindexing indexes after the upgrade may be advisable. @@ -41,6 +41,30 @@ + + Fix information leakage in constraint-violation error messages + (Heikki Linnakangas) + + + + If an UPDATE command attempts to move a row to a + different partition but finds that it violates some constraint on + the new partition, and the columns in that partition are in + different physical positions than in the parent table, the error + message could reveal the contents of columns that the user does not + have SELECT privilege on. + (CVE-2021-3393) + + + + +