From db034c2e2e45216439c14e2b7bb99260914d610f Mon Sep 17 00:00:00 2001 From: Tom Lane Date: Mon, 9 May 2022 14:29:53 -0400 Subject: [PATCH] Last-minute updates for release notes. Security: CVE-2022-1552 --- doc/src/sgml/release-10.sgml | 81 ++++++++++++++++++++++++++---------- 1 file changed, 59 insertions(+), 22 deletions(-) diff --git a/doc/src/sgml/release-10.sgml b/doc/src/sgml/release-10.sgml index b937d740c4f..577ad1a3c36 100644 --- a/doc/src/sgml/release-10.sgml +++ b/doc/src/sgml/release-10.sgml @@ -41,6 +41,49 @@ + + Confine additional operations within security restricted + operation sandboxes (Sergey Shinderuk, Noah Misch) + + + + Autovacuum, CLUSTER, CREATE + INDEX, REINDEX, REFRESH + MATERIALIZED VIEW, + and pg_amcheck activated + the security restricted operation protection + mechanism too late, or even not at all in some code paths. + A user having permission to create non-temporary objects within a + database could define an object that would execute arbitrary SQL + code with superuser permissions the next time that autovacuum + processed the object, or that some superuser ran one of the affected + commands against it. + + + + The PostgreSQL Project thanks + Alexander Lakhin for reporting this problem. + (CVE-2022-1552) + + + + + - - Disallow infinite endpoints in the timestamp variants - of generate_series() (Tom Lane) - - - - Previously, such a call would run until canceled (or - out-of-disk-space). The numeric variant already threw an error for - an infinite endpoint value, so do likewise for timestamps. - - - - - + + Avoid core dump in parser for a VALUES clause with + zero columns (Tom Lane) + + + + +