From f6ba576114171c36fbaad06640192c25a5f71229 Mon Sep 17 00:00:00 2001 From: Tom Lane Date: Thu, 27 Jan 2011 17:45:55 -0500 Subject: [PATCH] Update release notes. Security: CVE-2010-4015 --- doc/src/sgml/release-8.2.sgml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/doc/src/sgml/release-8.2.sgml b/doc/src/sgml/release-8.2.sgml index dd82ee69d3a..2dd49d6a063 100644 --- a/doc/src/sgml/release-8.2.sgml +++ b/doc/src/sgml/release-8.2.sgml @@ -100,6 +100,19 @@ + + + Fix buffer overrun in contrib/intarray's input function + for the query_int type (Apple) + + + + This bug is a security risk since the function's return address could + be overwritten. Thanks to Apple Inc's security team for reporting this + issue and supplying the fix. (CVE-2010-4015) + + + Fix bug in contrib/seg's GiST picksplit algorithm -- 2.39.5