From 2da33cbd52aaf5cbc4bc6c4e42e8879ee75a859d Mon Sep 17 00:00:00 2001 From: Tom Lane Date: Mon, 5 Nov 2018 10:48:23 -0500 Subject: [PATCH] Last-minute updates for release notes. Security: CVE-2018-16850 --- doc/src/sgml/release-10.sgml | 41 ++++++++++++++++++----- doc/src/sgml/release-11.sgml | 65 ++++++++++++++++++++++++++++-------- 2 files changed, 84 insertions(+), 22 deletions(-) diff --git a/doc/src/sgml/release-10.sgml b/doc/src/sgml/release-10.sgml index b18626fb69..c268ec2a0e 100644 --- a/doc/src/sgml/release-10.sgml +++ b/doc/src/sgml/release-10.sgml @@ -38,6 +38,20 @@ + + + Ensure proper quoting of transition table names + when pg_dump emits CREATE TRIGGER + ... REFERENCING commands (Tom Lane) + + + + This oversight could be exploited by an unprivileged user to gain + superuser privileges during the next dump/reload + or pg_upgrade run. (CVE-2018-16850) + + + + + Ensure proper quoting of transition table names + when pg_dump emits CREATE TRIGGER + ... REFERENCING commands (Tom Lane) + + + + This oversight could be exploited by an unprivileged user to gain + superuser privileges during the next dump/reload + or pg_upgrade run. (CVE-2018-16850) + + + + + + + Prevent creation of a partition in a trigger attached to its parent + table (Amit Langote) + + + + Ideally we'd allow that, but for the moment it has to be blocked to + avoid crashes. + + + + + + + Fix problems with applying ON COMMIT DELETE ROWS to + a partitioned temporary table (Amit Langote) + + + + + - - Ensure proper quoting of transition table names - when pg_dump emits CREATE TRIGGER - ... REFERENCING commands (Tom Lane) - - - - -