Commit47b06ec

committed

Last-minute updates for release notes.

Add entries for security and not-quite-security issues.Security:CVE-2015-5288,CVE-2015-5289

1 parentc415a7c commit47b06ecCopy full SHA for 47b06ec

File tree

+22

-0

lines changed

+22

-0

lines changed

Lines changed: 22 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -40,6 +40,20 @@`
`40`	`40`
`41`	`41`	`<itemizedlist>`
`42`	`42`
	`43`	`+ <listitem>`
	`44`	`+ <para>`
	`45`	`+ Fix <filename>contrib/pgcrypto</> to detect and report`
	`46`	`+ too-short <function>crypt()</> salts (Josh Kupershmidt)`
	`47`	`+ </para>`
	`48`	`+`
	`49`	`+ <para>`
	`50`	`+ Certain invalid salt arguments crashed the server or disclosed a few`
	`51`	`+ bytes of server memory. We have not ruled out the viability of`
	`52`	`+ attacks that arrange for presence of confidential information in the`
	`53`	`+ disclosed bytes, but they seem unlikely. (CVE-2015-5288)`
	`54`	`+ </para>`
	`55`	`+ </listitem>`
	`56`	`+`
`43`	`57`	`<listitem>`
`44`	`58`	`<para>`
`45`	`59`	`Fix subtransaction cleanup after a portal (cursor) belonging to an`
`@@ -124,6 +138,14 @@`
`124`	`138`	`</para>`
`125`	`139`	`</listitem>`
`126`	`140`
	`141`	`+ <listitem>`
	`142`	`+ <para>`
	`143`	`+ Guard against hard-to-reach stack overflows involving record types,`
	`144`	`+ range types, <type>json</>, <type>jsonb</>, <type>tsquery</>,`
	`145`	`+ <type>ltxtquery</> and <type>query_int</> (Noah Misch)`
	`146`	`+ </para>`
	`147`	`+ </listitem>`
	`148`	`+`
`127`	`149`	`<listitem>`
`128`	`150`	`<para>`
`129`	`151`	`Fix handling of <literal>DOW</> and <literal>DOY</> in datetime input`

Comments

(0)