Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Commit1950d5b

Browse files
committed
Last-minute updates for release notes.
Security:CVE-2018-1115
1 parent53b79ab commit1950d5b

File tree

1 file changed

+35
-3
lines changed

1 file changed

+35
-3
lines changed

‎doc/src/sgml/release-9.6.sgml

Lines changed: 35 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -23,9 +23,14 @@
2323
</para>
2424

2525
<para>
26-
However, if the function marking mistakes mentioned in the first two
27-
changelog entries below affect you, you will want to take steps to
28-
correct your database catalogs.
26+
However, if you use the <filename>adminpack</filename> extension,
27+
you should update it as per the first changelog entry below.
28+
</para>
29+
30+
<para>
31+
Also, if the function marking mistakes mentioned in the second and
32+
third changelog entries below affect you, you will want to take steps
33+
to correct your database catalogs.
2934
</para>
3035

3136
<para>
@@ -39,6 +44,33 @@
3944

4045
<itemizedlist>
4146

47+
<listitem>
48+
<para>
49+
Remove public execute privilege
50+
from <filename>contrib/adminpack</filename>'s
51+
<function>pg_logfile_rotate()</function> function (Stephen Frost)
52+
</para>
53+
54+
<para>
55+
<function>pg_logfile_rotate()</function> is a deprecated wrapper
56+
for the core function <function>pg_rotate_logfile()</function>.
57+
When that function was changed to rely on SQL privileges for access
58+
control rather than a hard-coded superuser
59+
check, <function>pg_logfile_rotate()</function> should have been
60+
updated as well, but the need for this was missed. Hence,
61+
if <filename>adminpack</filename> is installed, any user could
62+
request a logfile rotation, creating a minor security issue.
63+
</para>
64+
65+
<para>
66+
After installing this update, administrators should
67+
update <filename>adminpack</filename> by performing
68+
<literal>ALTER EXTENSION adminpack UPDATE</literal> in each
69+
database in which <filename>adminpack</filename> is installed.
70+
(CVE-2018-1115)
71+
</para>
72+
</listitem>
73+
4274
<listitem>
4375
<para>
4476
Fix incorrect volatility markings on a few built-in functions

0 commit comments

Comments
 (0)

[8]ページ先頭

©2009-2025 Movatter.jp