|
36 | 36 | <listitem> |
37 | 37 | <!-- |
38 | 38 | Author: Alvaro Herrera <alvherre@alvh.no-ip.org> |
| 39 | +Branch: master [b048f558d] 2020-02-10 11:47:09 -0300 |
| 40 | +Branch: REL_12_STABLE [2ad125322] 2020-02-10 11:47:09 -0300 |
| 41 | +Branch: REL_11_STABLE [bdd19e48a] 2020-02-10 11:47:09 -0300 |
| 42 | +Branch: REL_10_STABLE [ac1a998ed] 2020-02-10 11:47:09 -0300 |
| 43 | +Branch: REL9_6_STABLE [e8b8eb937] 2020-02-10 12:06:25 -0300 |
| 44 | +--> |
| 45 | + <para> |
| 46 | + Add missing permissions checks for <command>ALTER ... DEPENDS ON |
| 47 | + EXTENSION</command> (Álvaro Herrera) |
| 48 | + </para> |
| 49 | + |
| 50 | + <para> |
| 51 | + Marking an object as dependent on an extension did not have any |
| 52 | + privilege check whatsoever. This oversight allowed any user to mark |
| 53 | + routines, triggers, materialized views, or indexes as droppable by |
| 54 | + anyone able to drop an extension. Require that the calling user own |
| 55 | + the specified object (and hence have privilege to drop it). |
| 56 | + (CVE-2020-1720) |
| 57 | + </para> |
| 58 | + </listitem> |
| 59 | + |
| 60 | + <listitem> |
| 61 | +<!-- |
| 62 | +Author: Alvaro Herrera <alvherre@alvh.no-ip.org> |
39 | 63 | Branch: master [1fa846f1c] 2020-01-02 17:04:24 -0300 |
40 | 64 | Branch: REL_12_STABLE [d73214839] 2020-01-02 17:04:24 -0300 |
41 | 65 | Branch: REL_11_STABLE [adc9cb6f2] 2020-01-02 17:04:24 -0300 |
@@ -925,6 +949,24 @@ Branch: REL9_4_STABLE [56c06999d] 2019-11-13 11:35:37 -0500 |
925 | 949 |
|
926 | 950 | <listitem> |
927 | 951 | <!-- |
| 952 | +Author: Alvaro Herrera <alvherre@alvh.no-ip.org> |
| 953 | +Branch: master [8fa8e0115] 2020-02-10 12:14:58 -0300 |
| 954 | +Branch: REL_12_STABLE [87d014da9] 2020-02-10 12:14:58 -0300 |
| 955 | +Branch: REL_11_STABLE [ca902add6] 2020-02-10 12:14:58 -0300 |
| 956 | +Branch: REL_10_STABLE [163161723] 2020-02-10 12:14:58 -0300 |
| 957 | +Branch: REL9_6_STABLE [5575fc208] 2020-02-10 12:14:58 -0300 |
| 958 | +Branch: REL9_5_STABLE [1b2ae4bcd] 2020-02-10 12:16:40 -0300 |
| 959 | +Branch: REL9_4_STABLE [6f1e443a6] 2020-02-10 12:14:58 -0300 |
| 960 | +--> |
| 961 | + <para> |
| 962 | + Apply more thorough syntax checking |
| 963 | + to <application>createuser</application>'s |
| 964 | + <option>--connection-limit</option> option (Álvaro Herrera) |
| 965 | + </para> |
| 966 | + </listitem> |
| 967 | + |
| 968 | + <listitem> |
| 969 | +<!-- |
928 | 970 | Author: Tom Lane <tgl@sss.pgh.pa.us> |
929 | 971 | Branch: master [4ba4bfaf2] 2019-12-26 15:19:39 -0500 |
930 | 972 | Branch: REL_12_STABLE [883c27a1c] 2019-12-26 15:19:39 -0500 |
|