PostgreSQL security fix timeline
Public commits from postgres/postgres whose messages cite a vulnerability or a security fix. Patch text is not stored.
58 security-fix timeline events
Dec 28, 2024 · CVE-2024-10978
Exclude parallel workers from connection privilege/limit checks.
Exclude parallel workers from connection privilege/limit checks. Cause parallel workers to not check datallowconn, rolcanlogin, and ACL_CONNECT privileges. The leader already checked these things (except for rolcanlogin which might have been checked for a different role). Re-ch…
Nov 16, 2024 · CVE-2024-10978
Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
Fix per-session activation of ALTER {ROLE|DATABASE} SET role. After commit 5a2fed911a85ed6d8a015a6bafe3a0d9a69334ae, the catalog state resulting from these commands ceased to affect sessions. Restore the longstanding behavior, which is like beginning the session with a SET ROLE…
Nov 11, 2024 · CVE-2024-10978
Parallel workers use AuthenticatedUserId for connection privilege checks.
Parallel workers use AuthenticatedUserId for connection privilege checks. Commit 5a2fed911 had an unexpected side-effect: the parallel worker launched for the new test case would fail if it couldn't use a superuser-reserved connection slot. The reason that test failed while all…
Nov 11, 2024 · CVE-2024-10979
Fix cross-version upgrade tests.
Fix cross-version upgrade tests. TestUpgradeXversion knows how to make the main regression database's references to pg_regress.so be version-independent. But it doesn't do that for plperl's database, so that the C function added by commit b7e3a52a8 is causing cross-version upgr…
Nov 11, 2024 · CVE-2024-10979
Avoid bizarre meson behavior with backslashes in command arguments.
Avoid bizarre meson behavior with backslashes in command arguments. meson makes the backslashes in text2macro.pl's --strip argument into forward slashes, effectively disabling comment stripping. That hasn't caused us issues before, but it breaks the test case for b7e3a52a8. We…
Nov 11, 2024 · CVE-2024-10978
Fix improper interactions between session_authorization and role.
Fix improper interactions between session_authorization and role. The SQL spec mandates that SET SESSION AUTHORIZATION implies SET ROLE NONE. We tried to implement that within the lowest-level functions that manipulate these settings, but that was a bad idea. In particular, guc…
Nov 11, 2024 · CVE-2024-10977
libpq: Bail out during SSL/GSS negotiation errors
libpq: Bail out during SSL/GSS negotiation errors This commit changes libpq so that errors reported by the backend during the protocol negotiation for SSL and GSS are discarded by the client, as these may include bytes that could be consumed by the client and write arbitrary by…
Nov 11, 2024 · CVE-2024-10976
Ensure cached plans are correctly marked as dependent on role.
Ensure cached plans are correctly marked as dependent on role. If a CTE, subquery, sublink, security invoker view, or coercion projection references a table with row-level security policies, we neglected to mark the plan as potentially dependent on which role is executing it. T…
Nov 11, 2024 · CVE-2024-10979
Block environment variable mutations from trusted PL/Perl.
Block environment variable mutations from trusted PL/Perl. Many process environment variables (e.g. PATH), bypass the containment expected of a trusted PL. Hence, trusted PLs must not offer features that achieve setenv(). Otherwise, an attacker having USAGE privilege on the lan…
Aug 5, 2024 · CVE-2024-7348
Restrict accesses to non-system views and foreign tables during pg_dump.
Restrict accesses to non-system views and foreign tables during pg_dump. When pg_dump retrieves the list of database objects and performs the data dump, there was possibility that objects are replaced with others of the same name, such as views, and access them. This vulnerabil…