You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Nathan Bossart 7ad8e79098 Restrict psql meta-commands in plain-text dumps. ... A malicious server could inject psql meta-commands into plain-text dump output (i.e., scripts created with pg_dump --format=plain, pg_dumpall, or pg_restore --file) that are run at restore time on the machine running psql. To fix, introduce a new "restricted" mode in psql that blocks all meta-commands (except for \unrestrict to exit the mode), and teach pg_dump, pg_dumpall, and pg_restore to use this mode in plain-text dumps. While at it, encourage users to only restore dumps generated from trusted servers or to inspect it beforehand, since restoring causes the destination to execute arbitrary code of the source superusers' choice. However, the client running the dump and restore needn't trust the source or destination superusers. Reported-by: Martin Rakhmanov Reported-by: Matthieu Denais <litezeraw@gmail.com> Reported-by: RyotaK <ryotak.mail@gmail.com> Suggested-by: Tom Lane <tgl@sss.pgh.pa.us> Reviewed-by: Noah Misch <noah@leadboat.com> Reviewed-by: Michael Paquier <michael@paquier.xyz> Reviewed-by: Peter Eisentraut <peter@eisentraut.org> Security: CVE-2025-8714 Backpatch-through: 13		5 months ago
..
backend	Translation updates	5 months ago
bin	Restrict psql meta-commands in plain-text dumps.	5 months ago
common	With GB18030, prevent SIGSEGV from reading past end of allocation.	8 months ago
fe_utils	In fmtIdEnc(), handle failure of enlargePQExpBuffer().	11 months ago
include	Fix security checks in selectivity estimation functions.	5 months ago
interfaces	Translation updates	5 months ago
makefiles	…
pl	Translation updates	5 months ago
port	Make our usage of memset_s() conform strictly to the C11 standard.	8 months ago
template	…
test	Restrict psql meta-commands in plain-text dumps.	5 months ago
timezone	Update time zone data files to tzdata release 2025b.	9 months ago
tools	Fix back-patching of memset_s() fixes.	8 months ago
tutorial	…
.gitignore	…
DEVELOPERS	…
Makefile	…
Makefile.global.in	Don't put library-supplied -L/-I switches before user-supplied ones.	6 months ago
Makefile.shlib	…
meson.build	…
nls-global.mk	…