You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Masahiko Sawada 66e94448ab Restrict accesses to non-system views and foreign tables during pg_dump. ... When pg_dump retrieves the list of database objects and performs the data dump, there was possibility that objects are replaced with others of the same name, such as views, and access them. This vulnerability could result in code execution with superuser privileges during the pg_dump process. This issue can arise when dumping data of sequences, foreign tables (only 13 or later), or tables registered with a WHERE clause in the extension configuration table. To address this, pg_dump now utilizes the newly introduced restrict_nonsystem_relation_kind GUC parameter to restrict the accesses to non-system views and foreign tables during the dump process. This new GUC parameter is added to back branches too, but these changes do not require cluster recreation. Back-patch to all supported branches. Reviewed-by: Noah Misch Security: CVE-2024-7348 Backpatch-through: 12		1 year ago
..
expected	Restrict accesses to non-system views and foreign tables during pg_dump.	1 year ago
sql	Restrict accesses to non-system views and foreign tables during pg_dump.	1 year ago
.gitignore	…
Makefile	postgres_fdw: Add "used_in_xact" column to postgres_fdw_get_connections().	1 year ago
connection.c	postgres_fdw: Fix bug in connection status check.	1 year ago
deparse.c	Fixup various StringInfo function usages	2 years ago
meson.build	postgres_fdw: Add "used_in_xact" column to postgres_fdw_get_connections().	1 year ago
option.c	Update copyright for 2024	2 years ago
postgres_fdw--1.0--1.1.sql	postgres_fdw: Add functions to discard cached connections.	5 years ago
postgres_fdw--1.0.sql	…
postgres_fdw--1.1--1.2.sql	postgres_fdw: Add connection status check to postgres_fdw_get_connections().	1 year ago
postgres_fdw.c	postgres_fdw: Avoid "cursor can only scan forward" error.	1 year ago
postgres_fdw.control	postgres_fdw: Add "used_in_xact" column to postgres_fdw_get_connections().	1 year ago
postgres_fdw.h	Make dblink interruptible, via new libpqsrv APIs.	2 years ago
shippable.c	Update copyright for 2024	2 years ago