You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Nathan Bossart 4240405068 Restrict psql meta-commands in plain-text dumps. ... A malicious server could inject psql meta-commands into plain-text dump output (i.e., scripts created with pg_dump --format=plain, pg_dumpall, or pg_restore --file) that are run at restore time on the machine running psql. To fix, introduce a new "restricted" mode in psql that blocks all meta-commands (except for \unrestrict to exit the mode), and teach pg_dump, pg_dumpall, and pg_restore to use this mode in plain-text dumps. While at it, encourage users to only restore dumps generated from trusted servers or to inspect it beforehand, since restoring causes the destination to execute arbitrary code of the source superusers' choice. However, the client running the dump and restore needn't trust the source or destination superusers. Reported-by: Martin Rakhmanov Reported-by: Matthieu Denais <litezeraw@gmail.com> Reported-by: RyotaK <ryotak.mail@gmail.com> Suggested-by: Tom Lane <tgl@sss.pgh.pa.us> Reviewed-by: Noah Misch <noah@leadboat.com> Reviewed-by: Michael Paquier <michael@paquier.xyz> Reviewed-by: Peter Eisentraut <peter@eisentraut.org> Security: CVE-2025-8714 Backpatch-through: 13		1 month ago
..
initdb	Translation updates	7 months ago
pg_amcheck	pg_amcheck: Fix inconsistency in memory freeing	7 months ago
pg_archivecleanup	Translation updates	7 months ago
pg_basebackup	Fix bug in archive streamer with LZ4 decompression	2 months ago
pg_checksums	Translation updates	7 months ago
pg_config	Translation updates	7 months ago
pg_controldata	Translation updates	7 months ago
pg_ctl	Translation updates	7 months ago
pg_dump	Restrict psql meta-commands in plain-text dumps.	1 month ago
pg_resetwal	Translation updates	7 months ago
pg_rewind	Translation updates	1 month ago
pg_test_fsync	Translation updates	7 months ago
pg_test_timing	Translation updates	7 months ago
pg_upgrade	Restrict psql meta-commands in plain-text dumps.	1 month ago
pg_verifybackup	Translation updates	1 month ago
pg_waldump	Translation updates	1 month ago
pgbench	Fix assertion failure in pgbench when handling multiple pipeline sync messages.	1 month ago
pgevent	Update copyright for 2022	4 years ago
psql	Restrict psql meta-commands in plain-text dumps.	1 month ago
scripts	Translation updates	4 months ago
Makefile	Update copyright for 2022	4 years ago