diff options
| author | Tom Lane | 2017-08-07 14:19:01 +0000 |
|---|---|---|
| committer | Tom Lane | 2017-08-07 14:19:19 +0000 |
| commit | 8d9881911f0d30e0783a6bb1363b94a2c817433d (patch) | |
| tree | 90d5c2e6f403433d8c308cd9fd524b499f74ad9c /src/include/postgres.h | |
| parent | e568e1eee4650227170cf8c64eedb74bafd7d1f0 (diff) | |
Require update permission for the large object written by lo_put().
lo_put() surely should require UPDATE permission, the same as lowrite(),
but it failed to check for that, as reported by Chapman Flack. Oversight
in commit c50b7c09d; backpatch to 9.4 where that was introduced.
Tom Lane and Michael Paquier
Security: CVE-2017-7548
Diffstat (limited to 'src/include/postgres.h')
0 files changed, 0 insertions, 0 deletions