From b5576e1b701c8d690ed1ea8d3c17d5df49de3d7c Mon Sep 17 00:00:00 2001
From: Tom Lane
Date: Mon, 9 May 2022 14:29:53 -0400
Subject: Last-minute updates for release notes.
Security: CVE-2022-1552
---
doc/src/sgml/release-11.sgml | 81 ++++++++++++++++++++++++++++++++------------
1 file changed, 59 insertions(+), 22 deletions(-)
diff --git a/doc/src/sgml/release-11.sgml b/doc/src/sgml/release-11.sgml
index f72df507214..4bd7021c5cd 100644
--- a/doc/src/sgml/release-11.sgml
+++ b/doc/src/sgml/release-11.sgml
@@ -35,6 +35,49 @@
+
+ Confine additional operations within security restricted
+ operation
sandboxes (Sergey Shinderuk, Noah Misch)
+
+
+
+ Autovacuum, CLUSTER, CREATE
+ INDEX, REINDEX, REFRESH
+ MATERIALIZED VIEW,
+ and pg_amcheck activated
+ the security restricted operation
protection
+ mechanism too late, or even not at all in some code paths.
+ A user having permission to create non-temporary objects within a
+ database could define an object that would execute arbitrary SQL
+ code with superuser permissions the next time that autovacuum
+ processed the object, or that some superuser ran one of the affected
+ commands against it.
+
+
+
+ The PostgreSQL Project thanks
+ Alexander Lakhin for reporting this problem.
+ (CVE-2022-1552)
+
+
+
+
+
-
- Disallow infinite endpoints in the timestamp variants
- of generate_series() (Tom Lane)
-
-
-
- Previously, such a call would run until canceled (or
- out-of-disk-space). The numeric variant already threw an error for
- an infinite endpoint value, so do likewise for timestamps.
-
-
-
-
-
+
+ Avoid core dump in parser for a VALUES clause with
+ zero columns (Tom Lane)
+
+
+
+
+