From f334490131be5ef1935c56bece186f3afa5fbded Mon Sep 17 00:00:00 2001
From: Tom Lane
Date: Mon, 9 Aug 2021 14:41:00 -0400
Subject: Last-minute updates for release notes.
Security: CVE-2021-3677
---
doc/src/sgml/release-11.sgml | 46 +++++++++++++++++++++++---------------------
1 file changed, 24 insertions(+), 22 deletions(-)
(limited to 'doc/src')
diff --git a/doc/src/sgml/release-11.sgml b/doc/src/sgml/release-11.sgml
index c9870804424..3b2db9421e6 100644
--- a/doc/src/sgml/release-11.sgml
+++ b/doc/src/sgml/release-11.sgml
@@ -35,6 +35,30 @@
+
+ Fix mis-planning of repeated application of a projection step
+ (Tom Lane)
+
+
+
+ The planner could create an incorrect plan in cases where two
+ ProjectionPaths were stacked on top of each other. The only known
+ way to trigger that situation involves parallel sort operations, but
+ there may be other instances. The result would be crashes or
+ incorrect query results.
+ Disclosure of server memory contents is also possible.
+ (CVE-2021-3677)
+
+
+
+
+
-
- Fix mis-planning of repeated application of a projection step
- (Tom Lane)
-
-
-
- The planner could create an incorrect plan in cases where two
- ProjectionPaths were stacked on top of each other. The only known
- way to trigger that situation involves parallel sort operations, but
- there may be other instances. The result would be crashes or
- incorrect query results.
-
-
-
-
-