delta/postgresql.git, branch REL7_4_26

Tag 7.4.26

2009-09-04T05:33:18+00:00

Final updates of release notes for 8.4.1, 8.3.8, 8.2.14, 8.1.18, 8.0.22,

2009-09-03T22:14:41+00:00

7.4.26.

Disallow RESET ROLE and RESET SESSION AUTHORIZATION inside security-definer

2009-09-03T22:09:06+00:00

functions.

This extends the previous patch that forbade SETting these variables inside
security-definer functions.  RESET is equally a security hole, since it
would allow regaining privileges of the caller; furthermore it can trigger
Assert failures and perhaps other internal errors, since the code is not
expecting these variables to change in such contexts.  The previous patch
did not cover this case because assign hooks don't really have enough
information, so move the responsibility for preventing this into guc.c.

Problem discovered by Heikki Linnakangas.

Security: no CVE assigned yet, extends CVE-2007-6600

Translation updates

2009-09-03T18:49:05+00:00

Improve picksplit debug message

2009-09-02T13:23:13+00:00

Missed this earlier because the translation site was broken for the 7.4
branch.

Update release notes for 7.4.26, 8.0.22, 8.1.18, 8.2.14, 8.3.8, 8.4.1.

2009-08-27T01:26:40+00:00

Fix inclusions of readline/editline header files so that we only attempt to

2009-08-24T16:18:49+00:00

#include the version of history.h that is in the same directory as the
readline.h we are using.  This avoids problems in some scenarios where both
readline and editline are installed.  Report and patch by Zdenek Kotala.

Fix overflow for INTERVAL 'x ms' where x is more than a couple million,

2009-08-18T21:23:58+00:00

and integer datetimes are in use.  Per bug report from Hubert Depesz
Lubaczewski.

Alex Hunsaker

Re-add documentation for --no-readline option of psql, mistakenly removed a decade ago. Backpatch to release 7.4.

2009-08-10T02:39:09+00:00

Try to defend against the possibility that libpq is still in COPY_IN state

2009-08-07T20:16:49+00:00

when we reach the post-COPY "pump it dry" error recovery code that was added
2006-11-24.  Per a report from Neil Best, there is at least one code path
in which this occurs, leading to an infinite loop in code that's supposed
to be making it more robust not less so.  A reasonable response seems to be
to call PQputCopyEnd() again, so let's try that.

Back-patch to all versions that contain the cleanup loop.