delta/postgresql.git, branch REL8_2_17

tag 8.2.17

2010-05-14T03:32:06+00:00

Fix MSVC builds for recent plperl changes. Go back to version 8.2, which is

2010-05-13T21:34:55+00:00

where we started supporting MSVC builds.

Security: CVE-2010-1169

Update release notes with security issues.

2010-05-13T21:27:22+00:00

Security: CVE-2010-1169, CVE-2010-1170

Use an entity instead of non-ASCII letter. Thom Brown

2010-05-13T19:16:32+00:00

Prevent PL/Tcl from loading the "unknown" module from pltcl_modules unless

2010-05-13T18:29:31+00:00

that is a regular table or view owned by a superuser.  This prevents a
trojan horse attack whereby any unprivileged SQL user could create such a
table and insert code into it that would then get executed in other users'
sessions whenever they call pltcl functions.

Worse yet, because the code was automatically loaded into both the "normal"
and "safe" interpreters at first use, the attacker could execute unrestricted
Tcl code in the "normal" interpreter without there being any pltclu functions
anywhere, or indeed anyone else using pltcl at all: installing pltcl is
sufficient to open the hole.  Change the initialization logic so that the
"unknown" code is only loaded into an interpreter when the interpreter is
first really used.  (That doesn't add any additional security in this
particular context, but it seems a prudent change, and anyway the former
behavior violated the principle of least astonishment.)

Security: CVE-2010-1170

Abandon the use of Perl's Safe.pm to enforce restrictions in plperl, as it is

2010-05-13T16:43:14+00:00

fundamentally insecure. Instead apply an opmask to the whole interpreter that
imposes restrictions on unsafe operations. These restrictions are much harder
to subvert than is Safe.pm, since there is no container to be broken out of.
Backported to release 7.4.

In releases 7.4, 8.0 and 8.1 this also includes the necessary backporting of
the two interpreters model for plperl and plperlu adopted in release 8.2.

In versions 8.0 and up, the use of Perl's POSIX module to undo its locale
mangling on Windows has become insecure with these changes, so it is
replaced by our own routine, which is also faster.

Nice side effects of the changes include that it is now possible to use perl's
"strict" pragma in a natural way in plperl, and that perl's $a and
$b variables now work as expected in sort routines, and that function
compilation is significantly faster.

Tim Bunce and Andrew Dunstan, with reviews from Alex Hunsaker and
Alexey Klyukin.

Security: CVE-2010-1169

Fix some spelling errors.

2010-05-13T14:16:45+00:00

Thom Brown

Translation update

2010-05-13T07:32:39+00:00

Preliminary release notes for releases 8.4.4, 8.3.11, 8.2.17, 8.1.21, 8.0.25,

2010-05-12T23:27:43+00:00

7.4.29.

Update time zone data files to tzdata release 2010j: DST law changes in

2010-05-11T23:01:49+00:00

Argentina, Australian Antarctic, Bangladesh, Mexico, Morocco, Pakistan,
Palestine, Russia, Syria, Tunisia.  Historical corrections for Taiwan.