diff options
| author | Nathan Bossart <nathan@postgresql.org> | 2025-11-10 09:00:00 -0600 |
|---|---|---|
| committer | Nathan Bossart <nathan@postgresql.org> | 2025-11-10 09:00:00 -0600 |
| commit | 5e4fcbe531c668b4112beedde97aac79724074c5 (patch) | |
| tree | e7730d86b4273314d18202fad67e4524b1ec6324 /src/backend/tcop/utility.c | |
| parent | 600086f471a3bb57ff4953accf1d3f8d2efe0201 (diff) | |
Check for CREATE privilege on the schema in CREATE STATISTICS.
This omission allowed table owners to create statistics in any
schema, potentially leading to unexpected naming conflicts. For
ALTER TABLE commands that require re-creating statistics objects,
skip this check in case the user has since lost CREATE on the
schema. The addition of a second parameter to CreateStatistics()
breaks ABI compatibility, but we are unaware of any impacted
third-party code.
Reported-by: Jelte Fennema-Nio <postgres@jeltef.nl>
Author: Jelte Fennema-Nio <postgres@jeltef.nl>
Co-authored-by: Nathan Bossart <nathandbossart@gmail.com>
Reviewed-by: Noah Misch <noah@leadboat.com>
Reviewed-by: Álvaro Herrera <alvherre@kurilemu.de>
Security: CVE-2025-12817
Backpatch-through: 13
Diffstat (limited to 'src/backend/tcop/utility.c')
| -rw-r--r-- | src/backend/tcop/utility.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/backend/tcop/utility.c b/src/backend/tcop/utility.c index 082967c0a86..d18a3a60a46 100644 --- a/src/backend/tcop/utility.c +++ b/src/backend/tcop/utility.c @@ -1900,7 +1900,7 @@ ProcessUtilitySlow(ParseState *pstate, /* Run parse analysis ... */ stmt = transformStatsStmt(relid, stmt, queryString); - address = CreateStatistics(stmt); + address = CreateStatistics(stmt, true); } break; |