user/sven/postgresql.git

Age	Commit message (Collapse)	Author
2018-02-26	Empty search_path in Autovacuum and non-psql/pgbench clients.	Noah Misch
	This makes the client programs behave as documented regardless of the connect-time search_path and regardless of user-created objects. Today, a malicious user with CREATE permission on a search_path schema can take control of certain of these clients' queries and invoke arbitrary SQL functions under the client identity, often a superuser. This is exploitable in the default configuration, where all users have CREATE privilege on schema "public". This changes behavior of user-defined code stored in the database, like pg_index.indexprs and pg_extension_config_dump(). If they reach code bearing unqualified names, "does not exist" or "no schema has been selected to create in" errors might appear. Users may fix such errors by schema-qualifying affected names. After upgrading, consider watching server logs for these errors. The --table arguments of src/bin/scripts clients have been lax; for example, "vacuumdb -Zt pg_am\;CHECKPOINT" performed a checkpoint. That now fails, but for now, "vacuumdb -Zt 'pg_am(amname);CHECKPOINT'" still performs a checkpoint. Back-patch to 9.3 (all supported versions). Reviewed by Tom Lane, though this fix strategy was not his first choice. Reported by Arseniy Sharoglazov. Security: CVE-2018-1058
2015-01-06	Update copyright for 2015	Bruce Momjian
	Backpatch certain files through 9.0
2014-01-07	Update copyright for 2014	Bruce Momjian
	Update all files in head, and files COPYRIGHT and legal.sgml in all back branches.
2013-01-01	Update copyrights for 2013	Bruce Momjian
	Fully update git head, and update back branches in ./COPYRIGHT and legal.sgml files.
2012-01-01	Update copyright notices for year 2012.	Bruce Momjian

2011-04-23	Improve findoidjoins to cover more cases.	Tom Lane
	Teach the program and script to deal with OID-array referencing columns, which we now have several of. Also, modify the recommended usage process to specify that the program should be run against the regression database rather than template1. This lets it find numerous joins that cannot be found in template1 because the relevant catalogs are entirely empty. Together these changes add seventeen formerly-missed cases to the oidjoins regression test.
2011-01-01	Stamp copyrights for year 2011.	Bruce Momjian

2010-09-20	Remove cvs keywords from all files.	Magnus Hagander

2010-01-02	Update copyright for the year 2010.	Bruce Momjian

2009-01-01	Update copyright for 2009.	Bruce Momjian

2008-01-01	Update copyrights in source tree to 2008.	Bruce Momjian

2007-08-21	Tsearch2 functionality migrates to core. The bulk of this work is by	Tom Lane
	Oleg Bartunov and Teodor Sigaev, but I did a lot of editorializing, so anything that's broken is probably my fault. Documentation is nonexistent as yet, but let's land the patch so we can get some portability testing done.
2007-01-05	Update CVS HEAD for 2007 copyright. Back branches are typically not	Bruce Momjian
	back-stamped for this.
2006-03-05	Update copyright for 2006. Update scripts.	Bruce Momjian

2005-10-15	Standard pgindent run for 8.1.	Bruce Momjian

2005-06-23	Move findoidjoins out of contrib and into src/tools, which is a more	Tom Lane
	logical place for it since it is of no use to users. Per recent discussions on cleaning up contrib.