8000 Update release notes for security-related releases in all active bran… · danielcode/postgres@c073131 · GitHub
[go: up one dir, main page]
Skip to content

Commit c073131

Browse files
tglsfdctglsfdc
committed
Update release notes for security-related releases in all active branches.
Security: CVE-2007-0555, CVE-2007-0556
1 parent 6be5429 commit c073131

File tree

1 file changed

+63
-1
lines changed

1 file changed

+63
-1
lines changed

‎doc/src/sgml/release.sgml

Lines changed: 63 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,72 @@
11
<!--
2-
$Header: /cvsroot/pgsql/doc/src/sgml/release.sgml,v 1.163.2.38 2007/01/06 04:15:43 momjian Exp $
2+
$Header: /cvsroot/pgsql/doc/src/sgml/release.sgml,v 1.163.2.39 2007/02/02 00:11:14 tgl Exp $
33
-->
44

55
<appendix id="release">
66
<title>Release Notes</title>
77

8+
<sect1 id="release-7-3-18">
9+
<title>Release 7.3.18</title>
10+
11+
<note>
12+
<title>Release date</title>
13+
<simpara>2007-02-05</simpara>
14+
</note>
15+
16+
<para>
17+
This release contains a variety of fixes from 7.3.17, including
18+
a security fix.
19+
</para>
20+
21+
<sect2>
22+
<title>Migration to version 7.3.18</title>
23+
24+
<para>
25+
A dump/restore is not required for those running 7.3.X. However,
26+
if you are upgrading from a version earlier than 7.3.13, see the release
27+
notes for 7.3.13.
28+
</para>
29+
30+
</sect2>
31+
32+
<sect2>
33+
<title>Changes</title>
34+
35+
<itemizedlist>
36+
37+
<listitem>
38+
<para>
39+
Remove security vulnerability that allowed connected users
40+
to read backend memory (Tom)
41+
</para>
42+
<para>
43+
The vulnerability involves changing the
44+
data type of a table column used in a SQL function (CVE-2007-0555).
45+
This error can easily be exploited to cause a backend crash, and in
46+
principle might be used to read database content that the user
47+
should not be able to access.
48+
</para>
49+
</listitem>
50+
51+
<listitem>
52+
<para>
53+
Fix rare bug wherein btree index page splits could fail
54+
due to choosing an infeasible split point (Heikki Linnakangas)
55+
</para>
56+
</listitem>
57+
58+
<listitem>
59+
<para>
60+
Tighten security of multi-byte character processing for UTF8 sequences
61+
over three bytes long (Tom)
62+
</para>
63+
</listitem>
64+
65+
</itemizedlist>
66+
67+
</sect2>
68+
</sect1>
69+
870
<sect1 id="release-7-3-17">
971
<title>Release 7.3.17</title>
1072

0 commit comments

Comments
 (0)
0