postgres-github.git / summary / log / commit / refs

commit    4793fc41f82893b059bd59739bdcbe3d58c4df7e
Author:   Nathan Bossart <nathan@postgresql.org>
Commit:   Noah Misch <noah@leadboat.com>
Date:     Mon May 11 12:13:47 2026 +0000

    Check CREATE privilege on multirange type schema in CREATE TYPE.
    
    This omission allowed roles to create multirange types in any
    schema, potentially leading to privilege escalations.  Note that
    when a multirange type name is not specified in CREATE TYPE, it is
    automatically placed in the range type's schema, which is checked
    at the beginning of DefineRange().
    
    Reported-by: Jelte Fennema-Nio <postgres@jeltef.nl>
    Author: Jelte Fennema-Nio <postgres@jeltef.nl>
    Reviewed-by: Nathan Bossart <nathandbossart@gmail.com>
    Reviewed-by: Tomas Vondra <tomas@vondra.me>
    Security: CVE-2026-6472
    Backpatch-through: 14

[parent: d389415ffad5]