pg.ddx.io pgsql-committers@postgresql.org mailing list archive
help / color / mirror / Atom feedpgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
7+ messages / 1 participants
[nested] [flat]
* pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
@ 2024-11-16 04:42 Noah Misch <noah@leadboat.com>
0 siblings, 0 replies; 7+ messages in thread
From: Noah Misch @ 2024-11-16 04:42 UTC (permalink / raw)
To: pgsql-committers@lists.postgresql.org
Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
After commit 5a2fed911a85ed6d8a015a6bafe3a0d9a69334ae, the catalog state
resulting from these commands ceased to affect sessions. Restore the
longstanding behavior, which is like beginning the session with a SET
ROLE command. If cherry-picking the CVE-2024-10978 fixes, default to
including this, too. (This fixes an unintended side effect of fixing
CVE-2024-10978.) Back-patch to v12, like that commit. The release team
decided to include v12, despite the original intent to halt v12 commits
earlier this week.
Tom Lane and Noah Misch. Reported by Etienne LAFARGE.
Discussion: https://postgr.es/m/CADOZwSb0UsEr4_UTFXC5k7=fyyK8uKXekucd+-uuGjJsGBfxgw@mail.gmail.com
Branch
------
REL_15_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/edf80895f6bda824403f843df91cbc83890e4b6c
Modified Files
--------------
src/backend/utils/init/miscinit.c | 20 +++++++++++++-
src/backend/utils/misc/guc.c | 10 ++++++-
src/test/modules/unsafe_tests/Makefile | 5 +++-
.../modules/unsafe_tests/expected/setconfig.out | 31 ++++++++++++++++++++++
src/test/modules/unsafe_tests/sql/setconfig.sql | 24 +++++++++++++++++
5 files changed, 87 insertions(+), 3 deletions(-)
^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
@ 2024-11-16 04:42 Noah Misch <noah@leadboat.com>
0 siblings, 0 replies; 7+ messages in thread
From: Noah Misch @ 2024-11-16 04:42 UTC (permalink / raw)
To: pgsql-committers@lists.postgresql.org
Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
After commit 5a2fed911a85ed6d8a015a6bafe3a0d9a69334ae, the catalog state
resulting from these commands ceased to affect sessions. Restore the
longstanding behavior, which is like beginning the session with a SET
ROLE command. If cherry-picking the CVE-2024-10978 fixes, default to
including this, too. (This fixes an unintended side effect of fixing
CVE-2024-10978.) Back-patch to v12, like that commit. The release team
decided to include v12, despite the original intent to halt v12 commits
earlier this week.
Tom Lane and Noah Misch. Reported by Etienne LAFARGE.
Discussion: https://postgr.es/m/CADOZwSb0UsEr4_UTFXC5k7=fyyK8uKXekucd+-uuGjJsGBfxgw@mail.gmail.com
Branch
------
REL_17_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/1c05004a895308da10ec000ba6b92f72f4f5b8e2
Modified Files
--------------
src/backend/utils/init/miscinit.c | 20 +++++++++++++-
src/backend/utils/misc/guc.c | 10 ++++++-
src/test/modules/unsafe_tests/Makefile | 5 +++-
.../modules/unsafe_tests/expected/setconfig.out | 31 ++++++++++++++++++++++
src/test/modules/unsafe_tests/meson.build | 3 +++
src/test/modules/unsafe_tests/sql/setconfig.sql | 24 +++++++++++++++++
6 files changed, 90 insertions(+), 3 deletions(-)
^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
@ 2024-11-16 04:42 Noah Misch <noah@leadboat.com>
0 siblings, 0 replies; 7+ messages in thread
From: Noah Misch @ 2024-11-16 04:42 UTC (permalink / raw)
To: pgsql-committers@lists.postgresql.org
Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
After commit 5a2fed911a85ed6d8a015a6bafe3a0d9a69334ae, the catalog state
resulting from these commands ceased to affect sessions. Restore the
longstanding behavior, which is like beginning the session with a SET
ROLE command. If cherry-picking the CVE-2024-10978 fixes, default to
including this, too. (This fixes an unintended side effect of fixing
CVE-2024-10978.) Back-patch to v12, like that commit. The release team
decided to include v12, despite the original intent to halt v12 commits
earlier this week.
Tom Lane and Noah Misch. Reported by Etienne LAFARGE.
Discussion: https://postgr.es/m/CADOZwSb0UsEr4_UTFXC5k7=fyyK8uKXekucd+-uuGjJsGBfxgw@mail.gmail.com
Branch
------
REL_14_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/be062bfa54d780c07a3b36c4123da2c960c8e97d
Modified Files
--------------
src/backend/utils/init/miscinit.c | 20 +++++++++++++-
src/backend/utils/misc/guc.c | 10 ++++++-
src/test/modules/unsafe_tests/Makefile | 5 +++-
.../modules/unsafe_tests/expected/setconfig.out | 31 ++++++++++++++++++++++
src/test/modules/unsafe_tests/sql/setconfig.sql | 24 +++++++++++++++++
5 files changed, 87 insertions(+), 3 deletions(-)
^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
@ 2024-11-16 04:42 Noah Misch <noah@leadboat.com>
0 siblings, 0 replies; 7+ messages in thread
From: Noah Misch @ 2024-11-16 04:42 UTC (permalink / raw)
To: pgsql-committers@lists.postgresql.org
Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
After commit 5a2fed911a85ed6d8a015a6bafe3a0d9a69334ae, the catalog state
resulting from these commands ceased to affect sessions. Restore the
longstanding behavior, which is like beginning the session with a SET
ROLE command. If cherry-picking the CVE-2024-10978 fixes, default to
including this, too. (This fixes an unintended side effect of fixing
CVE-2024-10978.) Back-patch to v12, like that commit. The release team
decided to include v12, despite the original intent to halt v12 commits
earlier this week.
Tom Lane and Noah Misch. Reported by Etienne LAFARGE.
Discussion: https://postgr.es/m/CADOZwSb0UsEr4_UTFXC5k7=fyyK8uKXekucd+-uuGjJsGBfxgw@mail.gmail.com
Branch
------
master
Details
-------
https://git.postgresql.org/pg/commitdiff/7b88529f4363994450bd4cd3c172006a8a77e222
Modified Files
--------------
src/backend/utils/init/miscinit.c | 20 +++++++++++++-
src/backend/utils/misc/guc.c | 10 ++++++-
src/test/modules/unsafe_tests/Makefile | 5 +++-
.../modules/unsafe_tests/expected/setconfig.out | 31 ++++++++++++++++++++++
src/test/modules/unsafe_tests/meson.build | 3 +++
src/test/modules/unsafe_tests/sql/setconfig.sql | 24 +++++++++++++++++
6 files changed, 90 insertions(+), 3 deletions(-)
^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
@ 2024-11-16 04:42 Noah Misch <noah@leadboat.com>
0 siblings, 0 replies; 7+ messages in thread
From: Noah Misch @ 2024-11-16 04:42 UTC (permalink / raw)
To: pgsql-committers@lists.postgresql.org
Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
After commit 5a2fed911a85ed6d8a015a6bafe3a0d9a69334ae, the catalog state
resulting from these commands ceased to affect sessions. Restore the
longstanding behavior, which is like beginning the session with a SET
ROLE command. If cherry-picking the CVE-2024-10978 fixes, default to
including this, too. (This fixes an unintended side effect of fixing
CVE-2024-10978.) Back-patch to v12, like that commit. The release team
decided to include v12, despite the original intent to halt v12 commits
earlier this week.
Tom Lane and Noah Misch. Reported by Etienne LAFARGE.
Discussion: https://postgr.es/m/CADOZwSb0UsEr4_UTFXC5k7=fyyK8uKXekucd+-uuGjJsGBfxgw@mail.gmail.com
Branch
------
REL_16_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/b0918c1286d316f6ffa93995452270afd4fc4335
Modified Files
--------------
src/backend/utils/init/miscinit.c | 20 +++++++++++++-
src/backend/utils/misc/guc.c | 10 ++++++-
src/test/modules/unsafe_tests/Makefile | 5 +++-
.../modules/unsafe_tests/expected/setconfig.out | 31 ++++++++++++++++++++++
src/test/modules/unsafe_tests/meson.build | 3 +++
src/test/modules/unsafe_tests/sql/setconfig.sql | 24 +++++++++++++++++
6 files changed, 90 insertions(+), 3 deletions(-)
^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
@ 2024-11-16 04:42 Noah Misch <noah@leadboat.com>
0 siblings, 0 replies; 7+ messages in thread
From: Noah Misch @ 2024-11-16 04:42 UTC (permalink / raw)
To: pgsql-committers@lists.postgresql.org
Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
After commit 5a2fed911a85ed6d8a015a6bafe3a0d9a69334ae, the catalog state
resulting from these commands ceased to affect sessions. Restore the
longstanding behavior, which is like beginning the session with a SET
ROLE command. If cherry-picking the CVE-2024-10978 fixes, default to
including this, too. (This fixes an unintended side effect of fixing
CVE-2024-10978.) Back-patch to v12, like that commit. The release team
decided to include v12, despite the original intent to halt v12 commits
earlier this week.
Tom Lane and Noah Misch. Reported by Etienne LAFARGE.
Discussion: https://postgr.es/m/CADOZwSb0UsEr4_UTFXC5k7=fyyK8uKXekucd+-uuGjJsGBfxgw@mail.gmail.com
Branch
------
REL_13_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/07c6e0f613612ff060572a085c1c24aa44c8b2bb
Modified Files
--------------
src/backend/utils/init/miscinit.c | 20 +++++++++++++-
src/backend/utils/misc/guc.c | 10 ++++++-
src/test/modules/unsafe_tests/Makefile | 5 +++-
.../modules/unsafe_tests/expected/setconfig.out | 31 ++++++++++++++++++++++
src/test/modules/unsafe_tests/sql/setconfig.sql | 24 +++++++++++++++++
5 files changed, 87 insertions(+), 3 deletions(-)
^ permalink raw reply [nested|flat] 7+ messages in thread
* pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
@ 2024-11-16 04:42 Noah Misch <noah@leadboat.com>
0 siblings, 0 replies; 7+ messages in thread
From: Noah Misch @ 2024-11-16 04:42 UTC (permalink / raw)
To: pgsql-committers@lists.postgresql.org
Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
After commit 5a2fed911a85ed6d8a015a6bafe3a0d9a69334ae, the catalog state
resulting from these commands ceased to affect sessions. Restore the
longstanding behavior, which is like beginning the session with a SET
ROLE command. If cherry-picking the CVE-2024-10978 fixes, default to
including this, too. (This fixes an unintended side effect of fixing
CVE-2024-10978.) Back-patch to v12, like that commit. The release team
decided to include v12, despite the original intent to halt v12 commits
earlier this week.
Tom Lane and Noah Misch. Reported by Etienne LAFARGE.
Discussion: https://postgr.es/m/CADOZwSb0UsEr4_UTFXC5k7=fyyK8uKXekucd+-uuGjJsGBfxgw@mail.gmail.com
Branch
------
REL_12_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/c463338656ac47e5210fcf9fbf7d20efccce8de8
Modified Files
--------------
src/backend/utils/init/miscinit.c | 20 +++++++++++++-
src/backend/utils/misc/guc.c | 10 ++++++-
src/test/modules/unsafe_tests/Makefile | 5 +++-
.../modules/unsafe_tests/expected/setconfig.out | 31 ++++++++++++++++++++++
src/test/modules/unsafe_tests/sql/setconfig.sql | 24 +++++++++++++++++
5 files changed, 87 insertions(+), 3 deletions(-)
^ permalink raw reply [nested|flat] 7+ messages in thread
end of thread, other threads:[~2024-11-16 04:42 UTC | newest]
Thread overview: 7+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2024-11-16 04:42 pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role. Noah Misch <noah@leadboat.com>
2024-11-16 04:42 pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role. Noah Misch <noah@leadboat.com>
2024-11-16 04:42 pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role. Noah Misch <noah@leadboat.com>
2024-11-16 04:42 pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role. Noah Misch <noah@leadboat.com>
2024-11-16 04:42 pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role. Noah Misch <noah@leadboat.com>
2024-11-16 04:42 pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role. Noah Misch <noah@leadboat.com>
2024-11-16 04:42 pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role. Noah Misch <noah@leadboat.com>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox