agora inbox for pgsql-committers@postgresql.orghelp / color / mirror / Atom feed
pgsql: Check for USAGE privilege on the composite type in ALTER TABLE O 6+ messages / 1 participants [nested] [flat]
* pgsql: Check for USAGE privilege on the composite type in ALTER TABLE O @ 2026-08-10 13:41 Noah Misch <noah@leadboat.com> 0 siblings, 0 replies; 6+ messages in thread From: Noah Misch @ 2026-08-10 13:41 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Check for USAGE privilege on the composite type in ALTER TABLE OF. This omission allowed roles without USAGE on a type to create tables that depend on it, which could prevent the owner from changing the type later. Reported-by: Nathan Bossart <nathandbossart@gmail.com> Author: Nathan Bossart <nathandbossart@gmail.com> Reviewed-by: Robert Haas <robertmhaas@gmail.com> Security: CVE-2026-6470 Backpatch-through: 14 Branch ------ master Details ------- https://git.postgresql.org/pg/commitdiff/53ed5ebd84fb24cae5bc6cc5a6d75edcecc9884b Author: Nathan Bossart <nathan@postgresql.org> Modified Files -------------- src/backend/commands/tablecmds.c | 5 +++++ src/test/regress/expected/privileges.out | 6 ++++++ src/test/regress/sql/privileges.sql | 5 +++++ 3 files changed, 16 insertions(+) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgsql: Check for USAGE privilege on the composite type in ALTER TABLE O @ 2026-08-10 13:41 Noah Misch <noah@leadboat.com> 0 siblings, 0 replies; 6+ messages in thread From: Noah Misch @ 2026-08-10 13:41 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Check for USAGE privilege on the composite type in ALTER TABLE OF. This omission allowed roles without USAGE on a type to create tables that depend on it, which could prevent the owner from changing the type later. Reported-by: Nathan Bossart <nathandbossart@gmail.com> Author: Nathan Bossart <nathandbossart@gmail.com> Reviewed-by: Robert Haas <robertmhaas@gmail.com> Security: CVE-2026-6470 Backpatch-through: 14 Branch ------ REL_19_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/bb1bc525dc01985efeda58a3e613e381146df6a7 Author: Nathan Bossart <nathan@postgresql.org> Modified Files -------------- src/backend/commands/tablecmds.c | 5 +++++ src/test/regress/expected/privileges.out | 6 ++++++ src/test/regress/sql/privileges.sql | 5 +++++ 3 files changed, 16 insertions(+) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgsql: Check for USAGE privilege on the composite type in ALTER TABLE O @ 2026-08-10 13:41 Noah Misch <noah@leadboat.com> 0 siblings, 0 replies; 6+ messages in thread From: Noah Misch @ 2026-08-10 13:41 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Check for USAGE privilege on the composite type in ALTER TABLE OF. This omission allowed roles without USAGE on a type to create tables that depend on it, which could prevent the owner from changing the type later. Reported-by: Nathan Bossart <nathandbossart@gmail.com> Author: Nathan Bossart <nathandbossart@gmail.com> Reviewed-by: Robert Haas <robertmhaas@gmail.com> Security: CVE-2026-6470 Backpatch-through: 14 Branch ------ REL_18_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/57f59ca1d954f2de7ac3ef8971046778c955613a Author: Nathan Bossart <nathan@postgresql.org> Modified Files -------------- src/backend/commands/tablecmds.c | 5 +++++ src/test/regress/expected/privileges.out | 6 ++++++ src/test/regress/sql/privileges.sql | 5 +++++ 3 files changed, 16 insertions(+) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgsql: Check for USAGE privilege on the composite type in ALTER TABLE O @ 2026-08-10 13:41 Noah Misch <noah@leadboat.com> 0 siblings, 0 replies; 6+ messages in thread From: Noah Misch @ 2026-08-10 13:41 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Check for USAGE privilege on the composite type in ALTER TABLE OF. This omission allowed roles without USAGE on a type to create tables that depend on it, which could prevent the owner from changing the type later. Reported-by: Nathan Bossart <nathandbossart@gmail.com> Author: Nathan Bossart <nathandbossart@gmail.com> Reviewed-by: Robert Haas <robertmhaas@gmail.com> Security: CVE-2026-6470 Backpatch-through: 14 Branch ------ REL_17_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/67135960559d5e623757ffa8ec0ab4d94293dfc2 Author: Nathan Bossart <nathan@postgresql.org> Modified Files -------------- src/backend/commands/tablecmds.c | 5 +++++ src/test/regress/expected/privileges.out | 6 ++++++ src/test/regress/sql/privileges.sql | 5 +++++ 3 files changed, 16 insertions(+) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgsql: Check for USAGE privilege on the composite type in ALTER TABLE O @ 2026-08-10 13:41 Noah Misch <noah@leadboat.com> 0 siblings, 0 replies; 6+ messages in thread From: Noah Misch @ 2026-08-10 13:41 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Check for USAGE privilege on the composite type in ALTER TABLE OF. This omission allowed roles without USAGE on a type to create tables that depend on it, which could prevent the owner from changing the type later. Reported-by: Nathan Bossart <nathandbossart@gmail.com> Author: Nathan Bossart <nathandbossart@gmail.com> Reviewed-by: Robert Haas <robertmhaas@gmail.com> Security: CVE-2026-6470 Backpatch-through: 14 Branch ------ REL_16_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/7a761fe408d51b43e42393c4b4fbcff9462229fa Author: Nathan Bossart <nathan@postgresql.org> Modified Files -------------- src/backend/commands/tablecmds.c | 5 +++++ src/test/regress/expected/privileges.out | 6 ++++++ src/test/regress/sql/privileges.sql | 5 +++++ 3 files changed, 16 insertions(+) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgsql: Check for USAGE privilege on the composite type in ALTER TABLE O @ 2026-08-10 13:41 Noah Misch <noah@leadboat.com> 0 siblings, 0 replies; 6+ messages in thread From: Noah Misch @ 2026-08-10 13:41 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Check for USAGE privilege on the composite type in ALTER TABLE OF. This omission allowed roles without USAGE on a type to create tables that depend on it, which could prevent the owner from changing the type later. Reported-by: Nathan Bossart <nathandbossart@gmail.com> Author: Nathan Bossart <nathandbossart@gmail.com> Reviewed-by: Robert Haas <robertmhaas@gmail.com> Security: CVE-2026-6470 Backpatch-through: 14 Branch ------ REL_15_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/c062734cdb8a7a966f4e39bda47279b9178f5da0 Author: Nathan Bossart <nathan@postgresql.org> Modified Files -------------- src/backend/commands/tablecmds.c | 5 +++++ src/test/regress/expected/privileges.out | 6 ++++++ src/test/regress/sql/privileges.sql | 5 +++++ 3 files changed, 16 insertions(+) ^ permalink raw reply [nested|flat] 6+ messages in thread
end of thread, other threads:[~2026-08-10 13:41 UTC | newest] Thread overview: 6+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2026-08-10 13:41 pgsql: Check for USAGE privilege on the composite type in ALTER TABLE O Noah Misch <noah@leadboat.com> 2026-08-10 13:41 pgsql: Check for USAGE privilege on the composite type in ALTER TABLE O Noah Misch <noah@leadboat.com> 2026-08-10 13:41 pgsql: Check for USAGE privilege on the composite type in ALTER TABLE O Noah Misch <noah@leadboat.com> 2026-08-10 13:41 pgsql: Check for USAGE privilege on the composite type in ALTER TABLE O Noah Misch <noah@leadboat.com> 2026-08-10 13:41 pgsql: Check for USAGE privilege on the composite type in ALTER TABLE O Noah Misch <noah@leadboat.com> 2026-08-10 13:41 pgsql: Check for USAGE privilege on the composite type in ALTER TABLE O Noah Misch <noah@leadboat.com>
This inbox is served by agora; see mirroring instructions for how to clone and mirror all data and code used for this inbox