Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1sFXPM-003DKq-9b for pgsql-general@arkaria.postgresql.org; Fri, 07 Jun 2024 11:05:22 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1sFXPK-00B6zk-N1 for pgsql-general@arkaria.postgresql.org; Fri, 07 Jun 2024 11:05:19 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1sFXPJ-00B6zc-TZ for pgsql-general@lists.postgresql.org; Fri, 07 Jun 2024 11:05:19 +0000 Received: from mx4.stadt-zuerich.ch ([194.56.33.13]) by makus.postgresql.org with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1sFXPG-0009IF-LY for pgsql-general@lists.postgresql.org; Fri, 07 Jun 2024 11:05:17 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zuerich.ch; i=@zuerich.ch; l=29833; q=dns/txt; s=zuerichch202311; t=1717758314; x=1749294314; h=from:to:subject:date:message-id:mime-version; bh=ozDRHWnepHrKorJC+bVxhyVhkW4UBcIB65PBQOPRNC8=; b=Y4EzCJ+R8vmQoxikahAaN3q8seF6y7T+bYIL+0qIZRx7H6OT3nqfkeAU N2MT4+hXJEp2hTDT3wa8F7n6EMa5gcsz80so+lG7c9X2wg9aqm8fu/w9s AJ5ijrPpsDTPHaN2q+8207lQFJSUktXc5R6nG9ZNmnGJ1M3Qgzq83XDOc Ln/qw/ebbEnNF67QZLz/oUGrdK7Z+zzK0VHNsCWvMzE8WCRqEER2CvtSB YgKeM+r4RuKD8vyPicLYxDPpMle929jEwdJxEpQTy+FsBqudfKCcPktly BCejtCK4EKfgbybrmA8pWazWiJN4t79oj5WbGClQkcIjbvi3BL/xCgDnz A==; X-IronPort-AV: E=Sophos;i="6.08,220,1712613600"; d="scan'208,217";a="55075999" Received: from unknown (HELO SZHM27373.global.szh.loc) ([10.7.49.60]) by mx4.prm.szh.zone with ESMTP/TLS/AES256-GCM-SHA384; 07 Jun 2024 13:05:10 +0200 Received: from SZHM27373.global.szh.loc (10.7.49.60) by SZHM27373.global.szh.loc (10.7.49.60) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2375.18; Fri, 7 Jun 2024 13:05:10 +0200 Received: from szhm30935.global.szh.loc (172.26.4.39) by SZHM27373.global.szh.loc (10.7.49.62) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2375.18 via Frontend Transport; Fri, 7 Jun 2024 13:05:10 +0200 Received: from CHE01-GV0-obe.outbound.protection.outlook.com (104.47.22.40) by smtp.stadt-zuerich.ch (172.27.4.39) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.3; Fri, 7 Jun 2024 13:05:10 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=F2uFRuE8Y67Zh43UkZVGkKUJ2j6O+CxjoifdJuo4iRK06LLXHMzYaDK8Z6/qkVdvHU6vIzfcc5cW4OABkMhuGySCM+KWT3WFwpMejdVs3zdzR8ZjIkWPW8Kv8Ec3mPzfON2+NsbeMz9L+TZ8/RZxWVm33jTsLGao9beBFOM6ewfgvM5lqlOPRHQzyP8bQ5m2u2cyWqjWaDFcG0l9Xey+XtuH67jn+fTAzndf9tRYWHvj072Lct1M7sNWJpnGreKCmOzSEMqTeg64EwVSXM74/5q3Bs+LkafrnueIyapym6cZ/53B0QrLNC778WyebiUZ9Io7hfdYsRCPc7fWVOdRaA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=ozDRHWnepHrKorJC+bVxhyVhkW4UBcIB65PBQOPRNC8=; b=ME58B3CL82FjJmD9ZWZSNKeyEwzz6cA7hWCLVNQwOtiCLVZlzlomUNizDBGQkE1DMN4plRFgq+PXi/Tj+TDA1XkxeVldOHc/KRu622hMnF6ygmhVMZYply15LCfGwKWRhHkB8aMDVRaHraTO6C0s0joqcUnI0rMraRRKNv3X3uwetuD4cmUG6E5r4uWLIqTJRlFXd0YT1i5v1HO4IzPbN+cf16tt+7h8jtdq6D/25MGkeTlbanG+RjSONDdsKgUB2IntcLKwIjq76df0z40TD1Cmgl3MV4keGaF80DJ1qEquPDwPbn5Q5eAdKQm51Okas36I49JkKwwxxDZHT5NTeA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=zuerich.ch; dmarc=pass action=none header.from=zuerich.ch; dkim=pass header.d=zuerich.ch; arc=none Received: from GV0P278MB0099.CHEP278.PROD.OUTLOOK.COM (2603:10a6:710:27::12) by ZR0P278MB0041.CHEP278.PROD.OUTLOOK.COM (2603:10a6:910:17::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7633.34; Fri, 7 Jun 2024 11:04:09 +0000 Received: from GV0P278MB0099.CHEP278.PROD.OUTLOOK.COM ([fe80::bf73:d490:294c:3df3]) by GV0P278MB0099.CHEP278.PROD.OUTLOOK.COM ([fe80::bf73:d490:294c:3df3%3]) with mapi id 15.20.7633.033; Fri, 7 Jun 2024 11:04:08 +0000 From: "Zwettler Markus (OIZ)" To: "pgsql-general@lists.postgresql.org" Subject: PG16.1 security breach? Thread-Topic: PG16.1 security breach? Thread-Index: Adq4yh/PzbpqS1e6ShC+gfwQyIQVLA== Date: Fri, 7 Jun 2024 11:04:08 +0000 Message-ID: Accept-Language: de-DE, en-US Content-Language: de-DE X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=zuerich.ch; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: GV0P278MB0099:EE_|ZR0P278MB0041:EE_ x-ms-office365-filtering-correlation-id: 6e733f2e-0907-4d70-7cc8-08dc86e18e17 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230031|376005|1800799015|366007|38070700009; x-microsoft-antispam-message-info: =?us-ascii?Q?dutpDAzv7d7xTGgBxmkuH0EJKfJgXkhf+tn2mEEEMnWfNhqR5ab+09gWfkd3?= =?us-ascii?Q?AEGIm+YnugGgl7Sw0QILNvqxIlABSfgKn/BDQihuK4fY2EoXH+CHR1wBaSLW?= =?us-ascii?Q?lYv1yyNIXIiW5kpAS+awsOKkDcNhzNhtXhZMYK73QDrBPHwanX96GJhF0pUV?= =?us-ascii?Q?ZiWL9Hz6QL/UB9bLgQZevi+GxkrnSfHR3FV3VJcpPXZEIK6Q2FtzCAY+K5pc?= =?us-ascii?Q?sJO5bnh/pQ3TaEmGmZnCNBnUZX8KYVeGnX4Qixd76nasiimsiXUa36ivn39O?= =?us-ascii?Q?jRskBKHhUIHtlzUDVahPrGTp65BoeAmVTGQp7dalE/7oxsGBfgVVjXIDd5zW?= =?us-ascii?Q?Sdj2ggAu5wyojWxK/SwKF2lp38u8C06nFQen870YtfLNSwoDsE5HZbH8k36O?= =?us-ascii?Q?CyrQZ2jNR4OAeVTaHCDGOEvMo9cuIjmAKRxg4TM8QVTvrcfnNne0STmWOGOC?= =?us-ascii?Q?K8tQctHh/RFmyocXX2ashXLztFwTn6wQ4ojmKKyHzbN5zQ8WHqemNSM8i6NF?= =?us-ascii?Q?SQmjvPT44HBJzecp1Rj88kIq433UCjV7pI3fToEZpzmutY0Nw321FdZmYBfG?= =?us-ascii?Q?yjFH9c9QxRCACibWvQY67CTfCecDeadnOtidPIIAgtnoFYFQ23x/qEqP3eVT?= =?us-ascii?Q?kB9rGHKnp3jXVJtpiI4PHfCuuc3RKR1BuZTvgl4OCfXL4dSX823fIRV8bj4B?= =?us-ascii?Q?bNnNEYwSaBqfGICHzPkOsF3ZUXgxDpLdld2C/W/CNWU7wDyd9mxN18eoByHd?= =?us-ascii?Q?h3MeItiXX/DE95WCG+darKtpVRdPEzo4f+UAAqlstgicCP8fxnGodwDV0TuF?= =?us-ascii?Q?BB1rZ00lzocz3MIfMDemX5cQ1OVkCEeHDYnalL2015kbrbaHsNyTbNySmjHc?= =?us-ascii?Q?vk1nqBGxdy31b++XbUo0DR2uxT3mEkDqDld4opk+iOwhEzEMkBxtIfLLra85?= =?us-ascii?Q?4Vcfn8oG3LOXQQ0i5HpawHjdjF2YgYA3aRLUVfZRVWAbMnIgRkfognG06zPa?= =?us-ascii?Q?7ecylwQdMaiD3VML3pp9EwaVqsWYJKAb7BV07qLhalmjnkeQHLJuyHDGNsp9?= =?us-ascii?Q?htIE4x/IiGwTfbz7H++WWziAMjPuyjOVMqxpqAuA5Xp5Jd6cCOvCx7sjMC2E?= =?us-ascii?Q?NAZcsF5Dg/zfvAY3PnOLjyaNPLtOD5X61Gwloey04P+EL98uvbSrggtABL0c?= =?us-ascii?Q?yAyyogDLt2nVpOwyqbD+sJC7kgHHvXYpo72SsfpNUZkJoOkPhjZoVK0qY9Kc?= =?us-ascii?Q?W4Q8xYUOq+BSfnystwY6XGg9fpGlpRzTG3HRx6txYvJNY1bR4ke5BQs127wB?= =?us-ascii?Q?JMC5ryUrP6ZVjT0z47E/3M6csNYCp/r7ro+Dr23fyeKN15HcP+4Afe3cjE2t?= =?us-ascii?Q?BgMwTL8=3D?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:GV0P278MB0099.CHEP278.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230031)(376005)(1800799015)(366007)(38070700009);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?FQPBKJV1x7YlP64foZhPHbzYftC4THlhC6MTRDfj7/1F0eUtQF9MKdxtcPYz?= =?us-ascii?Q?irfm67ixpkjKwgjvorIVdFJYBKXyijV80zBxlP35L8Kn4WMuIakmWAYKuGpH?= =?us-ascii?Q?T1CFWEi0zAAUhw3etqGvd8KfyNyvjHETHoE5Jh+BlNJhJZ5ARSPCDyz7aSoi?= =?us-ascii?Q?Lx4UVFUiraqNacECkGhhMVGCKcrWeaQwOD69ylyknSIj0X1WXDMxKj6YFYz3?= =?us-ascii?Q?wABgrkAwgKuL8BKn796hAKbvuwzzioziEcEDjEN7Ut9HpkQnL8QqmXDa0jSe?= =?us-ascii?Q?Ty+mu15nGGG82w7dMY5m0mNkpcSk/CDN4DQz3TxyLu169iWd7Z567+c62ea7?= =?us-ascii?Q?EPRXY6eU69/8LNqkX4FSBwJ4a1zGyPE8rsSa7rszFPhYe5brIZ/BmaKqKEXY?= =?us-ascii?Q?FIf4S9CT5vJzTxivPZVgt8uDrQEorQ1qpWJYUm6wAz3WhLz6BmYWEg3xXvle?= =?us-ascii?Q?lXOaf0be4va1lEpEDNXYgQwntEcrgjkhEvVHspG9leOrvBPWJYPJSX46t91F?= =?us-ascii?Q?MQQuDmoA+xw5EmdbWy+JtMfQ57EogYPfXhdybv41uYgBeN6FKT+BS1/1JEqN?= =?us-ascii?Q?Ani+rohN5rdwZ9Z7RkIFJQ7vbZ9vTkAQroaoBvAX+jkyR2RBe8Y2jV/tsIYS?= =?us-ascii?Q?MbPhjKbtly3HvD+Xr7YcmwZBA97C6Pa3RxRZn3bifoLULe7BABI760tpV/GK?= =?us-ascii?Q?AMkHPxXnZGG55y49QlK6xu4T07YsrdUMq2l4Cqu78IWzWagXkRasqpoUMMC7?= =?us-ascii?Q?Qie3IGgyhAZ14H0mm1hZYPbf+dQ1WIun0bTuVpbzhAUll71VhX55+qpQl5p9?= =?us-ascii?Q?TgkM/ga/Qzhr5fmTfYt0e8zodDfi/V35jbs+6BcbHDGinGdfCV1dCpeVA4OU?= =?us-ascii?Q?Yh3utF6eKWK8owYtY90pMXzHPT/Hj92jSZrpWIh9N0ztwT0LtjMUhx/9O6lg?= =?us-ascii?Q?IGnXr8/pVAOX2geBiRJQzBfMbfISQ+EcG6+uqNchd+2Erkiffsl45TY1qGhR?= =?us-ascii?Q?laGDnbnQ2GlOBPG56uH14b5EafamEP3s4zLoTMjMtVRaXwqU/BdyWktKFuO/?= =?us-ascii?Q?ZTNVLE/9Gzjeuu7x1twbA0vY79SyloEvanHit2/UbBHU+EX3sX7OscT4xAYX?= =?us-ascii?Q?83K2NQJQh4sIp04R0AcrYDN4RE0s0TZxSq0QmeT4lk41LfNWuREvcLJsuM9h?= =?us-ascii?Q?lSlHjUEEo/zvA50Wv0e0Lq6y+sXtFJjoTBaxZoRyJ0rKHamPLZ8IViQuahvu?= =?us-ascii?Q?r3P2D4u/TNcyQlyhoulHmqk/CmSEwgHr3uF8iYON8a0Fqid3NZ97EehV56r/?= =?us-ascii?Q?YLW8IUYRO2sDzyf7nAS2uMRgvpv26I4/zfccUcycSoppEPMebZ/iYxAC46Nr?= =?us-ascii?Q?KKRL9sC8gQQ5gRj9xHNKFYG+lfxAVCPCGJ0L9zJr5xUHpFPQFqOEym+9RuGU?= =?us-ascii?Q?+27hg43eLZezNumJbqpNy+Bod0EuwmmMct2CCQNZwJTVa4JWTiBxD+B1FL1C?= =?us-ascii?Q?79Q8YCIoBjmQ9dGW5M9fLOiSiThhxZcB3LqZJltKgpWf+SifM9zg8AYGR7sW?= =?us-ascii?Q?KQshEy9KhgrnTR87qUMeJ1u9ncarvRR0VYmHVGdx?= Content-Type: multipart/alternative; boundary="_000_GV0P278MB00996776669F54A7EADB64688BFB2GV0P278MB0099CHEP_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: GV0P278MB0099.CHEP278.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 6e733f2e-0907-4d70-7cc8-08dc86e18e17 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jun 2024 11:04:08.9062 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9f489fcc-e452-4509-8234-6f97b42d0117 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: KexWXxVUAy5axtnRlRs2ZEAqpGomZaN/EaRCSCeBAYSaE2pAcgRblUt9aVBnZ6cgX7qFLlwHtmKNUdEGk9r8f2CRmM7aEvb43vMSZ7kGHbA= X-MS-Exchange-Transport-CrossTenantHeadersStamped: ZR0P278MB0041 X-OriginatorOrg: zuerich.ch List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --_000_GV0P278MB00996776669F54A7EADB64688BFB2GV0P278MB0099CHEP_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I am running the following on Postgres 16.1 in database "postgres" as a sup= eruser: revoke create on schema public from public; revoke create on database postgres from public; create schema if not exists oiz; revoke create on schema oiz from public; grant usage on schema oiz to public; create or replace function oiz.f_set_dbowner (p_dbowner text, p_dbname text= ) returns void language plpgsql security definer as $$ ... when I create a new role in following: create role testuser with password 'testuser' login; postgres=3D# \du testuser List of roles Role name | Attributes -----------+------------ testuser | than this new role is able to execute the function oiz.f_set_dbowner immedi= ately even I did not grant execute on this function to this role! postgres=3D> \conninfo You are connected to database "postgres" as user "testuser" on host "cmpgdb= -pg-eng900.eng.cmp.szh.loc" (address "10.199.112.56") at port "5017". SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384, compress= ion: off) postgres=3D> select oiz.f_set_dbowner ('testuser','database1'); f_set_dbowner --------------- (1 row) The role is also able to execute the function even I revoke any execute pri= vilege explicitly: revoke execute on function oiz.f_set_dbowner (p_dbowner text, p_dbname text= ) from testuser; There are also no default privileges on the schema: postgres=3D# \ddp Default access privileges Owner | Schema | Type | Access privileges -------+--------+------+------------------- (0 rows) postgres=3D> \df+ oiz.f_set_dbowner = List of functions Schema | Name | Result data type | Argument data types |= Type | Volatility | Parallel | Owner | Security | Access privileges |= Language | Internal name | Description --------+---------------+------------------+-------------------------------= +------+------------+----------+----------+----------+---------------------= +----------+---------------+------------- oiz | f_set_dbowner | void | p_dbowner text, p_dbname text |= func | volatile | unsafe | postgres | definer | =3DX/postgres = +| plpgsql | | | | | = | | | | | | postgres=3DX/postgre= s | | | (1 row) postgres=3D> \l postgres List of databases Name | Owner | Encoding | Locale Provider | Collate | Ctype = | ICU Locale | ICU Rules | Access privileges ----------+----------+----------+-----------------+-------------+----------= ---+------------+-----------+----------------------- postgres | postgres | UTF8 | libc | de_CH.utf-8 | de_CH.utf-= 8 | | | =3DTc/postgres + | | | | | = | | | postgres=3DCTc/postgres (1 row) What I am missing? Is there something new with PG 16? Is it a bug? Cheers, Markus --_000_GV0P278MB00996776669F54A7EADB64688BFB2GV0P278MB0099CHEP_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I am running the following on Postgres 16.1 in database "postgres&q= uot; as a superuser:

 

revoke create on schema public from public;

revoke create on database postgres from public;

create schema if not exists oiz;

revoke create on schema oiz from public;

grant usage on schema oiz to public;

 

create or replace function oiz.f_set_dbowner (p_dbowner text, p_dbname t= ext)

returns void

language plpgsql

security definer

as $$

…

 

 

 

when I create a new role in following:

 

create role testuser with password 'testuser' login;

 

postgres=3D# \du testuser

     List of roles

Role name | Attributes

-----------+------------

testuser  |

 

 

 

than this new role is able to execute the function oiz.f_set_dbowner imm= ediately even I did not grant execute on this function to this role!

 

postgres=3D> \conninfo

You are connected to database "postgres" as user "testuse= r" on host "cmpgdb-pg-eng900.eng.cmp.szh.loc" (address "= ;10.199.112.56") at port "5017".

SSL connection (protocol: TLSv1.3, cipher: TLS_AES_256_GCM_SHA384, compr= ession: off)

postgres=3D> select oiz.f_set_dbowner ('testuser','database1');<= /o:p>

f_set_dbowner

---------------

 

(1 row)

 

 

 

The role is also able to execute the function even I revoke any execute = privilege explicitly:

 

revoke execute on function oiz.f_set_dbowner (p_dbowner text, p_dbname t= ext) from testuser;

 

 

 

There are also no default privileges on the schema:

 

postgres=3D# \ddp

         Default access privileg= es

Owner | Schema | Type | Access privileges

-------+--------+------+-------------------

(0 rows)

 

 

postgres=3D> \df+ oiz.f_set_dbowner

            =             &nb= sp;            =             &nb= sp;            =             &nb= sp;            List = of functions

Schema |     Name      | Re= sult data type |      Argument data types &nb= sp;    | Type | Volatility | Parallel |  Owner &nb= sp; | Security |  Access privileges  | Language | Internal name | Description

--------+---------------+------------------+----------------------------= ---+------+------------+----------+----------+----------+------------------= ---+----------+---------------+-------------

oiz    | f_set_dbowner | void    &nbs= p;        | p_dbowner text, p_dbname tex= t | func | volatile   | unsafe   | postgres | definer&n= bsp; | =3DX/postgres        +| plpgsql = |            &= nbsp;  |

        |    &nbs= p;          |   = ;            &n= bsp;  |          &nb= sp;            =        |      = |            | =          |    &= nbsp;     |       &n= bsp;  | postgres=3DX/postgres |        &= nbsp; |           &n= bsp;   |

(1 row)

 

 

postgres=3D> \l postgres

            =             &nb= sp;            =             &nb= sp;     List of databases

   Name   |  Owner   | Encoding | Loc= ale Provider |   Collate   |    Ctype&nb= sp;   | ICU Locale | ICU Rules |   Access privileges

----------+----------+----------+-----------------+-------------+-------= ------+------------+-----------+-----------------------

postgres | postgres | UTF8     | libc  &nb= sp;         | de_CH.utf-8 | de_CH.u= tf-8 |            |&= nbsp;          | =3DTc/postgre= s         +

          |  &nbs= p;       |      = ;    |         =         |     &= nbsp;       |     &n= bsp;       |     &nb= sp;      |      &nbs= p;    | postgres=3DCTc/postgres

(1 row)

 

 

 

What I am missing? Is there something new with PG 16? Is it a bug?<= /o:p>

 

 

 

Cheers, Markus

 

 

 

 

 

--_000_GV0P278MB00996776669F54A7EADB64688BFB2GV0P278MB0099CHEP_--