Author: Noah Misch <noah@leadboat.com>

Branch: master [ffa2d37e5] 2019-08-05 07:48:41 -0700

Branch: REL_12_STABLE [9993fa9dd] 2019-08-05 07:48:45 -0700

Branch: REL_11_STABLE [21f94c51f] 2019-08-05 07:48:45 -0700

Branch: REL_10_STABLE [2062007cb] 2019-08-05 07:48:45 -0700

Branch: REL9_6_STABLE [7da46192d] 2019-08-05 07:48:45 -0700

Branch: REL9_5_STABLE [752fa3dbf] 2019-08-05 07:48:45 -0700

Branch: REL9_4_STABLE [86737438b] 2019-08-05 07:48:46 -0700

-->

<para>

Require schema qualification to cast to a temporary type when using

functional cast syntax (Noah Misch)

</para>

<para>

We have long required invocations of temporary functions to

explicitly specify the temporary schema, that

is <literal>pg_temp.<replaceable>func_name</replaceable>(<replaceable>args</replaceable>)</literal>.

Require this as well for casting to temporary types using functional

notation, for

example <literal>pg_temp.<replaceable>type_name</replaceable>(<replaceable>arg</replaceable>)</literal>.

Otherwise it's possible to capture a function call using a temporary

object, allowing privilege escalation in much the same ways that we

blocked in CVE-2007-2138.

(CVE-2019-10208)

</para>

</listitem>

<listitem>

<!--