Skip to content

Commit f795753

Browse files
tglsfdctglsfdc
committed
Last-minute updates for release notes.
Add entries for security and not-quite-security issues. Security: CVE-2015-5288, CVE-2015-5289
1 parent e946cc6 commit f795753

File tree

4 files changed

+102
-0
lines changed

4 files changed

+102
-0
lines changed

‎doc/src/sgml/release-9.0.sgml

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,20 @@
4040

4141
<itemizedlist>
4242

43+
<listitem>
44+
<para>
45+
Fix <filename>contrib/pgcrypto</> to detect and report
46+
too-short <function>crypt()</> salts (Josh Kupershmidt)
47+
</para>
48+
49+
<para>
50+
Certain invalid salt arguments crashed the server or disclosed a few
51+
bytes of server memory. We have not ruled out the viability of
52+
attacks that arrange for presence of confidential information in the
53+
disclosed bytes, but they seem unlikely. (CVE-2015-5288)
54+
</para>
55+
</listitem>
56+
4357
<listitem>
4458
<para>
4559
Fix subtransaction cleanup after a portal (cursor) belonging to an
@@ -124,6 +138,14 @@
124138
</para>
125139
</listitem>
126140

141+
<listitem>
142+
<para>
143+
Guard against hard-to-reach stack overflows involving record types,
144+
range types, <type>json</>, <type>jsonb</>, <type>tsquery</>,
145+
<type>ltxtquery</> and <type>query_int</> (Noah Misch)
146+
</para>
147+
</listitem>
148+
127149
<listitem>
128150
<para>
129151
Fix handling of <literal>DOW</> and <literal>DOY</> in datetime input

‎doc/src/sgml/release-9.1.sgml

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,20 @@
3434

3535
<itemizedlist>
3636

37+
<listitem>
38+
<para>
39+
Fix <filename>contrib/pgcrypto</> to detect and report
40+
too-short <function>crypt()</> salts (Josh Kupershmidt)
41+
</para>
42+
43+
<para>
44+
Certain invalid salt arguments crashed the server or disclosed a few
45+
bytes of server memory. We have not ruled out the viability of
46+
attacks that arrange for presence of confidential information in the
47+
disclosed bytes, but they seem unlikely. (CVE-2015-5288)
48+
</para>
49+
</listitem>
50+
3751
<listitem>
3852
<para>
3953
Fix subtransaction cleanup after a portal (cursor) belonging to an
@@ -130,6 +144,14 @@
130144
</para>
131145
</listitem>
132146

147+
<listitem>
148+
<para>
149+
Guard against hard-to-reach stack overflows involving record types,
150+
range types, <type>json</>, <type>jsonb</>, <type>tsquery</>,
151+
<type>ltxtquery</> and <type>query_int</> (Noah Misch)
152+
</para>
153+
</listitem>
154+
133155
<listitem>
134156
<para>
135157
Fix handling of <literal>DOW</> and <literal>DOY</> in datetime input

‎doc/src/sgml/release-9.2.sgml

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,20 @@
3434

3535
<itemizedlist>
3636

37+
<listitem>
38+
<para>
39+
Fix <filename>contrib/pgcrypto</> to detect and report
40+
too-short <function>crypt()</> salts (Josh Kupershmidt)
41+
</para>
42+
43+
<para>
44+
Certain invalid salt arguments crashed the server or disclosed a few
45+
bytes of server memory. We have not ruled out the viability of
46+
attacks that arrange for presence of confidential information in the
47+
disclosed bytes, but they seem unlikely. (CVE-2015-5288)
48+
</para>
49+
</listitem>
50+
3751
<listitem>
3852
<para>
3953
Fix subtransaction cleanup after a portal (cursor) belonging to an
@@ -136,6 +150,14 @@ Branch: REL9_1_STABLE [9b1b9446f] 2015-08-27 12:22:10 -0400
136150
</para>
137151
</listitem>
138152

153+
<listitem>
154+
<para>
155+
Guard against hard-to-reach stack overflows involving record types,
156+
range types, <type>json</>, <type>jsonb</>, <type>tsquery</>,
157+
<type>ltxtquery</> and <type>query_int</> (Noah Misch)
158+
</para>
159+
</listitem>
160+
139161
<listitem>
140162
<para>
141163
Fix handling of <literal>DOW</> and <literal>DOY</> in datetime input

‎doc/src/sgml/release-9.3.sgml

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,34 @@
3434

3535
<itemizedlist>
3636

37+
<listitem>
38+
<para>
39+
Guard against stack overflows in <type>json</> parsing
40+
(Oskari Saarenmaa)
41+
</para>
42+
43+
<para>
44+
If an application constructs PostgreSQL <type>json</>
45+
or <type>jsonb</> values from arbitrary user input, the application's
46+
users can reliably crash the PostgreSQL server, causing momentary
47+
denial of service. (CVE-2015-5289)
48+
</para>
49+
</listitem>
50+
51+
<listitem>
52+
<para>
53+
Fix <filename>contrib/pgcrypto</> to detect and report
54+
too-short <function>crypt()</> salts (Josh Kupershmidt)
55+
</para>
56+
57+
<para>
58+
Certain invalid salt arguments crashed the server or disclosed a few
59+
bytes of server memory. We have not ruled out the viability of
60+
attacks that arrange for presence of confidential information in the
61+
disclosed bytes, but they seem unlikely. (CVE-2015-5288)
62+
</para>
63+
</listitem>
64+
3765
<listitem>
3866
<para>
3967
Fix subtransaction cleanup after a portal (cursor) belonging to an
@@ -146,6 +174,14 @@
146174
</para>
147175
</listitem>
148176

177+
<listitem>
178+
<para>
179+
Guard against hard-to-reach stack overflows involving record types,
180+
range types, <type>json</>, <type>jsonb</>, <type>tsquery</>,
181+
<type>ltxtquery</> and <type>query_int</> (Noah Misch)
182+
</para>
183+
</listitem>
184+
149185
<listitem>
150186
<para>
151187
Fix handling of <literal>DOW</> and <literal>DOY</> in datetime input

0 commit comments

Comments
 (0)