E.210. Release 7.4.17 #
Release date: 2007-04-23
This release contains fixes from 7.4.16, including a security fix. For information about new features in the 7.4 major release, see 第 E.227 节.
E.210.1. Migration to Version 7.4.17
A dump/restore is not required for those running 7.4.X. However, if you are upgrading from a version earlier than 7.4.11, see 第 E.216 节.
E.210.2. Changes
Support explicit placement of the temporary-table schema within
search_path, and disable searching it for functions and operators (Tom)This is needed to allow a security-definer function to set a truly secure value of
search_path. Without it, an unprivileged SQL user can use temporary objects to execute code with the privileges of the security-definer function (CVE-2007-2138). SeeCREATE FUNCTIONfor more information./contrib/tsearch2crash fixes (Teodor)Fix potential-data-corruption bug in how
VACUUM FULLhandlesUPDATEchains (Tom, Pavan Deolasee)Fix PANIC during enlargement of a hash index (bug introduced in 7.4.15) (Tom)