diff options
| author | Tom Lane | 2013-04-01 18:11:11 +0000 |
|---|---|---|
| committer | Tom Lane | 2013-04-01 18:11:11 +0000 |
| commit | 89b661bab99e8573fad271f68755ba286932dec2 (patch) | |
| tree | 7627d1220ce8860c8c5649b8d996b3c017c120e0 /doc/src/sgml/release-9.0.sgml | |
| parent | 17fe2793ea7fe269ed616cb305150b6cf38dbaa8 (diff) | |
Update release notes for 9.2.4, 9.1.9, 9.0.13, 8.4.17.
Security: CVE-2013-1899, CVE-2013-1901
Diffstat (limited to 'doc/src/sgml/release-9.0.sgml')
| -rw-r--r-- | doc/src/sgml/release-9.0.sgml | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/doc/src/sgml/release-9.0.sgml b/doc/src/sgml/release-9.0.sgml index 8da5cc3e932..d68d5801d43 100644 --- a/doc/src/sgml/release-9.0.sgml +++ b/doc/src/sgml/release-9.0.sgml @@ -43,6 +43,20 @@ <listitem> <para> + Fix insecure parsing of server command-line switches (Mitsumasa + Kondo, Kyotaro Horiguchi) + </para> + + <para> + A connection request containing a database name that begins with + <quote><literal>-</></quote> could be crafted to damage or destroy + files within the server's data directory, even if the request is + eventually rejected. (CVE-2013-1899) + </para> + </listitem> + + <listitem> + <para> Reset OpenSSL randomness state in each postmaster child process (Marko Kreen) </para> |