PostgreSQL 9.5 Beta 1 及各版本安全更新發布

jopen 9年前發布 | 5K 次閱讀 PostgreSQL

PostgreSQL 9.5 Beta 1 發布,主要更新內容如下:

  • significant adjustments to Row Level Security (RLS) semantics

    </li>

  • deadlock with LWLock improvements

    </li>

  • index corruption issue with BRIN indexes

    </li>

  • couldn't connect using PGSSLMODE=require on Windows

    </li>

  • various problems with commit timestamp tracking

    </li>

  • hash join memory leak

    </li>

  • inconsistent behavior of jsonb_set with array append

    </li> </ul>

    詳情請看:發行說明

    下載:Downloads Page

    同時還發布了對所有支持版本的更新,包括9.4.5, 9.3.10, 9.2.14, 9.1.19 和 9.0.23,主要安全更新如下:

    CVE-2015-5289: json or jsonb input values constructed from arbitrary user input can crash the PostgreSQL server and cause a denial of service.

    CVE-2015-5288: The crypt() function included with the optional pgCrypto extension could be exploited to read a few additional bytes of memory.  No working exploit for this issue has been developed.

    更多內容請看:這里



    來自:http://www.oschina.net/news/66900/postgresql-9-5-beta1

     本文由用戶 jopen 自行上傳分享,僅供網友學習交流。所有權歸原作者,若您的權利被侵害,請聯系管理員。
     轉載本站原創文章,請注明出處,并保留原始鏈接、圖片水印。
     本站是一個以用戶分享為主的開源技術平臺,歡迎各類分享!