]> granicus.if.org Git - postgresql/commit
Force certain "pljava" custom GUCs to be PGC_SUSET.
authorNoah Misch <noah@leadboat.com>
Sat, 6 Feb 2016 01:22:51 +0000 (20:22 -0500)
committerNoah Misch <noah@leadboat.com>
Sat, 6 Feb 2016 01:23:04 +0000 (20:23 -0500)
commit0089dd34aa9bc5a1272c4c2fbcf183a0f983cf73
tree56f0aab135d3ebff854d984cd3d4aff2ecee9cfc
parent37e6946329005b143d2b2f924e39e590661e1fab
Force certain "pljava" custom GUCs to be PGC_SUSET.

Future PL/Java versions will close CVE-2016-0766 by making these GUCs
PGC_SUSET.  This PostgreSQL change independently mitigates that PL/Java
vulnerability, helping sites that update PostgreSQL more frequently than
PL/Java.  Back-patch to 9.1 (all supported versions).
src/backend/utils/misc/guc.c