]> granicus.if.org Git - postgresql/commit
Further fix privileges on pg_statistic_ext[_data].
authorTom Lane <tgl@sss.pgh.pa.us>
Sun, 16 Jun 2019 15:00:23 +0000 (11:00 -0400)
committerTom Lane <tgl@sss.pgh.pa.us>
Sun, 16 Jun 2019 15:00:23 +0000 (11:00 -0400)
commit6973b058bc8d32e104bed99c134a4fab4b5dfe13
tree0e883e7b23cfc14f2021dcfd8fcae57c4d3c4e3c
parentfc8cf3df478e054b892f6698b6d336e72f3a7328
Further fix privileges on pg_statistic_ext[_data].

We don't need to restrict column privileges on pg_statistic_ext;
all of that data is OK to read publicly.  What we *do* need to do,
which was overlooked by 6cbfb784c, is revoke public read access on
pg_statistic_ext_data; otherwise we still have the same security
hole we started with.

Catversion bump to ensure that installations calling themselves
beta2 will have this fix.

Diagnosis/correction by Dean Rasheed and Tomas Vondra, but I'm
going to go ahead and push this fix ASAP so we get more buildfarm
cycles on it.

Discussion: https://postgr.es/m/8833.1560647898@sss.pgh.pa.us
src/backend/catalog/system_views.sql
src/include/catalog/catversion.h