<!-- doc/src/sgml/release-8.3.sgml -->
<!-- See header comment in release.sgml about typical markup -->
+ <sect1 id="release-8-3-19">
+ <title>Release 8.3.19</title>
+
+ <note>
+ <title>Release Date</title>
+ <simpara>2012-06-04</simpara>
+ </note>
+
+ <para>
+ This release contains a variety of fixes from 8.3.18.
+ For information about new features in the 8.3 major release, see
+ <xref linkend="release-8-3">.
+ </para>
+
+ <sect2>
+ <title>Migration to Version 8.3.19</title>
+
+ <para>
+ A dump/restore is not required for those running 8.3.X.
+ </para>
+
+ <para>
+ However, if you are upgrading from a version earlier than 8.3.17,
+ see the release notes for 8.3.17.
+ </para>
+
+ </sect2>
+
+ <sect2>
+ <title>Changes</title>
+
+ <itemizedlist>
+
+ <listitem>
+ <para>
+ Fix incorrect password transformation in
+ <filename>contrib/pgcrypto</>'s DES <function>crypt()</> function
+ (Solar Designer)
+ </para>
+
+ <para>
+ If a password string contained the byte value <literal>0x80</>, the
+ remainder of the password was ignored, causing the password to be much
+ weaker than it appeared. With this fix, the rest of the string is
+ properly included in the DES hash. Any stored password values that are
+ affected by this bug will thus no longer match, so the stored values may
+ need to be updated. (CVE-2012-2143)
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Ignore <literal>SECURITY DEFINER</> and <literal>SET</> attributes for
+ a procedural language's call handler (Tom Lane)
+ </para>
+
+ <para>
+ Applying such attributes to a call handler could crash the server.
+ (CVE-2012-2655)
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Allow numeric timezone offsets in <type>timestamp</> input to be up to
+ 16 hours away from UTC (Tom Lane)
+ </para>
+
+ <para>
+ Some historical time zones have offsets larger than 15 hours, the
+ previous limit. This could result in dumped data values being rejected
+ during reload.
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Fix timestamp conversion to cope when the given time is exactly the
+ last DST transition time for the current timezone (Tom Lane)
+ </para>
+
+ <para>
+ This oversight has been there a long time, but was not noticed
+ previously because most DST-using zones are presumed to have an
+ indefinite sequence of future DST transitions.
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Fix <type>text</> to <type>name</> and <type>char</> to <type>name</>
+ casts to perform string truncation correctly in multibyte encodings
+ (Karl Schnaitter)
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Fix memory copying bug in <function>to_tsquery()</> (Heikki Linnakangas)
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Fix slow session startup when <structname>pg_attribute</> is very large
+ (Tom Lane)
+ </para>
+
+ <para>
+ If <structname>pg_attribute</> exceeds one-fourth of
+ <varname>shared_buffers</>, cache rebuilding code that is sometimes
+ needed during session start would trigger the synchronized-scan logic,
+ causing it to take many times longer than normal. The problem was
+ particularly acute if many new sessions were starting at once.
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Ensure sequential scans check for query cancel reasonably often (Merlin
+ Moncure)
+ </para>
+
+ <para>
+ A scan encountering many consecutive pages that contain no live tuples
+ would not respond to interrupts meanwhile.
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Ensure the Windows implementation of <function>PGSemaphoreLock()</>
+ clears <varname>ImmediateInterruptOK</> before returning (Tom Lane)
+ </para>
+
+ <para>
+ This oversight meant that a query-cancel interrupt received later
+ in the same query could be accepted at an unsafe time, with
+ unpredictable but not good consequences.
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Show whole-row variables safely when printing views or rules
+ (Abbas Butt, Tom Lane)
+ </para>
+
+ <para>
+ Corner cases involving ambiguous names (that is, the name could be
+ either a table or column name of the query) were printed in an
+ ambiguous way, risking that the view or rule would be interpreted
+ differently after dump and reload. Avoid the ambiguous case by
+ attaching a no-op cast.
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Ensure autovacuum worker processes perform stack depth checking
+ properly (Heikki Linnakangas)
+ </para>
+
+ <para>
+ Previously, infinite recursion in a function invoked by
+ auto-<command>ANALYZE</> could crash worker processes.
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Fix logging collector to not lose log coherency under high load (Andrew
+ Dunstan)
+ </para>
+
+ <para>
+ The collector previously could fail to reassemble large messages if it
+ got too busy.
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Fix logging collector to ensure it will restart file rotation
+ after receiving <systemitem>SIGHUP</> (Tom Lane)
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Fix PL/pgSQL's <command>GET DIAGNOSTICS</> command when the target
+ is the function's first variable (Tom Lane)
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Fix several performance problems in <application>pg_dump</> when
+ the database contains many objects (Jeff Janes, Tom Lane)
+ </para>
+
+ <para>
+ <application>pg_dump</> could get very slow if the database contained
+ many schemas, or if many objects are in dependency loops, or if there
+ are many owned sequences.
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Fix <filename>contrib/dblink</>'s <function>dblink_exec()</> to not leak
+ temporary database connections upon error (Tom Lane)
+ </para>
+ </listitem>
+
+ <listitem>
+ <para>
+ Update time zone data files to <application>tzdata</> release 2012c
+ for DST law changes in Antarctica, Armenia, Chile, Cuba, Falkland
+ Islands, Gaza, Haiti, Hebron, Morocco, Syria, and Tokelau Islands;
+ also historical corrections for Canada.
+ </para>
+ </listitem>
+
+ </itemizedlist>
+
+ </sect2>
+ </sect1>
+
<sect1 id="release-8-3-18">
<title>Release 8.3.18</title>
projects / postgresql / commitdiff