Overview
Request 1145270 accepted
- Upgrade to 14.11:
* bsc#1219679, CVE-2024-0985: Tighten security restrictions
within REFRESH MATERIALIZED VIEW CONCURRENTLY.
One step of a concurrent refresh command was run under weak
security restrictions. If a materialized view's owner could
persuade a superuser or other high-privileged user to perform a
concurrent refresh on that view, the view's owner could control
code executed with the privileges of the user running REFRESH.
Fix things so that all user-determined code is run as the
view's owner, as expected
* If you use GIN indexes, you may need to reindex after updating
to this release.
* LLVM 18 is now supported.
* https://www.postgresql.org/docs/release/14.11/
Request History
rmax created request
- Upgrade to 14.11:
* bsc#1219679, CVE-2024-0985: Tighten security restrictions
within REFRESH MATERIALIZED VIEW CONCURRENTLY.
One step of a concurrent refresh command was run under weak
security restrictions. If a materialized view's owner could
persuade a superuser or other high-privileged user to perform a
concurrent refresh on that view, the view's owner could control
code executed with the privileges of the user running REFRESH.
Fix things so that all user-determined code is run as the
view's owner, as expected
* If you use GIN indexes, you may need to reindex after updating
to this release.
* LLVM 18 is now supported.
* https://www.postgresql.org/docs/release/14.11/
factory-auto added opensuse-review-team as a reviewer
Please review sources
factory-auto accepted review
Check script succeeded
licensedigger accepted review
ok
dimstar accepted review
anag+factory added as a reviewer
Being evaluated by staging project "openSUSE:Factory:Staging:adi:93"
anag+factory accepted review
Picked "openSUSE:Factory:Staging:adi:93"
anag+factory accepted review
Staging Project openSUSE:Factory:Staging:adi:93 got accepted.
anag+factory approved review
Staging Project openSUSE:Factory:Staging:adi:93 got accepted.
anag+factory accepted request
Staging Project openSUSE:Factory:Staging:adi:93 got accepted.