Horton

Force certain "pljava" custom GUCs to be PGC_SUSET.

Noah Misch <noah@leadboat.com>

View on postgr.es
Commit: 0089dd34aa9bc5a1272c4c2fbcf183a0f983cf73
Author: Noah Misch <noah@leadboat.com>
Date: 2016-02-06T01:23:04Z
Releases: 9.5.1 
Force certain "pljava" custom GUCs to be PGC_SUSET.

Future PL/Java versions will close CVE-2016-0766 by making these GUCs
PGC_SUSET.  This PostgreSQL change independently mitigates that PL/Java
vulnerability, helping sites that update PostgreSQL more frequently than
PL/Java.  Back-patch to 9.1 (all supported versions).

Files

PathChange+/−
src/backend/utils/misc/guc.c modified +11 −0