Commits

Showing commits that first shipped in 17 (backpatches included). Clear

DateSubjectAuthorReleases
2026-05-11 Avoid passing unintended format codes to snprintf(). Tom Lane 17.10
2026-05-11 Fix integer overflow in array_agg(), when the array grows too large Heikki Linnakangas 17.10
2026-05-11 refint: Fix SQL injection and buffer overruns. Nathan Bossart 17.10
2026-05-11 Fix integer-overflow and alignment hazards in locale-related code. Tom Lane 17.10
2026-05-11 Make palloc_array() and friends safe against integer overflow. Tom Lane 17.10
2026-05-11 Fix SQL injection in logical replication origin checks. Noah Misch 17.10
2026-05-11 Prevent buffer overrun in unicode_normalize(). Tom Lane 17.10
2026-05-11 Unify src/common/'s definitions of MaxAllocSize. Tom Lane 17.10
2026-05-11 Harden our regex engine against integer overflow in size calculations. Tom Lane 17.10
2026-05-11 Apply timingsafe_bcmp() in authentication paths Michael Paquier 17.10
2026-05-11 Guard against overflow in "left" fields of query_int and ltxtquery. Tom Lane 17.10
2026-05-11 Add timingsafe_bcmp(), for constant-time memory comparison Heikki Linnakangas 17.10
2026-05-11 ltree: Fix overflows with lquery parsing Michael Paquier 17.10
2026-05-11 Add raw_connect and raw_connect_works to Cluster.pm Michael Paquier 17.10
2026-05-11 Fix overflows with ts_headline() Michael Paquier 17.10
2026-05-11 Fix unbounded recursive handling of SSL/GSS in ProcessStartupPacket() Michael Paquier 17.10
2026-05-11 Fix assorted places that need to use palloc_array(). Tom Lane 17.10
2026-05-11 Add pg_add_size_overflow() and friends Tom Lane 17.10
2026-05-11 Translation updates Peter Eisentraut 17.10
2026-05-10 Release notes for 18.4, 17.10, 16.14, 15.18, 14.23. Tom Lane 17.10
2026-05-05 postgres_fdw: Fix handling of abort-cleanup-failed connections. Etsuro Fujita 17.10
2026-05-05 Consider collation when proving subquery uniqueness Richard Guo 17.10
2026-05-05 Consider collation when proving uniqueness from unique indexes Richard Guo 17.10
2026-05-03 Mark modified the FSM buffer as dirty during recovery Alexander Korotkov 17.10
2026-05-01 Add missing connection validation in ECPG Andrew Dunstan 17.10