Linux SRV-16 6.18.44-paas #1 SMP PREEMPT_DYNAMIC Thu Aug 13 10:08:12 UTC 2026 x86_64
//opt/postgresql-11/doc/html/release-9-3-20.html
 <?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>E.64. Release 9.3.20</title><link rel="stylesheet" type="text/css" href="stylesheet.css" /><link rev="made" href="pgsql-docs@postgresql.org" /><meta name="generator" content="DocBook XSL Stylesheets V1.79.1" /><link rel="prev" href="release-9-3-21.html" title="E.63. Release 9.3.21" /><link rel="next" href="release-9-3-19.html" title="E.65. Release 9.3.19" /></head><body><div xmlns="http://www.w3.org/TR/xhtml1/transitional" class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="5" align="center">E.64. Release 9.3.20</th></tr><tr><td width="10%" align="left"><a accesskey="p" href="release-9-3-21.html" title="E.63. Release 9.3.21">Prev</a> </td><td width="10%" align="left"><a accesskey="u" href="release.html" title="Appendix E. Release Notes">Up</a></td><th width="60%" align="center">Appendix E. Release Notes</th><td width="10%" align="right"><a accesskey="h" href="index.html" title="PostgreSQL 11.1 Documentation">Home</a></td><td width="10%" align="right"> <a accesskey="n" href="release-9-3-19.html" title="E.65. Release 9.3.19">Next</a></td></tr></table><hr></hr></div><div class="sect1" id="RELEASE-9-3-20"><div class="titlepage"><div><div><h2 class="title" style="clear: both">E.64. Release 9.3.20</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="sect2"><a href="release-9-3-20.html#id-1.11.6.68.4">E.64.1. Migration to Version 9.3.20</a></span></dt><dt><span class="sect2"><a href="release-9-3-20.html#id-1.11.6.68.5">E.64.2. Changes</a></span></dt></dl></div><p><strong>Release date: </strong>2017-11-09</p><p>
   This release contains a variety of fixes from 9.3.19.
   For information about new features in the 9.3 major release, see
   <a class="xref" href="release-9-3.html" title="E.84. Release 9.3">Section E.84</a>.
  </p><div class="sect2" id="id-1.11.6.68.4"><div class="titlepage"><div><div><h3 class="title">E.64.1. Migration to Version 9.3.20</h3></div></div></div><p>
    A dump/restore is not required for those running 9.3.X.
   </p><p>
    However, if you are upgrading from a version earlier than 9.3.18,
    see <a class="xref" href="release-9-3-18.html" title="E.66. Release 9.3.18">Section E.66</a>.
   </p></div><div class="sect2" id="id-1.11.6.68.5"><div class="titlepage"><div><div><h3 class="title">E.64.2. Changes</h3></div></div></div><div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem"><p>
      Fix crash due to rowtype mismatch
      in <code class="function">json{b}_populate_recordset()</code>
      (Michael Paquier, Tom Lane)
     </p><p>
      These functions used the result rowtype specified in the <code class="literal">FROM
      ... AS</code> clause without checking that it matched the actual
      rowtype of the supplied tuple value.  If it didn't, that would usually
      result in a crash, though disclosure of server memory contents seems
      possible as well.
      (CVE-2017-15098)
     </p></li><li class="listitem"><p>
      Fix sample server-start scripts to become <code class="literal">$PGUSER</code>
      before opening <code class="literal">$PGLOG</code> (Noah Misch)
     </p><p>
      Previously, the postmaster log file was opened while still running as
      root.  The database owner could therefore mount an attack against
      another system user by making <code class="literal">$PGLOG</code> be a symbolic
      link to some other file, which would then become corrupted by appending
      log messages.
     </p><p>
      By default, these scripts are not installed anywhere.  Users who have
      made use of them will need to manually recopy them, or apply the same
      changes to their modified versions.  If the
      existing <code class="literal">$PGLOG</code> file is root-owned, it will need to
      be removed or renamed out of the way before restarting the server with
      the corrected script.
      (CVE-2017-12172)
     </p></li><li class="listitem"><p>
      Properly reject attempts to convert infinite float values to
      type <code class="type">numeric</code> (Tom Lane, KaiGai Kohei)
     </p><p>
      Previously the behavior was platform-dependent.
     </p></li><li class="listitem"><p>
      Fix corner-case crashes when columns have been added to the end of a
      view (Tom Lane)
     </p></li><li class="listitem"><p>
      Record proper dependencies when a view or rule
      contains <code class="structname">FieldSelect</code>
      or <code class="structname">FieldStore</code> expression nodes (Tom Lane)
     </p><p>
      Lack of these dependencies could allow a column or data
      type <code class="command">DROP</code> to go through when it ought to fail,
      thereby causing later uses of the view or rule to get errors.
      This patch does not do anything to protect existing views/rules,
      only ones created in the future.
     </p></li><li class="listitem"><p>
      Correctly detect hashability of range data types (Tom Lane)
     </p><p>
      The planner mistakenly assumed that any range type could be hashed
      for use in hash joins or hash aggregation, but actually it must check
      whether the range's subtype has hash support.  This does not affect any
      of the built-in range types, since they're all hashable anyway.
     </p></li><li class="listitem"><p>
      Fix low-probability loss of <code class="command">NOTIFY</code> messages due to
      XID wraparound (Marko Tiikkaja, Tom Lane)
     </p><p>
      If a session executed no queries, but merely listened for
      notifications, for more than 2 billion transactions, it started to miss
      some notifications from concurrently-committing transactions.
     </p></li><li class="listitem"><p>
      Prevent low-probability crash in processing of nested trigger firings
      (Tom Lane)
     </p></li><li class="listitem"><p>
      Correctly restore the umask setting when file creation fails
      in <code class="command">COPY</code> or <code class="function">lo_export()</code>
      (Peter Eisentraut)
     </p></li><li class="listitem"><p>
      Give a better error message for duplicate column names
      in <code class="command">ANALYZE</code> (Nathan Bossart)
     </p></li><li class="listitem"><p>
      Fix mis-parsing of the last line in a
      non-newline-terminated <code class="filename">pg_hba.conf</code> file
      (Tom Lane)
     </p></li><li class="listitem"><p>
      Fix <span class="application">libpq</span> to not require user's home
      directory to exist (Tom Lane)
     </p><p>
      In v10, failure to find the home directory while trying to
      read <code class="filename">~/.pgpass</code> was treated as a hard error,
      but it should just cause that file to not be found.  Both v10 and
      previous release branches made the same mistake when
      reading <code class="filename">~/.pg_service.conf</code>, though this was less
      obvious since that file is not sought unless a service name is
      specified.
     </p></li><li class="listitem"><p>
      Fix <span class="application">libpq</span> to guard against integer
      overflow in the row count of a <code class="structname">PGresult</code>
      (Michael Paquier)
     </p></li><li class="listitem"><p>
      Fix <span class="application">ecpg</span>'s handling of out-of-scope cursor
      declarations with pointer or array variables (Michael Meskes)
     </p></li><li class="listitem"><p>
      Make ecpglib's Informix-compatibility mode ignore fractional digits in
      integer input strings, as expected (Gao Zengqi, Michael Meskes)
     </p></li><li class="listitem"><p>
      Sync our copy of the timezone library with IANA release tzcode2017c
      (Tom Lane)
     </p><p>
      This fixes various issues; the only one likely to be user-visible
      is that the default DST rules for a POSIX-style zone name, if
      no <code class="filename">posixrules</code> file exists in the timezone data
      directory, now match current US law rather than what it was a dozen
      years ago.
     </p></li><li class="listitem"><p>
      Update time zone data files to <span class="application">tzdata</span>
      release 2017c for DST law changes in Fiji, Namibia, Northern Cyprus,
      Sudan, Tonga, and Turks &amp; Caicos Islands, plus historical
      corrections for Alaska, Apia, Burma, Calcutta, Detroit, Ireland,
      Namibia, and Pago Pago.
     </p></li></ul></div></div></div><div class="navfooter"><hr /><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="release-9-3-21.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="release.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="release-9-3-19.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">E.63. Release 9.3.21 </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> E.65. Release 9.3.19</td></tr></table></div></body></html>