Linux SRV-16 6.18.44-paas #1 SMP PREEMPT_DYNAMIC Thu Aug 13 10:08:12 UTC 2026 x86_64
/proc/thread-self/root/opt/postgresql-11/doc/html/
//proc/thread-self/root/opt/postgresql-11/doc/html/release-8-2-17.html
 <?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>E.212. Release 8.2.17</title><link rel="stylesheet" type="text/css" href="stylesheet.css" /><link rev="made" href="pgsql-docs@postgresql.org" /><meta name="generator" content="DocBook XSL Stylesheets V1.79.1" /><link rel="prev" href="release-8-2-18.html" title="E.211. Release 8.2.18" /><link rel="next" href="release-8-2-16.html" title="E.213. Release 8.2.16" /></head><body><div xmlns="http://www.w3.org/TR/xhtml1/transitional" class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="5" align="center">E.212. Release 8.2.17</th></tr><tr><td width="10%" align="left"><a accesskey="p" href="release-8-2-18.html" title="E.211. Release 8.2.18">Prev</a> </td><td width="10%" align="left"><a accesskey="u" href="release.html" title="Appendix E. Release Notes">Up</a></td><th width="60%" align="center">Appendix E. Release Notes</th><td width="10%" align="right"><a accesskey="h" href="index.html" title="PostgreSQL 11.1 Documentation">Home</a></td><td width="10%" align="right"> <a accesskey="n" href="release-8-2-16.html" title="E.213. Release 8.2.16">Next</a></td></tr></table><hr></hr></div><div class="sect1" id="RELEASE-8-2-17"><div class="titlepage"><div><div><h2 class="title" style="clear: both">E.212. Release 8.2.17</h2></div></div></div><div class="toc"><dl class="toc"><dt><span class="sect2"><a href="release-8-2-17.html#id-1.11.6.216.4">E.212.1. Migration to Version 8.2.17</a></span></dt><dt><span class="sect2"><a href="release-8-2-17.html#id-1.11.6.216.5">E.212.2. Changes</a></span></dt></dl></div><p><strong>Release date: </strong>2010-05-17</p><p>
   This release contains a variety of fixes from 8.2.16.
   For information about new features in the 8.2 major release, see
   <a class="xref" href="release-8-2.html" title="E.229. Release 8.2">Section E.229</a>.
  </p><div class="sect2" id="id-1.11.6.216.4"><div class="titlepage"><div><div><h3 class="title">E.212.1. Migration to Version 8.2.17</h3></div></div></div><p>
    A dump/restore is not required for those running 8.2.X.
    However, if you are upgrading from a version earlier than 8.2.14,
    see <a class="xref" href="release-8-2-14.html" title="E.215. Release 8.2.14">Section E.215</a>.
   </p></div><div class="sect2" id="id-1.11.6.216.5"><div class="titlepage"><div><div><h3 class="title">E.212.2. Changes</h3></div></div></div><div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem"><p>
      Enforce restrictions in <code class="literal">plperl</code> using an opmask applied to
      the whole interpreter, instead of using <code class="filename">Safe.pm</code>
      (Tim Bunce, Andrew Dunstan)
     </p><p>
      Recent developments have convinced us that <code class="filename">Safe.pm</code> is too
      insecure to rely on for making <code class="literal">plperl</code> trustable.  This
      change removes use of <code class="filename">Safe.pm</code> altogether, in favor of using
      a separate interpreter with an opcode mask that is always applied.
      Pleasant side effects of the change include that it is now possible to
      use Perl's <code class="literal">strict</code> pragma in a natural way in
      <code class="literal">plperl</code>, and that Perl's <code class="literal">$a</code> and <code class="literal">$b</code>
      variables work as expected in sort routines, and that function
      compilation is significantly faster.  (CVE-2010-1169)
     </p></li><li class="listitem"><p>
      Prevent PL/Tcl from executing untrustworthy code from
      <code class="structname">pltcl_modules</code> (Tom)
     </p><p>
      PL/Tcl's feature for autoloading Tcl code from a database table
      could be exploited for trojan-horse attacks, because there was no
      restriction on who could create or insert into that table.  This change
      disables the feature unless <code class="structname">pltcl_modules</code> is owned by a
      superuser.  (However, the permissions on the table are not checked, so
      installations that really need a less-than-secure modules table can
      still grant suitable privileges to trusted non-superusers.)  Also,
      prevent loading code into the unrestricted <span class="quote">“<span class="quote">normal</span>”</span> Tcl
      interpreter unless we are really going to execute a <code class="literal">pltclu</code>
      function.  (CVE-2010-1170)
     </p></li><li class="listitem"><p>
      Fix possible crash if a cache reset message is received during
      rebuild of a relcache entry (Heikki)
     </p><p>
      This error was introduced in 8.2.16 while fixing a related failure.
     </p></li><li class="listitem"><p>
      Do not allow an unprivileged user to reset superuser-only parameter
      settings (Alvaro)
     </p><p>
      Previously, if an unprivileged user ran <code class="literal">ALTER USER ... RESET
      ALL</code> for himself, or <code class="literal">ALTER DATABASE ... RESET ALL</code> for
      a database he owns, this would remove all special parameter settings
      for the user or database, even ones that are only supposed to be
      changeable by a superuser.  Now, the <code class="command">ALTER</code> will only
      remove the parameters that the user has permission to change.
     </p></li><li class="listitem"><p>
      Avoid possible crash during backend shutdown if shutdown occurs
      when a <code class="literal">CONTEXT</code> addition would be made to log entries (Tom)
     </p><p>
      In some cases the context-printing function would fail because the
      current transaction had already been rolled back when it came time
      to print a log message.
     </p></li><li class="listitem"><p>
      Update PL/Perl's <code class="filename">ppport.h</code> for modern Perl versions
      (Andrew)
     </p></li><li class="listitem"><p>
      Fix assorted memory leaks in PL/Python (Andreas Freund, Tom)
     </p></li><li class="listitem"><p>
      Prevent infinite recursion in <span class="application">psql</span> when expanding
      a variable that refers to itself (Tom)
     </p></li><li class="listitem"><p>
      Fix <span class="application">psql</span>'s <code class="literal">\copy</code> to not add spaces around
      a dot within <code class="literal">\copy (select ...)</code> (Tom)
     </p><p>
      Addition of spaces around the decimal point in a numeric literal would
      result in a syntax error.
     </p></li><li class="listitem"><p>
      Ensure that <code class="filename">contrib/pgstattuple</code> functions respond to cancel
      interrupts promptly (Tatsuhito Kasahara)
     </p></li><li class="listitem"><p>
      Make server startup deal properly with the case that
      <code class="function">shmget()</code> returns <code class="literal">EINVAL</code> for an existing
      shared memory segment (Tom)
     </p><p>
      This behavior has been observed on BSD-derived kernels including macOS.
      It resulted in an entirely-misleading startup failure complaining that
      the shared memory request size was too large.
     </p></li><li class="listitem"><p>
      Avoid possible crashes in syslogger process on Windows (Heikki)
     </p></li><li class="listitem"><p>
      Deal more robustly with incomplete time zone information in the
      Windows registry (Magnus)
     </p></li><li class="listitem"><p>
      Update the set of known Windows time zone names (Magnus)
     </p></li><li class="listitem"><p>
      Update time zone data files to <span class="application">tzdata</span> release 2010j
      for DST law changes in Argentina, Australian Antarctic, Bangladesh,
      Mexico, Morocco, Pakistan, Palestine, Russia, Syria, Tunisia;
      also historical corrections for Taiwan.
     </p><p>
      Also, add <code class="literal">PKST</code> (Pakistan Summer Time) to the default set of
      timezone abbreviations.
     </p></li></ul></div></div></div><div class="navfooter"><hr /><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="release-8-2-18.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="release.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="release-8-2-16.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">E.211. Release 8.2.18 </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> E.213. Release 8.2.16</td></tr></table></div></body></html>