Publishing details

Changelog

postgresql-13 (13.7-0ubuntu0.21.10.1) impish; urgency=medium

  * New upstream version (LP: #1973627).

  + A dump/restore is not required for those running 13.X.

  + However, if you have any GiST indexes on columns of type ltree (supplied
    by the contrib/ltree extension), you should re-index them after updating.
    See the upstream changelog linked below for further information.

  + Also, if you are upgrading from a version earlier than 13.6, see
    those release notes as well please.

  + Confine additional operations within "security restricted operation"
    sandboxes (Sergey Shinderuk, Noah Misch).

    Autovacuum, CLUSTER, CREATE INDEX, REINDEX, REFRESH MATERIALIZED VIEW,
    and pg_amcheck activated the "security restricted operation" protection
    mechanism too late, or even not at all in some code paths. A user having
    permission to create non-temporary objects within a database could
    define an object that would execute arbitrary SQL code with superuser
    permissions the next time that autovacuum processed the object, or that
    some superuser ran one of the affected commands against it.

    The PostgreSQL Project thanks Alexander Lakhin for reporting this
    problem.
    (CVE-2022-1552)

  + Details about these and many further changes can be found at:
    https://www.postgresql.org/docs/13/release-13-7.html

 -- Athos Ribeiro <email address hidden>  Tue, 17 May 2022 10:58:43 -0300

Available diffs

Builds

Built packages

Package files