pgsql: Force certain "pljava" custom GUCs to be PGC_SUSET. - Mailing list pgsql-committers

From Noah Misch
Subject pgsql: Force certain "pljava" custom GUCs to be PGC_SUSET.
Date
Msg-id E1aRre4-0004jz-UY@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
Force certain "pljava" custom GUCs to be PGC_SUSET.

Future PL/Java versions will close CVE-2016-0766 by making these GUCs
PGC_SUSET.  This PostgreSQL change independently mitigates that PL/Java
vulnerability, helping sites that update PostgreSQL more frequently than
PL/Java.  Back-patch to 9.1 (all supported versions).

Branch
------
master

Details
-------
http://git.postgresql.org/pg/commitdiff/f4aa3a18a20d51575562520754aa376b3b08b2d0

Modified Files
--------------
src/backend/utils/misc/guc.c | 11 +++++++++++
1 file changed, 11 insertions(+)


pgsql-committers by date:

Previous
From: Noah Misch
Date:
Subject: pgsql: Force certain "pljava" custom GUCs to be PGC_SUSET.
Next
From: Noah Misch
Date:
Subject: pgsql: Force certain "pljava" custom GUCs to be PGC_SUSET.