pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role. - Mailing list pgsql-committers

From Noah Misch
Subject pgsql: Fix per-session activation of ALTER {ROLE|DATABASE} SET role.
Date
Msg-id E1tCAdS-0022b5-7n@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
Fix per-session activation of ALTER {ROLE|DATABASE} SET role.

After commit 5a2fed911a85ed6d8a015a6bafe3a0d9a69334ae, the catalog state
resulting from these commands ceased to affect sessions.  Restore the
longstanding behavior, which is like beginning the session with a SET
ROLE command.  If cherry-picking the CVE-2024-10978 fixes, default to
including this, too.  (This fixes an unintended side effect of fixing
CVE-2024-10978.)  Back-patch to v12, like that commit.  The release team
decided to include v12, despite the original intent to halt v12 commits
earlier this week.

Tom Lane and Noah Misch.  Reported by Etienne LAFARGE.

Discussion: https://postgr.es/m/CADOZwSb0UsEr4_UTFXC5k7=fyyK8uKXekucd+-uuGjJsGBfxgw@mail.gmail.com

Branch
------
REL_12_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/c463338656ac47e5210fcf9fbf7d20efccce8de8

Modified Files
--------------
src/backend/utils/init/miscinit.c                  | 20 +++++++++++++-
src/backend/utils/misc/guc.c                       | 10 ++++++-
src/test/modules/unsafe_tests/Makefile             |  5 +++-
.../modules/unsafe_tests/expected/setconfig.out    | 31 ++++++++++++++++++++++
src/test/modules/unsafe_tests/sql/setconfig.sql    | 24 +++++++++++++++++
5 files changed, 87 insertions(+), 3 deletions(-)


pgsql-committers by date:

Previous
From: Masahiko Sawada
Date:
Subject: pgsql: Fix a possibility of logical replication slot's restart_lsn goin
Next
From: Tom Lane
Date:
Subject: pgsql: Undo unintentional ABI break in struct ResultRelInfo.