-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 10 Feb 2021 17:49:21 +0100
Source: postgresql-11
Architecture: source
Version: 11.11-0+deb10u1
Distribution: buster
Urgency: medium
Maintainer: Debian PostgreSQL Maintainers <team+postgresql@tracker.debian.org>
Changed-By: Christoph Berg <myon@debian.org>
Changes:
postgresql-11 (11.11-0+deb10u1) buster; urgency=medium
.
* New upstream version.
.
+ Fix information leakage in constraint-violation error messages
(Heikki Linnakangas)
.
If an UPDATE command attempts to move a row to a different partition but
finds that it violates some constraint on the new partition, and the
columns in that partition are in different physical positions than in
the parent table, the error message could reveal the contents of columns
that the user does not have SELECT privilege on. (CVE-2021-3393)
.
+ Fix CREATE INDEX CONCURRENTLY to wait for concurrent prepared
transactions (Andrey Borodin)
.
At the point where CREATE INDEX CONCURRENTLY waits for all concurrent
transactions to complete so that it can see rows they inserted, it must
also wait for all prepared transactions to complete, for the same
reason. Its failure to do so meant that rows inserted by prepared
transactions might be omitted from the new index, causing queries
relying on the index to miss such rows. In installations that have
enabled prepared transactions (max_prepared_transactions > 0), it's
recommended to reindex any concurrently-built indexes in case this
problem occurred when they were built.
Checksums-Sha1:
5b87aa89a920b735495070e0d0ac6b5e627e3a92 3745 postgresql-11_11.11-0+deb10u1.dsc
ebd71258718f08bf20f79a0e0709bee0955df01b 20054359 postgresql-11_11.11.orig.tar.bz2
abee4eebe14e49470dfb18411f22185eecdf829e 26720 postgresql-11_11.11-0+deb10u1.debian.tar.xz
Checksums-Sha256:
e55aba15bb0d824d8a2c6c0cb1f36601861a3a09b7108b521b362e8a56b207ea 3745 postgresql-11_11.11-0+deb10u1.dsc
40607b7fa15b7d63f5075a7277daf7b3412486aa5db3aedffdb7768b9298186c 20054359 postgresql-11_11.11.orig.tar.bz2
9888c3cffd65baad6886715855f34180d7be933d3fc79171c91ccc45db3001f5 26720 postgresql-11_11.11-0+deb10u1.debian.tar.xz
Files:
9b0ab5970d3a5da9c2dcac0b10f48560 3745 database optional postgresql-11_11.11-0+deb10u1.dsc
febd41b2596c85b257521ec75759b21b 20054359 database optional postgresql-11_11.11.orig.tar.bz2
ce3085fa407162b9e39ea6fcf16b7013 26720 database optional postgresql-11_11.11-0+deb10u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=u/we
-----END PGP SIGNATURE-----
