E.238. Release 8.2.2
Release date: 2007-02-05
This release contains a variety of fixes from 8.2.1, including a security fix. For information about new features in the 8.2 major release, see Section E.240.
E.238.1. Migration to Version 8.2.2
A dump/restore is not required for those running 8.2.X.
E.238.2. Changes
Remove security vulnerabilities that allowed connected users to read backend memory (Tom)
The vulnerabilities involve suppressing the normal check that a SQL function returns the data type it's declared to, and changing the data type of a table column (CVE-2007-0555, CVE-2007-0556). These errors can easily be exploited to cause a backend crash, and in principle might be used to read database content that the user should not be able to access.
Fix not-so-rare-anymore bug wherein btree index page splits could fail due to choosing an infeasible split point (Heikki Linnakangas)
Fix Borland C compile scripts (L Bayuk)
Properly handle
to_char('CC')for years ending in00(Tom)Year 2000 is in the twentieth century, not the twenty-first.
/contrib/tsearch2localization improvements (Tatsuo, Teodor)Fix incorrect permission check in
information_schema.key_column_usageview (Tom)The symptom is “relation with OID nnnnn does not exist” errors. To get this fix without using
initdb, useCREATE OR REPLACE VIEWto install the corrected definition found inshare/information_schema.sql. Note you will need to do this in each database.Improve
VACUUMperformance for databases with many tables (Tom)Fix for rare Assert() crash triggered by
UNION(Tom)Fix potentially incorrect results from index searches using
ROWinequality conditions (Tom)Tighten security of multi-byte character processing for UTF8 sequences over three bytes long (Tom)
Fix bogus “permission denied” failures occurring on Windows due to attempts to fsync already-deleted files (Magnus, Tom)
Fix bug that could cause the statistics collector to hang on Windows (Magnus)
This would in turn lead to autovacuum not working.
Fix possible crashes when an already-in-use PL/pgSQL function is updated (Tom)
Improve PL/pgSQL handling of domain types (Sergiy Vyshnevetskiy, Tom)
Fix possible errors in processing PL/pgSQL exception blocks (Tom)

