E.169. Release 8.2.2

Remove security vulnerabilities that allowed connected users to read backend memory (Tom)

The vulnerabilities involve suppressing the normal check that a SQL function returns the data type it's declared to, and changing the data type of a table column (CVE-2007-0555, CVE-2007-0556). These errors can easily be exploited to cause a backend crash, and in principle might be used to read database content that the user should not be able to access.

Fix not-so-rare-anymore bug wherein btree index page splits could fail due to choosing an infeasible split point (Heikki Linnakangas)

Fix Borland C compile scripts (L Bayuk)

Properly handle to_char('CC') for years ending in 00 (Tom)

Year 2000 is in the twentieth century, not the twenty-first.

/contrib/tsearch2 localization improvements (Tatsuo, Teodor)

Fix incorrect permission check in information_schema.key_column_usage view (Tom)

The symptom is « relation with OID nnnnn does not exist » errors. To get this fix without using initdb, use CREATE OR REPLACE VIEW to install the corrected definition found in share/information_schema.sql. Note you will need to do this in each database.

Improve VACUUM performance for databases with many tables (Tom)

Fix for rare Assert() crash triggered by UNION (Tom)

Fix potentially incorrect results from index searches using ROW inequality conditions (Tom)

Tighten security of multi-byte character processing for UTF8 sequences over three bytes long (Tom)

Fix bogus « permission denied » failures occurring on Windows due to attempts to fsync already-deleted files (Magnus, Tom)

Fix bug that could cause the statistics collector to hang on Windows (Magnus)

This would in turn lead to autovacuum not working.

Fix possible crashes when an already-in-use PL/pgSQL function is updated (Tom)

Improve PL/pgSQL handling of domain types (Sergiy Vyshnevetskiy, Tom)

Fix possible errors in processing PL/pgSQL exception blocks (Tom)