Re: Revert libpq servicefile connection option in v19 (info leak and uninterruptible backend DoS)

From: Michael Paquier <michael(at)paquier(dot)xyz>
To: Sehrope Sarkuni <sehrope(at)jackdb(dot)com>
Cc: Pg Hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Revert libpq servicefile connection option in v19 (info leak and uninterruptible backend DoS)
Date: 2026-10-15 23:44:45
Message-ID: atFlbVgqmOe3JBT-@paquier.xyz
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Thu, Oct 15, 2026 at 07:17:18PM -0400, Sehrope Sarkuni wrote:
> Before 092f3c63efc the service file path came only from PGSERVICEFILE
> or fixed locations, which a SQL user cannot set, so 18 and earlier are
> not exposed this way.

It took me some time to get around that, but PGSERVICEFILE should be
sufficient from the user perspective. So I have prepared a revert as
of the attached, to-be-applied down to v19. And I intend to act at
the beginning of next week.
--
Michael

Attachment Content-Type Size
0001-libpq-Revert-the-connection-option-servicefile.patch text/plain 13.3 KB

In response to

Browse pgsql-hackers by date

  From Date Subject
Previous Message Fujii Masao 2026-10-15 23:34:42 Re: [PATCH] Doc fix for autovacuum_max_parallel_workers