github cybertec-postgresql/pg_squeeze REL1_9_4
pg_squeeze 1.9.4

4 hours ago

Properly quote schema and table names (#93, @CyberDem0n)

Replace manual double-quote and single-quote string concatenation with
quote_identifier()/quote_ident() and quote_literal_cstr() when building
dynamic SQL for ANALYZE statements and log/error inserts.

Since `squeeze.worker_role` is supposed to be a superuser, lack of
proper quoting allows executing arbitrary SQL with superuser privileges.

Don't miss a new pg_squeeze release

NewReleases is sending notifications on new releases.