对于运行 9.3.X 的用户，不需要进行转储/恢复。
\n但是，如果你使用的外部数据服务器依赖用户密码进行认证，请参见下面的第一条变更日志条目。
\n不过，如果你是从早于 9.3.16 的版本升级，请参见第 E.10 节。
", "compatibility_count": 0, "label": "9.3.17", "status_label": "历史版本", "eol": "2018-11-08", "age_days": 3429, "support_days": -2883}, "groups": [{"date": "2017-05-11", "build": "9.3.17", "major": "9.3", "minor": 17, "manual": "9.3", "status": "stable", "doc_git": "", "version": "9.3.17", "eol_date": "2018-11-08", "date_text": "2017-05-11", "supported": false, "manual_url": "/docs/9.3/release-9-3-17.html", "source_url": "/docs/release/9.3.17/", "entry_count": 28, "placeholder": false, "content_hash": "0bb6fdb1765b2a12ed755bc4507baf0ba6d316554cd17aa17e106a9cb62d74ca", "manual_build": "9.3.25", "source_as_of": "", "changes_count": 28, "doc_loaded_at": "2026-09-26T02:56:46.133805", "migration_html": "对于运行 9.3.X 的用户，不需要进行转储/恢复。
\n但是，如果你使用的外部数据服务器依赖用户密码进行认证，请参见下面的第一条变更日志条目。
\n不过，如果你是从早于 9.3.16 的版本升级，请参见第 E.10 节。
", "compatibility_count": 0, "label": "9.3.17", "status_label": "历史版本", "eol": "2018-11-08", "age_days": 3429, "support_days": -2883, "entries": [{"id": "9.3.17-79d9b1a29aec7ea1", "cves": ["CVE-2017-7486", "CVE-2017-7547"], "html": "限制pg_user_mappings.umoptions的可见性，以保护作为用户映射选项存储的密码（Michael Paquier、Feike Steenbergen）
原来的编码允许外部服务器对象的所有者，或任何被他授予服务器 USAGE 权限的人，看到与该服务器关联的所有用户映射的选项。这很可能包括其他用户的密码。调整视图定义以匹配 information_schema.user_mapping_options 的行为，即这些选项对被映射的用户可见，或者当映射针对 PUBLIC 且当前用户是服务器所有者时，或者当前用户是超级用户时可见。（CVE-2017-7486）
此补丁本身只会修复新 initdb 的数据库中的行为。如果希望在现有数据库中应用此更改，请遵循第 E.8 节中 CVE-2017-7547 变更日志条目所示的更正程序。
", "text": "限制pg_user_mappings.umoptions的可见性，以保护作为用户映射选项存储的密码（Michael Paquier、Feike Steenbergen） 原来的编码允许外部服务器对象的所有者，或任何被他授予服务器 USAGE 权限的人，看到与该服务器关联的所有用户映射的选项。这很可能包括其他用户的密码。调整视图定义以匹配 information_schema.user_mapping_options 的行为，即这些选项对被映射的用户可见，或者当映射针对 PUBLIC 且当前用户是服务器所有者时，或者当前用户是超级用户时可见。（CVE-2017-7486） 此补丁本身只会修复新 initdb 的数据库中的行为。如果希望在现有数据库中应用此更改，请遵循第 E.8 节中 CVE-2017-7547 变更日志条目所示的更正程序。", "title": "限制pg_user_mappings.umoptions的可见性，以保护作为用户映射选项存储的密码", "commits": [], "section": "变更", "category": "security", "source_url": "/docs/release/9.3.17/#id-1.11.6.13.5", "source_hash": "ee31e64de8a6f893cc9dedb359c097d78815672a455de520e09e99613776395f", "section_path": ["变更"], "commit_groups": [], "identity_text": "Restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options (Michael Paquier, Feike Steenbergen) The previous coding allowed the owner of a foreign server object, or anyone he has granted server USAGE permission to, to see the options for all user mappings associated with that server. This might well include passwords for other users. Adjust the view definition to match the behavior of information_schema.user_mapping_options, namely that these options are visible to the user being mapped, or if the mapping is for PUBLIC and the current user is the server owner, or if the current user is a superuser. (CVE-2017-7486) By itself, this patch will only fix the behavior in newly initdb'd databases. If you wish to apply this change in an existing database, follow the corrected procedure shown in the changelog entry for CVE-2017-7547, in release-9-3-18 .", "commit_aliases": [], "source_commits": [], "source_entry_id": "9.3.17/changes/001", "db_id": "0d7f367be5266b2896555c6d5d0f9bae", "patch_ids": [], "statement_hash": "a1991abdc401e77d6c6ff7785c3d2f3fe8e8b79c80f0a249744ff1d853b70058", "relations": [], "version": "9.3.17", "category_label": "安全相关", "also_in": [], "variants": [], "related_changes": []}, {"id": "9.3.17-e7d6271f2c62b341", "cves": ["CVE-2017-7484"], "html": "防止通过泄漏型操作符暴露统计信息（Peter Eisentraut）
\n规划器的一些选择率估计函数会对从 pg_statistic 获得的值（如最常见值和直方图条目）应用用户定义操作符。这发生在表权限检查之前，因此恶意用户可以利用这一行为获得他无权读取的表列的这些值。为修复，当操作符的实现函数未被证明防泄漏且调用用户无权读取所需统计信息的表列时，回退到默认估计。实践中大多数情况下至少满足这些准则之一。（CVE-2017-7484）
恢复 libpq 对 PGREQUIRESSL 环境变量的识别（Daniel Gustafsson）
对这个环境变量的处理在 PostgreSQL 9.3 中被意外丢弃，但其文档还在。这造成了安全隐患，因为用户可能依赖该环境变量强制 SSL 加密连接，但这不再有保证。恢复对该变量的处理，但其优先级低于 PGSSLMODE，以避免破坏在 9.3 之后代码下正常工作的配置。（CVE-2017-7485）
修复未记录索引的“init fork”可能的损坏（Robert Haas、Michael Paquier）
\n这可能导致未记录索引在崩溃和重启之后被置为无效状态。这种问题将持续到索引被删除并重建为止。
", "text": "修复未记录索引的“init fork”可能的损坏（Robert Haas、Michael Paquier） 这可能导致未记录索引在崩溃和重启之后被置为无效状态。这种问题将持续到索引被删除并重建为止。", "title": "修复未记录索引的“init fork”可能的损坏", "commits": [], "section": "变更", "category": "bugfix", "source_url": "/docs/release/9.3.17/#id-1.11.6.13.5", "source_hash": "97489d0a9aa069ca4c56582f52bc241c0a19dfe8b5ae4cc8a5b775d69e0d83a8", "section_path": ["变更"], "commit_groups": [], "identity_text": "Fix possible corruption of init forks of unlogged indexes (Robert Haas, Michael Paquier) This could result in an unlogged index being set to an invalid state after a crash and restart. Such a problem would persist until the index was dropped and rebuilt.", "commit_aliases": [], "source_commits": [], "source_entry_id": "9.3.17/changes/004", "db_id": "3cd432e6bf2afd9768a1ca6668a16b11", "patch_ids": [], "statement_hash": "72154e11e8954b335d0bac05809c8026ca9489a2b55963899b1c9caca08b7e95", "relations": [{"rule": 2, "type": "equivalent", "target": "4211c712a1cafeeda59a3774d3215bb6", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "72154e11e8954b335d0bac05809c8026ca9489a2b55963899b1c9caca08b7e95"}}, {"rule": 2, "type": "equivalent", "target": "78b68e1b952f1ca693a0b48ee6e72d22", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "72154e11e8954b335d0bac05809c8026ca9489a2b55963899b1c9caca08b7e95"}}, {"rule": 2, "type": "equivalent", "target": "bd24590e475333f4790f5fe53c61411a", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "72154e11e8954b335d0bac05809c8026ca9489a2b55963899b1c9caca08b7e95"}}, {"rule": 2, "type": "equivalent", "target": "ca9e7897b0b819057bd22c3e412c2a31", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "72154e11e8954b335d0bac05809c8026ca9489a2b55963899b1c9caca08b7e95"}}], "version": "9.3.17", "category_label": "BUG 修复", "also_in": [], "variants": [], "related_changes": [{"db_id": "ca9e7897b0b819057bd22c3e412c2a31", "kind": "equivalent", "version": "9.6.3", "label": "9.6.3", "title": "修复未记录索引的“init fork”可能的损坏", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "72154e11e8954b335d0bac05809c8026ca9489a2b55963899b1c9caca08b7e95"}, "url": "/docs/compare/?release=9.6.3#9.6.3-9e46866f9aacc344", "source_url": "/docs/release/9.6.3/#id-1.11.6.26.5"}, {"db_id": "bd24590e475333f4790f5fe53c61411a", "kind": "equivalent", "version": "9.5.7", "label": "9.5.7", "title": "修复未记录索引的“init fork”可能的损坏", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "72154e11e8954b335d0bac05809c8026ca9489a2b55963899b1c9caca08b7e95"}, "url": "/docs/compare/?release=9.5.7#9.5.7-9e46866f9aacc344", "source_url": "/docs/release/9.5.7/#id-1.11.6.23.5"}, {"db_id": "4211c712a1cafeeda59a3774d3215bb6", "kind": "equivalent", "version": "9.4.12", "label": "9.4.12", "title": "修复未记录索引的“init fork”可能的损坏", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "72154e11e8954b335d0bac05809c8026ca9489a2b55963899b1c9caca08b7e95"}, "url": "/docs/compare/?release=9.4.12#9.4.12-9e46866f9aacc344", "source_url": "/docs/release/9.4.12/#id-1.11.6.19.5"}, {"db_id": "78b68e1b952f1ca693a0b48ee6e72d22", "kind": "equivalent", "version": "9.2.21", "label": "9.2.21", "title": "修复未记录索引的“init fork”可能的损坏", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "72154e11e8954b335d0bac05809c8026ca9489a2b55963899b1c9caca08b7e95"}, "url": "/docs/compare/?release=9.2.21#9.2.21-9e46866f9aacc344", "source_url": "/docs/release/9.2.21/#id-1.11.6.8.6"}]}, {"id": "9.3.17-3196986f7692066e", "cves": [], "html": "修复备库重放已预备但未提交的两阶段事务时 pg_subtrans 条目的错误重建（Tom Lane）
大多数情况下这没有可见的不良影响，但在边界情况下可能导致 pg_subtrans 中的循环引用，可能使检查两阶段事务所修改行的查询陷入无限循环。
确保扩展脚本中查询的解析能看到紧邻的前一条 DDL 的结果（Julien Rouhaud、Tom Lane）
\n由于扩展脚本文件中命令之间缺少缓存刷新步骤，非实用查询可能看不到紧邻的目录更改（如 ALTER TABLE ... RENAME）的效果。
当 ALTER TABLE ... ALTER COLUMN TYPE 重建现有索引时跳过表空间权限检查（Noah Misch）
如果调用用户当前对包含索引的表空间没有 CREATE 权限，命令就会失败。这种行为似乎无益，因此跳过检查，允许索引在原地重建。
修复 ALTER TABLE ... VALIDATE CONSTRAINT 在约束被标记 NO INHERIT 时不递归到子表（Amit Langote）
此修复防止子表中不存在匹配约束时不需要的 “constraint does not exist” 失败。
", "text": "修复 ALTER TABLE ... VALIDATE CONSTRAINT 在约束被标记 NO INHERIT 时不递归到子表（Amit Langote） 此修复防止子表中不存在匹配约束时不需要的 “constraint does not exist” 失败。", "title": "修复 ALTER TABLE ... VALIDATE CONSTRAINT 在约束被标记 NO INHERIT 时不递归到子表", "commits": [], "section": "变更", "category": "bugfix", "source_url": "/docs/release/9.3.17/#id-1.11.6.13.5", "source_hash": "d274dc8059c34097046f2168454c889cf70b0badadeaa397fceec4aa7a43bf04", "section_path": ["变更"], "commit_groups": [], "identity_text": "Fix ALTER TABLE ... VALIDATE CONSTRAINT to not recurse to child tables when the constraint is marked NO INHERIT (Amit Langote) This fix prevents unwanted constraint does not exist failures when no matching constraint is present in the child tables.", "commit_aliases": [], "source_commits": [], "source_entry_id": "9.3.17/changes/008", "db_id": "cb079a253c7af9722536a1bd69e85265", "patch_ids": [], "statement_hash": "506e016e739d202330f73387c06195571792dfa786d626323d84c373db03b4a7", "relations": [{"rule": 2, "type": "equivalent", "target": "81d23cfd99a39dc495d69e569baa889e", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "506e016e739d202330f73387c06195571792dfa786d626323d84c373db03b4a7"}}, {"rule": 2, "type": "equivalent", "target": "879aff98f14e268327e22c922d4e9089", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "506e016e739d202330f73387c06195571792dfa786d626323d84c373db03b4a7"}}, {"rule": 2, "type": "equivalent", "target": "9133d2a12ec3fd2b0a6cea89d097df83", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "506e016e739d202330f73387c06195571792dfa786d626323d84c373db03b4a7"}}, {"rule": 2, "type": "equivalent", "target": "dae34339a2ec9467a3ace74f31bb3942", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "506e016e739d202330f73387c06195571792dfa786d626323d84c373db03b4a7"}}], "version": "9.3.17", "category_label": "BUG 修复", "also_in": [], "variants": [], "related_changes": [{"db_id": "9133d2a12ec3fd2b0a6cea89d097df83", "kind": "equivalent", "version": "9.6.3", "label": "9.6.3", "title": "修复 ALTER TABLE ... VALIDATE CONSTRAINT 在约束被标记 NO INHERIT 时不递归到子表", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "506e016e739d202330f73387c06195571792dfa786d626323d84c373db03b4a7"}, "url": "/docs/compare/?release=9.6.3#9.6.3-8379ba9bba11cc33", "source_url": "/docs/release/9.6.3/#id-1.11.6.26.5"}, {"db_id": "879aff98f14e268327e22c922d4e9089", "kind": "equivalent", "version": "9.5.7", "label": "9.5.7", "title": "修复 ALTER TABLE ... VALIDATE CONSTRAINT 在约束被标记 NO INHERIT 时不递归到子表", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "506e016e739d202330f73387c06195571792dfa786d626323d84c373db03b4a7"}, "url": "/docs/compare/?release=9.5.7#9.5.7-8379ba9bba11cc33", "source_url": "/docs/release/9.5.7/#id-1.11.6.23.5"}, {"db_id": "81d23cfd99a39dc495d69e569baa889e", "kind": "equivalent", "version": "9.4.12", "label": "9.4.12", "title": "修复 ALTER TABLE ... VALIDATE CONSTRAINT 在约束被标记 NO INHERIT 时不递归到子表", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "506e016e739d202330f73387c06195571792dfa786d626323d84c373db03b4a7"}, "url": "/docs/compare/?release=9.4.12#9.4.12-8379ba9bba11cc33", "source_url": "/docs/release/9.4.12/#id-1.11.6.19.5"}, {"db_id": "dae34339a2ec9467a3ace74f31bb3942", "kind": "equivalent", "version": "9.2.21", "label": "9.2.21", "title": "修复 ALTER TABLE ... VALIDATE CONSTRAINT 在约束被标记 NO INHERIT 时不递归到子表", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "506e016e739d202330f73387c06195571792dfa786d626323d84c373db03b4a7"}, "url": "/docs/compare/?release=9.2.21#9.2.21-8379ba9bba11cc33", "source_url": "/docs/release/9.2.21/#id-1.11.6.8.6"}]}, {"id": "9.3.17-f13c3c418359cf9b", "cves": [], "html": "修复 VACUUM 正确考虑因页 pin 冲突而无法扫描的页（Andrew Gierth）
这往往导致低估表中的元组数。在小型高争用表的最坏情况下，VACUUM 可能错误地报告表不包含任何元组，导致非常糟糕的计划选择。
确保哈希连接中的批量元组传输循环可被查询取消请求中断（Tom Lane、Thomas Munro）
", "text": "确保哈希连接中的批量元组传输循环可被查询取消请求中断（Tom Lane、Thomas Munro）", "title": "确保哈希连接中的批量元组传输循环可被查询取消请求中断", "commits": [], "section": "变更", "category": "improvement", "source_url": "/docs/release/9.3.17/#id-1.11.6.13.5", "source_hash": "1607f1f0650306afd724a89bb6264f8f8acc9cf6aba843827b2128ab6dd65651", "section_path": ["变更"], "commit_groups": [], "identity_text": "Ensure that bulk-tuple-transfer loops within a hash join are interruptible by query cancel requests (Tom Lane, Thomas Munro)", "commit_aliases": [], "source_commits": [], "source_entry_id": "9.3.17/changes/010", "db_id": "44a80c2bde78d80851b1a09ce27946cd", "patch_ids": [], "statement_hash": "1562a4c4c3bb33538f2e69ea858db766d61467d12edcd1161c46a760bc7920a9", "relations": [{"rule": 2, "type": "equivalent", "target": "4ebb29373a0e5c0d4208e6dd79e23c12", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "1562a4c4c3bb33538f2e69ea858db766d61467d12edcd1161c46a760bc7920a9"}}, {"rule": 2, "type": "equivalent", "target": "b9dbfae1d26849c91b891fd3f3043668", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "1562a4c4c3bb33538f2e69ea858db766d61467d12edcd1161c46a760bc7920a9"}}, {"rule": 2, "type": "equivalent", "target": "e032b7048304783de6b9cf719a0a16f0", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "1562a4c4c3bb33538f2e69ea858db766d61467d12edcd1161c46a760bc7920a9"}}, {"rule": 2, "type": "equivalent", "target": "efdfecf5ad98e461aed2bca8807b220a", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "1562a4c4c3bb33538f2e69ea858db766d61467d12edcd1161c46a760bc7920a9"}}], "version": "9.3.17", "category_label": "其他改进", "also_in": [], "variants": [], "related_changes": [{"db_id": "efdfecf5ad98e461aed2bca8807b220a", "kind": "equivalent", "version": "9.6.3", "label": "9.6.3", "title": "确保哈希连接中的批量元组传输循环可被查询取消请求中断", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "1562a4c4c3bb33538f2e69ea858db766d61467d12edcd1161c46a760bc7920a9"}, "url": "/docs/compare/?release=9.6.3#9.6.3-573e4331b3c8ac58", "source_url": "/docs/release/9.6.3/#id-1.11.6.26.5"}, {"db_id": "b9dbfae1d26849c91b891fd3f3043668", "kind": "equivalent", "version": "9.5.7", "label": "9.5.7", "title": "确保哈希连接中的批量元组传输循环可被查询取消请求中断", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "1562a4c4c3bb33538f2e69ea858db766d61467d12edcd1161c46a760bc7920a9"}, "url": "/docs/compare/?release=9.5.7#9.5.7-573e4331b3c8ac58", "source_url": "/docs/release/9.5.7/#id-1.11.6.23.5"}, {"db_id": "4ebb29373a0e5c0d4208e6dd79e23c12", "kind": "equivalent", "version": "9.4.12", "label": "9.4.12", "title": "确保哈希连接中的批量元组传输循环可被查询取消请求中断", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "1562a4c4c3bb33538f2e69ea858db766d61467d12edcd1161c46a760bc7920a9"}, "url": "/docs/compare/?release=9.4.12#9.4.12-573e4331b3c8ac58", "source_url": "/docs/release/9.4.12/#id-1.11.6.19.5"}, {"db_id": "e032b7048304783de6b9cf719a0a16f0", "kind": "equivalent", "version": "9.2.21", "label": "9.2.21", "title": "确保哈希连接中的批量元组传输循环可被查询取消请求中断", "evidence": {"same_day": true, "patch_ids": [], "statement_hash": "1562a4c4c3bb33538f2e69ea858db766d61467d12edcd1161c46a760bc7920a9"}, "url": "/docs/compare/?release=9.2.21#9.2.21-573e4331b3c8ac58", "source_url": "/docs/release/9.2.21/#id-1.11.6.8.6"}]}, {"id": "9.3.17-70ab2a8c53cd53f0", "cves": [], "html": "修复 cursor_to_xml() 在 tableforest = false 时产生有效输出（Thomas Munro、Peter Eisentraut）
此前它未能产生包裹的 <table> 元素。