* Protect against indirect security threats caused by index functions changing session-local state * Reject SSL certificates containing an embedded null byte in the common name (CN) field * Fix possible crash during backend-startup-time cache initialization * Avoid crash on empty thesaurus dictionary * Prevent signals from interrupting VACUUM at unsafe times * Fix possible crash due to integer overflow in hash table size calculation * Fix very rare crash in inet/cidr comparisons * Ensure that shared tuple-level locks held by prepared transactions are not ignored * Fix premature drop of temporary files used for a cursor that is accessed within a subtransaction * Fix memory leak in syslogger process when rotating to a new CSV logfile * Fix Windows permission-downgrade logic * Fix incorrect logic for GiST index page splits, when the split depends on a non-first column of the index * Don't error out if recycling or removing an old WAL file fails at the end of checkpoint * Ensure WAL files aren't repeatedly archived on Windows * Fix PAM password processing to be more robust * Raise the maximum authentication token (Kerberos ticket) size in GSSAPI and SSPI authentication methods * More...