PostgreSQL 10.1

What's new in this version:

Three security vulnerabilities have been fixed by this release:
- Start scripts permit database administrator to modify root-owned files
- Memory disclosure in JSON functions
- INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges

Bug Fixes and Improvements:
- Fix a race condition in BRIN indexing that could cause some rows to not be included in the indexing
- Fix crash when logical decoding is invoked from a PL language function
- Several fixes for logical replication
- Restored behavior for CTEs attached to INSERT/UPDATE/DELETE statements to pre-version 10
- Prevent low-probability crash in processing of nested trigger firings
- Do not evaluate an aggregate function's argument expressions when the conditions in the FILTER clause evaluate to FALSE. This complies with SQL-standard behavior
- Fix incorrect query results when multiple GROUPING SETS columns contain the same simple variable
- Fix memory leak over the lifespan of a query when evaluating a set-returning function from the target list in a SELECT
- Several fixes for parallel query execution, including fixing a crash in the parallel execution of certain queries that contain a certain type of bitmap scan
- Fix json_build_array(), json_build_object(), jsonb_build_array(), and jsonb_build_object() to handle explicit VARIADIC arguments correctly
- Prevent infinite float values from being casted to the numeric type
- Fix autovacuum's “work item” logic to prevent possible crashes and silent loss of work items
- Several fixes for VIEWs around adding columns to the end of a view
- Fix for hashability detection of range data types that are created by a user
- Improvements on using extended statistics on columns for the purposes of query planning
- Prevent idle_in_transaction_session_timeout from being ignored when a statement_timeout occurred earlier
- Fix low-probability loss of NOTIFY messages due more than 2 billion transactions processing before any queries are executed in the session
- Several file system interaction fixes
- Correctly restore the umask setting when file creation fails in COPY or lo_export()
- Fix pg_dump to ensure that it emits GRANT commands in a valid order
- Fix pg_basebackup's matching of tablespace paths to canonicalize both paths before comparing to help improve Windows compatibility
- Fix libpq to not require user's home directory to exist when trying to read the "~/.pgpass" file
- Several fixes for ecpg
- This update also contains tzdata release 2017c, with updates for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks & Caicos Islands, plus historical corrections for Alaska, Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago Pago