[SCM] PostGIS branch stable-3.5 updated. 3.5.5-3-g1bd2c415c

[git at osgeo.org]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "PostGIS".

The branch, stable-3.5 has been updated
       via  1bd2c415cd830ec5e67a9c1987cbfb97aeec9c43 (commit)
      from  d1b44c115e202fbec8fb6238f821f38b7efc6ef0 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 1bd2c415cd830ec5e67a9c1987cbfb97aeec9c43
Author: Paul Ramsey <pramsey at cleverelephant.ca>
Date:   Thu Mar 12 12:01:24 2026 -0700

    Remove priv escalation scenario.
    Reported by Daniel Bakker
    References #6054

diff --git a/NEWS b/NEWS
index a66c75e0d..ff7816473 100644
--- a/NEWS
+++ b/NEWS
@@ -7,7 +7,8 @@ PostgreSQL 12-18 required. GEOS 3.8+ required. Proj 6.1+ required.
 * Bug fixes *
 
   - #6055, Remove rare extension priv escalation case.
-           Reported by Sven Klemm (Tiger Data) and Allistair Ishmael Hakim (allistair.sh)
+           Reported by Sven Klemm (Tiger Data), Allistair Ishmael Hakim (allistair.sh)
+           and Daniel Bakker
 
 
 PostGIS 3.5.5
diff --git a/utils/create_unpackaged.pl b/utils/create_unpackaged.pl
index e7021d87a..e3cc4ba7f 100755
--- a/utils/create_unpackaged.pl
+++ b/utils/create_unpackaged.pl
@@ -186,10 +186,10 @@ AS \$\$
 DECLARE
 	sql text;
 	proc regproc;
-	obj text := format('%s %s', type, sig);
+	obj text := pg_catalog.format('%s %s', type, sig);
 BEGIN
 
-	sql := format('ALTER EXTENSION ${extname} ADD %s', obj);
+	sql := pg_catalog.format('ALTER EXTENSION ${extname} ADD %s', obj);
 	EXECUTE sql;
 	RAISE NOTICE 'newly registered %', obj;
 
@@ -359,7 +359,7 @@ BEGIN
 					'Changing ownership of function % from % to % to match ext',
 					rec.oid::regprocedure, rec.proowner::regrole,
 					rec.extowner::regrole;
-			sql := format(
+			sql := pg_catalog.format(
 				'ALTER FUNCTION %s OWNER TO %I',
 				rec.oid::regprocedure,
 				rec.extowner::regrole

-----------------------------------------------------------------------

Summary of changes:
 NEWS                       | 3 ++-
 utils/create_unpackaged.pl | 6 +++---
 2 files changed, 5 insertions(+), 4 deletions(-)


hooks/post-receive
-- 
PostGIS