postgres
diff --git a/‎src/bin/pg_basebackup/streamutil.c
Copy file name to clipboardExpand all lines: src/bin/pg_basebackup/streamutil.c
+7-2Lines changed: 7 additions & 2 deletions b/‎src/bin/pg_basebackup/streamutil.c
Copy file name to clipboardExpand all lines: src/bin/pg_basebackup/streamutil.c
+7-2Lines changed: 7 additions & 2 deletions
@@ -209,8 +209,13 @@ GetConnection(void)
 	if (conn_opts)
 		PQconninfoFree(conn_opts);
 
-	/* Set always-secure search path, so malicious users can't get control. */
-	if (dbname != NULL)
+	/*
+	 * Set always-secure search path, so malicious users can't get control.
+	 * The capacity to run normal SQL queries was added in PostgreSQL
+	 * 10, so the search path cannot be changed (by us or attackers) on
+	 * earlier versions.
+	 */
+	if (dbname != NULL && PQserverVersion(conn) >= 100000)
 	{
 		PGresult   *res;