* SECURITY UPDATE: incorrect privilege assignment in the interaction between SET SESSION AUTHORIZATION and SET ROLE, where the two settings were not applied independently, so rolling back a transaction that changed the session authorization, or returning from a function carrying a SET clause, could leave the session with an effective user ID other than the one it had before, and a parallel worker could report the wrong role or fail to start when the current role's pg_authid row was gone - debian/patches/CVE-2024-10978.patch: separate the routines that assign session_authorization from those that assign role in src/backend/utils/init/miscinit.c, perform the SQL-mandated "SET ROLE NONE" from set_config_option() itself in src/backend/utils/misc/guc.c and stop excluding "role" from parallel GUC serialization, move the session authorization permission check into check_session_authorization() in src/backend/commands/variable.c and teach it and check_role() the parallel worker startup case, set every user ID variable directly in ParallelWorkerMain() in src/backend/access/transam/parallel.c so a worker survives a missing pg_authid row, keep the connection privilege check in InitPostgres() based on AuthenticatedUserId for parallel workers in src/backend/utils/init/postinit.c, and expose the new accessors in src/include/miscadmin.h - CVE-2024-10978