CVE-2017-7548: lo_put() function ignores ACLs
--------------------------
-The lo_put() function should require the same permissions as lowwrite(), but there was a missing permission check which would allow any user to change the data in a large object.
+The lo_put() function should require the same permissions as lowrite(), but there was a missing permission check which would allow any user to change the data in a large object.
To fix this, the lo_put() function was changed to check the UPDATE privileges on the target object.