Ubuntu
postgresql-common package

postgresql-common 199ubuntu0.1 source package in Ubuntu

Changelog

postgresql-common (199ubuntu0.1) disco-security; urgency=medium

  * SECURITY UPDATE: Privilege Escalation via Arbitrary Directory Creation
    - pg_ctlcluster: Drop privileges before creating socket and stats temp
      directories outside /var/run/postgresql. The default configuration is
      not affected by this change. Users with directories on volatile
      storage (tmpfs) in other locations have to make sure the parent
      directory is writable for the cluster owner.
    - Thanks to Rich Mirch and Christoph Berg.
    - CVE-2019-3466

 -- Marc Deslauriers <email address hidden>  Wed, 13 Nov 2019 10:21:14 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Disco
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
database
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Disco: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
postgresql-common_199ubuntu0.1.tar.xz 205.5 KiB 9a35a6ce60f4b6246fc7015b88f0ddd7799f8560a11c8e6a1d335a097e85b587
postgresql-common_199ubuntu0.1.dsc 2.4 KiB 1472635cfc34e313d2a309a04e1bf71584168cdb98d2189d93428c49ebc62851

Available diffs

View changes file

Binary packages built by this source

postgresql: No summary available for postgresql in ubuntu disco.

No description available for postgresql in ubuntu disco.

postgresql-all: No summary available for postgresql-all in ubuntu disco.

No description available for postgresql-all in ubuntu disco.

postgresql-client: No summary available for postgresql-client in ubuntu disco.

No description available for postgresql-client in ubuntu disco.

postgresql-client-common: No summary available for postgresql-client-common in ubuntu disco.

No description available for postgresql-client-common in ubuntu disco.

postgresql-common: No summary available for postgresql-common in ubuntu disco.

No description available for postgresql-common in ubuntu disco.

postgresql-contrib: No summary available for postgresql-contrib in ubuntu disco.

No description available for postgresql-contrib in ubuntu disco.

postgresql-doc: No summary available for postgresql-doc in ubuntu disco.

No description available for postgresql-doc in ubuntu disco.

postgresql-server-dev-all: No summary available for postgresql-server-dev-all in ubuntu disco.

No description available for postgresql-server-dev-all in ubuntu disco.