postgresql-common (154ubuntu1.1) trusty-security; urgency=medium
* SECURITY UPDATE: symlink attack vulnerability
- drop privileges when creating log file in pg_ctlcluster.
- c8989206ec360f199400c74f129f7b4cb878c1ee
- CVE-2016-1255
* SECURITY UPDATE: symlink attack vulnerability in init/helper scripts
(LP: #1727209)
- use lchown instead of chown in pg_createcluster, pg_ctlcluster,
pg_upgradecluster.
- 8b4d0a889a8287181c4bdf46462db9b737a6e25d
- No CVE number
Date: 2017-11-08 13:45:22.079772+00:00
Changed-By: Marc Deslauriers <[email protected]>
https://launchpad.net/ubuntu/+source/postgresql-common/154ubuntu1.1
Sorry, changesfile not available.
--
Trusty-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/trusty-changes