UbuntuUpdates.org

Package "postgresql-server-dev-all"

Name: postgresql-server-dev-all

Description:

extension build tool for multiple PostgreSQL versions
Latest version: 154ubuntu1.1
Release: trusty (14.04)
Level: security
Repository: universe
Head package: postgresql-common

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "postgresql-server-dev-all"

All arch deb package
APT INSTALL

Other versions of "postgresql-server-dev-all" in Trusty

Repository Area Version
base universe 154
updates universe 154ubuntu1.1
PPA: Postgresql 168~176.git088fff1.pgdg10.4+1
PPA: Postgresql 182.pgdg12.4+1
PPA: Postgresql 201.pgdg14.04+1
PPA: Postgresql 226.pgdg16.04+1
PPA: Postgresql 250.pgdg18.04+1
PPA: Postgresql 259.pgdg20.04+1
PPA: Postgresql 259.pgdg22.04+1

Changelog

Version: 154ubuntu1.1 2017-11-09 22:06:23 UTC

  postgresql-common (154ubuntu1.1) trusty-security; urgency=medium

  * SECURITY UPDATE: symlink attack vulnerability
    - drop privileges when creating log file in pg_ctlcluster.
    - c8989206ec360f199400c74f129f7b4cb878c1ee
    - CVE-2016-1255
  * SECURITY UPDATE: symlink attack vulnerability in init/helper scripts
    (LP: #1727209)
    - use lchown instead of chown in pg_createcluster, pg_ctlcluster,
      pg_upgradecluster.
    - 8b4d0a889a8287181c4bdf46462db9b737a6e25d
    - No CVE number

 -- Marc Deslauriers <email address hidden> Wed, 08 Nov 2017 08:22:48 -0500
CVE-2016-1255 privilege escalation from postgresql user to root


About   -   Send Feedback to @ubuntu_updates