CVE-2016-1255

The CVE-2016-1255 issue affects the pg_ctlcluster script in the postgresql-common package across multiple Debian/Ubuntu releases (e.g., Debian wheezy/jessie, Ubuntu 12.04/14.04/16.04/17.x, etc.). The root cause is a symlink attack on a logfile located in /var/log/postgresql, which local users can...