postgresql-common vulnerabilities

2017-11-09T00:00:00
ID USN-3476-1
Type ubuntu
Reporter Ubuntu
Modified 2017-11-09T00:00:00

Description

Dawid Golunski discovered that the postgresql-common pg_ctlcluster script incorrectly handled symlinks. A local attacker could possibly use this issue to escalate privileges. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-1255)

It was discovered that the postgresql-common helper scripts incorrectly handled symlinks. A local attacker could possibly use this issue to escalate privileges. (CVE-2017-8806)