UbuntuUpdates.org

Package "postgresql-common"

Name: postgresql-common

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • extension build tool for multiple PostgreSQL versions
Latest version: 129ubuntu1.2
Release: precise (12.04)
Level: updates
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "postgresql-common" in Precise

Repository Area Version
base universe 128
base main 129
security main 129ubuntu1.2
security universe 129ubuntu1.2
updates main 129ubuntu1.2
PPA: Postgresql 168~176.git088fff1.pgdg10.4+1
PPA: Postgresql 182.pgdg12.4+1
PPA: Postgresql 201.pgdg14.04+1
PPA: Postgresql 226.pgdg16.04+1
PPA: Postgresql 264.pgdg22.04+1
PPA: Postgresql 250.pgdg18.04+1
PPA: Postgresql 264.pgdg20.04+1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 129ubuntu1.2 2021-05-03 16:06:23 UTC

  postgresql-common (129ubuntu1.2) precise-security; urgency=medium

  * SECURITY UPDATE: symlink attack vulnerability
    - drop privileges when creating log file in pg_ctlcluster.
    - c8989206ec360f199400c74f129f7b4cb878c1ee
    - CVE-2016-1255
  * SECURITY UPDATE: symlink attack vulnerability in init/helper scripts
    (LP: #1727209)
    - use lchown instead of chown in pg_createcluster, pg_ctlcluster,
      pg_upgradecluster.
    - 8b4d0a889a8287181c4bdf46462db9b737a6e25d
    - CVE-2017-8806

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 27 Nov 2017 13:41:00 -0300
Source diff to previous version
1727209 symlink attack vulnerability in init/helper scripts
CVE-2016-1255 privilege escalation from postgresql user to root
CVE-2017-8806 The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181+deb9u1 f

Version: 129ubuntu1 2012-09-20 15:07:14 UTC

  postgresql-common (129ubuntu1) precise-proposed; urgency=low

  * pg_ctlcluster: Do not remove the PID file after SIGKILLing the
    postmaster in the "last-ditch effort to shut down" in --force mode. This
    is a potentially dangerous thing to do when trying to start a second
    postmaster in parallel while the first one is still being shut down.
    (see http://archives.postgresql.org/pgsql-general/2012-07/msg00475.php)
    Backported from trunk r1181. (LP: #1042556)
  * debian/control: Update Vcs-* for new precise branch.
 -- Martin Pitt <email address hidden> Thu, 06 Sep 2012 15:01:02 +0200
1042556 Critical data loss bug in postgresql-common initscript


About   -   Send Feedback to @ubuntu_updates