USN-3476-2: postgresql-common vulnerabilities
USN-3476-1 fixed two vulnerabilities in postgresql-common. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Dawid Golunski discovered that the postgresql-common pgctlcluster script incorrectly handled symlinks. A local attacker could possibly use this issue to escalate privileges. (CVE-2016-1255) It was discovered that the postgresql-common helper scripts incorrectly handled symlinks. A local attacker could possibly use this issue to escalate privileges. (CVE-2017-8806)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-3476-2?
USN-3476-2 addresses vulnerabilities that allow local attackers to manipulate symlinks, potentially leading to privilege escalation.
How do I fix USN-3476-2?
To fix USN-3476-2, ensure that you update the postgresql-common package to version 129ubuntu1.2 or later on Ubuntu 12.04.
What software is affected by USN-3476-2?
USN-3476-2 affects the postgresql-common package on Ubuntu 12.04.
Who discovered the vulnerabilities in USN-3476-2?
The vulnerabilities fixed in USN-3476-2 were discovered by Dawid Golunski.
What is the purpose of the USN-3476-2 update?
The purpose of the USN-3476-2 update is to provide a security patch for vulnerabilities in the postgresql-common package.