USN-6-1: postgresql contributed script vulnerability
Recently, Trustix Secure Linux discovered a vulnerability in the postgresql-contrib package. The script "makeoidjoinscheck" created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the script.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6-1?
The USN-6-1 vulnerability is considered a high severity risk due to its potential for unauthorized file creation or overwriting through a symlink attack.
How do I fix USN-6-1?
To fix USN-6-1, you should update the postgresql-contrib package to the latest version available for Ubuntu 4.10.
What systems are impacted by USN-6-1?
USN-6-1 affects Ubuntu 4.10 systems running the postgresql-contrib package.
What type of vulnerability is described in USN-6-1?
USN-6-1 describes a symlink vulnerability resulting from insecure temporary file handling in the postgresql-contrib package.
Who discovered the vulnerability in USN-6-1?
The vulnerability in USN-6-1 was discovered by Trustix Secure Linux.