USN-6656-2: PostgreSQL vulnerability
USN-6656-1 fixed several vulnerabilities in PostgreSQL. This update provides the corresponding updates for Ubuntu 16.04 LTS Original advisory details: It was discovered that PostgreSQL incorrectly handled dropping privileges when handling REFRESH MATERIALIZED VIEW CONCURRENTLY commands. If a user or automatic system were tricked into running a specially crafted command, a remote attacker could possibly use this issue to execute arbitrary SQL functions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6656-2?
The severity of USN-6656-2 is classified as important due to potential privilege escalation risks in PostgreSQL.
How do I fix USN-6656-2?
To fix USN-6656-2, update PostgreSQL and PostgreSQL client to version 9.5.25-0ubuntu0.16.04.1+esm7 on Ubuntu 16.04.
Which versions of PostgreSQL are affected by USN-6656-2?
USN-6656-2 affects PostgreSQL versions earlier than 9.5.25-0ubuntu0.16.04.1+esm7 on Ubuntu 16.04.
What vulnerabilities are addressed in USN-6656-2?
USN-6656-2 addresses vulnerabilities related to incorrect privilege handling in PostgreSQL during specific database operations.
Is USN-6656-2 relevant for all Ubuntu versions?
No, USN-6656-2 is specifically relevant for Ubuntu 16.04 LTS users running PostgreSQL.