USN-4194-1: postgresql-common vulnerability

Releases

• Ubuntu 19.10
• Ubuntu 19.04
• Ubuntu 18.04 ESM
• Ubuntu 16.04 ESM

Packages

• postgresql-common - PostgreSQL database-cluster manager

Details

Rich Mirch discovered that the postgresql-common pg_ctlcluster script
incorrectly handled directory creation. A local attacker could possibly use
this issue to escalate privileges.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 19.10

• postgresql-common - 204ubuntu0.1

Ubuntu 19.04

• postgresql-common - 199ubuntu0.1

Ubuntu 18.04

• postgresql-common - 190ubuntu0.1

Ubuntu 16.04

• postgresql-common - 173ubuntu0.3

In general, a standard system update will make all the necessary changes.

References

• CVE-2019-3466

Related notices

• USN-4194-2: postgresql-contrib, postgresql-server-dev-all, postgresql-doc, postgresql-common, postgresql-client, postgresql, postgresql-client-common