Accepted postgresql-common 210 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 14 Nov 2019 13:23:42 +0100
Source: postgresql-common
Architecture: source
Version: 210
Distribution: unstable
Urgency: medium
Maintainer: Debian PostgreSQL Maintainers <team+postgresql@tracker.debian.org>
Changed-By: Christoph Berg <myon@debian.org>
Changes:
postgresql-common (210) unstable; urgency=medium
.
* pg_ctlcluster: Drop privileges before creating socket and stats temp
directories outside /var/run/postgresql. The default configuration is not
affected by this change. Users with directories on volatile storage
(tmpfs) in other locations have to make sure the parent directory is
writable for the cluster owner. (CVE-2019-3466, discovered by Rich Mirch)
Checksums-Sha1:
6c7eb1f73d268966b81f57c9be114ec6e7fb235c 2411 postgresql-common_210.dsc
641e31fb4d7eb056bde2e235230eb8f5ff6deb75 215412 postgresql-common_210.tar.xz
Checksums-Sha256:
7230a48a97d3b21e30ab98af1a873466409f6427f76905a20a2dbf375dece579 2411 postgresql-common_210.dsc
6f59e3fb13eb285924854211b3edb21f44fb3ea835287a9801fb346c84d9edda 215412 postgresql-common_210.tar.xz
Files:
70c79f781c6a7e4e4fb9710cd226e9e3 2411 database optional postgresql-common_210.dsc
2351f2d60e37f6fcab86cab48dffe330 215412 database optional postgresql-common_210.tar.xz
-----BEGIN PGP SIGNATURE-----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=3uCl
-----END PGP SIGNATURE-----