Ubuntu Security Notice 5676-1 - Alexander Lakhin discovered that PostgreSQL incorrectly handled the security restricted operation sandbox when a privileged user is maintaining another user’s objects. An attacker having permission to create non-temp objects can use this issue to execute arbitrary commands as the superuser.
9da0bc0ee9f52b513c02af9341f067dfcb0ce59b2c44f72a5cedfb5e5487c64d