Accepted debian-goodies 0.27+etch1 (source all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Mon, 24 Mar 2008 15:25:59 +0100
Source: debian-goodies
Binary: debian-goodies
Architecture: source all
Version: 0.27+etch1
Distribution: stable-security
Urgency: high
Maintainer: Javier Fernandez-Sanguino Pen~a <jfs@computer.org>
Changed-By: Thijs Kinkhorst <thijs@debian.org>
Description:
debian-goodies - Small toolbox-style utilities for Debian systems
Closes: 440411
Changes:
debian-goodies (0.27+etch1) stable-security; urgency=high
.
* Fix security bug that enables users to generate files in the
filesystem with shell metacharacters and have the checkrestart
script run external code (as root, since the script will only
run as admin). Thanks to Thomas de Grenier de Latour for spotting
this and providing a patch. (CVE-2007-3912, Closes: 440411)
Files:
8653d033f9e6b9f0949fab2cc1813970 836 utils optional debian-goodies_0.27+etch1.dsc
089ff8f154eb3fe4bc47dd85f1581a65 28708 utils optional debian-goodies_0.27+etch1.tar.gz
2739973911e8b0d9ec12559507f6a708 36868 utils optional debian-goodies_0.27+etch1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iQEVAwUBR+e62mz0hbPcukPfAQJYoAf/Vpo+8A6hntrKOR7jDp4pGT9v7HWhhJDS
wltzzk4odJkE4OFrIi69roUACp6O46xRAvCi1KJjj/JizXjmcNGPsYoXq7sSUPNS
uK7GZ0/Cnf70ArAM8hvu7m1+nggs7DEB/LdhJWvItYKufD4oBAP7XihDQPVe5kIr
TCufoECwlt/Xd38bKR3dDWoP/Iu39JJ6vhVL84lKxt5d1viQ3cetajGzkWqnESdj
srmuwclluK+gq68/va2blvgcKaZRweD8FI2YM5mF1P3OHdzPn2fGN7vK7YfsGZBh
x8MYgNVkI5LGZE9QnDKLtF9ag5xPvWaPTo1PRcgITwdlyABaHI8CTQ==
=3f0S
-----END PGP SIGNATURE-----
Accepted:
debian-goodies_0.27+etch1.dsc
to pool/main/d/debian-goodies/debian-goodies_0.27+etch1.dsc
debian-goodies_0.27+etch1.tar.gz
to pool/main/d/debian-goodies/debian-goodies_0.27+etch1.tar.gz
debian-goodies_0.27+etch1_all.deb
to pool/main/d/debian-goodies/debian-goodies_0.27+etch1_all.deb
Reply to: