[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Freeze exception: sane-backends 1.0.19-17


sane-backends 1.0.19-16 fixes an important bug in the way saned drops
privileges in standalone mode (similar to the iaxmodem bug a few days
ago). Improper ordering of the seteuid() and setegid() calls meant
saned kept running as group root (or whatever group it was started
under); moreover the supplemental group list was not set according to
the uid to use, which would lead to permission issues later on.

sane-backends 1.0.19-17 fixes some trivial bugs in saned again, which
would prevent a successful startup in standalone mode under some
conditions. It also fixes a non-compliance in scanimage's usage of the
SANE API & standard which breaks with the net backend.

Please unblock sane-backends 1.0.19-17.

sane-backends (1.0.19-17) unstable; urgency=low

  * debian/patches/33_scanimage_options_fix.dpatch:
    + Added; get the option descriptor for option 0 before getting the value
      for option 0. This is a standard-compliance fix needed for proper
      operation with the net backend.
  * debian/patches/30_new_saned.dpatch:
    + Updated; fix initialization of runas_{g,u}id and ngroups, preventing
      failures later on in some cases (saned -a without username).

 -- Julien BLACHE <jblache@debian.org>  Tue, 05 Aug 2008 12:10:44 +0200

sane-backends (1.0.19-16) unstable; urgency=low

  * debian/patches/30_new_saned.dpatch:
    + Updated; Fix seteuid()/setegid() call order and set supplemental group
      list (closes: #493084).

 -- Julien BLACHE <jblache@debian.org>  Thu, 31 Jul 2008 11:46:53 +0200



 Julien BLACHE <jblache@debian.org>  |  Debian, because code matters more 
 Debian & GNU/Linux Developer        |       <http://www.debian.org>
 Public key available on <http://www.jblache.org> - KeyID: F5D6 5169 
 GPG Fingerprint : 935A 79F1 C8B3 3521 FD62 7CC7 CD61 4FD7 F5D6 5169 

Reply to: