[ubuntu/hardy-security] bcfg2 0.9.5.7-1ubuntu0.1 (Accepted)

[Julian Taylor]

bcfg2 (0.9.5.7-1ubuntu0.1) hardy-security; urgency=high

  * SECURITY UPDATE: missing input sanitization allowing execution
    of arbitrary commands (LP: #844743)
    - backported fix from upstream by Chris St. Pierre
    - https://github.com/solj/bcfg2/commit/f4a35efec1b6a1e54d61cf1b8bfc83dd1
    - CVE-2011-3211

Date: Thu, 08 Sep 2011 15:27:29 +0200
Changed-By: Julian Taylor <jtaylor.debian at googlemail.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/hardy/+source/bcfg2/0.9.5.7-1ubuntu0.1
-------------- next part --------------
Format: 1.7
Date: Thu, 08 Sep 2011 15:27:29 +0200
Source: bcfg2
Binary: bcfg2 bcfg2-server
Architecture: source
Version: 0.9.5.7-1ubuntu0.1
Distribution: hardy-security
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Julian Taylor <jtaylor.debian at googlemail.com>
Description: 
 bcfg2      - Configuration management client
 bcfg2-server - Configuration management server
Launchpad-Bugs-Fixed: 844743
Changes: 
 bcfg2 (0.9.5.7-1ubuntu0.1) hardy-security; urgency=high
 .
   * SECURITY UPDATE: missing input sanitization allowing execution
     of arbitrary commands (LP: #844743)
     - backported fix from upstream by Chris St. Pierre
     - https://github.com/solj/bcfg2/commit/f4a35efec1b6a1e54d61cf1b8bfc83dd1
     - CVE-2011-3211
Files: 
 de4126ed475e026dfc536ccb0c20fc23 1461 admin optional bcfg2_0.9.5.7-1ubuntu0.1.dsc
 5437c8da3e3d5886ad63af52a0788ddd 4501 admin optional bcfg2_0.9.5.7-1ubuntu0.1.diff.gz
Original-Maintainer: Sami Haahtinen <ressu at debian.org>