[ubuntu/lucid-security] update-notifier_0.99.3ubuntu0.1_amd64_translations.tar.gz, update-notifier_0.99.3ubuntu0.1_powerpc_translations.tar.gz, update-notifier_0.99.3ubuntu0.1_ia64_translations.tar.gz, update-notifier_0.99.3ubuntu0.1_i386_translations.tar.gz, update-notifier, update-notifier_0.99.3ubuntu0.1_armel_translations.tar.gz, update-notifier_0.99.3ubuntu0.1_sparc_translations.tar.gz 0.99.3ubuntu0.1 (Accepted)

[Marc Deslauriers]

update-notifier (0.99.3ubuntu0.1) lucid-security; urgency=low

  * SECURITY UPDATE: hotfix for arbitrary code execution via directory
    traversal in update-manager on iso media (LP: #881548)
    - data/cddistupgrader: patch update-manager that is pulled off an
      upgrade cd.
    - debian/update-manager-downloader-fix2.diff: hotfix to verify
      signature before unpacking the tarball in
      UpdateManager/Core/DistUpgradeFetcherCore.py.
    - debian/update-notifier-common.*: ship new hotfix in package.
    - CVE-2011-3152

Date: Thu, 24 Nov 2011 13:02:45 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Michael Vogt <michael.vogt at ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/update-notifier/0.99.3ubuntu0.1
-------------- next part --------------
Format: 1.8
Date: Thu, 24 Nov 2011 13:02:45 -0500
Source: update-notifier
Binary: update-notifier update-notifier-common
Architecture: source
Version: 0.99.3ubuntu0.1
Distribution: lucid-security
Urgency: low
Maintainer: Michael Vogt <michael.vogt at ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 update-notifier - Daemon which notifies about package updates
 update-notifier-common - Files shared between update-notifier and adept
Launchpad-Bugs-Fixed: 881548
Changes: 
 update-notifier (0.99.3ubuntu0.1) lucid-security; urgency=low
 .
   * SECURITY UPDATE: hotfix for arbitrary code execution via directory
     traversal in update-manager on iso media (LP: #881548)
     - data/cddistupgrader: patch update-manager that is pulled off an
       upgrade cd.
     - debian/update-manager-downloader-fix2.diff: hotfix to verify
       signature before unpacking the tarball in
       UpdateManager/Core/DistUpgradeFetcherCore.py.
     - debian/update-notifier-common.*: ship new hotfix in package.
     - CVE-2011-3152
Checksums-Sha1: 
 7a2b65f020fe8b8021d0a5beb78ad5ecbe8e047b 1701 update-notifier_0.99.3ubuntu0.1.dsc
 79eccfb7bda2f118d979c63d8a5accd975f9c399 245591 update-notifier_0.99.3ubuntu0.1.tar.gz
Checksums-Sha256: 
 30ed221537d629331a520670478ce14f07e17021c10c3abe5b855b3e80e42150 1701 update-notifier_0.99.3ubuntu0.1.dsc
 b8793c4f1a7f1716eaf847d65ea4925c5e4d945b29ef8135404edfc44b4aea4d 245591 update-notifier_0.99.3ubuntu0.1.tar.gz
Files: 
 2d00ab5b0156f721a81ad82a767ec235 1701 gnome optional update-notifier_0.99.3ubuntu0.1.dsc
 a36318bd1bd7a2f91fc79f0a9f8739fc 245591 gnome optional update-notifier_0.99.3ubuntu0.1.tar.gz