[ubuntu/noble-proposed] util-linux 2.39.3-9ubuntu3 (Accepted)

[Marc Deslauriers]

util-linux (2.39.3-9ubuntu3) noble; urgency=medium

  * SECURITY UPDATE: Improper neutralization of escape sequences in wall
    - debian/patches/upstream/CVE-2024-28085.patch: consolidate output on
      the terminal in term-utils/wall.c.
    - debian/rules: remove setuid bit from wall as recommended by upstream
      as the above patch is insufficient.
    - CVE-2024-28085

Date: Thu, 28 Mar 2024 08:06:33 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/util-linux/2.39.3-9ubuntu3
-------------- next part --------------
Format: 1.8
Date: Thu, 28 Mar 2024 08:06:33 -0400
Source: util-linux
Built-For-Profiles: noudeb
Architecture: source
Version: 2.39.3-9ubuntu3
Distribution: noble
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 util-linux (2.39.3-9ubuntu3) noble; urgency=medium
 .
   * SECURITY UPDATE: Improper neutralization of escape sequences in wall
     - debian/patches/upstream/CVE-2024-28085.patch: consolidate output on
       the terminal in term-utils/wall.c.
     - debian/rules: remove setuid bit from wall as recommended by upstream
       as the above patch is insufficient.
     - CVE-2024-28085
Checksums-Sha1:
 23657198aabe7f9e2e34f8ee5bd0f3904faf8220 4718 util-linux_2.39.3-9ubuntu3.dsc
 091d35ae483663155e2b90ddec2daf6d7e464ec6 106632 util-linux_2.39.3-9ubuntu3.debian.tar.xz
 32676a87179fac6309e81c5eef99cdabc0abab5e 8899 util-linux_2.39.3-9ubuntu3_source.buildinfo
Checksums-Sha256:
 461b0b1fabd373a9e8bd2fb1721b3f4f402052fba0732e4b8536474316c2ea5d 4718 util-linux_2.39.3-9ubuntu3.dsc
 c84ac931e735f60d204477bc55dfc2b3fb9be8062541458be343b4ddce708c0b 106632 util-linux_2.39.3-9ubuntu3.debian.tar.xz
 09eed1969076bb48a7fafbe4fdf695335549667d8263c9a73216cc76b729a9a8 8899 util-linux_2.39.3-9ubuntu3_source.buildinfo
Files:
 0ecee81d095862aa0f8dc7e8865ccb6b 4718 base required util-linux_2.39.3-9ubuntu3.dsc
 bc89152be90a5c5bd823d904d77eff2b 106632 base required util-linux_2.39.3-9ubuntu3.debian.tar.xz
 ea92c47823274356bc2bfe90a1e3efd6 8899 base required util-linux_2.39.3-9ubuntu3_source.buildinfo
Original-Maintainer: util-linux packagers <util-linux at packages.debian.org>