[ubuntu/oneiric-security] lightdm, lightdm_1.0.6-0ubuntu1.1_amd64_translations.tar.gz, lightdm_1.0.6-0ubuntu1.1_i386_translations.tar.gz, lightdm_1.0.6-0ubuntu1.1_armel_translations.tar.gz, lightdm_1.0.6-0ubuntu1.1_powerpc_translations.tar.gz 1.0.6-0ubuntu1.1 (Accepted)

[Marc Deslauriers]

lightdm (1.0.6-0ubuntu1.1) oneiric-security; urgency=low

  * SECURITY UPDATE: file contents disclosure via hard link
    - debian/patches/04_CVE-2011-4105.patch: make sure file isn't a symlink
      or a hard link before doing the chown on it.
    - CVE-2011-4105
  * SECURITY UPDATE: file contents disclosure via links (LP: #883865)
    - debian/patches/05_CVE-2011-3153.patch: drop privileges before
      accessing file.
    - CVE-2011-3153

Date: Tue, 15 Nov 2011 08:31:27 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Robert Ancell <robert.ancell at ubuntu.com>
https://launchpad.net/ubuntu/oneiric/+source/lightdm/1.0.6-0ubuntu1.1
-------------- next part --------------
Format: 1.8
Date: Tue, 15 Nov 2011 08:31:27 -0500
Source: lightdm
Binary: lightdm lightdm-gtk-greeter lightdm-qt-greeter liblightdm-gobject-1-0 gir1.2-lightdm-1 liblightdm-qt-1-0 liblightdm-gobject-1-dev liblightdm-qt-1-dev liblightdm-gobject-1-doc
Architecture: source
Version: 1.0.6-0ubuntu1.1
Distribution: oneiric-security
Urgency: low
Maintainer: Robert Ancell <robert.ancell at ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 gir1.2-lightdm-1 - Typelib file for liblightdm-1
 liblightdm-gobject-1-0 - LightDM GObject client library
 liblightdm-gobject-1-dev - LightDM client library (development files)
 liblightdm-gobject-1-doc - LightDM client library (documentation)
 liblightdm-qt-1-0 - LightDM Qt client library
 liblightdm-qt-1-dev - LightDM client library (development files)
 lightdm    - Display Manager
 lightdm-gtk-greeter - LightDM GTK+ Greeter
 lightdm-qt-greeter - LightDM Qt Greeter
Launchpad-Bugs-Fixed: 883865
Changes: 
 lightdm (1.0.6-0ubuntu1.1) oneiric-security; urgency=low
 .
   * SECURITY UPDATE: file contents disclosure via hard link
     - debian/patches/04_CVE-2011-4105.patch: make sure file isn't a symlink
       or a hard link before doing the chown on it.
     - CVE-2011-4105
   * SECURITY UPDATE: file contents disclosure via links (LP: #883865)
     - debian/patches/05_CVE-2011-3153.patch: drop privileges before
       accessing file.
     - CVE-2011-3153
Checksums-Sha1: 
 1e773a60233e04f8fa07c878f20df7bef19e08a6 2191 lightdm_1.0.6-0ubuntu1.1.dsc
 f6ef2469adfc73898ebd2858ec759965321e8ef4 43942 lightdm_1.0.6-0ubuntu1.1.diff.gz
Checksums-Sha256: 
 72d26f0b22a049f63eecb6b1395f3f58093de901b40ffe6bf01386da092586df 2191 lightdm_1.0.6-0ubuntu1.1.dsc
 cd0110f0fd713bdc044b3fc353186505f210cfa52ee47ff757939fa13402d2a8 43942 lightdm_1.0.6-0ubuntu1.1.diff.gz
Files: 
 4ddf00d5b1a33b6c492eabd002a315d4 2191 x11 optional lightdm_1.0.6-0ubuntu1.1.dsc
 2c4b2c20ed8a349ddcec1e68a2b2eeab 43942 x11 optional lightdm_1.0.6-0ubuntu1.1.diff.gz