[ubuntu/precise] accountsservice 0.6.15-2ubuntu2 (Accepted)

[Marc Deslauriers]

accountsservice (0.6.15-2ubuntu2) precise; urgency=low

  * SECURITY UPDATE: file permissions bypass (LP: #904395)
    - debian/patches/0010-set-language.patch:
      Drop privileges before letting help scripts in
      /usr/share/language-tools write to $HOME.
    - debian/patches/0009-language-tools.patch:
      Drop chown() call in /usr/share/language-tools/save-to-profile.
    - CVE-2011-4406

Date: Tue, 31 Jan 2012 08:48:32 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/precise/+source/accountsservice/0.6.15-2ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 31 Jan 2012 08:48:32 -0500
Source: accountsservice
Binary: accountsservice libaccountsservice0 libaccountsservice-dev gir1.2-accountsservice-1.0
Architecture: source
Version: 0.6.15-2ubuntu2
Distribution: precise
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 accountsservice - query and manipulate user account information
 gir1.2-accountsservice-1.0 - GObject introspection data for AccountService
 libaccountsservice-dev - query and manipulate user account information - header files
 libaccountsservice0 - query and manipulate user account information - shared libraries
Launchpad-Bugs-Fixed: 904395
Changes: 
 accountsservice (0.6.15-2ubuntu2) precise; urgency=low
 .
   * SECURITY UPDATE: file permissions bypass (LP: #904395)
     - debian/patches/0010-set-language.patch:
       Drop privileges before letting help scripts in
       /usr/share/language-tools write to $HOME.
     - debian/patches/0009-language-tools.patch:
       Drop chown() call in /usr/share/language-tools/save-to-profile.
     - CVE-2011-4406
Checksums-Sha1: 
 834fade7629c299165206f4ad3682f3d7ebedd2a 2476 accountsservice_0.6.15-2ubuntu2.dsc
 b3b3059d055c3471a86842d7658c531f752b91b7 21570 accountsservice_0.6.15-2ubuntu2.debian.tar.gz
Checksums-Sha256: 
 deab62ca8eac0e0714b8eb399fd90ed398dc39b8e0e15f53563dba51ce8a404f 2476 accountsservice_0.6.15-2ubuntu2.dsc
 dbf452c55f907055500f3ccd429f4b1a0b799156c3f8e4b9952efd3537515eaa 21570 accountsservice_0.6.15-2ubuntu2.debian.tar.gz
Files: 
 9b6f838ecd2ae83355e9e44026afa6d0 2476 admin optional accountsservice_0.6.15-2ubuntu2.dsc
 01fe978adfbbddda57f7719011964b32 21570 admin optional accountsservice_0.6.15-2ubuntu2.debian.tar.gz
Original-Maintainer: Alessio Treglia <alessio at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=qNSm
-----END PGP SIGNATURE-----