[ubuntu/saucy-proposed] libimobiledevice 1.1.5-0ubuntu2 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Wed Aug 14 18:48:13 UTC 2013


libimobiledevice (1.1.5-0ubuntu2) saucy; urgency=low

  * SECURITY UPDATE: insecure /tmp usage (LP: #1164263)
    - debian/patches/CVE-2013-2142.patch: fall back to getpwuid_r instead
      of using /tmp in src/userpref.c. Added string_concat() function in
      src/Makefile.am, src/utils.c, src/utils.h.
    - added new symbol to debian/libimobiledevice4.symbols.
    - CVE-2013-2142

Date: Wed, 14 Aug 2013 12:43:31 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/saucy/+source/libimobiledevice/1.1.5-0ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 14 Aug 2013 12:43:31 -0400
Source: libimobiledevice
Binary: libimobiledevice4 libimobiledevice-dev libimobiledevice4-dbg python-imobiledevice libimobiledevice-utils libimobiledevice-doc
Architecture: source
Version: 1.1.5-0ubuntu2
Distribution: saucy
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libimobiledevice-dev - Library for communicating with iPhone and iPod Touch devices
 libimobiledevice-doc - Library for communicating with iPhone and iPod Touch devices
 libimobiledevice-utils - Library for communicating with iPhone and iPod Touch devices
 libimobiledevice4 - Library for communicating with the iPhone and iPod Touch
 libimobiledevice4-dbg - Library for communicating with iPhone and iPod Touch devices
 python-imobiledevice - Library for communicating with iPhone and iPod Touch devices
Launchpad-Bugs-Fixed: 1164263
Changes: 
 libimobiledevice (1.1.5-0ubuntu2) saucy; urgency=low
 .
   * SECURITY UPDATE: insecure /tmp usage (LP: #1164263)
     - debian/patches/CVE-2013-2142.patch: fall back to getpwuid_r instead
       of using /tmp in src/userpref.c. Added string_concat() function in
       src/Makefile.am, src/utils.c, src/utils.h.
     - added new symbol to debian/libimobiledevice4.symbols.
     - CVE-2013-2142
Checksums-Sha1: 
 e47261a523902de6c68e65bb963a95eb533d7bf9 2770 libimobiledevice_1.1.5-0ubuntu2.dsc
 eabd3e8cadae4f151c150e62323b91a6507d8e0f 15413 libimobiledevice_1.1.5-0ubuntu2.debian.tar.gz
Checksums-Sha256: 
 1541ff149fdb7afa62511d13e7b096c3e8e6c886212fadc47e7d45f4498c87a6 2770 libimobiledevice_1.1.5-0ubuntu2.dsc
 2a40177fde674f84d916fb4ab9a103d24f0f6d6bcbdd4a63096d9eb335656b84 15413 libimobiledevice_1.1.5-0ubuntu2.debian.tar.gz
Files: 
 187c0a59e4fb86ebf95f5453e604f53a 2770 libs optional libimobiledevice_1.1.5-0ubuntu2.dsc
 3a8edc73d2fce81f17a8aa44e218319b 15413 libs optional libimobiledevice_1.1.5-0ubuntu2.debian.tar.gz
Original-Maintainer: gtkpod Maintainers <pkg-gtkpod-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=wM1G
-----END PGP SIGNATURE-----


More information about the Saucy-changes mailing list