[ubuntu/saucy-proposed] systemd 204-0ubuntu12 (Accepted)
Marc Deslauriers
marc.deslauriers at ubuntu.com
Wed Sep 18 17:51:16 UTC 2013
systemd (204-0ubuntu12) saucy; urgency=low
* SECURITY UPDATE: possible privilege escalation via policykit UID lookup
race.
- debian/patches/0027-CVE-2013-4327.patch: pass system-bus-name as a
subject instead of pid so policykit can get the information from the
system bus in src/shared/polkit.c.
- CVE-2013-4327
Date: Wed, 18 Sep 2013 13:19:40 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/saucy/+source/systemd/204-0ubuntu12
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 18 Sep 2013 13:19:40 -0400
Source: systemd
Binary: systemd systemd-sysv systemd-services libpam-systemd libsystemd-login0 libsystemd-login-dev libsystemd-daemon0 libsystemd-daemon-dev libsystemd-journal0 libsystemd-journal-dev libsystemd-id128-0 libsystemd-id128-dev udev libudev1 libudev-dev udev-udeb libudev1-udeb libgudev-1.0-0 gir1.2-gudev-1.0 libgudev-1.0-dev python-systemd
Architecture: source
Version: 204-0ubuntu12
Distribution: saucy
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
gir1.2-gudev-1.0 - libgudev-1.0 introspection data
libgudev-1.0-0 - GObject-based wrapper library for libudev
libgudev-1.0-dev - libgudev-1.0 development files
libpam-systemd - system and service manager - PAM module
libsystemd-daemon-dev - systemd utility library - development files
libsystemd-daemon0 - systemd utility library
libsystemd-id128-0 - systemd 128 bit ID utility library
libsystemd-id128-dev - systemd 128 bit ID utility library - development files
libsystemd-journal-dev - systemd journal utility library - development files
libsystemd-journal0 - systemd journal utility library
libsystemd-login-dev - systemd login utility library - development files
libsystemd-login0 - systemd login utility library
libudev-dev - libudev development files
libudev1 - libudev shared library
libudev1-udeb - libudev shared library (udeb)
python-systemd - python bindings for the systemd journal
systemd - system and service manager
systemd-services - systemd runtime services
systemd-sysv - system and service manager - SysV links
udev - /dev/ and hotplug management daemon
udev-udeb - /dev/ and hotplug management daemon (udeb)
Changes:
systemd (204-0ubuntu12) saucy; urgency=low
.
* SECURITY UPDATE: possible privilege escalation via policykit UID lookup
race.
- debian/patches/0027-CVE-2013-4327.patch: pass system-bus-name as a
subject instead of pid so policykit can get the information from the
system bus in src/shared/polkit.c.
- CVE-2013-4327
Checksums-Sha1:
2b2602c246ab42a19291e5b070d24d37c3f909f3 3559 systemd_204-0ubuntu12.dsc
696ae214b77afcb424e6df48d2b0602cf076a1c8 88245 systemd_204-0ubuntu12.debian.tar.gz
Checksums-Sha256:
d1ed9b2f202d2784d76718ac6cfb68c116ce07f70a85add84b052f9fd4b45161 3559 systemd_204-0ubuntu12.dsc
adae5833721713fd6343da24be8377cdaf3cb47c20e63e072800d1e3e8fd37b1 88245 systemd_204-0ubuntu12.debian.tar.gz
Files:
2cffe170a6bbe4d816886c61da4039b8 3559 admin extra systemd_204-0ubuntu12.dsc
c29483bb8ac388296a803d84abff1e86 88245 admin extra systemd_204-0ubuntu12.debian.tar.gz
Original-Maintainer: Tollef Fog Heen <tfheen at debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)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=4GaA
-----END PGP SIGNATURE-----
More information about the Saucy-changes
mailing list