[ubuntu/saucy-proposed] systemd 204-0ubuntu12 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Wed Sep 18 17:51:16 UTC 2013


systemd (204-0ubuntu12) saucy; urgency=low

  * SECURITY UPDATE: possible privilege escalation via policykit UID lookup
    race.
    - debian/patches/0027-CVE-2013-4327.patch: pass system-bus-name as a
      subject instead of pid so policykit can get the information from the
      system bus in src/shared/polkit.c.
    - CVE-2013-4327

Date: Wed, 18 Sep 2013 13:19:40 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/saucy/+source/systemd/204-0ubuntu12
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 18 Sep 2013 13:19:40 -0400
Source: systemd
Binary: systemd systemd-sysv systemd-services libpam-systemd libsystemd-login0 libsystemd-login-dev libsystemd-daemon0 libsystemd-daemon-dev libsystemd-journal0 libsystemd-journal-dev libsystemd-id128-0 libsystemd-id128-dev udev libudev1 libudev-dev udev-udeb libudev1-udeb libgudev-1.0-0 gir1.2-gudev-1.0 libgudev-1.0-dev python-systemd
Architecture: source
Version: 204-0ubuntu12
Distribution: saucy
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 gir1.2-gudev-1.0 - libgudev-1.0 introspection data
 libgudev-1.0-0 - GObject-based wrapper library for libudev
 libgudev-1.0-dev - libgudev-1.0 development files
 libpam-systemd - system and service manager - PAM module
 libsystemd-daemon-dev - systemd utility library - development files
 libsystemd-daemon0 - systemd utility library
 libsystemd-id128-0 - systemd 128 bit ID utility library
 libsystemd-id128-dev - systemd 128 bit ID utility library - development files
 libsystemd-journal-dev - systemd journal utility library - development files
 libsystemd-journal0 - systemd journal utility library
 libsystemd-login-dev - systemd login utility library - development files
 libsystemd-login0 - systemd login utility library
 libudev-dev - libudev development files
 libudev1   - libudev shared library
 libudev1-udeb - libudev shared library (udeb)
 python-systemd - python bindings for the systemd journal
 systemd    - system and service manager
 systemd-services - systemd runtime services
 systemd-sysv - system and service manager - SysV links
 udev       - /dev/ and hotplug management daemon
 udev-udeb  - /dev/ and hotplug management daemon (udeb)
Changes: 
 systemd (204-0ubuntu12) saucy; urgency=low
 .
   * SECURITY UPDATE: possible privilege escalation via policykit UID lookup
     race.
     - debian/patches/0027-CVE-2013-4327.patch: pass system-bus-name as a
       subject instead of pid so policykit can get the information from the
       system bus in src/shared/polkit.c.
     - CVE-2013-4327
Checksums-Sha1: 
 2b2602c246ab42a19291e5b070d24d37c3f909f3 3559 systemd_204-0ubuntu12.dsc
 696ae214b77afcb424e6df48d2b0602cf076a1c8 88245 systemd_204-0ubuntu12.debian.tar.gz
Checksums-Sha256: 
 d1ed9b2f202d2784d76718ac6cfb68c116ce07f70a85add84b052f9fd4b45161 3559 systemd_204-0ubuntu12.dsc
 adae5833721713fd6343da24be8377cdaf3cb47c20e63e072800d1e3e8fd37b1 88245 systemd_204-0ubuntu12.debian.tar.gz
Files: 
 2cffe170a6bbe4d816886c61da4039b8 3559 admin extra systemd_204-0ubuntu12.dsc
 c29483bb8ac388296a803d84abff1e86 88245 admin extra systemd_204-0ubuntu12.debian.tar.gz
Original-Maintainer: Tollef Fog Heen <tfheen at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
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=4GaA
-----END PGP SIGNATURE-----


More information about the Saucy-changes mailing list