[ubuntu/saucy-proposed] rtkit 0.10-2ubuntu1 (Accepted)
Marc Deslauriers
marc.deslauriers at ubuntu.com
Wed Sep 18 17:55:12 UTC 2013
rtkit (0.10-2ubuntu1) saucy; urgency=low
* SECURITY UPDATE: possible privilege escalation via policykit UID lookup
race.
- debian/patches/CVE-2013-4326.patch: pass UID of caller to policykit
in rtkit-daemon.c.
- CVE-2013-4326
Date: Wed, 18 Sep 2013 13:15:09 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/saucy/+source/rtkit/0.10-2ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 18 Sep 2013 13:15:09 -0400
Source: rtkit
Binary: rtkit
Architecture: source
Version: 0.10-2ubuntu1
Distribution: saucy
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
rtkit - Realtime Policy and Watchdog Daemon
Changes:
rtkit (0.10-2ubuntu1) saucy; urgency=low
.
* SECURITY UPDATE: possible privilege escalation via policykit UID lookup
race.
- debian/patches/CVE-2013-4326.patch: pass UID of caller to policykit
in rtkit-daemon.c.
- CVE-2013-4326
Checksums-Sha1:
cb2b0e5bf2e9b25b70097ee20d257adb66944206 2104 rtkit_0.10-2ubuntu1.dsc
d8d0e9b60b7e39e5bb618509e7542a4576fd8acd 4991 rtkit_0.10-2ubuntu1.debian.tar.gz
Checksums-Sha256:
477667e093495c18019ac99c699d3876118715ed0cc46fcc161dfb3ec60bc13d 2104 rtkit_0.10-2ubuntu1.dsc
139cab1c59e0d583c7498112f6b7dbdcf327a5d5d3677d267c86d2f915b3f32c 4991 rtkit_0.10-2ubuntu1.debian.tar.gz
Files:
eb14d6afa456bde5bc03bf5c1796c330 2104 admin optional rtkit_0.10-2ubuntu1.dsc
bc0f3b6931b47f79bb5316aaad761b4c 4991 admin optional rtkit_0.10-2ubuntu1.debian.tar.gz
Original-Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintainers at lists.alioth.debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
iQIcBAEBCgAGBQJSOeLtAAoJEGVp2FWnRL6TCVYP/j55WnFO5jy9aafVqE1UEQ0J
bo4E5kaoxTtpw59JHKCo5tZC1cVAelNr+Pp4CFrm56u0BVK48+SsL0CzyTHCnxo7
+8tjSHyHodrXPLs8OpZVoYYq4F+aTieXsdd1IrVdlU7TnbWckASycE8Ciajn283X
fXAISlYg38lCtl9MnjSJTuGO/RZBxcbSgyCtyDfZF5sce/DVmL5mEa/QrQ1MTz22
95sCHv5xRobv+5B7+oGjIh/V65ZrpPB42FusSNSU5fCw496pb6umokY6jHigPyFo
J3dwvys7CKPP6B+Mp51PBhhW4Abj4Lb2DBg+wVp1lyh/ROZ9BRAFme7qZinTBtCS
1igewstXhNcCwomZsIhEKAqOc4vLp+x91XMHlhCizDn7UQWO2DeLA8kqan7sFCWq
g2FpqYcYZFgZZqUYYnJVQktaZW/ZJDSh5UMTgx0GoDXompIRimlQvcXW80I/XI62
1prnPN/Z9PROSf4CaNt767dHXoEMFIXDNugq9ixuIGBkBHjxUzfPL0TE7I3MmptP
36xIF/Hob5+91clFTjnfz7SMqfJEy/yU2M9i6yhQ6ApsEEkuRtYNxt3EzQtqbFDl
4gGDFNh3PALER56jv9S16NIXQd1OZeGiooe/DDJZWN1+jQEQphvl0I4/ESYTHMBB
Q1OAaRQ9FahDZFOdNRJ9
=bIrn
-----END PGP SIGNATURE-----
More information about the Saucy-changes
mailing list