[Bug 1164044] Re: Sync hesiod 3.2.1-2 (main) from Debian unstable (main)

[Alexander Chernyakhovsky]

Version 3.2.1 includes a minor security fix that affects setuid binaries
that use hesiod, in which they could be subverted as confused deputies
(https://github.com/achernya/hesiod/commit/fb5778afcc17671282eab183b766c61ccdf41a34).
This patch was present in Fedora for a long time, prior to the 3.2.1
release.

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1164044

Title:
  Sync hesiod 3.2.1-2 (main) from Debian unstable (main)

Status in “hesiod” package in Ubuntu:
  Triaged

Bug description:
  Please sync hesiod 3.2.1-1 (main) from Debian unstable (main)

  Explanation of the Ubuntu delta and why it can be dropped:
    * Merge from Debian Unstable (LP: #1015869). Remaining Changes:
      - Fix FTBFS with ld --as-needed, resolve unresolved symbols in
      shared library.
  The package no longer FTBFS.

  Explanation of FeatureFreeze exception:
  These changes have been tested by upstream, are desirable for our users. The IDN changes are built, but not enabled unless in a UTF-8 CHARSET.

  Changelog entries since current raring version 3.0.2-21ubuntu1:

  hesiod (3.2.1-1) unstable; urgency=low

    * New upstream release.

   -- Alexander Chernyakhovsky <achernya at mit.edu>  Tue, 02 Apr 2013
  17:21:02 -0400

  hesiod (3.2.0-1) unstable; urgency=low

    * New upstream release.

   -- Alexander Chernyakhovsky <achernya at mit.edu>  Sun, 24 Mar 2013
  23:44:40 -0400

  hesiod (3.1.1-1) unstable; urgency=low

    [ Evan Broder ]
    * Use libidn to internationalize a domain name.

   -- Alexander Chernyakhovsky <achernya at mit.edu>  Sun, 24 Mar 2013
  04:18:06 -0400

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/hesiod/+bug/1164044/+subscriptions