[ubuntu/wily-proposed] autofs 5.1.1-1ubuntu1 (Accepted)

[Chris J Arges]

autofs (5.1.1-1ubuntu1) wily; urgency=low

  * Merge from Debian unstable.  Remaining changes:
   - autofs.upstart script
   - debian/rules: build with sssldir path
   - d/p/fix-ssslib-search.patch - parts replaced by fix-sssldir.patch
   - d/p/16group_buffer_size.patch
  * Dropped patches:
    - CVE-2014-8169-add-a-prefix-to-program-map-stdvars.patch
    - CVE-2014-8169-add-config-option-to-force-use-of-program-map-stdvars.patch
    - lp1386869-fix-cant-automount-when--host-exist

autofs (5.1.1-1) unstable; urgency=low

  * New upstream release [April 2015].
  * Install new "/etc/autofs.conf".
  * Patchworks: dropped obsolete patches; marked forwarded patches as such.
  * Removed old "14avoid_sock_cloexec.patch" with obsolete workaround for
    old kernels.
  * Upload to unstable.

autofs (5.1.0-1) experimental; urgency=low

  [ Timo Aaltonen <tjaalton at ubuntu.com> ]
  * Add support for sssd backend (Closes: #762843).
    - control: Add sssd-common to build-depends.
    - rules, fix-sssldir.diff: Check the multiarch lib path when searching
      for libsss_autofs.so

  [ Salvatore Bonaccorso <carnil at debian.org> ]
  * Scan for upstream tarballs in various formats.
    The previous watch files only looked for bz2 compressed upstream
    tarballs. Upstream switched to tar.xz and tar.gz only since 5.0.9.
    Adjust the watch file to catch new upstream versions. (Closes: #779438)

  [ Dmitry Smirnov <onlyjob at debian.org> ]
  * Standards-Version to 3.9.6.
  * New upstream release [June 2014] (Closes: #779441, #741064, #743939).
  * Refreshed patches.
  * Dropped obsolete "default-autofs-remove-USE_MISC_DEVICE.patch".
  * Install native systemd service using "dh-systemd".

autofs (5.0.8-2) unstable; urgency=medium

  [ Salvatore Bonaccorso <carnil at debian.org> ]
  * Add patches for CVE-2014-8169 (Closes: #779591).
    When a program map uses an interpreted languages like python it is
    possible to load and execute arbitray code from a user home directory.
    This is because the standard environment variables are used to locate
    and load modules when using these languages. To avoid that, a prefix to
    these environment names is added so that they aren't used for this
    purpose. The prefix used is "AUTOFS_" and is not configurable.
    Additionally a configuration option to force the use of program map
    standard environment variables is added (FORCE_STANDARD_PROGRAM_MAP_ENV).

  [ Dmitry Smirnov <onlyjob at debian.org> ]
  * Refreshed other patches as needed.

Date: Mon, 06 Jul 2015 14:59:51 -0500
Changed-By: Chris J Arges <chris.j.arges at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/autofs/5.1.1-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 06 Jul 2015 14:59:51 -0500
Source: autofs
Binary: autofs autofs-ldap autofs-hesiod autofs5 autofs5-ldap autofs5-hesiod
Architecture: source
Version: 5.1.1-1ubuntu1
Distribution: wily
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Chris J Arges <chris.j.arges at canonical.com>
Description: 
 autofs     - kernel-based automounter for Linux
 autofs-hesiod - Hesiod map support for autofs
 autofs-ldap - LDAP map support for autofs
 autofs5    - transitional dummy package for 'autofs'
 autofs5-hesiod - transitional dummy package for 'autofs-hesiod'
 autofs5-ldap - transitional dummy package for 'autofs-ldap'
Closes: 741064 743939 762843 779438 779441 779591
Changes: 
 autofs (5.1.1-1ubuntu1) wily; urgency=low
 .
   * Merge from Debian unstable.  Remaining changes:
    - autofs.upstart script
    - debian/rules: build with sssldir path
    - d/p/fix-ssslib-search.patch - parts replaced by fix-sssldir.patch
    - d/p/16group_buffer_size.patch
   * Dropped patches:
     - CVE-2014-8169-add-a-prefix-to-program-map-stdvars.patch
     - CVE-2014-8169-add-config-option-to-force-use-of-program-map-stdvars.patch
     - lp1386869-fix-cant-automount-when--host-exist
 .
 autofs (5.1.1-1) unstable; urgency=low
 .
   * New upstream release [April 2015].
   * Install new "/etc/autofs.conf".
   * Patchworks: dropped obsolete patches; marked forwarded patches as such.
   * Removed old "14avoid_sock_cloexec.patch" with obsolete workaround for
     old kernels.
   * Upload to unstable.
 .
 autofs (5.1.0-1) experimental; urgency=low
 .
   [ Timo Aaltonen <tjaalton at ubuntu.com> ]
   * Add support for sssd backend (Closes: #762843).
     - control: Add sssd-common to build-depends.
     - rules, fix-sssldir.diff: Check the multiarch lib path when searching
       for libsss_autofs.so
 .
   [ Salvatore Bonaccorso <carnil at debian.org> ]
   * Scan for upstream tarballs in various formats.
     The previous watch files only looked for bz2 compressed upstream
     tarballs. Upstream switched to tar.xz and tar.gz only since 5.0.9.
     Adjust the watch file to catch new upstream versions. (Closes: #779438)
 .
   [ Dmitry Smirnov <onlyjob at debian.org> ]
   * Standards-Version to 3.9.6.
   * New upstream release [June 2014] (Closes: #779441, #741064, #743939).
   * Refreshed patches.
   * Dropped obsolete "default-autofs-remove-USE_MISC_DEVICE.patch".
   * Install native systemd service using "dh-systemd".
 .
 autofs (5.0.8-2) unstable; urgency=medium
 .
   [ Salvatore Bonaccorso <carnil at debian.org> ]
   * Add patches for CVE-2014-8169 (Closes: #779591).
     When a program map uses an interpreted languages like python it is
     possible to load and execute arbitray code from a user home directory.
     This is because the standard environment variables are used to locate
     and load modules when using these languages. To avoid that, a prefix to
     these environment names is added so that they aren't used for this
     purpose. The prefix used is "AUTOFS_" and is not configurable.
     Additionally a configuration option to force the use of program map
     standard environment variables is added (FORCE_STANDARD_PROGRAM_MAP_ENV).
 .
   [ Dmitry Smirnov <onlyjob at debian.org> ]
   * Refreshed other patches as needed.
Checksums-Sha1: 
 dab54b3223915e6c1e729a95a3dedbc6b9fa483c 2075 autofs_5.1.1-1ubuntu1.dsc
 a9fa075f321466d5f9aad010a73151bfd76bd851 718928 autofs_5.1.1.orig.tar.gz
 a4c44fa63e81e5da7b3b42c2bba35a786dccd2e8 17708 autofs_5.1.1-1ubuntu1.debian.tar.xz
Checksums-Sha256: 
 0b0ab65a70642ed3e5bb67a8010274a8dea92629e8fd00d3b5e61d472d95cbfa 2075 autofs_5.1.1-1ubuntu1.dsc
 795419383b120d15699ab3b89ea0f3d029f6fb28405a83982d305c4b7b61130f 718928 autofs_5.1.1.orig.tar.gz
 85ba9874244a20ad7bbc30573b92d78945f2a5e9fb33cc1523aa12e04da0dc6f 17708 autofs_5.1.1-1ubuntu1.debian.tar.xz
Files: 
 e6d185ec1637f71e1d82778bc5475f98 2075 utils extra autofs_5.1.1-1ubuntu1.dsc
 e143df66b614b8cdb1ff533735f8e12d 718928 utils extra autofs_5.1.1.orig.tar.gz
 b3e362421d0de64831e4021b202507b3 17708 utils extra autofs_5.1.1-1ubuntu1.debian.tar.xz
Original-Maintainer: Michael Tokarev <mjt at tls.msk.ru>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJVmu96AAoJEPNFAiJniEz2L58H/1VORhMO3gNzlamwxNuqtcll
EMbHHrcvTkji+/K1U2xFt6F4RwTKAmeFv7Gw4oFI5m4gRpxBJ3TT82RzMM8H7wye
Pb2I06qHf6kD7mIygPK/72XW+PEUqs8WDFRzx09i83biNszerinEiFP2MbE63Q+n
aY7JOtZ4+C9ZTiq0TzVgmUv7ACko94WJ2H9tuZDfxCIfU8KLaUaVuuWolxgkLll7
fWCaV10VALUqZQegZQ0Qv1R02FyXLHhSMGmrrhJOqOJ5Ie8nQ4UTnAIcNSECG8VJ
EyaEgkag8C49XYNrwAyZZ448RsaUXreYvN2WXZpXxwz9cIQwoPKcNRCRiJ1K90k=
=3viD
-----END PGP SIGNATURE-----