accountsservice 0.6.55-0ubuntu12~20.04.4 source package in Ubuntu

Changelog

accountsservice (0.6.55-0ubuntu12~20.04.4) focal-security; urgency=medium

  * SECURITY UPDATE: accountsservice drop privileges SIGSTOP DoS
    (LP: #1900255)
    - debian/patches/0010-set-language.patch: updated to not drop real uid
      and real gid in user_drop_privileges_to_user.
    - debian/patches/0009-language-tools.patch: updated to not reset
      effective uid.
    - CVE-2020-16126
  * SECURITY UPDATE: accountsservice .pam_environment infinite loop
    (LP: #1900255)
    - debian/patches/0010-set-language.patch: updated to use O_NOFOLLOW
      and limit the number of lines read from file.
    - CVE-2020-16127

 -- Marc Deslauriers <email address hidden>  Mon, 02 Nov 2020 12:03:54 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
accountsservice_0.6.55.orig.tar.xz 95.7 KiB ff2b2419a7e06bd9cb335ffe391c7409b49a0f0130b890bd54692a3986699c9b
accountsservice_0.6.55-0ubuntu12~20.04.4.debian.tar.xz 29.1 KiB 5887b62e6676b07d45aadd0eed59bf9089813e6da8c9cf6dd0e6338fe81f1619
accountsservice_0.6.55-0ubuntu12~20.04.4.dsc 2.8 KiB ab0c61189270cb929e1df72c8cd6cd14f1e5d4c25002255979578331884b93ca

View changes file

Binary packages built by this source

accountsservice: query and manipulate user account information

 The AccountService project provides a set of D-Bus
 interfaces for querying and manipulating user account
 information and an implementation of these interfaces,
 based on the useradd, usermod and userdel commands.

accountsservice-dbgsym: debug symbols for accountsservice
gir1.2-accountsservice-1.0: GObject introspection data for AccountService

 The AccountService project provides a set of D-Bus
 interfaces for querying and manipulating user account
 information and an implementation of these interfaces,
 based on the useradd, usermod and userdel commands.
 .
 This package provides the introspection data for the
 AccountService library.

libaccountsservice-dev: query and manipulate user account information - header files

 The AccountService project provides a set of D-Bus
 interfaces for querying and manipulating user account
 information and an implementation of these interfaces,
 based on the useradd, usermod and userdel commands.
 .
 This package provides the development files for the
 AccountService library.

libaccountsservice-doc: query and manipulate user account information - documentation

 The AccountService project provides a set of D-Bus
 interfaces for querying and manipulating user account
 information and an implementation of these interfaces,
 based on the useradd, usermod and userdel commands.
 .
 This package provides the developers reference for the
 AccountService library.

libaccountsservice0: query and manipulate user account information - shared libraries

 The AccountService project provides a set of D-Bus
 interfaces for querying and manipulating user account
 information and an implementation of these interfaces,
 based on the useradd, usermod and userdel commands.
 .
 This package provides the shared libraries of the
 AccountService library.

libaccountsservice0-dbgsym: debug symbols for libaccountsservice0