lp:~jamesodhunt/ubuntu/vivid/upstart/bug-1425685

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp:ubuntu/vivid/upstart at revision 1608

Colin Watson: Approve on 2015-02-26

Dimitri John Ledkov: Pending requested 2015-02-26

Diff: 37 lines (+18/-2)

2 files modified

debian/changelog (+8/-0)
debian/upstart-bin.upstart.cron.daily (+10/-2)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #1425685: Missing input sanitation in upstart logrotation cronjob

High

Fix Released

Link a bug report

Related blueprints

1608. By James Hunt on 2015-02-26

* debian/upstart-bin.upstart.cron.daily: Additional checks on the input
  file based on review feedback.

1607. By James Hunt on 2015-02-26

* debian/upstart-bin.upstart.cron.daily:
  - [SECURITY FIX]: Only consider valid session files to avoid possible
    privilege escalation. Thanks to halfdog for reporting (LP: #1425685).

1606. By Dimitri John Ledkov on 2015-01-20

releasing package upstart version 1.13.2-0ubuntu7

1605. By Dimitri John Ledkov on 2015-01-17

Correct upstart-udev-bridge session job start/stop on conditions.

1604. By Dimitri John Ledkov on 2015-01-17

releasing package upstart version 1.13.2-0ubuntu6

1603. By Dimitri John Ledkov on 2015-01-17

Drop local option, use systemd_booted detection instead.

1602. By Dimitri John Ledkov on 2015-01-17

move udev & local bridges to upstart-bin package.

1601. By Dimitri John Ledkov on 2015-01-17

Drop event-bridge

1600. By Dimitri John Ledkov on 2015-01-17

Add control xml bindings.

1599. By Dimitri John Ledkov on 2015-01-16

* debian/upstart-bin.upstart.cron.daily: Emit "rotate-logs" event direct
  into session init, by-passing system upstart & session
* extra/upstart-local-bridge: implement systemd pid1 logic.
* extra/upstart-event-bridge: make it re-emit upstart-local-bridge
  events direct.
* util/telinit: Revert to synchronous behaviour coupled with unavoidable
  poll to ensure telinit only returns once a re-exec has completed (LP:
  #901038).