e60f517...
by
Simon McVittie
on 2012-10-04
Import patches-applied version 1.2.24-4+squeeze2 to applied/ debian/ squeeze
Imported using usd-importer.
Publish parent: 503e4a5afa790b3 d5b00973e5a03ee 48c7e91cec
Unapplied parent: 0e22d6ac883b7d0 bc07c471515a75f 6ef74f74a7
New changelog entries:
* CVE-2012-3524: apply patches from upstream 1.6.6 to avoid arbitrary
code execution in setuid/setgid binaries that incorrectly use libdbus
without first sanitizing the environment variables inherited from
their less-privileged caller (Closes: #689070).
- As per upstream 1.6.8, do not check filesystem capabilities for now,
only setuid/setgid, fixing regressions in certain configurations of
gnome-keyring
0e22d6a...
by
Simon McVittie
on 2012-10-04
[PATCH 4/5] activation-helper: Ensure DBUS_STARTER_ ADDRESS is set
Gbp-Pq: 0004-activation -helper- Ensure- DBUS_STARTER_ ADDRESS- is-set. patch.
4608a70...
by
Simon McVittie
on 2012-10-04
[PATCH 3/5] hardening: Remove activation helper handling for
Gbp-Pq: 0003-hardening- Remove- activation- helper- handling- for-DBUS. patch.
f6cecd0...
by
Simon McVittie
on 2012-10-04
[PATCH 2/5] hardening: Ensure _dbus_check_ setuid( ) is initialized
Gbp-Pq: 0002-hardening- Ensure- _dbus_check_ setuid- is-initialized- t.patch.
1fcd0e0...
by
Simon McVittie
on 2012-10-04
[PATCH 1/5] CVE-2012-3524: Don't access environment variables or run
Gbp-Pq: 0001-CVE- 2012-3524- Don-t-access- environment- variables- or-.patch.
17ec290...
by
Simon McVittie
on 2012-10-04
[PATCH] _dbus_header_ byteswap: change the first byte of the message,
Gbp-Pq: 13-629938- _dbus_header_ byteswap. patch.
e1aaf5f...
by
Simon McVittie
on 2012-10-04
[PATCH 1/4] CVE 2010-4352: Reject deeply nested variants
Gbp-Pq: 12-CVE- 2010-4352- reject- deeply- nested- variants. patch.
ba55801...
by
Simon McVittie
on 2012-10-04
kqueue set_watched_dirs: fix termination condition
Gbp-Pq: 11-589662- reload- kqueue. patch.
7bfe104...
by
Simon McVittie
on 2012-10-04
10_dbus- 1.0.1-generate- xml-docs. patch
No DEP3 Subject or Description header found
Gbp-Pq: 10_dbus- 1.0.1-generate- xml-docs. patch.
652aaee...
by
Simon McVittie
on 2012-10-04
01_no-fatal- warnings. patch
No DEP3 Subject or Description header found
Gbp-Pq: 01_no-fatal- warnings. patch.