lp:ubuntu/dapper-updates/cron
- Get this branch:
- bzr branch lp:ubuntu/dapper-updates/cron
Branch merges
Branch information
Recent revisions
- 7. By Jamie Strandboge
-
* SECURITY UPDATE: cron does not check the return code of setgid() and
initgroups(), which under certain circumstances could cause applications
to run with elevated group privileges. Note that the more serious issue
of not checking the return code of setuid() was fixed in 3.0pl1-64.
(LP: #46649)
- do_command.c: check return code of setgid() and initgroups()
- CVE-2006-2607 - 3. By Nathaniel McCallum <email address hidden>
-
* Added versioned depend on lsb-base
* debian/cron.init: pretty initscript - 2. By Steve Greenland <email address hidden>
-
* Add type usbdevfs to skipped "file systems" (this is /proc/bus/usb)
(closes: #113186,#113187)
* Removed 'xfs' from list of skipped file system types. Unfortunately,
it appears to be used by both the arla network file system and the SGI
XFS filesystem, and I must make the conservative choice. (closes: #113234)
* Remove extra diff in checksecurity. (closes: 113950)
* Add type none to skipped "file systems" (--bind mounts) (closes: #111395)
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)
- Stacked on:
- lp:ubuntu/karmic/cron