lp:ubuntu/lucid-security/acpid

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #893821: Shell expansion may allow privilege boundary crossing

Undecided

New

Link a bug report

Related blueprints

33. By Tyler Hicks on 2011-12-07

* SECURITY UPDATE: Arbitrary code execution in the power button handling
  script (LP: #893821)
  - debian/powerbtn.sh: Ensure that the DBUS_SESSION_BUS_ADDRESS environment
    variable is only read from a process owned by the user that will be
    evaluating the variable.
  - CVE-2011-2777
* SECURITY UPDATE: Unprivileged users may be able to write to directories
  and read files created by event handler scripts
  - event.c: Set a restrictive umask of 0077 before running an event handler
    script. Based on upstream patch.
  - CVE-2011-4578

32. By Jamie Strandboge on 2011-10-13

* SECURITY UPDATE: denial of service via blocking socket
  - debian/patches/CVE-2011-1159.patch: adjust the socket fd to use
    O_NONBLOCK
  - CVE-2011-1159

31. By Jonathan Thomas on 2010-01-15

Source /usr/share/acpi-support/power-funcs in powerbtn.sh (LP: #508073)

30. By Steve Langasek on 2009-12-23

fix the upload target

29. By Steve Langasek on 2009-12-23

releasing version 1.0.10-5ubuntu1

28. By Steve Langasek on 2009-12-23

merge 1.0.10-5

27. By Steve Langasek on 2009-12-18

* Merge from Debian testing. Remaining changes:
  - Replace init script with Upstart job.
    - This does not load modules, unlike the init script, since these are
      all loaded by ACPI:* modaliases now (and thus by udev)
  - debian/control:
    - Bump build-dependency on debhelper for Upstart-aware dh_installinit
* Dropped changes, integrated upstream:
  - build with -D_GNU_SOURCE to make "struct ucred" available
  - acpid.*, event.c, ud_socket.*: limit the number of non-root clients,
    correctly close dead connections.
  - Remove the logrotate file on upgrade
  - Bump Standards-Version to 3.8.0
  - debian/powerbtn.sh:
    - Update for KDE 4
    - Add dalston-power-applet to list of handlers for power
      button events
    - add xfce4-power-manager to the list of handlers as well.
* Dropped changes, superseded by upstart conversion:
  - debian/acpid.init.d: add the 'status' action
  - Replace "multiuser" deprecated init mode in debian/rules with manual
    arguments. Adapt the corresponding change in LSB init script header
    and runtime dependency in debian/control
  - depend on sysv-rc
* debian/preinst, debian/acpid.install, debian/control, debian/rules:
  continue installing /etc/acpi/events/powerbtn and /etc/acpi/powerbtn.sh,
  deferring the migration to acpi-support-base; and drop the Recommends:
  on acpi-support-base for the same reason.

26. By Michael Meskes on 2009-11-17

Updated netlink patch to version 6.

25. By Lionel Le Folgoc on 2009-09-23

debian/powerbtn.sh: add xfce4-power-manager to the list of handlers as
well. LP: #425155

24. By Gary Lasker on 2009-09-18

* debian/powerbtn.sh:
  - Add dalston-power-applet to list of handlers for power
    button events (part of fix for LP: #432578).