Publishing details

Changelog

tmpreaper (1.6.13+nmu1+deb9u1build0.18.04.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Sync from Debian
    - fixes CVE-2019-3461.

tmpreaper (1.6.13+nmu1+deb9u1) stretch-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * There was a race condition when tmpreaper was testing for a (bind) mount,
    which was done via rename() which could potentially lead to a file being
    placed elsewhere on the filesystem hierarchy (e.g. /etc/cron.d/) if the
    directory being cleaned up was on the same physical filesystem.
    This has been fixed by using an alternative way of looking for bind mounts
    using code from mountpoint (from the util-linux package).

 -- Eduardo Barretto <email address hidden>  Wed, 24 Jul 2019 14:53:53 -0300

Available diffs

Builds

Built packages

Package files