ubuntu precise in
Private PPA for Ubuntu Security Team
acpid (1:2.0.10-1ubuntu3) precise; urgency=low
* SECURITY UPDATE: Arbitrary code execution in the power button handling
script (LP: #893821)
- debian/powerbtn.sh: Ensure that the DBUS_SESSION_BUS_ADDRESS environment
variable is only read from a process owned by the user that will be
evaluating the variable.
* SECURITY UPDATE: Unprivileged users may be able to write to directories
and read files created by event handler scripts
- event.c: Set a restrictive umask of 0077 before running an event handler
script. Based on upstream patch.
-- Tyler Hicks <email address hidden> Wed, 07 Dec 2011 16:33:35 -0600
Advanced Configuration and Power Interface event daemon
Kernel ACPI Event Monitor