munin 1.4.5-3ubuntu4.11.10.2 source package in Ubuntu

Changelog

munin (1.4.5-3ubuntu4.11.10.2) oneiric-security; urgency=low

  * SECURITY UPDATE: symlink vulnerability in qmailscan plugin
    - debian/patches/CVE-2012-2103.patch: remove the use of tempfiles in
      plugins/node.d/qmailscan.in.
    - CVE-2012-2103
  * SECURITY UPDATE: privilege escalation via root running plugins
    - debian/patches/CVE-2012-3512.patch: run each plugin in their own
      state directory in Makefile, Makefile.config,
      node/lib/Munin/Node/{OS,Service}.pm, plugins/lib/Munin/Plugin.pm,
      plugins/node.d/*.in,plugins/node.d.linux/*.in.
    - debian/patches/CVE-2012-3512-regression.patch: Don't rely on
      MUNIN_PLUGSTATE being in the environment as these scripts also get
      run by a cron job in plugins/node.d.linux/apt_all.in,
      plugins/node.d.linux/apt.in.
    - CVE-2012-3512
  * debian/Makefile.config: added new plugin state directory location.
  * debian/munin-node.{postinst,postrm}: Remove old plugin state directory
    override, also remove new plugin state directory.
 -- Marc Deslauriers <email address hidden>   Wed, 17 Oct 2012 08:26:39 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2012-10-17
Uploaded to:
Oneiric
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
net
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Oneiric: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
munin_1.4.5.orig.tar.gz 1.2 MiB 4f8632713c5267e282b091cf7ef5163c5de321536e76dbaab2204aa23c957138
munin_1.4.5-3ubuntu4.11.10.2.diff.gz 51.1 KiB 605d887f0ced448de8d7329f937f9b3580453aa6b5068cee62ede54388715a2a
munin_1.4.5-3ubuntu4.11.10.2.dsc 2.2 KiB 329d8af39aabf7b1ccfce70279e561f42bbca4ba72980a59597c8cb51ac3395a

View changes file

Binary packages built by this source

munin: No summary available for munin in ubuntu oneiric.

No description available for munin in ubuntu oneiric.

munin-common: No summary available for munin-common in ubuntu oneiric.

No description available for munin-common in ubuntu oneiric.

munin-java-plugins: No summary available for munin-java-plugins in ubuntu oneiric.

No description available for munin-java-plugins in ubuntu oneiric.

munin-node: No summary available for munin-node in ubuntu oneiric.

No description available for munin-node in ubuntu oneiric.

munin-plugins-extra: No summary available for munin-plugins-extra in ubuntu oneiric.

No description available for munin-plugins-extra in ubuntu oneiric.