munin 2.0.2-1ubuntu2.2 source package in Ubuntu

Changelog

munin (2.0.2-1ubuntu2.2) quantal-security; urgency=low

  * SECURITY UPDATE: privilege escalation via root running plugins
    - debian/patches/CVE-2012-3512.patch: run each plugin in their own
      state directory in Makefile, Makefile.config,
      node/lib/Munin/Node/{OS,Service}.pm, plugins/lib/Munin/Plugin.pm,
      plugins/node.d/*.in,plugins/node.d.linux/*.in.
    - CVE-2012-3512
  * SECURITY UPDATE: remote code exection via bad arguments
    - debian/patches/CVE-2012-3513.patch: use MUNIN_CONFIG env variable
      instead of @ARGV to specify alternate config file in
      master/_bin/munin-cgi-graph.in, master/_bin/munin-cgi-html.in.
    - debian/patches/CVE-2012-3512-regression.patch: Don't rely on
      MUNIN_PLUGSTATE being in the environment as these scripts also get
      run by a cron job in plugins/node.d.linux/apt_all.in,
      plugins/node.d.linux/apt.in.
    - CVE-2012-3513
  * debian/rules: actually apply quilt patches.
  * debian/Makefile.config: added new plugin state directory location.
  * debian/munin-node.{postinst,postrm}: Switch to new plugin state
    directory.
 -- Marc Deslauriers <email address hidden>   Wed, 17 Oct 2012 08:16:34 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2012-10-17
Uploaded to:
Quantal
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
net
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Quantal: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
munin_2.0.2.orig.tar.gz 1.2 MiB e8a5266a85cde8b89a97fb7463a56a7ac9c038035b952e36047b7d599bb9181b
munin_2.0.2-1ubuntu2.2.diff.gz 55.5 KiB f3c55011b7e7ecee29b3de1797d9f823cdc5920951a8ae0a4b67b31b615e3bfa
munin_2.0.2-1ubuntu2.2.dsc 2.4 KiB 1e9856942caeea013977c309298773fc908e30247819e3a284626af8c86a4071

View changes file

Binary packages built by this source

munin: No summary available for munin in ubuntu quantal.

No description available for munin in ubuntu quantal.

munin-async: No summary available for munin-async in ubuntu quantal.

No description available for munin-async in ubuntu quantal.

munin-common: No summary available for munin-common in ubuntu quantal.

No description available for munin-common in ubuntu quantal.

munin-doc: No summary available for munin-doc in ubuntu quantal.

No description available for munin-doc in ubuntu quantal.

munin-node: No summary available for munin-node in ubuntu quantal.

No description available for munin-node in ubuntu quantal.

munin-plugins-core: No summary available for munin-plugins-core in ubuntu quantal.

No description available for munin-plugins-core in ubuntu quantal.

munin-plugins-extra: No summary available for munin-plugins-extra in ubuntu quantal.

No description available for munin-plugins-extra in ubuntu quantal.

munin-plugins-java: No summary available for munin-plugins-java in ubuntu quantal.

No description available for munin-plugins-java in ubuntu quantal.