-
libgssglue (0.3-1ubuntu1.1) oneiric-security; urgency=low
* SECURITY UPDATE: Privilege escalation via malicious environment variable
- debian/patches/07-CVE_2011_2709.patch: Only read the GSSAPI_MECH_CONF
environment variable in non-setuid situations. Based on upstream patch.
- CVE-2011-2709
-- Tyler Hicks <email address hidden> Thu, 27 Sep 2012 21:13:08 -0700
-
libgssglue (0.3-1ubuntu1) oneiric; urgency=low
* Move library to /lib, since this is used by rpcbind in /sbin.
-- Steve Langasek <email address hidden> Wed, 31 Aug 2011 20:45:13 +0000
-
libgssglue (0.3-1) unstable; urgency=low
* New upstream
Changes since libgssglue-0.2:
+ Add new typedefs defined in RFC 5587 and used in newer versions
of MIT Kerberos.
+ Fixes a compile error in nfs-utils which uses gssapi.h from this
package and other gss headers from the Kerberos distribution.
* Merged upstream:
debian/patches/07-629553-gssapi.h.in.patch
-- Ubuntu Archive Auto-Sync <email address hidden> Thu, 23 Jun 2011 10:34:07 +0000
-
libgssglue (0.2-3) unstable; urgency=medium
* Fix incompatibility with krb5 1.9
Add debian/patches/07-629553-gssapi.h.in.patch from upstream
Closes: 629553, 629692
* Fix unneeded-build-dep-on-quilt
* Fix out-of-date-standards-version
* Fix debian-rules-missing-recommended-target
-- Ubuntu Archive Auto-Sync <email address hidden> Fri, 17 Jun 2011 07:49:25 +0000
-
libgssglue (0.2-2) unstable; urgency=low
[ Steve Langasek ]
* debian/patches/01-370825-gssapi_mech.conf.patch: update for multiarch;
look up our gssapi mechs using the default search path instead of an
absolute path since the absolute path won't be the same on all archs (or
the same before and after multiarch).
Closes: 619559
[ Anibal Monsalve Salazar ]
* Remove debian/patches/debian-changes-0.2-1
Closes: 619052
libgssglue (0.2-1) unstable; urgency=low
* New upstream release
* Merged upstream: 04-512730-resource_leak.patch
* Debian source format is 3.0 (quilt)
* Fix debhelper-but-no-misc-depends
* Fix out-of-date-standards-version
-- Steve Langasek <email address hidden> Fri, 03 Jun 2011 19:23:52 +0000
-
libgssglue (0.1-4ubuntu1) natty; urgency=low
* debian/patches/01-370825-gssapi_mech.conf.patch: update for multiarch;
look up our gssapi mechs using the default search path instead of an
absolute path since the absolute path won't be the same on all archs (or
the same before and after multiarch).
-- Steve Langasek <email address hidden> Thu, 24 Mar 2011 20:51:05 -0700
