Format: 1.8 Date: Thu, 25 May 2017 17:09:11 -0700 Source: juju-core Binary: juju-2.0 juju Architecture: armhf armhf_translations Version: 2.0.2-0ubuntu0.16.04.2 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Seth Arnold Description: juju - next generation service orchestration system juju-2.0 - Juju is devops distilled - client Launchpad-Bugs-Fixed: 1682411 Changes: juju-core (2.0.2-0ubuntu0.16.04.2) xenial-security; urgency=medium . * SECURITY UPDATE: Privilege escalation via juju-run (LP: #1682411) - debian/patches/CVE-2017-9232.patch: create a unix domain socket with restricted permissions to limit juju-run to only similarly privileged processes. - CVE-2017-9232 Checksums-Sha1: 590498ae3397232585df1b9c70616405ea3cde7f 13302 juju-2.0_2.0.2-0ubuntu0.16.04.2_armhf.deb d3753705cceac12b082f0706eab80d0bf0cb1912 51651 juju-core_2.0.2-0ubuntu0.16.04.2_armhf_translations.tar.gz Checksums-Sha256: dc2072fdf2622f796f73a860f37662fe558d77d4db0b9c712c170ad4170db225 13302 juju-2.0_2.0.2-0ubuntu0.16.04.2_armhf.deb ceee032d613a58644bdc59a834f4d30c66d605a9707f738728c6f89fa5b4e2c3 51651 juju-core_2.0.2-0ubuntu0.16.04.2_armhf_translations.tar.gz Files: 2384c0a29d418c4e746c074284dcfc75 13302 devel extra juju-2.0_2.0.2-0ubuntu0.16.04.2_armhf.deb 93c9fe9c9614fd4b81bf85884902998b 51651 raw-translations - juju-core_2.0.2-0ubuntu0.16.04.2_armhf_translations.tar.gz