Format: 1.8 Date: Thu, 07 Jul 2011 11:00:26 -0500 Source: oprofile Binary: oprofile libopagent1 oprofile-gui Architecture: sparc Version: 0.9.6-1ubuntu4.4 Distribution: lucid Urgency: low Maintainer: Ubuntu/sparc Build Daemon Changed-By: Jamie Strandboge Description: libopagent1 - system-wide profiler for Linux systems (opagent runtime library) oprofile - system-wide profiler for Linux systems oprofile-gui - system-wide profiler for Linux systems (GUI components) Changes: oprofile (0.9.6-1ubuntu4.4) lucid-security; urgency=low . * SECURITY UPDATE: shell metacharacter injection via -e argument - 0001-Sanitize-Event-Names.patch: only allow alphanumerics with -e - CVE-2011-1760 * SECURITY UDPATE: shell metacharacter injection via --vmlinux, --session-dir and --xen - 0003-Avoid-blindly-source-SETUP_FILE-with.patch: don't execute commands in $SETUP_FILE - 0004-Do-additional-checks-on-user-supplied-arguments.patch: input validation on user supplied values - CVE-2011-2471 * SECURITY UPDATE: directory traversal vulnerability via --save and --session-dir - 0002-Ensure-that-save-only-saves-things-in-SESSION_DIR.patch - 0005-add-back-error_if_not_basename.patch: readd error_if_not_basename() which was removed in 0003-Avoid-blindly-source-SETUP_FILE-with.patch - CVE-2011-2472 Checksums-Sha1: 10b729ef7a6d4eda66d08fcd62e9b1d5d6ede37c 1412818 oprofile_0.9.6-1ubuntu4.4_sparc.deb f945b386634e2a0dd002aedc7fa87804fe9db6d1 21758 libopagent1_0.9.6-1ubuntu4.4_sparc.deb e01c518cfa09d954e3824e76cb9f013014318d1a 96474 oprofile-gui_0.9.6-1ubuntu4.4_sparc.deb Checksums-Sha256: 4ffffa058833aaed408ed7f1788267d5c78159fa375f6a2616208096c2b7d64c 1412818 oprofile_0.9.6-1ubuntu4.4_sparc.deb b8164bf1a70fb50de4b81dd59108b3453f2759ef57879d4345fdb2015fd55eff 21758 libopagent1_0.9.6-1ubuntu4.4_sparc.deb 50116163c71f028cead860c2ef81aac0f68620108677ae4c9f614af1fc6f56e5 96474 oprofile-gui_0.9.6-1ubuntu4.4_sparc.deb Files: 49271f9424a9d2ca712bd5575adf61c8 1412818 devel optional oprofile_0.9.6-1ubuntu4.4_sparc.deb f0e5a89d3405276cae72f1892ddf2986 21758 devel optional libopagent1_0.9.6-1ubuntu4.4_sparc.deb f6bbde1912e1feddd5a53f100fa4cbe8 96474 devel optional oprofile-gui_0.9.6-1ubuntu4.4_sparc.deb Original-Maintainer: LIU Qi