Format: 1.8 Date: Thu, 27 Sep 2012 21:13:08 -0700 Source: libgssglue Binary: libgssglue-dev libgssglue1 Architecture: armel Version: 0.3-4ubuntu0.1 Distribution: precise Urgency: low Maintainer: Ubuntu/armhf Build Daemon Changed-By: Tyler Hicks Description: libgssglue-dev - header files and docs for libgssglue libgssglue1 - mechanism-switch gssapi library Changes: libgssglue (0.3-4ubuntu0.1) precise-security; urgency=low . * SECURITY UPDATE: Privilege escalation via malicious environment variable - debian/patches/07-CVE_2011_2709.patch: Only read the GSSAPI_MECH_CONF environment variable in non-setuid situations. Based on upstream patch. - CVE-2011-2709 Checksums-Sha1: f59df90bf680d59ebf3571f97e324dda33355f31 25962 libgssglue-dev_0.3-4ubuntu0.1_armel.deb d0e71d90026310851ffaed0bb8a1817911fe2ad0 17510 libgssglue1_0.3-4ubuntu0.1_armel.deb Checksums-Sha256: acfeaa2fc07c20c965089b5f8a450a641c117acb3c65e29643ad5e5f4b303a95 25962 libgssglue-dev_0.3-4ubuntu0.1_armel.deb 3d04e3699f7a43094bfeade474ae82cbcdf9e54a5392f2a12bd43911bb1b8613 17510 libgssglue1_0.3-4ubuntu0.1_armel.deb Files: 437ac72bbf65765cc2ada92410e2876f 25962 libdevel optional libgssglue-dev_0.3-4ubuntu0.1_armel.deb e2a6435bc66491a8a49a5a226a720095 17510 libs standard libgssglue1_0.3-4ubuntu0.1_armel.deb Original-Maintainer: Anibal Monsalve Salazar