Format: 1.8
Date: Thu, 27 Sep 2012 21:13:08 -0700
Source: libgssglue
Binary: libgssglue-dev libgssglue1
Architecture: i386
Version: 0.3-4ubuntu0.1
Distribution: precise
Urgency: low
Maintainer: Ubuntu/amd64 Build Daemon <buildd@aatxe.buildd>
Changed-By: Tyler Hicks <tyhicks@canonical.com>
Description: 
 libgssglue-dev - header files and docs for libgssglue
 libgssglue1 - mechanism-switch gssapi library
Changes: 
 libgssglue (0.3-4ubuntu0.1) precise-security; urgency=low
 .
   * SECURITY UPDATE: Privilege escalation via malicious environment variable
     - debian/patches/07-CVE_2011_2709.patch: Only read the GSSAPI_MECH_CONF
       environment variable in non-setuid situations. Based on upstream patch.
     - CVE-2011-2709
Checksums-Sha1: 
 ba86e3379d106d4d8bb394cb5ece65a1e48229d0 30188 libgssglue-dev_0.3-4ubuntu0.1_i386.deb
 7586dffa9ca7e078ac2dd68f0a842e72374a4c29 22006 libgssglue1_0.3-4ubuntu0.1_i386.deb
Checksums-Sha256: 
 b7376cc1dd847542dbb4f0738a3bc90ed5f42974af8b23d20e4719f510fd459e 30188 libgssglue-dev_0.3-4ubuntu0.1_i386.deb
 d45e94310a4ad60351863a4bc8d8252b24a6ed46e6444ee8ea5bcb529caad12d 22006 libgssglue1_0.3-4ubuntu0.1_i386.deb
Files: 
 60d630e4a7010545b73716f72f5a520f 30188 libdevel optional libgssglue-dev_0.3-4ubuntu0.1_i386.deb
 198f452a62908ca90d20bfcf7e8579c9 22006 libs standard libgssglue1_0.3-4ubuntu0.1_i386.deb
Original-Maintainer: Anibal Monsalve Salazar <anibal@debian.org>