Format: 1.8 Date: Thu, 27 Sep 2012 21:13:08 -0700 Source: libgssglue Binary: libgssglue-dev libgssglue1 Architecture: amd64 Version: 0.3-1ubuntu1.1 Distribution: oneiric Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Tyler Hicks Description: libgssglue-dev - header files and docs for libgssglue libgssglue1 - mechanism-switch gssapi library Changes: libgssglue (0.3-1ubuntu1.1) oneiric-security; urgency=low . * SECURITY UPDATE: Privilege escalation via malicious environment variable - debian/patches/07-CVE_2011_2709.patch: Only read the GSSAPI_MECH_CONF environment variable in non-setuid situations. Based on upstream patch. - CVE-2011-2709 Checksums-Sha1: cba2e4f88e7bb9ee0abf39e97e0630bee6c9ebf2 27302 libgssglue-dev_0.3-1ubuntu1.1_amd64.deb 576735fa915b57b5129c853b7963994aa530f0f1 22546 libgssglue1_0.3-1ubuntu1.1_amd64.deb Checksums-Sha256: 41205b2e6f40d98c5ea67c22694021ccef9fcaf0e0f838f174730b3a28cb0380 27302 libgssglue-dev_0.3-1ubuntu1.1_amd64.deb 1d07fda7948dcb9b85e4e9f6cba505a3bfcb3c488deb3664c175dd875266b659 22546 libgssglue1_0.3-1ubuntu1.1_amd64.deb Files: edbd05ad4d2a7172ff577df7af41e4b0 27302 libdevel optional libgssglue-dev_0.3-1ubuntu1.1_amd64.deb dd4e5f3ec43d5a56e8a351f3dce82bfd 22546 libs standard libgssglue1_0.3-1ubuntu1.1_amd64.deb Original-Maintainer: Anibal Monsalve Salazar