Format: 1.8 Date: Thu, 27 Sep 2012 21:13:08 -0700 Source: libgssglue Binary: libgssglue-dev libgssglue1 Architecture: i386 Version: 0.3-1ubuntu1.1 Distribution: oneiric Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Tyler Hicks Description: libgssglue-dev - header files and docs for libgssglue libgssglue1 - mechanism-switch gssapi library Changes: libgssglue (0.3-1ubuntu1.1) oneiric-security; urgency=low . * SECURITY UPDATE: Privilege escalation via malicious environment variable - debian/patches/07-CVE_2011_2709.patch: Only read the GSSAPI_MECH_CONF environment variable in non-setuid situations. Based on upstream patch. - CVE-2011-2709 Checksums-Sha1: d670e0d5d1a5074ed0f6706d137d2ade363eaa5d 26350 libgssglue-dev_0.3-1ubuntu1.1_i386.deb 23772b0eebdd9b41666c333c4cda70adf13351dd 22022 libgssglue1_0.3-1ubuntu1.1_i386.deb Checksums-Sha256: 2ad9dc755baa92ae3fe08c75227da51175f56a59e39c93488ab00ca6e140479e 26350 libgssglue-dev_0.3-1ubuntu1.1_i386.deb 794293883f2b6b9a5527094d0b909c62695a807e08430dc5f3dc0927dabaffce 22022 libgssglue1_0.3-1ubuntu1.1_i386.deb Files: 8df8df5dc31ad9bb5a3501406c6da31f 26350 libdevel optional libgssglue-dev_0.3-1ubuntu1.1_i386.deb 8de1938c20c34960bfefbda5f3684ce1 22022 libs standard libgssglue1_0.3-1ubuntu1.1_i386.deb Original-Maintainer: Anibal Monsalve Salazar