Format: 1.8
Date: Thu, 27 Sep 2012 21:13:08 -0700
Source: libgssglue
Binary: libgssglue-dev libgssglue1
Architecture: amd64
Version: 0.1-4ubuntu0.1
Distribution: lucid
Urgency: low
Maintainer: Ubuntu/amd64 Build Daemon <buildd@komainu.buildd>
Changed-By: Tyler Hicks <tyhicks@canonical.com>
Description: 
 libgssglue-dev - header files and docs for libgssglue
 libgssglue1 - mechanism-switch gssapi library
Changes: 
 libgssglue (0.1-4ubuntu0.1) lucid-security; urgency=low
 .
   * SECURITY UPDATE: Privilege escalation via malicious environment variable
     - debian/patches/07-CVE_2011_2709.patch: Only read the GSSAPI_MECH_CONF
       environment variable in non-setuid situations. Based on upstream patch.
     - CVE-2011-2709
Checksums-Sha1: 
 01d700a72a78079371d80e4150b53d4c65da1a5b 34994 libgssglue-dev_0.1-4ubuntu0.1_amd64.deb
 ed20401576988c5b5ae2fa91bc3b02ce63b1ce58 24598 libgssglue1_0.1-4ubuntu0.1_amd64.deb
Checksums-Sha256: 
 949da0fe348d186e82b6844b7ff0e716016f12af6cbdd2c6c93111544e21dcee 34994 libgssglue-dev_0.1-4ubuntu0.1_amd64.deb
 4c8c87a55fd068134b7d441c4f988358bc9896a16c2733a1c7af63b1b000c489 24598 libgssglue1_0.1-4ubuntu0.1_amd64.deb
Files: 
 b59fb8aeb2be754f6e3d1b2be9f9bc19 34994 libdevel optional libgssglue-dev_0.1-4ubuntu0.1_amd64.deb
 bdad4255e4079ad1ec8c90978daf491a 24598 libs standard libgssglue1_0.1-4ubuntu0.1_amd64.deb
Original-Maintainer: Anibal Monsalve Salazar <anibal@debian.org>