Format: 1.8 Date: Thu, 27 Sep 2012 21:13:08 -0700 Source: libgssglue Binary: libgssglue-dev libgssglue1 Architecture: armel Version: 0.1-4ubuntu0.1 Distribution: lucid Urgency: low Maintainer: Ubuntu/armhf Build Daemon Changed-By: Tyler Hicks Description: libgssglue-dev - header files and docs for libgssglue libgssglue1 - mechanism-switch gssapi library Changes: libgssglue (0.1-4ubuntu0.1) lucid-security; urgency=low . * SECURITY UPDATE: Privilege escalation via malicious environment variable - debian/patches/07-CVE_2011_2709.patch: Only read the GSSAPI_MECH_CONF environment variable in non-setuid situations. Based on upstream patch. - CVE-2011-2709 Checksums-Sha1: 74b114e9eded87ff3938ea5f335f56f338b7d82a 30088 libgssglue-dev_0.1-4ubuntu0.1_armel.deb 3543e1f7c60455a1b28591354fc5005fb7b30bf9 20238 libgssglue1_0.1-4ubuntu0.1_armel.deb Checksums-Sha256: 539184f773e58c93d8c4ed9a3f2cdb30e15f155fab8792824d25e82a56556c77 30088 libgssglue-dev_0.1-4ubuntu0.1_armel.deb 84981ed2c7d17ed332e0fb08813eb6845a1c2798441bc41a52ede6f7c52c22d9 20238 libgssglue1_0.1-4ubuntu0.1_armel.deb Files: d60ba5202cc4f0ac9bfa3caa9d90e949 30088 libdevel optional libgssglue-dev_0.1-4ubuntu0.1_armel.deb f5ef8741ed7c5d447cd621dc75bde0c2 20238 libs standard libgssglue1_0.1-4ubuntu0.1_armel.deb Original-Maintainer: Anibal Monsalve Salazar