libqb Debian release 1.0.4-1
Format: 1.8
Date: Tue, 16 Apr 2019 11:32:02 +0200
Source: libqb
Architecture: source
Version: 1.0.4-1
Distribution: unstable
Urgency: high
Maintainer: Debian HA Maintainers <debian-ha-maintainers@lists.alioth.debian.org>
Changed-By: Ferenc Wágner <wferi@debian.org>
Closes: 902104 927159
Changes:
libqb (1.0.4-1) unstable; urgency=high
.
* [021333b] New patch: Reduce stress test lengths to help weak buildds
(Closes: #902104)
* [dc825fb] New upstream security release (1.0.4)
Libqb creates files in world-writable directories (/dev/shm, /tmp) with
rather predictable file names. Also O_EXCL flag is not used when opening
the files. This could be exploited by a local attacker to overwrite
privileged system files. (CVE not assigned yet. Closes: #927159)
* [e36e34a] Refresh our patches
* [0823bf1] Acknowledge new internal symbol
* [88aafa5] Update Standards-Version to 4.3.0 (no changes required)
* [174d210] New patch: Fix garbled Doxygen markup
Checksums-Sha1:
710f93c4bac969ce0ae0796ddb484637e016e3ef 2423 libqb_1.0.4-1.dsc
b8078893be6c2c355313fe71cf006da7713ea43e 488536 libqb_1.0.4.orig.tar.xz
a0c36c968b98ff62fb2e08d1676068f074bc22da 490 libqb_1.0.4.orig.tar.xz.asc
597140cbb986bae40feabd146485cac13b732061 14660 libqb_1.0.4-1.debian.tar.xz
7ad39ccc76987a16c2557887a4ef38d59fd17c74 8994 libqb_1.0.4-1_amd64.buildinfo
Checksums-Sha256:
f6baa06c325116c25dfb6e268b1f26c4c0cbe1440c5466e8bb15aa31a5f4d291 2423 libqb_1.0.4-1.dsc
0064575151b11135a68a15f01da0ab1eaef4279b07e7059a10c748c12f28c14f 488536 libqb_1.0.4.orig.tar.xz
10029fa1da3752b9c28ac2a7530108671a084fa80f37c5b211aeec2de74744ae 490 libqb_1.0.4.orig.tar.xz.asc
23c9517fb3f746f50ce7bd99deb48d03ab88521ba1801ceeb2a501dd54311fae 14660 libqb_1.0.4-1.debian.tar.xz
4c61f83a9a0fa365561fb7ddd2300f5ed09cf1dcef1fa763eba658b46d40c69a 8994 libqb_1.0.4-1_amd64.buildinfo
Files:
254a63658735dcb207be357b4c2b3e6c 2423 libs optional libqb_1.0.4-1.dsc
07dc93433a295f45dd16293a4b63389e 488536 libs optional libqb_1.0.4.orig.tar.xz
22d567fc789da092b0e14e1c9d625ac5 490 libs optional libqb_1.0.4.orig.tar.xz.asc
61a49b2f90a1bbe677275238cd107213 14660 libs optional libqb_1.0.4-1.debian.tar.xz
3d70e4dc9e8d7c4d71204c670a3e11c5 8994 libs optional libqb_1.0.4-1_amd64.buildinfo