diff options
| author | Mike Gabriel <mike.gabriel@das-netzwerkteam.de> | 2013-08-29 22:24:26 +0200 |
|---|---|---|
| committer | Mike Gabriel <mike.gabriel@das-netzwerkteam.de> | 2013-08-29 22:24:26 +0200 |
| commit | 0946b437570dea31365790d5cbf39c39f1b59c02 (patch) | |
| tree | 4fde9a3bb33aac8826164ae81108a5f2888d436b /debian/changelog | |
| parent | e46b43443fd45fa3f3196df34ba7efe8bff423a3 (diff) | |
| download | nx-libs-0946b437570dea31365790d5cbf39c39f1b59c02.tar.gz nx-libs-0946b437570dea31365790d5cbf39c39f1b59c02.tar.bz2 nx-libs-0946b437570dea31365790d5cbf39c39f1b59c02.zip | |
Add patch: 602_nx-X11_initgroups.full.patch. Fix calling setuid and setgid without setgroups or initgroups. There is a high probability this means it didn't relinquish all groups, and this would be a potential security issue to be fixed. Seek POS36-C on the web for details about the problem. (Fixes: #293).
Diffstat (limited to 'debian/changelog')
| -rw-r--r-- | debian/changelog | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index 2242a75da..b523ee19b 100644 --- a/debian/changelog +++ b/debian/changelog @@ -19,6 +19,11 @@ nx-libs (2:3.5.0.21-0) UNRELEASED; urgency=low * Change build options so that bundled libraries are not used anymore at build time. Remove bundled libraries from rolled tarballs, as well. (Fixes: #238). + * Add patch: 602_nx-X11_initgroups.full.patch. Fix calling setuid and setgid + without setgroups or initgroups. There is a high probability this means it + didn't relinquish all groups, and this would be a potential security issue + to be fixed. Seek POS36-C on the web for details about the problem. (Fixes: + #293). -- Mike Gabriel <mike.gabriel@das-netzwerkteam.de> Thu, 28 Mar 2013 21:07:42 +0100 |