From 0946b437570dea31365790d5cbf39c39f1b59c02 Mon Sep 17 00:00:00 2001 From: Mike Gabriel Date: Thu, 29 Aug 2013 22:24:26 +0200 Subject: Add patch: 602_nx-X11_initgroups.full.patch. Fix calling setuid and setgid without setgroups or initgroups. There is a high probability this means it didn't relinquish all groups, and this would be a potential security issue to be fixed. Seek POS36-C on the web for details about the problem. (Fixes: #293). --- debian/patches/series | 1 + 1 file changed, 1 insertion(+) (limited to 'debian/patches/series') diff --git a/debian/patches/series b/debian/patches/series index 2d95bf5b1..8c5eebdc5 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -47,6 +47,7 @@ 302_nxagent_configurable-keystrokes.full.patch 600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch 601_nx-X11_build-option-changes-to-not-use-bundled-libraries.full.patch +602_nx-X11_initgroups.full.patch 999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch 016_nx-X11_install-location.debian.patch 102_xserver-xext_set-securitypolicy-path.debian.patch -- cgit v1.2.3