Accepted autofs 5.0.8-2 (source amd64 all) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 19 Mar 2015 18:38:23 +1100
Source: autofs
Binary: autofs autofs-ldap autofs-hesiod autofs5 autofs5-ldap autofs5-hesiod
Architecture: source amd64 all
Version: 5.0.8-2
Distribution: unstable
Urgency: medium
Maintainer: Michael Tokarev <mjt@tls.msk.ru>
Changed-By: Dmitry Smirnov <onlyjob@debian.org>
Description:
autofs - kernel-based automounter for Linux
autofs-hesiod - Hesiod map support for autofs
autofs-ldap - LDAP map support for autofs
autofs5 - transitional dummy package for 'autofs'
autofs5-hesiod - transitional dummy package for 'autofs-hesiod'
autofs5-ldap - transitional dummy package for 'autofs-ldap'
Closes: 779591
Changes:
autofs (5.0.8-2) unstable; urgency=medium
.
[ Salvatore Bonaccorso <carnil@debian.org> ]
* Add patches for CVE-2014-8169 (Closes: #779591).
When a program map uses an interpreted languages like python it is
possible to load and execute arbitray code from a user home directory.
This is because the standard environment variables are used to locate
and load modules when using these languages. To avoid that, a prefix to
these environment names is added so that they aren't used for this
purpose. The prefix used is "AUTOFS_" and is not configurable.
Additionally a configuration option to force the use of program map
standard environment variables is added (FORCE_STANDARD_PROGRAM_MAP_ENV).
.
[ Dmitry Smirnov <onlyjob@debian.org> ]
* Refreshed other patches as needed.
Checksums-Sha1:
d50642a1951f7ab4a017058ebd173ced462805c5 2344 autofs_5.0.8-2.dsc
3dbd50793c2c6ec4aa20429a7eba3840f70ea630 20056 autofs_5.0.8-2.debian.tar.xz
d6130191367fc387a2eff5fefe682b92bb996a09 317150 autofs_5.0.8-2_amd64.deb
f60a1aa720a1b068e3013cfd7ccd6a0ac0cd4b83 91156 autofs-ldap_5.0.8-2_amd64.deb
fc4fc204c517c28a8ea156b78124154805cb64fa 73234 autofs-hesiod_5.0.8-2_amd64.deb
6d4258a23f25f245cd1de7efccfcd831a55ef80c 24238 autofs5_5.0.8-2_all.deb
eaeec7eebb5b59caadc39c426089ea39108e79d3 24252 autofs5-ldap_5.0.8-2_all.deb
ecd0ffcda3c0379f8bd370ce43f8e88490050409 24266 autofs5-hesiod_5.0.8-2_all.deb
Checksums-Sha256:
99b071544fa3f8e2f9b2b16bdb9c7784eb2be01d6745d1e0ab487e26e38817df 2344 autofs_5.0.8-2.dsc
36690a9a6727b6a115ea866d17cee6c74b357763b33c3e3a46c3d1650da3a7a6 20056 autofs_5.0.8-2.debian.tar.xz
d5dfe3f6a99063ecab66c1849b97140fa1bae10420dd51f47053f617eba23c09 317150 autofs_5.0.8-2_amd64.deb
f7ed4cd5e9903fc6346386aa24033b76b30bddecb16899c6e376427e0c26b58f 91156 autofs-ldap_5.0.8-2_amd64.deb
11166f1521fce77af2169c3274dd5f91c426fcc7433d613c610ecb8b47d46ea6 73234 autofs-hesiod_5.0.8-2_amd64.deb
e27fe744c636808c0cf932dea2b7d671d72d55b96475622031acf263c4b5ed2e 24238 autofs5_5.0.8-2_all.deb
53d58dbdc90d9edbe50890dcdec106ed094de264ccb4b05d4c1427d6e12656b2 24252 autofs5-ldap_5.0.8-2_all.deb
56504aa36c1a7297232b6fa4a11e3bd708acb1641d914ed14ed7e13b3c90af85 24266 autofs5-hesiod_5.0.8-2_all.deb
Files:
13ea38db0ab27ab3a612ecd9bddc9d40 2344 utils extra autofs_5.0.8-2.dsc
6fc256838c434bc361f50181119cc933 20056 utils extra autofs_5.0.8-2.debian.tar.xz
8c583096285585d58040e28c4a2fe03e 317150 utils extra autofs_5.0.8-2_amd64.deb
ff805c3d8f426bca37417dc2797ab279 91156 utils extra autofs-ldap_5.0.8-2_amd64.deb
cff74ecde911d4f635d6d2eb541a1d67 73234 utils extra autofs-hesiod_5.0.8-2_amd64.deb
cebd4fa1fba91e703987d6f657ac6f20 24238 oldlibs extra autofs5_5.0.8-2_all.deb
23ff1ed10dc71f18d18568ebf79b4c65 24252 oldlibs extra autofs5-ldap_5.0.8-2_all.deb
dd9fe8d3fc11e5d93bcf1df7fc446b99 24266 oldlibs extra autofs5-hesiod_5.0.8-2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIcBAEBCAAGBQJVCoWeAAoJEFK2u9lTlo0b79UP/2UcgN33dZPhe/DWDnw/GDVG
0fc8zDDxChVItr4LyqdmztU5VMxwUPMV4NaPJXDXp+MDv4rel0BO22zSzymUL+B7
AloIZoaPsaOnqiBflOXNDrmiC4DecLTIuvSvUpIcaPgHG/vqsCvUu9kuYQrZt9VK
y+838sjbXlJBcGR4AWvTz0zb4XvggSagQKsnNgyIazKB3D1SRIkKzBMZAiixLSDb
CgDM0kSAjJM0aI+oWxHQFNlzyAi5MO2JpEQ+D4yQ94MT1z2RSO0uLwK71J2V3tiU
mANvvaDBH7rgD3SDD6g5b2MAmgIIAl42P+TvSJAJDVAhkHU+0TPOwYZR6wvM969P
TAmwgGN01V3FKkxomJVaZMEShaDG3dehoJ4ZujvCWjXammkxMwju4dXNw2BpvPjC
nZCkmI4jh4pmVUqW05cKhhWKIO2NeALKBSevW2/taGFhCcGbKYs4kTAV0GkQm/zP
gISr9hzY7IEhO0K77TcCkQs7Q1b583v3OzzshAKl3w/UFcljj5ot15zD/MtK7oRo
Fv5GFK2SLu/MZpb3VhG0mBDMenakCqDzOAC1Xy4V6B8UO/PptDU0T2ePkOc6pRIZ
H6ADgkURlbXdPKTX+B7UqtnSKW0ZDmfuq5CzyUev/LMSFJAZcDyxuUrRUxSuZjoU
IYkyyDEoHAK/dZIjloDP
=3uY/
-----END PGP SIGNATURE-----