Accepted loop-aes-utils 2.12r-15+etch1 (source i386)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sat, 22 Dec 2007 13:57:06 +0000
Source: loop-aes-utils
Binary: loop-aes-utils mount-aes-udeb
Architecture: source i386
Version: 2.12r-15+etch1
Distribution: stable-security
Urgency: high
Maintainer: Debian Loop-AES Team <pkg-loop-aes-maint@lists.alioth.debian.org>
Changed-By: Steffen Joeris <white@debian.org>
Description:
loop-aes-utils - Tools for mounting and manipulating filesystems
mount-aes-udeb - Mount utils for loop-AES (udeb)
Changes:
loop-aes-utils (2.12r-15+etch1) stable-security; urgency=high
.
* Non-maintainer upload by the security team
* Fix privilege escalation by calling setuid() and setgid() in the
wrong order and not checking the return values in mount and umount
Fixes: CVE-2007-5191
Files:
9e405af43b332e2b023ce6aa61d2649a 735 admin optional loop-aes-utils_2.12r-15+etch1.dsc
c261230b27fc0fbcc287c76884caf2d3 1992725 admin optional loop-aes-utils_2.12r.orig.tar.gz
90793118f962ba30a5fb4be50181477e 101918 admin optional loop-aes-utils_2.12r-15+etch1.diff.gz
499837a486184a21f6afcca8726c0273 160020 admin optional loop-aes-utils_2.12r-15+etch1_i386.deb
f38103e726463b9b0c98c01203fd602a 95076 debian-installer extra mount-aes-udeb_2.12r-15+etch1_i386.udeb
Package-Type: udeb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFHbRxx62zWxYk/rQcRAqLgAKDJzGq1pZRg3jyFLYmr4wX3Me7R5wCfWmah
z8bv8bQuWOmPFIoYOGrNNy0=
=eQiN
-----END PGP SIGNATURE-----
Accepted:
loop-aes-utils_2.12r-15+etch1.diff.gz
to pool/main/l/loop-aes-utils/loop-aes-utils_2.12r-15+etch1.diff.gz
loop-aes-utils_2.12r-15+etch1.dsc
to pool/main/l/loop-aes-utils/loop-aes-utils_2.12r-15+etch1.dsc
loop-aes-utils_2.12r-15+etch1_i386.deb
to pool/main/l/loop-aes-utils/loop-aes-utils_2.12r-15+etch1_i386.deb
mount-aes-udeb_2.12r-15+etch1_i386.udeb
to pool/main/l/loop-aes-utils/mount-aes-udeb_2.12r-15+etch1_i386.udeb