Accepted systemd 232-25+deb9u11 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 08 Apr 2019 12:51:41 +0200
Source: systemd
Architecture: source
Version: 232-25+deb9u11
Distribution: stretch-security
Urgency: high
Maintainer: Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org>
Changed-By: Michael Biebl <biebl@debian.org>
Changes:
systemd (232-25+deb9u11) stretch-security; urgency=high
.
* pam-systemd: use secure_getenv() rather than getenv()
Fixes a vulnerability in the systemd PAM module which insecurely uses
the environment and lacks seat verification permitting spoofing an
active session to PolicyKit. (CVE-2019-3842)
Checksums-Sha1:
a684315f6639f4f3c251c29e1441954b4b585a7d 4801 systemd_232-25+deb9u11.dsc
2cfa28817afcbb2483c395ab0a885b167132a452 221496 systemd_232-25+deb9u11.debian.tar.xz
0b2bf946d003c4b3fd776dcabe3d2451a14adb7c 9367 systemd_232-25+deb9u11_source.buildinfo
Checksums-Sha256:
afc41f50bc973f3d483aee66c9e6d9c66a0974bd77ed5daf164e3c8d57e03222 4801 systemd_232-25+deb9u11.dsc
0e3f326944a8f4c348a648c783d145fd616c9e42186c4efb7a20f737040a97bb 221496 systemd_232-25+deb9u11.debian.tar.xz
8098eead6adc9f2d5f566660a9ac17781366ca615da7909522e4ee03a244a6dc 9367 systemd_232-25+deb9u11_source.buildinfo
Files:
1ceeb735ab8393fc4dd78d36b551f5a9 4801 admin optional systemd_232-25+deb9u11.dsc
66661d72de103f695014800a39b00585 221496 admin optional systemd_232-25+deb9u11.debian.tar.xz
cd66530b080f1be88704f801bc7bb72a 9367 admin optional systemd_232-25+deb9u11_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEECbOsLssWnJBDRcxUauHfDWCPItwFAlyrKEgACgkQauHfDWCP
ItwWyw/+OxyBPGWtmEkeS2Np9nuXaLpi+pSoJhAS21TVpS1ui26F5Qp6OFZ4EcGA
I/W7r+kax7TfKk4dbe1BGRNKsE2BlmhmG2Rciie/Q8V4hgQqAu32sv6jCrT3bDAW
qudhskIDA8WhPJWcH2Y+Tn/sapLEtCRRXGqnabHkdES9WxUCy1OMTv8QbjBNkCed
NuH+RoxoadnRVSoAWv9NikGiC+LWOoV7TgR990xxSfsHIV3Oo1n2FaPbFrULFegF
bp7itJGfld2nNmNDmc0ByXi4tm7IHgMiPKBC1xWt2xwyusRBBXeTOzYnfKeShak3
eVsG/R+4XnvAochnB+YCMLwiSh/XdBZXiM+fGnmacq/yaJfbHvqlHiJipKvaFCWP
yDDyB41pmeGCm1lVsCUTiduNont06Heu5ZTiISbt/cHm3vq7tkB8SY/6m4Tyh/9o
BCwHEwVti0xl2xdfL48nVIp1jxkGRV/8MVdkFq2JAuqJ30ZR5aXBFLhahAe4EFHL
+Cyw0iKilXR3K+IbO2BF8fXMX3dPNWW19WpZ+y3VWPyBaabXmkWVnmmvPVCT/3Ka
OhuSy53Njegk4n9bH7C64TYFonjXatSRcnpOy+hwN7Ck2OQSLNpWKpjp6e2S8HHq
Oi1YjDgIxbwIDzeOClJSLKFQccfeLXcQtVgExH2mEKi7tM8u2hU=
=z50a
-----END PGP SIGNATURE-----