-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 05 Jan 2019 16:25:06 +0100 Source: tmpreaper Binary: tmpreaper Architecture: source amd64 Version: 1.6.13+nmu1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Paul Slootman <paul@debian.org> Changed-By: Paul Slootman <paul@debian.org> Description: tmpreaper - cleans up files in directories based on their age Changes: tmpreaper (1.6.13+nmu1+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * There was a race condition when tmpreaper was testing for a (bind) mount, which was done via rename() which could potentially lead to a file being placed elsewhere on the filesystem hierarchy (e.g. /etc/cron.d/) if the directory being cleaned up was on the same physical filesystem. This has been fixed by using an alternative way of looking for bind mounts using code from mountpoint (from the util-linux package). Checksums-Sha1: 722a234ef328d600359a11f78f6f34f7e3837687 1485 tmpreaper_1.6.13+nmu1+deb9u1.dsc 9e38f25d5b36d02552e21256eef44a004e17d450 159005 tmpreaper_1.6.13+nmu1+deb9u1.tar.gz 236f913daef134c2d9be6f5642e8d1a8462ccca8 12912 tmpreaper-dbgsym_1.6.13+nmu1+deb9u1_amd64.deb 469d98c4a3e9af6cc1e39754f8333f03739fa097 6131 tmpreaper_1.6.13+nmu1+deb9u1_amd64.buildinfo 9533654d47b3ec04d53d320c9042e73e0b5d69bb 47344 tmpreaper_1.6.13+nmu1+deb9u1_amd64.deb Checksums-Sha256: 257f9b7ff5e02d06a7bce640cd9debfae726bc0c6ee8dff421d1120161b361a5 1485 tmpreaper_1.6.13+nmu1+deb9u1.dsc ca90ff1f666186c3fad9435370d8792d77f4a9b23fa39019004ed5051cefde76 159005 tmpreaper_1.6.13+nmu1+deb9u1.tar.gz dfb9c66e66d96caffc17f465c9735ce1af3eff16f3279a11bef8cbe5e21e4650 12912 tmpreaper-dbgsym_1.6.13+nmu1+deb9u1_amd64.deb 76dca6f746f64c3df8530dd01dd4978ffeb35a2c91d55ad06ed61aa27483b6aa 6131 tmpreaper_1.6.13+nmu1+deb9u1_amd64.buildinfo eaca891149e28c19f953c9c30f8dd8f9ff4861fc2e1fcafc7ba570a208d11cdc 47344 tmpreaper_1.6.13+nmu1+deb9u1_amd64.deb Files: e18a8893e3dcdd7f9c7a4095d09273e2 1485 admin optional tmpreaper_1.6.13+nmu1+deb9u1.dsc e57bff4cb04e873a6a2a623176ab4625 159005 admin optional tmpreaper_1.6.13+nmu1+deb9u1.tar.gz 62bce3257a7f58aff2698a99481d088d 12912 debug optional tmpreaper-dbgsym_1.6.13+nmu1+deb9u1_amd64.deb d7b80d689db79f886a7af93280b3b992 6131 admin optional tmpreaper_1.6.13+nmu1+deb9u1_amd64.buildinfo 192ce87d09b6380204414f25a6b71de5 47344 admin optional tmpreaper_1.6.13+nmu1+deb9u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEyfNP08AZcbxb9VhpMveNzq0RO4sFAlwwzHUACgkQMveNzq0R O4vahg//Zyh95T3o9+WD+Sbz5Qw+htuaUZiSVPgqUmUdA9MsC4MU4zpxI7iEPF1T 9sGE8WcVJC6gPzD+gWXQ0sOSoZxQh/xpI9ldzf7PREPERqLqXRkK6CdC8gwt8niD tKJOpJHQRM3BLQgpaXM9bazrKw4kPDTs+KeXOAifR+AK5ijvNoadWP5n/xMLyVCy eiG018PMsmo4ACpKtYiypB90Nwklq7TjX862aT6JuLkRnzSg9AETJbS5E9mKd32h zh+HPAUVvDbXQ7TJJnPiUVMf251GJQsbUmKi1dShVKxtKMvglpTD5zFBsHe2d5RD 8ggwGkaRcZQ8fS4M7Qc8M9BiAhHj9Sx9A2kKGauSbBZoh7NZnKIuSarxwJs22RJQ Hx4dFsIs0HPZ1zRM2ZsCfN3ifkS07LvcawXPz8AfleT97X8F1B1hZN4bEI9nmzzN 1ain5kLOlJu0piICmfHRbXah/Js7yeH5D/FBWpYmkrMNLzOTbjFqQ7ghpN7CDCWr V8171zIxH5KXXr3P5GHLgE88ZOUjXHKMRI/6Iz37755PO6E0KXZGABa0g24PyHqz CZkW5UDLwy2NjhDP2rXAd5drXIPY1Nb3geYAwD0XrNKlcy65WhkDoLEHWNnpW2FN jPRCgUiBzvKWvj+y6B3qrWPPhRYgT3aiPuASYGnrYGnuhU//iL8= =yDjY -----END PGP SIGNATURE-----