-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 15 Jan 2022 17:00:59 +0100 Source: usbview Architecture: source Version: 2.0-21-g6fe2f4f-2+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: Mark Brown <broonie@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Changes: usbview (2.0-21-g6fe2f4f-2+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix authorization for inactive or arbitrary other users (CVE-2022-23220) * Pass on the command line parameters to GTK only if not invoked via pkexec Checksums-Sha1: b3694e33a74a78e789f1dba9206c407b86e37b7a 2051 usbview_2.0-21-g6fe2f4f-2+deb11u1.dsc b7778bfe1221303b3743bbdfc279a1242b054e6c 288596 usbview_2.0-21-g6fe2f4f.orig.tar.gz c2afd1bcee1f0b4da71b28612d945dd00b05f015 5416 usbview_2.0-21-g6fe2f4f-2+deb11u1.debian.tar.xz Checksums-Sha256: d2a677fc11af2ba9c29d015756a9c6b265cb04af59ab2f6347438a22c41bb487 2051 usbview_2.0-21-g6fe2f4f-2+deb11u1.dsc 4c2553794e70fa19ac00aa8ee345af38a92608c7f7afb26bf55fa5e3dedf9c3c 288596 usbview_2.0-21-g6fe2f4f.orig.tar.gz 388a0b42e23a4402c352af4cdffc6ef72d599937f0b1dc126d5fae6ffc69b58f 5416 usbview_2.0-21-g6fe2f4f-2+deb11u1.debian.tar.xz Files: 8d328ac0bd969dfaf06d8d586a6e711a 2051 x11 optional usbview_2.0-21-g6fe2f4f-2+deb11u1.dsc 5c222ac5a36c5c494af6989478167445 288596 x11 optional usbview_2.0-21-g6fe2f4f.orig.tar.gz 37ad86329601aa3784fbc1c51d70a882 5416 x11 optional usbview_2.0-21-g6fe2f4f-2+deb11u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmHlzTJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EImwP/ikYHt+BQYbFz5ukvNKsFdaYlAYZI/gV nfTooihGuuZfrslhkR4H4e5MebUQ7a+YdJ5yVtywp7zbhMEPM/oV6kIfbbsRoFPB 6uqN7Mgmpo7wD1wjgLamaNy/OzE5kvUpnITV9OPRnOdBINvRaIzh7dq12xSXY+lh SO4LvGwHswLew4p3l8GPZkpNHAjYNRWIwSUtYY75M39KnmXkc8N5Tj7I4Bz2uEQl WKvFn6aMJeg3EKEimxgNW+fBRk/96BQVKLcyoVlQ5V/EkMANg3hHMjriEarIpGhR WMAHWe0vOAG7/8sl6CsEWY+WNHrmiJidwfrWruv3O28xpdfSlv8QipIuL3LHKVV4 FXfWqOpPgihmkdV1dgzFPCebqLVa2BkWBjyJKweYA4G728nfkS0w8GIecpZGrUg+ K0l5aiCd80Td+DYdrW43/nMC8Fde9WD/qG5j2xhhcRS3danHFfRqdkPfcnZH5Gcf rKbyhuF0cxu7BfgPlCctwGzUsRI3IRuqwHlntvqYJgYRYU3Yl1yYhCfH2+BawjSf 1kZ/l9fDBCMmYX0PXTwxKNnn3VlDcRj9LZkZCfophaWKEubYhx5IJB+vC/0ldtJs Ju5S83dgwXzSzhMorkEW2x/L6TNm4AkWnKhMpWcVeqhXHnAz2C76irfKhROqS6Ur SWCk0KLewzhE =cPiP -----END PGP SIGNATURE-----