-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 25 Jul 2022 15:43:43 +0200 Source: cron Architecture: source Version: 3.0pl1-149 Distribution: unstable Urgency: medium Maintainer: Javier Fernández-Sanguino Peña <jfs@debian.org> Changed-By: Georges Khaznadar <georgesk@debian.org> Closes: 585552 Changes: cron (3.0pl1-149) unstable; urgency=medium . * manage characters \r and \b in a special way, since one could use them to obfuscate a crontab. This patch closes: #585552. Now one can insert characters \r and \b into a crontab's shell command, `crontab -l` will show those characters in escaped format; so the obfuscation is more difficult to create. * introduced the debian patch d/patches/features/protect-list.patch and the test d/tests/check-listings-protection to create the feature and check that it works as expected Checksums-Sha1: d28b83ffb8b0a973d9a2bc35adfe2d5e8b9bf72c 2129 cron_3.0pl1-149.dsc 257d08fded97a9da85fbc8cc852ebc5e72cc1a5d 112112 cron_3.0pl1-149.debian.tar.xz 5e2076bec2d5af4bec4b84a51b0da8e55266f283 6029 cron_3.0pl1-149_source.buildinfo Checksums-Sha256: 1761559e70c138601ce1108e2d8918a398289bad53f4c71474dc29d981b4102b 2129 cron_3.0pl1-149.dsc 8c3967f34c6da1f1f2266368aefcef9b745414824164293e4a01a511647bd466 112112 cron_3.0pl1-149.debian.tar.xz 149c7c3d2bb0a9c868026df8ea866f5ba455db366ed5b129459d5700bc617ca2 6029 cron_3.0pl1-149_source.buildinfo Files: d4a8d410501d56635c5251268b93d2c8 2129 admin important cron_3.0pl1-149.dsc 526dd2bb22275e1b5468ea6d32e1fc60 112112 admin important cron_3.0pl1-149.debian.tar.xz 8efd02db343bae17e074ea3e6623eb8e 6029 admin important cron_3.0pl1-149_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJIBAEBCAAyFiEEM0CzZP9nFT+3zK6FHCgWkHE2rjkFAmLezW0UHGdlb3JnZXNr QGRlYmlhbi5vcmcACgkQHCgWkHE2rjkyuQ/+PMN+TecriI7FQ6EigJCXhO0FcvHh LJRvTpcSGbbPuhIFjK/z2gy/JQ/rBlTkaqnRbUrewRqf3+jONagN4HfmD+GxoGlW 9tuZiHRHISMQPh1da9/vtv52SXa1QsJB4EHbOTtICZXTYUlvljzYNDYSkLroDtvH gEYjPxWC3252LAEKCHu6uRHUS/JIZJUJmD+G+T14/uHUF6ZWmLJBOc366s6Tm6fe DkgNhRotEWRnvPug+NS1+4bLeGl7CaCijKwcdjYESLbZDUCDqkaP1NoIoB0Ld6nw YKtmY8/scQISjY9evJ0RgFLdNjGx1qQBzoJM7e+xUglCm6dMx8jPLXhTiKzh/uWr QTw9b/+HCIMGwkOfYL8eEBXzT8QZ5tFwh0q9HwrsM9rPiqFbmViQvPvgDCua/7Rx xHwJoiZOMXok/NGhh+5o5my/hnI3uuk7TqteMeLhGRH6WzloUfCnif0wYXGjb4iY QarDTqlFcRxcxcBf+RyvCjvpMcBBHlLxLuSOiBk02v2UaYjo2eYm/6afZCiFcxO1 4FqrM36bNE3fDew4b2XCPHDbdsfQxyFkSjw9q0gtS0lQgl9DBvlOVrmrX3D23/Nv 1RzmpdhuuomNlpt9GYqtOSx8bcz1RjZF7lmcvOgryCIfJVPu6ofjOz8zZ/dUlYtr 1K15bqeBeVIgRfg= =Mq/q -----END PGP SIGNATURE-----
