-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sun, 27 Oct 2002 14:44:48 +0200 Source: cvsd Binary: cvsd Architecture: source i386 Version: 0.9.14 Distribution: unstable Urgency: low Maintainer: Arthur de Jong <arthur@tiefighter.et.tudelft.nl> Changed-By: Arthur de Jong <arthur@tiefighter.et.tudelft.nl> Description: cvsd - Chroot wrapper to run `cvs pserver' more securely Changes: cvsd (0.9.14) unstable; urgency=low . * upgraded standards-version to 3.5.7 * back is now possible using debconf configuration (if frontend supports it) * drop all supplemenal group priviliges * close all unnecessary file descriptors before running cvs (These two fixes are security related but pose a risc only if the cvs pserver itself is exploited, thanks to env_audit for finding these.) * cvsd-passwd now gets default user mapping from cvsd.conf Files: 5b809ea83475078ce28fb0e423e11e67 499 net optional cvsd_0.9.14.dsc 653466179e3feafbbb98031a8fefc0e5 133150 net optional cvsd_0.9.14.tar.gz 63879c32d7f1be59657b4fa2297e3b3d 49252 net optional cvsd_0.9.14_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE9vDknES7N8sSjgj4RAj8zAKCES6VF5orM5Aw3tcSntSJroR7coACePemE PVQ/KZ5yBVh+qQTainM0XnM= =UvQ8 -----END PGP SIGNATURE----- Accepted: cvsd_0.9.14.dsc to pool/main/c/cvsd/cvsd_0.9.14.dsc cvsd_0.9.14.tar.gz to pool/main/c/cvsd/cvsd_0.9.14.tar.gz cvsd_0.9.14_i386.deb to pool/main/c/cvsd/cvsd_0.9.14_i386.deb -- To UNSUBSCRIBE, email to debian-devel-changes-request@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org