-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Tue, 08 Oct 2013 09:41:41 +0100 Source: rtkit Binary: rtkit Architecture: source amd64 Version: 0.10-2+wheezy1 Distribution: stable Urgency: high Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintainers@lists.alioth.debian.org> Changed-By: Alessio Treglia <alessio@debian.org> Description: rtkit - Realtime Policy and Watchdog Daemon Closes: 723714 Changes: rtkit (0.10-2+wheezy1) stable; urgency=high . * Fix CVE-2013-4326: - pass uid of caller to polkit, otherwise we force polkit to look up the uid itself in /proc, which is racy if they execve() a setuid binary (Closes: #723714) Checksums-Sha1: b282e8f712435e4e8f5f7d4afc606b4f37a74794 2027 rtkit_0.10-2+wheezy1.dsc 4a8d6194e5de5629323f156d4a96b93898980b22 4714 rtkit_0.10-2+wheezy1.debian.tar.gz 2ae45d7ae2cf04484cadfe50cba6f70938f775ad 36870 rtkit_0.10-2+wheezy1_amd64.deb Checksums-Sha256: ce5c81c99cac9353adf25bed85508709e93c08bbd3b17f40bf94d76a40356001 2027 rtkit_0.10-2+wheezy1.dsc ffafcb5a59362c75e20263d3e51e4f8ca5bdc7cf4b92a786897db36165125068 4714 rtkit_0.10-2+wheezy1.debian.tar.gz 42d6fb0e1581f683cbfe345dc836ed09c885747aa930266d4d34d943102a39e0 36870 rtkit_0.10-2+wheezy1_amd64.deb Files: 46e4c5275011b9b2376c45b879367f06 2027 admin optional rtkit_0.10-2+wheezy1.dsc 3554336627be63f870c41070a96554ad 4714 admin optional rtkit_0.10-2+wheezy1.debian.tar.gz 92716b66b795d5ccba758ba577abfca2 36870 admin optional rtkit_0.10-2+wheezy1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJSU8aoAAoJEOikiuUxHXZaLRsP/2thtLHgx1+/qT2UXXhSbwkN dX/D6qakq4RfQIMSuXQkjcvtAdc3pEM+kfZZHV7MXR5ceHVf0o9WjBMe3UiJdfgq 8UjIicFpOJKlhMhjyABrhIgiANeBNsh/JxCKRwtQjqOsJ8grsLK8wrfRSMOz7uhm XemtsitJgIydi6qtvP4LvyzYpLhAb/NkT+vJeGd5I3ozkqE7HpL+NkyRlBDNhXTt pGwACI8/OBq9lXqmZpPdhp9iQkilrJXVVodDQbt+1cGO9LAEu0u2Kb++M0zpDEuj BipgSC+rYIc8K7/pd13rZg3vkMMRfB1Z+I4H/OzMK98KZTySAi9rxELP0DJW5+en 1TV9kinIOK4EQV9j36BBQ/rATfBMBQagc8aNLg4uNh5trCUv/zUFCi7qwL0PaTEc YJNZ8CTb+vpsosE4uZcoNthogHQS5+YAi8w2GYcddAjDaT/U5DIC+bF1CJ2PbDVO xiq4fsnzRHbdS8+MctBRnWAu2zqoQUGPTCBMhQh8pMkFCY1EdwnAKBRfFGXaeb3+ Yp8iC8cgRcpzrzaT6EZbjYwc2FDvGvSpe79UZqFXFmhJylELXblU3ku7zFZBPHu2 WPFVeSa6NC31Mmgv7g+d3B5jaQFCqS3qy1kNy0wD9ilYSsc/Uc6TqaQ9uQzrjyVV 0qzDunFmci9JbETgtQZu =e3Cq -----END PGP SIGNATURE-----