-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Thu, 19 Jul 2001 22:57:13 +0200 Source: masqmail Binary: masqmail Architecture: source i386 Version: 0.1.15-1 Distribution: unstable Urgency: low Maintainer: Gregor Hoffleit <flight@debian.org> Changed-By: Gregor Hoffleit <flight@debian.org> Description: masqmail - A mailer for hosts without permanent internet connection Closes: 101273 101457 102092 Changes: masqmail (0.1.15-1) unstable; urgency=low . * New upstream version: this is a security fix release. When an alias expansion expands to a pipe, only the effective uid was changed to mail, but not the real uid. This way, a command could gain root privileges. This is no longer possible, masqmail drops prvileges completely before executing the pipe command (closes: #102092). * src/conf.c: Correct a typo (bugfix from upstream). Maybe this fixes the spurious segfault on m68k (#100594). * Add a dependency on netbase (closes: #101273). * Don't install the example configuration file for masqmail.conf in /etc/masqmail/, it's available in /usr/share/doc/masqmail/examples (closes: #101457). Files: 02341f3bb89d78567ad7c2fa5c6305d6 654 mail extra masqmail_0.1.15-1.dsc a8600bf74d506d6760faf454ca2f42ba 174978 mail extra masqmail_0.1.15.orig.tar.gz 63f81a0f4eebaa1e50762edcd020434d 8117 mail extra masqmail_0.1.15-1.diff.gz 0a08c1c3ac07dff4c5a98051176774a2 87896 mail extra masqmail_0.1.15-1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: Weitere Infos: siehe http://www.gnupg.org iD8DBQE7V06y3eVfDf25G40RAgpdAJ0b5SElrGpWPx/R9CKYMTiuLZPUFgCfRugF cygdaxaYDZtB6V7T2Jx7WRU= =sxkK -----END PGP SIGNATURE----- Installed: masqmail_0.1.15.orig.tar.gz to pool/main/m/masqmail/masqmail_0.1.15.orig.tar.gz masqmail_0.1.15-1.diff.gz to pool/main/m/masqmail/masqmail_0.1.15-1.diff.gz masqmail_0.1.15-1_i386.deb to pool/main/m/masqmail/masqmail_0.1.15-1_i386.deb masqmail_0.1.15-1.dsc to pool/main/m/masqmail/masqmail_0.1.15-1.dsc