-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 01 Mar 2015 18:56:17 +0100 Source: sudo Binary: sudo sudo-ldap Architecture: source amd64 Version: 1.8.10p3-1+deb8u2 Distribution: testing-proposed-updates Urgency: medium Maintainer: Bdale Garbee <bdale@gag.com> Changed-By: Christian Kastner <debian@kvr.at> Description: sudo - Provide limited super user privileges to specific users sudo-ldap - Provide limited super user privileges to specific users Closes: 764817 772707 776137 Changes: sudo (1.8.10p3-1+deb8u2) testing-proposed-updates; urgency=medium . * Non-maintainer upload. . [ Salvatore Bonaccorso ] * Add CVE-2014-9680-1.patch patch. CVE-2014-9680: unsafe handling of TZ environment variable. (Closes: #772707) * Add CVE-2014-9680-2.patch patch. Documents that a leading ':' is skipped when checking TZ for a fully-qualified path name. . [ Christian Kastner ] * In the *.preinst scripts, make sure that dpkg --compare-versions actually has two versions to compare. Closes: #776137 * Also in the *.preinst scripts, make sure that /etc/sudoers exists before attempting to chown/chmod it * Include patch from Jakub Wilk to fix 'ignoring time stamp from the future' messages. Closes: #764817 Checksums-Sha1: adcd97e31a65dbdf30152ed9fedae3510ec9dba1 2004 sudo_1.8.10p3-1+deb8u2.dsc 59e3faff4d594b96cdb11533bd1c244fded92a24 27564 sudo_1.8.10p3-1+deb8u2.debian.tar.xz Checksums-Sha256: 254c324a8ac2e9283a1d6f6108014ee597bec9db47cb038a5eca4286fdccc5d0 2004 sudo_1.8.10p3-1+deb8u2.dsc 5d29e10cf2ad23c16022b78f0042ff616de9138390d56c7e35636c834d36595f 27564 sudo_1.8.10p3-1+deb8u2.debian.tar.xz Files: a5e647d8e91c83fb1a76bed25ca98b94 2004 admin optional sudo_1.8.10p3-1+deb8u2.dsc 774e3b150fa761346938c59ab8399715 27564 admin optional sudo_1.8.10p3-1+deb8u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJVAJ9DAAoJEAVMuPMTQ89E1ygP/i0ywqllou6r824/ibz86jNQ 99XAnVU4n8YlpJKq5eqSK6SLCNl3MzDrVkRzydhvY9kKLPRPmyER3TnXlSIhV9ed oTu1HgJpdba+GaCMTk4ObW/XM7oH808VTHfzOyPJPbgnIdJwYM5ALckHdJCPdUzm 6655HMdnSXDFrPPOTGaom22E2Y1Z4QBzg8U6S30IUA5pOPsMhNfsmmIBbx0xfEEh hrTieOeqixiiiuLT6f4QBWLRTwD156wxD7xrtWJVBjztZI1Dla2t+D7ySIqoBzrk E2FSRdde8zd5YaW8rQsomguzrgJmfu/qATG/B7uQxuyYs58FXLMopeWvphFCYOQ/ AcADKbsUEJtp3QtBa0+SJB3+L5nGcveFgjRiczxspfWjU7kfZOC0WUTwu2wmuPOg Uq5n9+FzSq0+yWD49Q7Mt43lnchjMcrF5XJIZySl4uEqvGcnUVFNDYMMn/J7mUAY +cpsJRnXf0sJ7wl0emZ7NKM5xx3zxobVC0mAvHLTr4rDhq82E7KidH41cIWR/tb2 EU39rjmKiZefZcM+TJciKcbFPVNfnJTPycZZ3oD3KFKtNZMKhSfb6Tov9fK16aZ1 tc4hoPDlqMn1RSkHk36laYd9twopWgyYv2KmpyQNgVkakXiRsiDDZNnuIYpHMNt+ 1s/MFXl06gIJR6e1zJ95 =/6L9 -----END PGP SIGNATURE-----