~ubuntu-branches/ubuntu/natty/acpid/natty-security : changes

~ubuntu-branches/ubuntu/natty/acpid/natty-security » Changes from revision 38

From Revision 38 to 19

Rev	Summary	Authors	Tags	Date
38	* SECURITY UPDATE: Arbitrary code execution in the power but... * SECURITY UPDATE: Arbitrary code execution in the power button handling script (LP: #893821) - debian/powerbtn.sh: Ensure that the DBUS_SESSION_BUS_ADDRESS environment variable is only read from a process owned by the user that will be evaluating the variable. - CVE-2011-2777 * SECURITY UPDATE: Unprivileged users may be able to write to directories and read files created by event handler scripts - event.c: Set a restrictive umask of 0077 before running an event handler script. Based on upstream patch. - CVE-2011-4578	Tyler Hicks	1:2.0.7-1ubuntu2.4	12 years ago
37	* SECURITY UPDATE: denial of service via blocking socket * SECURITY UPDATE: denial of service via blocking socket - sock.c: adjust the socket fd to use O_NONBLOCK - Patch from upstream - CVE-2011-1159	Jamie Strandboge	1:2.0.7-1ubuntu2.1	12 years ago
36	Fix build error with GCC-4.5, build with -Wno-error=sign-com... Fix build error with GCC-4.5, build with -Wno-error=sign-compare.	Matthias Klose	1:2.0.7-1ubuntu2	13 years ago
35	* Merge from debian unstable (LP: #507778), remaining change... * Merge from debian unstable (LP: #507778), remaining changes: - Replace init script with Upstart job + This does not load modules, unlike the init script, since these are all loaded by ACPI:* modaliases now (and thus by udev) - debian/control: Bump build-dependency on debhelper for Upstart-aware dh_installinit - debian/preinst, debian/acpid.install, debian/control, debian/rules: continue installing /etc/acpi/events/powerbtn and /etc/acpi/powerbtn.sh, deferring the migration to acpi-support-base; and drop the Recommends: on acpi-support-base for the same reason. - Source /usr/share/acpi-support/power-funcs in powerbtn.sh (LP: #508073) - debian/powerbtn.sh: ensure that /usr/share/acpi-support/power-funcs exists before sourcing it; note that acpid does not depend on acpi-support (which is fine, as it brings in lots of X dependencies not appropriate for servers); this fix will allow Ubuntu servers (especially those in VMs) to run acpid and catch and handle power button events again; LP: #570450 * Dropped changes: - New patch, missing-includes, to fix missing includes of sys/types.h and sys/stat.h for umask() and stat() in acpid.c; fixes FTBFS: no longer needed - Update patch missing-includes to also fix the same missing includes in sock.c; this is all fixed in 2.0.x versions of acpid: no longer needed	Lorenzo De Liso	1:2.0.7-1ubuntu1	13 years ago
34	Update patch missing-includes to also fix the same missing i... Update patch missing-includes to also fix the same missing includes in sock.c; this is all fixed in 2.0.x versions of acpid.	Loïc Minier	1.0.10-5ubuntu4	13 years ago
33	New patch, missing-includes, to fix missing includes of sys/... New patch, missing-includes, to fix missing includes of sys/types.h and sys/stat.h for umask() and stat() in acpid.c; fixes FTBFS.	Loïc Minier	1.0.10-5ubuntu3	13 years ago
32	debian/powerbtn.sh: ensure that /usr/share/acpi-support/powe... debian/powerbtn.sh: ensure that /usr/share/acpi-support/power-funcs exists before sourcing it; note that acpid does not depend on acpi-support (which is fine, as it brings in lots of X dependencies not appropriate for servers); this fix will allow Ubuntu servers (especially those in VMs) to run acpid and catch and handle power button events again; LP: #570450	Dustin Kirkland	1.0.10-5ubuntu2.1	14 years ago
31	Source /usr/share/acpi-support/power-funcs in powerbtn.sh (L... Source /usr/share/acpi-support/power-funcs in powerbtn.sh (LP: #508073)	Jonathan Thomas	1.0.10-5ubuntu2	14 years ago
30	fix the upload target fix the upload target	Steve Langasek	1.0.10-5ubuntu1	14 years ago
29	releasing version 1.0.10-5ubuntu1 releasing version 1.0.10-5ubuntu1	Steve Langasek		14 years ago
28	merge 1.0.10-5 merge 1.0.10-5	Steve Langasek		14 years ago
27	* Merge from Debian testing. Remaining changes: * Merge from Debian testing. Remaining changes: - Replace init script with Upstart job. - This does not load modules, unlike the init script, since these are all loaded by ACPI:* modaliases now (and thus by udev) - debian/control: - Bump build-dependency on debhelper for Upstart-aware dh_installinit * Dropped changes, integrated upstream: - build with -D_GNU_SOURCE to make "struct ucred" available - acpid., event.c, ud_socket.: limit the number of non-root clients, correctly close dead connections. - Remove the logrotate file on upgrade - Bump Standards-Version to 3.8.0 - debian/powerbtn.sh: - Update for KDE 4 - Add dalston-power-applet to list of handlers for power button events - add xfce4-power-manager to the list of handlers as well. * Dropped changes, superseded by upstart conversion: - debian/acpid.init.d: add the 'status' action - Replace "multiuser" deprecated init mode in debian/rules with manual arguments. Adapt the corresponding change in LSB init script header and runtime dependency in debian/control - depend on sysv-rc * debian/preinst, debian/acpid.install, debian/control, debian/rules: continue installing /etc/acpi/events/powerbtn and /etc/acpi/powerbtn.sh, deferring the migration to acpi-support-base; and drop the Recommends: on acpi-support-base for the same reason.	Steve Langasek	1.0.10-4ubuntu1	14 years ago
26	Updated netlink patch to version 6. Updated netlink patch to version 6.	Michael Meskes	1.0.10-4	14 years ago
25	debian/powerbtn.sh: add xfce4-power-manager to the list of h... debian/powerbtn.sh: add xfce4-power-manager to the list of handlers as well. LP: #425155	Lionel Le Folgoc	1.0.6-9ubuntu8	14 years ago
24	* debian/powerbtn.sh: * debian/powerbtn.sh: - Add dalston-power-applet to list of handlers for power button events (part of fix for LP: #432578).	Gary Lasker	1.0.6-9ubuntu7	14 years ago
23	FFE LP: #427356. FFE LP: #427356. * Replace init script with Upstart job. - This does not load modules, unlike the init script, since these are all loaded by ACPI:* modaliases now (and thus by udev) * debian/control: - Bump build-dependency on debhelper for Upstart-aware dh_installinit	Scott James Remnant	1.0.6-9ubuntu6	14 years ago
22	Upload jaunty changes to karmic Upload jaunty changes to karmic	Jonathan Riddell	1.0.6-9ubuntu5	15 years ago
21	* Remove the logrotate file on upgrade, as the previous one ... * Remove the logrotate file on upgrade, as the previous one that was installed did a "kill -USR1" on the acpid process to cause it to reload its logfiles. As the new acpid doesn't use a log file it doesn't catch this signal, which means that once a week acpid is killed. As it doesn't have a logfile the logrotate file is not needed, and so is no longer installed, but as it was a conffile it is not removed on upgrades. Thanks to Loic Minier for his help with the fix. (LP: #263888) - ad81211857dabeb88538e0f90c922b7c787b34c5 in Debian's pkg-acpi git repo.	James Westby	1.0.6-9ubuntu4	15 years ago
20	Replace "multiuser" deprecated init mode in debian/rules wit... Replace "multiuser" deprecated init mode in debian/rules with manual arguments. Adapt the corresponding change in LSB init script header and runtime dependency in debian/control (LP: #254249)	Didier Roche	1.0.6-9ubuntu3	15 years ago
19	* debian/control * debian/control - Depend on lsb-base >= 3.2-14, providing status_of_proc() - Bump Standards-Version to 3.8.0 * debian/acpid.init.d - Add the 'status' action (LP: #251681)	Nathan Handler	1.0.6-9ubuntu2	15 years ago

Older »