- Committer: Bazaar Package Importer
- Date: 2011-04-19 20:20:44 UTC
- Revision ID: james.westby@ubuntu.com-20110419202044-w41lr8rhc7c6d6ul
* dbus_backend/ls-dbus-backend: Actually look at the PolicyKit check result
and only proceed if it succeeded. Thanks to Romain Perier for finding this
and providing the patch! This fixes a local root privilege escalation, as
this allows any authenticated user to write arbitrary shell commands into
/etc/default/locale. (LP: #764397) [CVE-2011-0729]
* dbus_backend/ls-dbus-backend: Reject locale names with invalid characters
in it, to further prevent injecting shell code into /etc/default/locale
for authenticated users. Thanks to Felix Geyer for the initial patch!
(LP: #764397)
* dbus_backend/com.ubuntu.LanguageSelector.conf: Allow access to standard
D-BUS introspection and properties interfaces. There's no reason to deny
it, and it causes warnings.
* debian/language-selector-common.postinst: Stop running D-BUS backend on
upgrade.
and only proceed if it succeeded. Thanks to Romain Perier for finding this
and providing the patch! This fixes a local root privilege escalation, as
this allows any authenticated user to write arbitrary shell commands into
/etc/default/locale. (LP: #764397) [CVE-2011-0729]
* dbus_backend/ls-dbus-backend: Reject locale names with invalid characters
in it, to further prevent injecting shell code into /etc/default/locale
for authenticated users. Thanks to Felix Geyer for the initial patch!
(LP: #764397)
* dbus_backend/com.ubuntu.LanguageSelector.conf: Allow access to standard
D-BUS introspection and properties interfaces. There's no reason to deny
it, and it causes warnings.
* debian/language-selector-common.postinst: Stop running D-BUS backend on
upgrade.
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 ..
|
|||||||
__init__.py |
87 | 14 years ago | Bazaar Package Importer | [ Michael Vogt ] * add dbus backend, no need for g | Empty |
|
|
|
com.ubuntu.LanguageSelector.conf |
119 | 13 years ago | Bazaar Package Importer | * dbus_backend/ls-dbus-backend: Actually look at t | 733 bytes |
|
|
|
com.ubuntu.languageselector.policy.in |
100 | 13 years ago | Bazaar Package Importer | * LanguageSelector/qt/QtLanguageSelector.py: - K | 866 bytes |
|
|
|
com.ubuntu.LanguageSelector.service |
87 | 14 years ago | Bazaar Package Importer | [ Michael Vogt ] * add dbus backend, no need for g | 107 bytes |
|
|
ls-dbus-backend |
119 | 13 years ago | Bazaar Package Importer | * dbus_backend/ls-dbus-backend: Actually look at t | 6.1 KB |
|
|
lsd.py
|
87 | 14 years ago | Bazaar Package Importer | [ Michael Vogt ] * add dbus backend, no need for g | . |
|
|
|
Makefile |
87 | 14 years ago | Bazaar Package Importer | [ Michael Vogt ] * add dbus backend, no need for g | 106 bytes |
|
|