Accepted loop-aes-utils 2.12r-15+etch1 (source i386)

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Sat, 22 Dec 2007 13:57:06 +0000
Source: loop-aes-utils
Binary: loop-aes-utils mount-aes-udeb
Architecture: source i386
Version: 2.12r-15+etch1
Distribution: stable-security
Urgency: high
Maintainer: Debian Loop-AES Team <pkg-loop-aes-maint@lists.alioth.debian.org> Changed-By: Steffen Joeris <white@debian.org> Description:
 loop-aes-utils - Tools for mounting and manipulating filesystems  mount-aes-udeb - Mount utils for loop-AES (udeb) Changes:
 loop-aes-utils (2.12r-15+etch1) stable-security; urgency=high  .

• Non-maintainer upload by the security team
• Fix privilege escalation by calling setuid() and setgid() in the wrong order and not checking the return values in mount and umount Fixes: CVE-2007-5191 Files: 9e405af43b332e2b023ce6aa61d2649a 735 admin optional loop-aes-utils_2.12r-15+etch1.dsc c261230b27fc0fbcc287c76884caf2d3 1992725 admin optional loop-aes-utils_2.12r.orig.tar.gz 90793118f962ba30a5fb4be50181477e 101918 admin optional loop-aes-utils_2.12r-15+etch1.diff.gz 499837a486184a21f6afcca8726c0273 160020 admin optional loop-aes-utils_2.12r-15+etch1_i386.deb f38103e726463b9b0c98c01203fd602a 95076 debian-installer extra mount-aes-udeb_2.12r-15+etch1_i386.udeb Package-Type: udeb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHbRxx62zWxYk/rQcRAqLgAKDJzGq1pZRg3jyFLYmr4wX3Me7R5wCfWmah z8bv8bQuWOmPFIoYOGrNNy0=
=eQiN
-----END PGP SIGNATURE-----
Accepted:
loop-aes-utils_2.12r-15+etch1.diff.gz
  to pool/main/l/loop-aes-utils/loop-aes-utils_2.12r-15+etch1.diff.gz loop-aes-utils_2.12r-15+etch1.dsc
  to pool/main/l/loop-aes-utils/loop-aes-utils_2.12r-15+etch1.dsc loop-aes-utils_2.12r-15+etch1_i386.deb
  to pool/main/l/loop-aes-utils/loop-aes-utils_2.12r-15+etch1_i386.deb mount-aes-udeb_2.12r-15+etch1_i386.udeb
  to pool/main/l/loop-aes-utils/mount-aes-udeb_2.12r-15+etch1_i386.udeb

-- 
To UNSUBSCRIBE, email to debian-changes-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org