dpkg (1.15.5.6ubuntu4.7) lucid-security; urgency=medium
* SECURITY UPDATE: directory traversal in dpkg-source
- scripts/Dpkg/Source/Patch.pm: correctly parse C-style diff
filenames.
- Patch thanks to Guillem Jover <[email protected]>
- CVE-2014-0471
dpkg (1.15.5.6ubuntu4.6) lucid-proposed; urgency=low
* Cherry-pick fixes for sync() behaviour in dpkg (LP: #624877):
- Disable by default usage of synchronous sync(2), as it causes undesired
I/O on unrelated file systems. Closes: #588339, #595927, #600075
- On Linux use sync_file_range() to initiate asynchronous writeback
of just unpacked files. Suggested by Ted Ts'o <[email protected]>.
Thanks to Jonathan Nieder <[email protected]>. Closes: #605009
Date: 2014-04-24 17:31:16.429897+00:00
Changed-By: Marc Deslauriers <[email protected]>
https://launchpad.net/ubuntu/lucid/+source/dpkg/1.15.5.6ubuntu4.7
Sorry, changesfile not available.
--
Lucid-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/lucid-changes
