-
accountsservice (0.6.55-0ubuntu13.2) groovy-security; urgency=medium
* SECURITY UPDATE: accountsservice drop privileges SIGSTOP DoS
(LP: #1900255)
- debian/patches/0010-set-language.patch: updated to not drop real uid
and real gid in user_drop_privileges_to_user.
- debian/patches/0009-language-tools.patch: updated to not reset
effective uid.
- CVE-2020-16126
* SECURITY UPDATE: accountsservice .pam_environment infinite loop
(LP: #1900255)
- debian/patches/0010-set-language.patch: updated to use O_NOFOLLOW
and limit the number of lines read from file.
- CVE-2020-16127
-- Marc Deslauriers <email address hidden> Mon, 02 Nov 2020 12:02:46 -0500
-
accountsservice (0.6.55-0ubuntu13) groovy; urgency=medium
* debian/patches/0010-set-language.patch:
- Don't dismiss C.UTF-8 as an invalid locale name (LP: #1873678)
-- Gunnar Hjalmarsson <email address hidden> Fri, 09 Oct 2020 15:08:15 +0200
-
accountsservice (0.6.55-0ubuntu12) groovy; urgency=medium
* Cherry-pick from unstable.
* Add patch to not crash in the library when the daemon goes away
(Closes: #948228) (LP: #1843982)
-- Iain Lane <email address hidden> Tue, 05 May 2020 17:00:20 +0100
-
accountsservice (0.6.55-0ubuntu11) focal; urgency=medium
* debian/control:
- Dropped gnome-doc-utils from Build-Depends (removed from archive)
-- Gunnar Hjalmarsson <email address hidden> Mon, 30 Mar 2020 21:22:00 +0200
