lp://qastaging/ubuntu/maverick-updates/acpid

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #893821: Shell expansion may allow privilege boundary crossing

Undecided

New

Link a bug report

Related blueprints

36. By Tyler Hicks on 2011-12-07

* SECURITY UPDATE: Arbitrary code execution in the power button handling
  script (LP: #893821)
  - debian/powerbtn.sh: Ensure that the DBUS_SESSION_BUS_ADDRESS environment
    variable is only read from a process owned by the user that will be
    evaluating the variable.
  - CVE-2011-2777
* SECURITY UPDATE: Unprivileged users may be able to write to directories
  and read files created by event handler scripts
  - event.c: Set a restrictive umask of 0077 before running an event handler
    script. Based on upstream patch.
  - CVE-2011-4578

35. By Jamie Strandboge on 2011-10-13

* SECURITY UPDATE: denial of service via blocking socket
  - debian/patches/CVE-2011-1159.patch: adjust the socket fd to use
    O_NONBLOCK
  - CVE-2011-1159

34. By Loïc Minier on 2010-06-27

Update patch missing-includes to also fix the same missing includes in
sock.c; this is all fixed in 2.0.x versions of acpid.

33. By Loïc Minier on 2010-06-27

New patch, missing-includes, to fix missing includes of sys/types.h and
sys/stat.h for umask() and stat() in acpid.c; fixes FTBFS.

32. By Dustin Kirkland  on 2010-04-26

debian/powerbtn.sh: ensure that /usr/share/acpi-support/power-funcs
exists before sourcing it; note that acpid does not depend on
acpi-support (which is fine, as it brings in lots of X dependencies
not appropriate for servers); this fix will allow Ubuntu servers
(especially those in VMs) to run acpid and catch and handle power
button events again; LP: #570450

31. By Jonathan Thomas on 2010-01-15

Source /usr/share/acpi-support/power-funcs in powerbtn.sh (LP: #508073)

30. By Steve Langasek on 2009-12-23

fix the upload target

29. By Steve Langasek on 2009-12-23

releasing version 1.0.10-5ubuntu1

28. By Steve Langasek on 2009-12-23

merge 1.0.10-5

27. By Steve Langasek on 2009-12-18

* Merge from Debian testing. Remaining changes:
  - Replace init script with Upstart job.
    - This does not load modules, unlike the init script, since these are
      all loaded by ACPI:* modaliases now (and thus by udev)
  - debian/control:
    - Bump build-dependency on debhelper for Upstart-aware dh_installinit
* Dropped changes, integrated upstream:
  - build with -D_GNU_SOURCE to make "struct ucred" available
  - acpid.*, event.c, ud_socket.*: limit the number of non-root clients,
    correctly close dead connections.
  - Remove the logrotate file on upgrade
  - Bump Standards-Version to 3.8.0
  - debian/powerbtn.sh:
    - Update for KDE 4
    - Add dalston-power-applet to list of handlers for power
      button events
    - add xfce4-power-manager to the list of handlers as well.
* Dropped changes, superseded by upstart conversion:
  - debian/acpid.init.d: add the 'status' action
  - Replace "multiuser" deprecated init mode in debian/rules with manual
    arguments. Adapt the corresponding change in LSB init script header
    and runtime dependency in debian/control
  - depend on sysv-rc
* debian/preinst, debian/acpid.install, debian/control, debian/rules:
  continue installing /etc/acpi/events/powerbtn and /etc/acpi/powerbtn.sh,
  deferring the migration to acpi-support-base; and drop the Recommends:
  on acpi-support-base for the same reason.