summary |
shortlog | log |
commit |
commitdiff |
tree
first ⋅ prev ⋅ next
Martin Pitt [Sun, 17 Feb 2019 09:17:45 +0000 (10:17 +0100)]
sd-bus: enforce a size limit on D-Bus object paths
Replace stack with heap allocation. This avoids accessing/modifying
memory outside of the allocated stack region by sending specially
crafted D-Bus messages with very large object paths.
Vulnerability discovered by Chris Coulson <chris.coulson@canonical.com>,
patch provided by Riccardo Schirone <rschiron@redhat.com>.
CVE-2019-6454
Gbp-Pq: Name sd-bus-enforce-a-size-limit-on-D-Bus-object-paths.patch
Michael Biebl [Fri, 24 May 2019 20:58:59 +0000 (21:58 +0100)]
systemd (241-5) unstable; urgency=medium
* Revert "Add check to switch VTs only between K_XLATE or K_UNICODE"
This change left the keyboard in an unusable state when exiting an X
session. (Closes: #929229)
[dgit import unpatched systemd 241-5]
Michael Biebl [Fri, 24 May 2019 20:58:59 +0000 (21:58 +0100)]
Import systemd_241-5.debian.tar.xz
[dgit import tarball systemd 241-5 systemd_241-5.debian.tar.xz]
Felipe Sateler [Thu, 21 Feb 2019 23:10:15 +0000 (23:10 +0000)]
Import systemd_241.orig.tar.gz
[dgit import orig systemd_241.orig.tar.gz]