[ubuntu/lucid-security] dpkg 1.15.5.6ubuntu4.7 (Accepted)

[Marc Deslauriers]

dpkg (1.15.5.6ubuntu4.7) lucid-security; urgency=medium

  * SECURITY UPDATE: directory traversal in dpkg-source
    - scripts/Dpkg/Source/Patch.pm: correctly parse C-style diff
      filenames.
    - Patch thanks to Guillem Jover <guillem at debian.org>
    - CVE-2014-0471

dpkg (1.15.5.6ubuntu4.6) lucid-proposed; urgency=low

  * Cherry-pick fixes for sync() behaviour in dpkg (LP: #624877):
    - Disable by default usage of synchronous sync(2), as it causes undesired
      I/O on unrelated file systems. Closes: #588339, #595927, #600075
    - On Linux use sync_file_range() to initiate asynchronous writeback
      of just unpacked files. Suggested by Ted Ts'o <tytso at mit.edu>.
      Thanks to Jonathan Nieder <jrnieder at gmail.com>. Closes: #605009

Date: 2014-04-24 17:31:16.429897+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/lucid/+source/dpkg/1.15.5.6ubuntu4.7
-------------- next part --------------
Sorry, changesfile not available.