lp://staging/~jamesodhunt/ubuntu/vivid/upstart/bug-1425685-additional

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp://staging/ubuntu/vivid/upstart at revision 1610

Colin Watson (community): Approve on 2015-02-26

Diff: 40 lines (+18/-1)

2 files modified

debian/changelog (+8/-0)
debian/upstart-bin.upstart.cron.daily (+10/-1)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

1610. By James Hunt on 2015-02-26

debian/upstart-bin.upstart.cron.daily: Ensure the session uid matches that
of the session file itself to stop a user forcing the logrotation of
another users logs.

1609. By James Hunt on 2015-02-26

releasing package upstart version 1.13.2-0ubuntu8

1608. By James Hunt on 2015-02-26

* debian/upstart-bin.upstart.cron.daily: Additional checks on the input
  file based on review feedback.

1607. By James Hunt on 2015-02-26

* debian/upstart-bin.upstart.cron.daily:
  - [SECURITY FIX]: Only consider valid session files to avoid possible
    privilege escalation. Thanks to halfdog for reporting (LP: #1425685).

1606. By Dimitri John Ledkov on 2015-01-20

releasing package upstart version 1.13.2-0ubuntu7

1605. By Dimitri John Ledkov on 2015-01-17

Correct upstart-udev-bridge session job start/stop on conditions.

1604. By Dimitri John Ledkov on 2015-01-17

releasing package upstart version 1.13.2-0ubuntu6

1603. By Dimitri John Ledkov on 2015-01-17

Drop local option, use systemd_booted detection instead.

1602. By Dimitri John Ledkov on 2015-01-17

move udev & local bridges to upstart-bin package.

1601. By Dimitri John Ledkov on 2015-01-17

Drop event-bridge