lp://staging/~ubuntu-core-dev/language-selector/maverick

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #764397: Polkit authentification can be bypassed

High

Fix Released

Link a bug report

Related blueprints

394. By Martin Pitt on 2011-04-19

releasing version 0.6.7

393. By Martin Pitt on 2011-04-19

* SECURITY UPDATE: language selector backend did not verify policy kit
  authentication.
  - debian/language-selector-common.postinst: shut down old backend.
  - CVE-2011-0729

392. By Martin Pitt on 2011-04-19

better syntax

391. By Martin Pitt on 2011-04-19

debian/control: Update Vcs-Bzr: for newly created maverick branch.

390. By Martin Pitt on 2011-04-19

dbus_backend/ls-dbus-backend: Reject locale names with invalid characters
in it, to further prevent injecting shell code into /etc/default/locale
for authenticated users. Thanks to Felix Geyer for the initial patch!
(LP: #764397)

389. By Martin Pitt on 2011-04-19

dbus_backend/ls-dbus-backend: Actually look at the PolicyKit check result
and only proceed if it succeeded. Thanks to Romain Perier for finding this
and providing the patch! This fixes a local root privilege escalation, as
this allows any authenticated user to write arbitrary shell commands into
/etc/default/locale. (LP: #764397)

388. By Martin Pitt on 2010-10-05

releasing version 0.6.6

387. By Martin Pitt on 2010-10-05

po/*: Update translations from Launchpad.

386. By Martin Pitt on 2010-10-05

debian/rules: Disable pkgbinarymangler, to keep translations in the
package. In Natty this blacklisting will happen in the pkgbinarymangler
package (so that the programs other than pkgstriptranslations will still
apply), but this is a less invasive shortcut for Maverick. (LP: #654548)

385. By Colin Watson on 2010-09-24

releasing version 0.6.5