cron (3.0pl1-133) [PTS] [DDPO]

COMMITS: VCS has seen 1 commit since the debian/3.0pl1-133 tag

Git: https://salsa.debian.org/debian/cron.git
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: master
Path: debian/changelog
Browser: https://salsa.debian.org/debian/cron
Last scan: 2019-04-24 08:30:07+00
Next scan: 2019-04-25 05:57:00+00
Merge requests: 1

Debian changelog in Git:

cron (3.0pl1-133) unstable; urgency=medium

  * SECURITY: Fix bypass of /etc/cron.{allow,deny} on failure to open
    If these files exist, then they must be readable by the user executing
    crontab(1). Users will now be denied by default if they aren't.
    (LP: #1813833)
  * SECURITY: Fix for possible DoS by use-after-free
    A user reported a use-after-free condition in the cron daemon, leading to a
    possible Denial-of-Service scenario by crashing the daemon.
    (Closes: #809167)
  * SECURITY: DoS: Fix unchecked return of calloc()
    Florian Weimer discovered that a missing check for the return value of
    calloc() could crash the daemon, which could be triggered by a very
    large crontab created by a user.
  * Enforce maximum crontab line count of 1000 to prevent a malicious user
    from creating an excessivly large crontab. The daemon will log a warning
    for existing files, and crontab(1) will refuse to create new ones.
  * Add d/NEWS altering to the new 1000 lines limit.
  * Move /var/run/crond.reboot to /run/crond.reboot.
  * crontab.5: Reverse the info on tilde expansion. When setting PATH, most
    shells will not expand a tilde. Thanks, Tim Landscheidt, for the analysis.
    (Closes: #801328)
  * Fixes for numerous man page issues. Remove trailing whitespace, use proper
    escapes, etc. Thanks, Bjarni Ingi Gislason! (Closes: #893575, #893579)
  * crontab.1: Drop duplicate DIAGNOSTICS header.
  * daemon: Only support the 'x' debug option in debug builds.

 -- Christian Kastner <ckk@debian.org>  Sun, 10 Mar 2019 17:49:18 +0100

This branch is 1 commit ahead of tag debian/3.0pl1-133

Git log:

commit 766f3b21a6fade81484eb28f70129a598fae8335
Author: Christian Kastner <ckk@kvr.at>
Date:   Sun Mar 24 19:14:59 2019 +0100

    Whitespace
    
    (The last commit changed this on purpose, only to find out that it was a
    mistake included in the original upstream source...)