openafs (1.8.13.2-1)
[PTS] [DDPO]
OLD: VCS is behind the version in the archive: 1.8.13-1 < 1.8.13.2-1.
- Git: https://salsa.debian.org/debian/openafs.git
-
- Branch: master
- Path: debian/changelog
- Repo size: 53436416
- Browser: https://salsa.debian.org/debian/openafs
- Last scan: 2025-01-31 03:01:04+00
- Next scan: 2025-02-06 05:08:00+00
- Merge requests: 1
- Debian changelog in Git:
openafs (1.8.13-1) unstable; urgency=high
* New upstream security release:
- Fix OPENAFS-SA-2024-001: theft of credentials from Unix PAGs
(CVE-2024-10394)
- Fix OPENAFS-SA-2024-002: fileserver crash on malformed StoreACL
(CVE-2024-10396)
- Fix OPENAFS-SA-2024-003: buffer overflows in XDR responses
(CVE-2024-10397)
- Closes: #1087406, #1087407
-- Benjamin Kaduk <kaduk@mit.edu> Tue, 12 Nov 2024 13:58:26 -0800
- This branch is 1 commit ahead of tag debian/1.8.13-1
- Git log:
commit 141746bf92eeeb268591f852f5f40bafda34e049
Author: Niels Thykier <niels@thykier.net>
Date: Fri Jan 17 19:40:07 2025 +0000
Mark the package as requiring root to build
It has an explicit `chown root.src ...`, which with the current `dpkg` and
`debhelper` stack will require `root` or `fakeroot`.
Closes: #1093345