diff -Nru update-manager-0.156.14.3/debian/changelog update-manager-0.156.14.4/debian/changelog --- update-manager-0.156.14.3/debian/changelog 2012-05-15 12:22:48.000000000 +0000 +++ update-manager-0.156.14.4/debian/changelog 2012-05-16 17:56:12.000000000 +0000 @@ -1,4 +1,4 @@ -update-manager (1:0.156.14.3) precise-security; urgency=low +update-manager (1:0.156.14.4) precise-security; urgency=low * SECURITY UPDATE: Incorrect permissions on system_state archive may expose repo passwords (LP: #954483) diff -Nru update-manager-0.156.14.3/debian/update-manager-core.postinst update-manager-0.156.14.4/debian/update-manager-core.postinst --- update-manager-0.156.14.3/debian/update-manager-core.postinst 2012-05-15 13:05:42.000000000 +0000 +++ update-manager-0.156.14.4/debian/update-manager-core.postinst 2012-05-16 17:55:58.000000000 +0000 @@ -20,10 +20,10 @@ case "$1" in configure) - if dpkg --compare-versions "$2" lt-nl 1:0.156.14.3; then + if dpkg --compare-versions "$2" lt-nl 1:0.156.14.4; then # ensure permissions are right - find /var/log/dist-upgrade/ -name "apt-clone_system_state.tar.gz"|xargs chmod 0600 || true - find /var/log/dist-upgrade/ -name "system_state.tar.gz"|xargs chmod 0600 || true + chmod -f 0600 /var/log/dist-upgrade/apt-clone_system_state.tar.gz || true + chmod -f 0600 /var/log/dist-upgrade/system_state.tar.gz || true fi ;;