[pkg-wpa-devel] Bug#510652: wpasupplicant: /etc/dbus-1/system.d file needs alterations for fd.o #18961

[Simon McVittie]

Package: wpasupplicant
Version: 0.6.4-3
Severity: normal
User: pkg-utopia-maintainers at lists.alioth.debian.org
Usertags: fdo-18961

wpasupplicant's D-Bus system.d config should be updated to fix
non-deterministic allow/deny for messages with no interface (related to
CVE-2008-4311).

http://bugs.freedesktop.org/show_bug.cgi?id=18961 is the D-Bus bug tracking
this. It appears from the dnsmasq patch there that removing the lines
<allow send_interface="..."/> and <deny send_interface="..."/> is recommended
(the fact that send_destination is allowed should be sufficient).

Regards from the Cambridge BSP,
    Simon
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 155 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-wpa-devel/attachments/20090104/68a28571/attachment.pgp