[pkg-wpa-devel] Bug#510652: Bug#510652: wpasupplicant: /etc/dbus-1/system.d file needs alterations for fd.o #18961
Kel Modderman
kel at otaku42.de
Sun Jan 4 14:38:23 UTC 2009
On Sunday 04 January 2009 12:10:03 Simon McVittie wrote:
> Package: wpasupplicant
> Version: 0.6.4-3
> Severity: normal
> User: pkg-utopia-maintainers at lists.alioth.debian.org
> Usertags: fdo-18961
>
> wpasupplicant's D-Bus system.d config should be updated to fix
> non-deterministic allow/deny for messages with no interface (related to
> CVE-2008-4311).
>
> http://bugs.freedesktop.org/show_bug.cgi?id=18961 is the D-Bus bug tracking
> this. It appears from the dnsmasq patch there that removing the lines
> <allow send_interface="..."/> and <deny send_interface="..."/> is recommended
> (the fact that send_destination is allowed should be sufficient).
Is this likely to be needed in wpasupplicant package for Lenny release?
Thanks, Kel.
More information about the Pkg-wpa-devel
mailing list