[pkg-wpa-devel] Bug#510652: Bug#510652: wpasupplicant: /etc/dbus-1/system.d file needs alterations for fd.o #18961

Kel Modderman kel at otaku42.de
Sun Jan 4 14:38:23 UTC 2009


On Sunday 04 January 2009 12:10:03 Simon McVittie wrote:
> Package: wpasupplicant
> Version: 0.6.4-3
> Severity: normal
> User: pkg-utopia-maintainers at lists.alioth.debian.org
> Usertags: fdo-18961
> 
> wpasupplicant's D-Bus system.d config should be updated to fix
> non-deterministic allow/deny for messages with no interface (related to
> CVE-2008-4311).
> 
> http://bugs.freedesktop.org/show_bug.cgi?id=18961 is the D-Bus bug tracking
> this. It appears from the dnsmasq patch there that removing the lines
> <allow send_interface="..."/> and <deny send_interface="..."/> is recommended
> (the fact that send_destination is allowed should be sufficient).

Is this likely to be needed in wpasupplicant package for Lenny release?

Thanks, Kel.






More information about the Pkg-wpa-devel mailing list