[Secure-testing-team] Bug#523476: pptp-linux: pptpsetup permissions

Moritz Muehlenhoff jmm at inutil.org
Sun Apr 26 08:17:16 UTC 2009


On Sun, Apr 12, 2009 at 06:56:34PM +0200, Ola Lundqvist wrote:
> Hi Michael
> It is a problem on Debian. I have successfully reproduced the problem.
> 
> The fix was very easy, just to add a chmod 600 /etc/ppp/chap-secrets.
> I have uploaded a fixed package to unstable now.
> 
> I agree that it it not a critical bug but I think it is worth a DSA for this,
> so I'm cc:ing the security team about this.
> 
> The corrected package is pptp-linux_1.7.2-2 and this is the only fix in
> that package compared to stable.

Could you please fix this through a stable point update for Lenny?

The best way to do that is to send the proposed debdiff to
debian-release at lists.debian.org with [stable] in the subject, so that the
stable release managers can review it.

Cheers,
        Moritz



More information about the Secure-testing-team mailing list