Simon McVittie wrote:
Package: dnsmasq
Version: 2.46-1
Severity: normal
User: [email protected]
Usertags: fdo-18961

ConsoleKit's D-Bus system.d config should be updated to fix
non-deterministic allow/deny for messages with no interface (related to
CVE-2008-4311).

http://bugs.freedesktop.org/show_bug.cgi?id=19020 contains a patch from
Colin Walters. (If you consider bugs.debian.org to be the "upstream" bug
tracker for dnsmasq, please advertise this fact in documentation; Colin
didn't seem to know where to send the patch.)

Regards from the Cambridge BSP,
    Simon

Hi Simon.

I got email from Colin which I acknowleged, and his fix is in the next (upstream) dnsmasq release. It wasn't clear from his mail or from this bug if there are implications for Lenny. It is necessary to update the dnsmasq-2.45 package in Lenny?

Cheers,

Simon.






--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to