Tags 317703 pending Thanks On Sun, Jul 10, 2005 at 10:03:05PM +0200, Frans Pop muttered these words: > Package: xsupplicant > Version: 1.0.1-4 > Severity: grave > Tags: security > Justification: user security hole > > When xsupplicant is started on boot, my wireless card is not "up". > In that situation, xsupplicant happily dumps configuration settings, > including username/password settings, to /var/log/xsupplicant.log. > > For the same reason it is probably not a good idea that the default > /etc/xsupplicant/xsupplicant.conf is created world-readable.
I've put together a new package that addresses these issues and will upload it as soon as possible. Thanks for the report. -- Eric Evans [EMAIL PROTECTED]
signature.asc
Description: Digital signature
