Your message dated Sat, 17 Jun 2017 16:04:47 +0200
with message-id <[email protected]>
and subject line Re: network-manager: CVE-2016-0764
has caused the Debian Bug report #820354,
regarding network-manager: CVE-2016-0764: Race conditions that could disclose
connection secrets to authenticated local users
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
820354: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=820354
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: network-manager
Version: 0.9.4.0-10
Conrol: fixed -1 1.1.91-1
Hi,
On Wed, Apr 06, 2016 at 11:25:58PM +0200, Michael Biebl wrote:
> Hi Moritz,
>
> Am 06.04.2016 um 22:08 schrieb Moritz Muehlenhoff:
> > Hi Michael,
> > there's CVE-2016-0764 for network-manager:
> > https://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=60b7ed3bdc3941a3b7c56824fba4b7291e79041f
> > (1.2-beta2)
> >
> > It's also fixed in 1.0.12:
> > https://cgit.freedesktop.org/NetworkManager/NetworkManager/tree/NEWS?h=1.0.12
> >
> > This doesn't warrant a DSA, but you can fix it through a jessie
> > point update.
>
> Could you turn this into a bug report please, otherwise I'll most
> certainly forget.
Forwarding this to the BTS.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
On Thu, 7 Apr 2016 19:43:36 +0200 Salvatore Bonaccorso
<[email protected]> wrote:
> Source: network-manager
> Version: 0.9.4.0-10
> Conrol: fixed -1 1.1.91-1
>
> Hi,
>
> On Wed, Apr 06, 2016 at 11:25:58PM +0200, Michael Biebl wrote:
> > Hi Moritz,
> >
> > Am 06.04.2016 um 22:08 schrieb Moritz Muehlenhoff:
> > > Hi Michael,
> > > there's CVE-2016-0764 for network-manager:
> > > https://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=60b7ed3bdc3941a3b7c56824fba4b7291e79041f
> > > (1.2-beta2)
> > >
> > > It's also fixed in 1.0.12:
> > > https://cgit.freedesktop.org/NetworkManager/NetworkManager/tree/NEWS?h=1.0.12
> > >
> > > This doesn't warrant a DSA, but you can fix it through a jessie
> > > point update.
> >
> > Could you turn this into a bug report please, otherwise I'll most
> > certainly forget.
>
> Forwarding this to the BTS.
With stretch being released any moment now, this will have to be handled
as a debian-lts / oldstable upload.
CCing the debian-lts mailing list, in case they want to make an upload
for this issue (it's not DSA tracked)
Michael
--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature
--- End Message ---
_______________________________________________
Pkg-utopia-maintainers mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-utopia-maintainers
