Ausführen beliebiger Kommandos in NetworkManager (Aktualisierung)
ID: | USN-1138-2 |
Distribution: | Ubuntu |
Plattformen: | Ubuntu 8.04 LTS, Ubuntu 10.04 LTS |
Datum: | Fr, 27. Mai 2011, 05:31 |
Referenzen: | Keine Angabe |
Applikationen: | NetworkManager |
Update von: | Ausführen beliebiger Kommandos in DBus-GLib |
Originalnachricht |
|
--===============5587952435553118460== Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-3JomtPr0R9jrbDLAXmnT" --=-3JomtPr0R9jrbDLAXmnT Content-Type: text/plain; charset="UTF-8 Content-Transfer-Encoding: quoted-printable ========================================================================== Ubuntu Security Notice USN-1138-2 May 27, 2011 network-manager, modemmanger update ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 10.04 LTS - Ubuntu 8.04 LTS Summary: An attacker could send crafted input to NetworkManager and ModemManager and cause them to crash. Software Description: - modemmanager: Modem connection manager - network-manager: Network connection manager Details: USN-1138-1 fixed a vulnerability in DBus-GLib. NetworkManager and ModemManager required rebuilding against the updated DBus-GLib to incorporate the changes. Original advisory details: It was discovered that DBus-GLib did not properly verify the access flag of exported GObject properties under certain circumstances. A local attacker could exploit this to bypass intended access restrictions or possibly cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 10.04 LTS: libnm-glib2 0.8-0ubuntu3.2 modemmanager 0.3-0ubuntu2.2 Ubuntu 8.04 LTS: libnm-glib0 0.6.6-0ubuntu5.8.04.3 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://launchpad.net/bugs/616517 Package Information: https://launchpad.net/ubuntu/+source/modemmanager/0.3-0ubuntu2.2 https://launchpad.net/ubuntu/+source/network-manager/0.8-0ubuntu3.2 https://launchpad.net/ubuntu/+source/network-manager/0.6.6-0ubuntu5.8.04.3 --ÓJomtPr0R9jrbDLAXmnT Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAABCgAGBQJN3wqvAAoJEFHb3FjMVZVzrXwP/2rw/hOUj/46ySIV9qTpNxuW S+qepg6IekQW/oqoOpfLTL7chCdR0Z5EGT0mdzxlarALTRS6LosZ1/rsFb4V72I6 CHT7oOgpsm84IlyiLc4a8iVRr8rDa9DDI7rjqFcHmTSmDAp8fI8d+sUK7ZWNHZ/E QrpWkcuqWvmDlEBlV9tPsUorCi+SVER2EijH6FGRLTHPC4cgNYzRFzkUpjBsaa4m xM/G3bQHAEc7OFa351akSJktPhKT2/8FEl8X/xUhWQxU3Dyx5ABvenJ6UbTgEV0s TfwuCnR4lPP2hRtAGBN0HKoGp8jyDlwOJeZPyaJFfW23yAM25nxNNLZPUVFabCjY x5VhlCGL6SdLVk54Ke1MGmypCF75HNxMkHfsMl1CAeRsKpXJPo0vVcPNYbcUsSgv 7shXjnBZFIA7ipt5Z/BXj0ecGLq+W9a9fHhnnURpJOG6naFvZxX4ipz4Gyv1wZyv W349ZwtLPb0mWM5wHPTngLAx7vLKHbtc52F/mhk2tpqDrWzKPS8A1ZmccnnkRpzr PUYzmAihLbG0MGtWgNPd7hW+OeKdp9qEDlURCmoLMIKPIdMARJpM/Kx2lk8hoUPn lbGEYnAkrz2QGUecj2EB2Lz75ehr12QOy52f/e6ZxVk+7UQCkPqIW3uaaePOjSST eFb+7swGjaKxdT0sfNfr =IaYT -----END PGP SIGNATURE----- --=-3JomtPr0R9jrbDLAXmnT-- --===============5587952435553118460== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce --===============5587952435553118460==-- |