[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[debian-users:53434] [Translate] [SECURITY] [DSA 1955-1] New network-manager/network-manager-applet packages fix information disclosure

From: Seiji Kaneko <skaneko@xxxxxxxxxxxx>
Subject: [debian-users:53434] [Translate] [SECURITY] [DSA 1955-1] New network-manager/network-manager-applet packages fix information disclosure
Date: Fri, 18 Dec 2009 00:13:34 +0900
List-help: <mailto:debian-users-ctl@debian.or.jp?body=help>
List-id: debian-users.debian.or.jp
List-owner: <mailto:debian-users-admin@debian.or.jp>
List-post: <mailto:debian-users@debian.or.jp>
List-software: fml [fml 4.0.3 release (20011202/4.0.3)]
List-unsubscribe: <mailto:debian-users-ctl@debian.or.jp?body=unsubscribe>
X-ml-info: If you have a question, send e-mail with the body "help" (without quotes) to the address debian-users-ctl@debian.or.jp; help=<mailto:debian-users-ctl@debian.or.jp?body=help>
X-ml-name: debian-users
X-mlserver: fml [fml 4.0.3 release (20011202/4.0.3)]; post only (only members can post)
X-spam-checker-version: SpamAssassin 3.1.7-deb3 (2006-10-05) on osdn.debian.or.jp
X-spam-level:
X-spam-status: No, score=-2.4 required=10.0 tests=KI autolearn=disabled version=3.1.7-deb3
Message-id: <4B2A4A99.3090505@xxxxxxxxxxxx>
X-mail-count: 53434
User-agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.5; ja-JPM; rv:1.9.1.5) Gecko/20091209 Shredder/3.0.1pre

かねこです。
URL 等は Debian-security-announce メーリングリストの元記事を確認
ください。

------>8------------>8------------>8------------>8------------>8-
- ------------------------------------------------------------------------
Debian Security Advisory DSA-1955-1                  security@debian.org
http://www.debian.org/security/                      Steffen Joeris
December 16, 2009                     http://www.debian.org/security/faq
- ------------------------------------------------------------------------

Package        : network-manager/network-manager-applet
Vulnerability  : 情報の漏洩
Problem type   : ローカル
Debian-specific: いいえ
CVE Id         : CVE-2009-0365
Debian Bug     : 519801

ネットワーク管理フレームワーク network-manager-applet に一部の dbus 制
限ルールが抜けており、ローカルユーザからの機密情報の取得が可能であるこ
とが発見されました。

ローカルで /etc/dbus-1/system.d/nm-applet.conf ファイルを変更している場
合、アップグレード時に今回の修正に伴う変更を統合するよう指定するように
してください。

安定版 (stable) ディストリビューション (lenny) では、この問題はバージョ
ン 0.6.6-4+lenny1 of network-manager-applet で修正されています。

旧安定版 (oldstable) ディストリビューション (etch) では、この問題はバー
ジョン 0.6.4-6+etch1 of network-manager で修正されています。

テスト版 (squeeze) および不安定版 (unstable) ディストリビューションでは、
この問題はバージョン 0.7.0.99-1 of の network-manager-applet で修正され
ています。

直ぐに network-manager と network-manager-applet パッケージを更新するこ
とを勧めます。


アップグレード手順
------------------

wget url
        	でファイルを取得できます。
dpkg -i file.deb
                で参照されたファイルをインストールできます。

apt-get パッケージマネージャを用いている場合には、本メールのフッタ記載の
行を sources.list に加えて、

apt-get update
        を実行して内部データベースを更新し、
apt-get upgrade
        によって修正されたパッケージをインストールしてください。

本メールのフッタ記載の設定を自ホストの設定に加えることにより、自動更新を
行うこともできます。


Debian GNU/Linux 4.0 alias etch
- -------------------------------

Debian (old stable)
- ------------------

旧安定版の更新は、alpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel,
powerpc, s390 および sparc の各アーキテクチャで提供されています。
 .
ソースアーカイブ:


http://security.debian.org/pool/updates/main/n/network-manager/network-manager_0.6.4-6+etch1.dsc
    Size/MD5 checksum:     1034 9ca281c6a38a498e5735a9e8caa4b7bc

http://security.debian.org/pool/updates/main/n/network-manager/network-manager_0.6.4-6+etch1.diff.gz
    Size/MD5 checksum:    20424 448d010bfa385c406fad97b0c9667731

http://security.debian.org/pool/updates/main/n/network-manager/network-manager_0.6.4.orig.tar.gz
    Size/MD5 checksum:  1079499 2d8ec8b17f85ee9aa9c0e04c63b98c3a

alpha architecture (DEC Alpha)


http://security.debian.org/pool/updates/main/n/network-manager/network-manager-gnome_0.6.4-6+etch1_alpha.deb
    Size/MD5 checksum:   381334 d0fa566c6157cc9590fc4ac343494c06

http://security.debian.org/pool/updates/main/n/network-manager/network-manager-dev_0.6.4-6+etch1_alpha.deb
    Size/MD5 checksum:   112752 eaccaea2845fbf15eb7785aea488ae23

http://security.debian.org/pool/updates/main/n/network-manager/network-manager_0.6.4-6+etch1_alpha.deb
    Size/MD5 checksum:   259300 2cba0b7225cb0bf54a213b629f8e549c

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib0_0.6.4-6+etch1_alpha.deb
    Size/MD5 checksum:   119400 ac8ae428f79e0643730d648fa785038b

http://security.debian.org/pool/updates/main/n/network-manager/libnm-util0_0.6.4-6+etch1_alpha.deb
    Size/MD5 checksum:   127538 1f191e99e963f25791b788933f92fe67

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib-dev_0.6.4-6+etch1_alpha.deb
    Size/MD5 checksum:   121702 e00aff6a1ce0de6fde754f8f26bd56cf

http://security.debian.org/pool/updates/main/n/network-manager/libnm-util-dev_0.6.4-6+etch1_alpha.deb
    Size/MD5 checksum:   136174 4fb472c760ecb83864912cd403d6d68b

amd64 architecture (AMD x86_64 (AMD64))


http://security.debian.org/pool/updates/main/n/network-manager/network-manager-gnome_0.6.4-6+etch1_amd64.deb
    Size/MD5 checksum:   377714 346447be8036a69f83dc33f33086535d

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib0_0.6.4-6+etch1_amd64.deb
    Size/MD5 checksum:   118648 242e933e9b2a4a217c26ba938dfec496

http://security.debian.org/pool/updates/main/n/network-manager/libnm-util-dev_0.6.4-6+etch1_amd64.deb
    Size/MD5 checksum:   127308 c98926309bc01886ea1e617b0ddd234c

http://security.debian.org/pool/updates/main/n/network-manager/libnm-util0_0.6.4-6+etch1_amd64.deb
    Size/MD5 checksum:   124268 f924645be9b503ad97bc66abeb9a0250

http://security.debian.org/pool/updates/main/n/network-manager/network-manager_0.6.4-6+etch1_amd64.deb
    Size/MD5 checksum:   247392 faca3961e48d3ccb07334e741aec10df

http://security.debian.org/pool/updates/main/n/network-manager/network-manager-dev_0.6.4-6+etch1_amd64.deb
    Size/MD5 checksum:   111986 9c6fe9dbc9d2185eb702d6ff47398fe7

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib-dev_0.6.4-6+etch1_amd64.deb
    Size/MD5 checksum:   118352 07be7293e380f38897fdfb3b0d693021

hppa architecture (HP PA RISC)


http://security.debian.org/pool/updates/main/n/network-manager/libnm-util-dev_0.6.4-6+etch1_hppa.deb
    Size/MD5 checksum:   130832 22aa006ddb311666af1b41e63ec17fd4

http://security.debian.org/pool/updates/main/n/network-manager/network-manager-dev_0.6.4-6+etch1_hppa.deb
    Size/MD5 checksum:   112826 d4e444ea04ccc770444a6426b792b3c6

http://security.debian.org/pool/updates/main/n/network-manager/libnm-util0_0.6.4-6+etch1_hppa.deb
    Size/MD5 checksum:   125866 fea8d5b15a0c2a94000c0d9b8987499c

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib-dev_0.6.4-6+etch1_hppa.deb
    Size/MD5 checksum:   120276 372238091d3ab15325f5ad8fee84efd5

http://security.debian.org/pool/updates/main/n/network-manager/network-manager-gnome_0.6.4-6+etch1_hppa.deb
    Size/MD5 checksum:   376960 860f031ba177fad3524dfbb20118e550

http://security.debian.org/pool/updates/main/n/network-manager/network-manager_0.6.4-6+etch1_hppa.deb
    Size/MD5 checksum:   254374 1835e8ff4f393d3554b566436a2fea57

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib0_0.6.4-6+etch1_hppa.deb
    Size/MD5 checksum:   119536 48e2418b0280423b2e9f69e95b37d643

i386 architecture (Intel ia32)


http://security.debian.org/pool/updates/main/n/network-manager/libnm-util-dev_0.6.4-6+etch1_i386.deb
    Size/MD5 checksum:   126232 e00655f007c778143f3b33eb2618cf2a

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib-dev_0.6.4-6+etch1_i386.deb
    Size/MD5 checksum:   118530 d38c510c9e0094529575917272e74b72

http://security.debian.org/pool/updates/main/n/network-manager/libnm-util0_0.6.4-6+etch1_i386.deb
    Size/MD5 checksum:   123882 2c641df7d5ab4f100778795dce5ab9bb

http://security.debian.org/pool/updates/main/n/network-manager/network-manager_0.6.4-6+etch1_i386.deb
    Size/MD5 checksum:   239640 2f6c0940ac4e34ba3aea0c8cbf76cf60

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib0_0.6.4-6+etch1_i386.deb
    Size/MD5 checksum:   118136 f2bae719f42c8a30dcd3b7e8004b8d58

http://security.debian.org/pool/updates/main/n/network-manager/network-manager-dev_0.6.4-6+etch1_i386.deb
    Size/MD5 checksum:   112858 1e07c7c7318b89b08f443fcc2fcc4ed1

http://security.debian.org/pool/updates/main/n/network-manager/network-manager-gnome_0.6.4-6+etch1_i386.deb
    Size/MD5 checksum:   371748 e925bac52eb8fad1bcdf7e14f6dbbc1e

ia64 architecture (Intel ia64)


http://security.debian.org/pool/updates/main/n/network-manager/network-manager_0.6.4-6+etch1_ia64.deb
    Size/MD5 checksum:   305500 e779cdb25338cd8dc21525022b22768e

http://security.debian.org/pool/updates/main/n/network-manager/network-manager-gnome_0.6.4-6+etch1_ia64.deb
    Size/MD5 checksum:   407794 6a16b5e4e8563fbad6bd6890bdd7a123

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib-dev_0.6.4-6+etch1_ia64.deb
    Size/MD5 checksum:   122722 fdcf975b50ed49f4ee37f9f994b94c97

http://security.debian.org/pool/updates/main/n/network-manager/libnm-util0_0.6.4-6+etch1_ia64.deb
    Size/MD5 checksum:   130812 ccae0fa400747a22e3124b8223df51bb

http://security.debian.org/pool/updates/main/n/network-manager/network-manager-dev_0.6.4-6+etch1_ia64.deb
    Size/MD5 checksum:   112786 f035e38ad68cf43e32c626d50d781982

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib0_0.6.4-6+etch1_ia64.deb
    Size/MD5 checksum:   122246 6fe88cd1556e1c00755d4509b69f2a52

http://security.debian.org/pool/updates/main/n/network-manager/libnm-util-dev_0.6.4-6+etch1_ia64.deb
    Size/MD5 checksum:   136392 21529694edab05b38f0a3613768d3509

mips architecture (MIPS (Big Endian))


http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib-dev_0.6.4-6+etch1_mips.deb
    Size/MD5 checksum:   120050 311d3c58e470683d003a764b8cd0f245

http://security.debian.org/pool/updates/main/n/network-manager/libnm-util0_0.6.4-6+etch1_mips.deb
    Size/MD5 checksum:   124602 6534f02f08d137f6e050aa86026b46fd

http://security.debian.org/pool/updates/main/n/network-manager/network-manager_0.6.4-6+etch1_mips.deb
    Size/MD5 checksum:   239920 47d8290298850e325301c7d1ef97048b

http://security.debian.org/pool/updates/main/n/network-manager/network-manager-dev_0.6.4-6+etch1_mips.deb
    Size/MD5 checksum:   112790 639962b84ef0f74825f81c0eda9cbbbb

http://security.debian.org/pool/updates/main/n/network-manager/libnm-util-dev_0.6.4-6+etch1_mips.deb
    Size/MD5 checksum:   131648 fd2e9dc863a688705ea03e47ca55c9fa

http://security.debian.org/pool/updates/main/n/network-manager/network-manager-gnome_0.6.4-6+etch1_mips.deb
    Size/MD5 checksum:   370762 2e777acfce2d882f54ef92082ea34f09

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib0_0.6.4-6+etch1_mips.deb
    Size/MD5 checksum:   118374 c784f17c138aa7b86454449fe9021dcc

powerpc architecture (PowerPC)


http://security.debian.org/pool/updates/main/n/network-manager/libnm-util0_0.6.4-6+etch1_powerpc.deb
    Size/MD5 checksum:   125372 2edfcaec1df4a4e03b4653aff3012329

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib0_0.6.4-6+etch1_powerpc.deb
    Size/MD5 checksum:   119820 eb0b1dae1c13fa662708ef7391f70266

http://security.debian.org/pool/updates/main/n/network-manager/network-manager-dev_0.6.4-6+etch1_powerpc.deb
    Size/MD5 checksum:   112786 946de4230810730fc422b4170779bb38

http://security.debian.org/pool/updates/main/n/network-manager/network-manager-gnome_0.6.4-6+etch1_powerpc.deb
    Size/MD5 checksum:   368504 c9b07a65e97306f92b70d5ad030b2c5a

http://security.debian.org/pool/updates/main/n/network-manager/libnm-util-dev_0.6.4-6+etch1_powerpc.deb
    Size/MD5 checksum:   128568 278e2b2cc57991607b9bbf71eeec3a61

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib-dev_0.6.4-6+etch1_powerpc.deb
    Size/MD5 checksum:   119290 8259e2adda573211e8a0b85c0752a668

http://security.debian.org/pool/updates/main/n/network-manager/network-manager_0.6.4-6+etch1_powerpc.deb
    Size/MD5 checksum:   242784 6fe6a79309ee3c4d95d9b1da16b78ecd

sparc architecture (Sun SPARC/UltraSPARC)


http://security.debian.org/pool/updates/main/n/network-manager/libnm-util-dev_0.6.4-6+etch1_sparc.deb
    Size/MD5 checksum:   128288 319084680439c80a2817f3f8606935ac

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib-dev_0.6.4-6+etch1_sparc.deb
    Size/MD5 checksum:   118792 a697368a598ad353b8bb00930f5a2c1c

http://security.debian.org/pool/updates/main/n/network-manager/network-manager-dev_0.6.4-6+etch1_sparc.deb
    Size/MD5 checksum:   112580 717a8ab6f698873851a5dc586d9000d3

http://security.debian.org/pool/updates/main/n/network-manager/network-manager_0.6.4-6+etch1_sparc.deb
    Size/MD5 checksum:   234136 05f09b3f9c4dfaab27217a1ca5f7ee4a

http://security.debian.org/pool/updates/main/n/network-manager/libnm-glib0_0.6.4-6+etch1_sparc.deb
    Size/MD5 checksum:   118152 abd8acdd835d5d52c1d200c5d6d4f1e7

http://security.debian.org/pool/updates/main/n/network-manager/network-manager-gnome_0.6.4-6+etch1_sparc.deb
    Size/MD5 checksum:   369282 40598f43075951ceb3a2af2dbafcda2c

http://security.debian.org/pool/updates/main/n/network-manager/libnm-util0_0.6.4-6+etch1_sparc.deb
    Size/MD5 checksum:   124676 9ea075e2ca00fad4d1d390cd23ee847a


Debian GNU/Linux 5.0 alias lenny
- --------------------------------

Debian (stable)
- ---------------

安定版の更新は、alpha, amd64, arm, hppa, i386, ia64, mips, mipsel,
powerpc, s390 および sparc の各アーキテクチャで提供されています。
 .
ソースアーカイブ:


http://security.debian.org/pool/updates/main/n/network-manager-applet/network-manager-applet_0.6.6-4+lenny1.dsc
    Size/MD5 checksum:     1734 34200f4387757a3688c49c617bc09fc6

http://security.debian.org/pool/updates/main/n/network-manager-applet/network-manager-applet_0.6.6-4+lenny1.diff.gz
    Size/MD5 checksum:     8437 d5c7910fc754ef45eb7628f41e98023f

http://security.debian.org/pool/updates/main/n/network-manager-applet/network-manager-applet_0.6.6.orig.tar.gz
    Size/MD5 checksum:   781511 16e95a3515e4255d034b14045a9effd5

alpha architecture (DEC Alpha)


http://security.debian.org/pool/updates/main/n/network-manager-applet/network-manager-gnome_0.6.6-4+lenny1_alpha.deb
    Size/MD5 checksum:   346500 420e6ae0bbf0086e032e05da9c554e6d

amd64 architecture (AMD x86_64 (AMD64))


http://security.debian.org/pool/updates/main/n/network-manager-applet/network-manager-gnome_0.6.6-4+lenny1_amd64.deb
    Size/MD5 checksum:   337408 38262fc0d2cadaea090e0098f7c24c67

hppa architecture (HP PA RISC)


http://security.debian.org/pool/updates/main/n/network-manager-applet/network-manager-gnome_0.6.6-4+lenny1_hppa.deb
    Size/MD5 checksum:   341614 509c38929b6588de102b937fcde5e424

i386 architecture (Intel ia32)


http://security.debian.org/pool/updates/main/n/network-manager-applet/network-manager-gnome_0.6.6-4+lenny1_i386.deb
    Size/MD5 checksum:   331344 993767ed8f55910cced53c641074b338

ia64 architecture (Intel ia64)


http://security.debian.org/pool/updates/main/n/network-manager-applet/network-manager-gnome_0.6.6-4+lenny1_ia64.deb
    Size/MD5 checksum:   379256 f662db05a7011e7e9c4ac46c39b960c6

mips architecture (MIPS (Big Endian))


http://security.debian.org/pool/updates/main/n/network-manager-applet/network-manager-gnome_0.6.6-4+lenny1_mips.deb
    Size/MD5 checksum:   331820 5daf0ed1f11f1848b76b5f48b5e771a9

mipsel architecture (MIPS (Little Endian))


http://security.debian.org/pool/updates/main/n/network-manager-applet/network-manager-gnome_0.6.6-4+lenny1_mipsel.deb
    Size/MD5 checksum:   331298 b2cee8325e9908f7e14aeb455e2ad863

powerpc architecture (PowerPC)


http://security.debian.org/pool/updates/main/n/network-manager-applet/network-manager-gnome_0.6.6-4+lenny1_powerpc.deb
    Size/MD5 checksum:   342226 3b26b9f83aa0c036559f302fb9445fa0

sparc architecture (Sun SPARC/UltraSPARC)


http://security.debian.org/pool/updates/main/n/network-manager-applet/network-manager-gnome_0.6.6-4+lenny1_sparc.deb
    Size/MD5 checksum:   329700 3241f8fd438f725f0526cb628251c4ef


  これらのファイルは次の版の安定版リリース時そちらに移されます。


- ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
------>8------------>8------------>8------------>8------------>8-
-- 
Seiji Kaneko                         skaneko@xxxxxxxxxxxx
---------------------------------------------------------

Prev by Date: [debian-users:53433] [Translate] [SECURITY] [DSA-1953-1] New expat packages fix denial of service
Next by Date: [debian-users:53435] [Translate] [SECURITY] [DSA 1956-1] New xulrunner packages fix several vulnerabilities
Previous by thread: [debian-users:53433] [Translate] [SECURITY] [DSA-1953-1] New expat packages fix denial of service
Next by thread: [debian-users:53435] [Translate] [SECURITY] [DSA 1956-1] New xulrunner packages fix several vulnerabilities
Index(es):
- Date
- Thread