[USN-727-2] NetworkManager vulnerability
Subject: [USN-727-2] NetworkManager vulnerability
From: Marc Deslauriers <marc.deslauriers@canonical.com.>
To: [email protected]
X-Original-To: [email protected]
X-Mailcontrol-Inbound: uq3drnD2P+ps5SfEb0fvr78+NoP1DHBZwGqKpaXB2eTgNv8D6KLIxb8+NoP1DHBZ8VSaBg0k0xw=
X-Spam-Score: -14.4
X-Scanned-By: MailControl A_08_51_00 (www.mailcontrol.com) on 10.69.0.152
Date: Tue, 03 Mar 2009 14:46:12 -0500
Message-Id: <1236109572.6589.20.camel@mdlinux.technorage.com.>
Mime-Version: 1.0
X-Mailer: Evolution 2.25.91
X-Mailman-Approved-At: Tue, 03 Mar 2009 19:48:25 +0000
Cc: [email protected], [email protected]
X-BeenThere: [email protected]
X-Mailman-Version: 2.1.8
Reply-To: [email protected],
Ubuntu Security <security@ubuntu.com.>
Content-Type: multipart/mixed; boundary="===============3869768016453902051=="
Mime-version: 1.0
Sender: [email protected]
Errors-To: [email protected]
X-Virus-Scanned: antivirus-gw at tyumen.ru
--===============3869768016453902051==
Content-Type: multipart/signed; micalg="pgp-sha1"; protocol="application/pgp-signature"; boundary="=-7NA8d7ZmN3xconsiQW7a"
--=-7NA8d7ZmN3xconsiQW7a
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D
Ubuntu Security Notice USN-727-2 March 03, 2009
network-manager vulnerability
CVE-2009-0365
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D
A security issue affects the following Ubuntu releases:
Ubuntu 6.06 LTS
Ubuntu 8.10
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 6.06 LTS:
network-manager-gnome 0.6.2-0ubuntu7.1
Ubuntu 8.10:
network-manager 0.7~~svn20081018t105859-0ubuntu1.8.10.2
In general, a standard system upgrade is sufficient to effect the
necessary changes.
Details follow:
USN-727-1 fixed vulnerabilities in network-manager-applet. This advisory
provides the corresponding updates for NetworkManager.
It was discovered that NetworkManager did not properly enforce permissions =
when
responding to dbus requests. A local user could perform dbus queries to vie=
w
system and user network connection passwords and pre-shared keys.
Updated packages for Ubuntu 6.06 LTS:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager_0.6.2-0ubuntu7.1.diff.gz
Size/MD5: 34743 600cb7e8502953d66ee115db7f80e7e8
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager_0.6.2-0ubuntu7.1.dsc
Size/MD5: 1055 c5fa9f57b9b4885fc22701b2a194d4ae
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager_0.6.2.orig.tar.gz
Size/MD5: 1020184 dd5d54e70d34320d302366b74a46dbb2
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l-dev_0.6.2-0ubuntu7.1_amd64.deb
Size/MD5: 121858 1091f4d13eb137d9642f869e948aa078
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l0-dbg_0.6.2-0ubuntu7.1_amd64.deb
Size/MD5: 127252 e57037d3d5e033c22acdf6790bd5a332
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l0_0.6.2-0ubuntu7.1_amd64.deb
Size/MD5: 117516 5ad2a4f299e1e8817a8738185a2c017e
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-dbg_0.6.2-0ubuntu7.1_amd64.deb
Size/MD5: 383806 652ac19c650545cfacda8b8088288b08
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-dev_0.6.2-0ubuntu7.1_amd64.deb
Size/MD5: 105282 d76a91263f62e38d9cc491525bb92d6a
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-gnome-dbg_0.6.2-0ubuntu7.1_amd64.deb
Size/MD5: 315080 1b4411682db55d1ba47f89e359cf46d4
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-gnome_0.6.2-0ubuntu7.1_amd64.deb
Size/MD5: 252418 ecd413af32b6ca0624977221b654537f
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager_0.6.2-0ubuntu7.1_amd64.deb
Size/MD5: 246526 c54e60f980ca55b3011db2a338bb76f4
http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm=
-glib-dev_0.6.2-0ubuntu7.1_amd64.deb
Size/MD5: 111916 042e88f2641e83f128c46da7075163a8
http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm=
-glib0-dbg_0.6.2-0ubuntu7.1_amd64.deb
Size/MD5: 116148 ea0a66b60676105aadf9d02b98b421b9
http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm=
-glib0_0.6.2-0ubuntu7.1_amd64.deb
Size/MD5: 111194 619323f4f567215ef769b442f3017546
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l-dev_0.6.2-0ubuntu7.1_i386.deb
Size/MD5: 120794 e5509d2e13cf7d1c9bdcebafb106c25b
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l0-dbg_0.6.2-0ubuntu7.1_i386.deb
Size/MD5: 120694 bf4587855de9b0583261fbac9dc7fcaf
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l0_0.6.2-0ubuntu7.1_i386.deb
Size/MD5: 116584 b1a080871e2e129d98eef605127ce204
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-dbg_0.6.2-0ubuntu7.1_i386.deb
Size/MD5: 344318 ae65186e75641ebec2b727e94d30c7c2
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-dev_0.6.2-0ubuntu7.1_i386.deb
Size/MD5: 105284 cc1442a71b1a094bc83da1cf5bab16c4
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-gnome-dbg_0.6.2-0ubuntu7.1_i386.deb
Size/MD5: 287922 922c4210cbc75cd3bdb44ff0b3079114
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-gnome_0.6.2-0ubuntu7.1_i386.deb
Size/MD5: 240778 d2d4c1540a359fe98c1c7772b4c017c7
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager_0.6.2-0ubuntu7.1_i386.deb
Size/MD5: 227720 4010298ffdebc042822509f15f0bb546
http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm=
-glib-dev_0.6.2-0ubuntu7.1_i386.deb
Size/MD5: 110910 e8c43189983fb32c8acf7f2d0d9fa14d
http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm=
-glib0-dbg_0.6.2-0ubuntu7.1_i386.deb
Size/MD5: 114384 1ba62785c9140ecd3089b245d0810c6d
http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm=
-glib0_0.6.2-0ubuntu7.1_i386.deb
Size/MD5: 109904 66ee6b1be8fbd94e8efb2b7f107830a1
powerpc architecture (Apple Macintosh G3/G4/G5):
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l-dev_0.6.2-0ubuntu7.1_powerpc.deb
Size/MD5: 123122 1a6f1e635c3dc77cc22bdfd7bb60bc11
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l0-dbg_0.6.2-0ubuntu7.1_powerpc.deb
Size/MD5: 127272 0210f69f718d82ece63aed25e74d402b
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l0_0.6.2-0ubuntu7.1_powerpc.deb
Size/MD5: 119154 88c0decef4748240a22b09154f141616
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-dbg_0.6.2-0ubuntu7.1_powerpc.deb
Size/MD5: 379006 e2c84cd5f803d99f8d41c817375098c8
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-dev_0.6.2-0ubuntu7.1_powerpc.deb
Size/MD5: 105290 c69253d41131324fa18f7e0e759d9202
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-gnome-dbg_0.6.2-0ubuntu7.1_powerpc.deb
Size/MD5: 307174 adeffed37388baa98cdf56edbce1ed84
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-gnome_0.6.2-0ubuntu7.1_powerpc.deb
Size/MD5: 246574 e57477ee9b34ac26987b8ba70343f112
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager_0.6.2-0ubuntu7.1_powerpc.deb
Size/MD5: 241916 f069122433b555d066510821cfcc0d0b
http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm=
-glib-dev_0.6.2-0ubuntu7.1_powerpc.deb
Size/MD5: 112090 03dbe4aaf71c5836296f627ae7bad604
http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm=
-glib0-dbg_0.6.2-0ubuntu7.1_powerpc.deb
Size/MD5: 116776 efc5f6e58a3a479d0edc36b102e34e69
http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm=
-glib0_0.6.2-0ubuntu7.1_powerpc.deb
Size/MD5: 111912 c860c571d36875ff394d24a8ecbcb317
sparc architecture (Sun SPARC/UltraSPARC):
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l-dev_0.6.2-0ubuntu7.1_sparc.deb
Size/MD5: 123078 189c7233442448f0b9d42f6ccc9d65a7
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l0-dbg_0.6.2-0ubuntu7.1_sparc.deb
Size/MD5: 122076 f7534c8a43b2b8b6b0b1125f60f70e52
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l0_0.6.2-0ubuntu7.1_sparc.deb
Size/MD5: 118472 ea1c7f1bfc59384ce03875fe980b14dc
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-dbg_0.6.2-0ubuntu7.1_sparc.deb
Size/MD5: 340152 294d1c6ac8e1f96681b084c5ff4432ea
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-dev_0.6.2-0ubuntu7.1_sparc.deb
Size/MD5: 105284 e0a0e396ac51ca61d3a8d4009dbd8378
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-gnome-dbg_0.6.2-0ubuntu7.1_sparc.deb
Size/MD5: 286406 1515545d5f8479c2b4dd9a9781ca80bf
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-gnome_0.6.2-0ubuntu7.1_sparc.deb
Size/MD5: 240640 53c83f717806730239346aadb092128c
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager_0.6.2-0ubuntu7.1_sparc.deb
Size/MD5: 230482 c2cd805ee8d49605628049cc2085a1cf
http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm=
-glib-dev_0.6.2-0ubuntu7.1_sparc.deb
Size/MD5: 111890 be5c94248904858e4d02c941c1419b7c
http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm=
-glib0-dbg_0.6.2-0ubuntu7.1_sparc.deb
Size/MD5: 114498 5a5b1e42901b5b48d5ea9add28420f57
http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm=
-glib0_0.6.2-0ubuntu7.1_sparc.deb
Size/MD5: 110476 cb0ad802dcfd9293220d86884e00b45a
Updated packages for Ubuntu 8.10:
Source archives:
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager_0.7~~svn20081018t105859-0ubuntu1.8.10.2.diff.gz
Size/MD5: 53080 0f19cb4cbb0bfdab4ca52e9b9c73cb12
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager_0.7~~svn20081018t105859-0ubuntu1.8.10.2.dsc
Size/MD5: 1844 0f0437a7643d7d9666a98b34eb1c6948
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager_0.7~~svn20081018t105859.orig.tar.gz
Size/MD5: 1212180 69beaf9748236aa52b10171260089eab
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-gli=
b-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_amd64.deb
Size/MD5: 112584 830c5716079c81073e010497412b2d48
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-gli=
b0_0.7~~svn20081018t105859-0ubuntu1.8.10.2_amd64.deb
Size/MD5: 62498 611af9f6d4c3e2b0d785a777bb30e149
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_amd64.deb
Size/MD5: 77692 591bd10891213c11296705dbc1e73d0b
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l0_0.7~~svn20081018t105859-0ubuntu1.8.10.2_amd64.deb
Size/MD5: 77264 2821140fb2f561650962866e147ecf1b
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_amd64.deb
Size/MD5: 6356 6850c4113c56037851a42e6b706dd7d8
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager_0.7~~svn20081018t105859-0ubuntu1.8.10.2_amd64.deb
Size/MD5: 290368 cb39ed7239bece30200f13f4d7300ca6
i386 architecture (x86 compatible Intel/AMD):
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-gli=
b-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_i386.deb
Size/MD5: 98336 be6f99056369a30d57df9ff0240eeef5
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-gli=
b0_0.7~~svn20081018t105859-0ubuntu1.8.10.2_i386.deb
Size/MD5: 55008 a869f6812bc638821d11a3cc044fec2f
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_i386.deb
Size/MD5: 66950 bfa354627928981f817742918735918e
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-uti=
l0_0.7~~svn20081018t105859-0ubuntu1.8.10.2_i386.deb
Size/MD5: 72056 b2093f43d1ce34cc3e5624e602d321c3
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_i386.deb
Size/MD5: 6354 fe0716a4d4bcbbc03b2fd8acc06e913e
http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-m=
anager_0.7~~svn20081018t105859-0ubuntu1.8.10.2_i386.deb
Size/MD5: 263832 54b49d875cbeadd055e4ee7a9ce9219a
lpia architecture (Low Power Intel Architecture):
http://ports.ubuntu.com/pool/main/n/network-manager/libnm-glib-dev_0.7~=
~svn20081018t105859-0ubuntu1.8.10.2_lpia.deb
Size/MD5: 97636 bba139127632134dd61918e386cff27d
http://ports.ubuntu.com/pool/main/n/network-manager/libnm-glib0_0.7~~sv=
n20081018t105859-0ubuntu1.8.10.2_lpia.deb
Size/MD5: 52826 b52a1cf3fdfc5e7b2eefb4407eb768a1
http://ports.ubuntu.com/pool/main/n/network-manager/libnm-util-dev_0.7~=
~svn20081018t105859-0ubuntu1.8.10.2_lpia.deb
Size/MD5: 66264 39caaf9daa21e5941ed232caae184660
http://ports.ubuntu.com/pool/main/n/network-manager/libnm-util0_0.7~~sv=
n20081018t105859-0ubuntu1.8.10.2_lpia.deb
Size/MD5: 70742 93cefabc57ba5a3253f5795e13023a9a
http://ports.ubuntu.com/pool/main/n/network-manager/network-manager-dev=
_0.7~~svn20081018t105859-0ubuntu1.8.10.2_lpia.deb
Size/MD5: 6362 ef1f2fcb9de3a441faa97a496cdeeffe
http://ports.ubuntu.com/pool/main/n/network-manager/network-manager_0.7=
~~svn20081018t105859-0ubuntu1.8.10.2_lpia.deb
Size/MD5: 259708 ab41d397cf87f04dca4631ba9570393a
powerpc architecture (Apple Macintosh G3/G4/G5):
http://ports.ubuntu.com/pool/main/n/network-manager/libnm-glib-dev_0.7~=
~svn20081018t105859-0ubuntu1.8.10.2_powerpc.deb
Size/MD5: 111880 719ce51233b96a89de6c55250a21a82b
http://ports.ubuntu.com/pool/main/n/network-manager/libnm-glib0_0.7~~sv=
n20081018t105859-0ubuntu1.8.10.2_powerpc.deb
Size/MD5: 62218 ca9910877eddbc1aedc8c1c59ccc1fe8
http://ports.ubuntu.com/pool/main/n/network-manager/libnm-util-dev_0.7~=
~svn20081018t105859-0ubuntu1.8.10.2_powerpc.deb
Size/MD5: 81850 2eddceb9dc6f356759bdc0989e02b9aa
http://ports.ubuntu.com/pool/main/n/network-manager/libnm-util0_0.7~~sv=
n20081018t105859-0ubuntu1.8.10.2_powerpc.deb
Size/MD5: 79320 46fc422fa935e1e608a34e0fd41691f2
http://ports.ubuntu.com/pool/main/n/network-manager/network-manager-dev=
_0.7~~svn20081018t105859-0ubuntu1.8.10.2_powerpc.deb
Size/MD5: 6358 ed0c910660a9f86bb9e33cc50bb76bf7
http://ports.ubuntu.com/pool/main/n/network-manager/network-manager_0.7=
~~svn20081018t105859-0ubuntu1.8.10.2_powerpc.deb
Size/MD5: 297306 e787cc3e105e34a1a703f9323e712099
sparc architecture (Sun SPARC/UltraSPARC):
http://ports.ubuntu.com/pool/main/n/network-manager/libnm-glib-dev_0.7~=
~svn20081018t105859-0ubuntu1.8.10.2_sparc.deb
Size/MD5: 104144 0c4f78e6bab71a11c1e1540266512169
http://ports.ubuntu.com/pool/main/n/network-manager/libnm-glib0_0.7~~sv=
n20081018t105859-0ubuntu1.8.10.2_sparc.deb
Size/MD5: 56428 f368a9c8694eaaed9e91db1efec4ffb1
http://ports.ubuntu.com/pool/main/n/network-manager/libnm-util-dev_0.7~=
~svn20081018t105859-0ubuntu1.8.10.2_sparc.deb
Size/MD5: 72740 1567dfe6b161af503c63d0eef70c930c
http://ports.ubuntu.com/pool/main/n/network-manager/libnm-util0_0.7~~sv=
n20081018t105859-0ubuntu1.8.10.2_sparc.deb
Size/MD5: 73998 3473cc4be864c95a054bb7608c32d7a0
http://ports.ubuntu.com/pool/main/n/network-manager/network-manager-dev=
_0.7~~svn20081018t105859-0ubuntu1.8.10.2_sparc.deb
Size/MD5: 6362 ad5c2d9d34043867d6407caac1731f87
http://ports.ubuntu.com/pool/main/n/network-manager/network-manager_0.7=
~~svn20081018t105859-0ubuntu1.8.10.2_sparc.deb
Size/MD5: 265632 b292daa57f5178e7a88651eb9e133d7a
--=-7NA8d7ZmN3xconsiQW7a
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEABECAAYFAkmtiQIACgkQLMAs/0C4zNrRHACgiarMoZE8R3VPJxUtti2bKaRh
UsUAn3vV6YNQF9k2ZV6dLL5WXqATYh1V
=QS4d
-----END PGP SIGNATURE-----
--=-7NA8d7ZmN3xconsiQW7a--
--===============3869768016453902051==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
--
ubuntu-security-announce mailing list
[email protected]
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============3869768016453902051==--
