Package: network-manager Version: 1.0.4-1 Severity: important File: /etc/dbus-1/system.d/org.freedesktop.NetworkManager.conf
Seeing the latest upstream release, it noticed the following commit [1]: > dbus: increase 'max_replies_per_connection' limit in D-Bus > configuration > D-Bus default limit of replies per connection has been lowered to 128 > due to > CVE-2014-3638, see: > http://cgit.freedesktop.org/dbus/dbus/commit/?id=5bc7f9519ebc6117ba300c704794b36b87c2194b > https://bugs.freedesktop.org/show_bug.cgi?id=81053 > > The limit seems to be too low and causes problems in libnm-glib, that > will not > return all NetworkManager connection profiles if there are too many of > them > (roughly more than the limit). As a consequence, libnm-glib based > clients will > not work properly. I don't think it's a good idea, that invidual packages override the dbus limit, which was lowered in responce to a CVE. Filing this bug to keep track of the issue. See [2] and the followup messages. Michael [1] http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?id=2c299ba65c51e9c407090dc83929d692c74ee3f2 [2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773525#35 -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500, 'unstable'), (200, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.0.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages network-manager depends on: ii adduser 3.113+nmu3 ii dbus 1.8.20-1 ii init-system-helpers 1.23 ii isc-dhcp-client 4.3.2-1 ii libbluetooth3 5.23-2+b1 ii libc6 2.19-19 ii libdbus-1-3 1.8.20-1 ii libdbus-glib-1-2 0.102-1 ii libgcrypt20 1.6.3-2 ii libglib2.0-0 2.44.1-1.1 ii libgnutls-deb0-28 3.3.16-1 ii libgudev-1.0-0 230-2 ii libmm-glib0 1.4.10-1 ii libndp0 1.4-2 ii libnewt0.52 0.52.18-1 ii libnl-3-200 3.2.26-1 ii libnl-genl-3-200 3.2.26-1 ii libnl-route-3-200 3.2.26-1 ii libnm0 1.0.4-1 ii libpam-systemd 223-2 ii libpolkit-agent-1-0 0.105-11 ii libpolkit-gobject-1-0 0.105-11 ii libreadline6 6.3-8+b3 ii libsoup2.4-1 2.50.0-2 ii libsystemd0 223-2 ii libteamdctl0 1.17-1 ii libuuid1 2.26.2-9 ii lsb-base 4.1+Debian13+nmu1 ii policykit-1 0.105-11 ii udev 223-2 ii wpasupplicant 2.3-2 Versions of packages network-manager recommends: ii crda 3.13-1 ii dnsmasq-base 2.74-1 ii iptables 1.4.21-2+b1 ii iputils-arping 3:20121221-5+b2 ii modemmanager 1.4.10-1 ii ppp 2.4.6-3.1 Versions of packages network-manager suggests: ii avahi-autoipd 0.6.31-5 pn libteam-utils <none> -- Configuration Files: /etc/NetworkManager/NetworkManager.conf changed [not included] -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
