On 12-09 20:14, Michael Biebl wrote: > > I agree it is a security issue, but imho not such a severe one that severity > grave is justified, especially as it only happens under very particular > circumstances (thus downgrading to important).
Ok, it is anyway quite rare. And need to be trigered by deleting certificate file, so it is quite unprobable to be a malicious vector attack. > > This bug is supposedly fixed in the upcoming 0.8 release. If you want to try, > I > have preliminary packages at [1] and I would be interested if this packages > behave better. I would be happy to check this. > [1] http://debs.michaelbiebl.de/network-manager/ I added this repositoy to sources.list. On upgrade (or apt-get install network-manager-gnome network-manager), apt-get (and aptitude) want to remove policykit. for no apparent reason. I checked briefly and I have *pol*kit* in versions 0.9-4 or 0.95-1 or greater, and your network-manager packages depends on libpolkit* (>= 0.7) and recommends policykit. I don't know why aptitude wants to remove it. Even forcing instalation of policykit doesn't resolve problem: sredniczarny:/home/baryluk# LC_ALL=C aptitude -d -V install network-manager-gnome network-manager policykit Reading package lists... Done Building dependency tree Reading state information... Done Reading extended state information... Done Initializing package states... Done Reading task descriptions... Done The following NEW packages will be installed: libnm-glib-vpn1{a} [0.7.997-1] libnm-glib2{a} [0.7.997-1] The following packages will be REMOVED: libpolkit-dbus2{u} [0.9-4] libpolkit-gnome0{u} [0.9.2-2] libpolkit-grant2{u} [0.9-4] libpolkit2{u} [0.9-4] policykit{u} [0.9-4] policykit-gnome{u} [0.9.2-2] The following packages will be upgraded: libnm-util1 [0.7.2-2 -> 0.7.997-1] network-manager [0.7.2-2 -> 0.7.997-1] network-manager-gnome [0.7.2-1 -> 0.7.997-1] 3 packages upgraded, 2 newly installed, 6 to remove and 118 not upgraded. Need to get 0B/2598kB of archives. After unpacking 274kB will be freed. Do you want to continue? [Y/n/?] ... It still wants to remove policykit. It is nonsensical. Mayby it is something broken in unstable, i will wait few days. Regards. -- Witold Baryluk JID: witold.baryluk // jabster.pl
signature.asc
Description: Digital signature
