Your message dated Wed, 12 Sep 2012 18:47:04 +0000
with message-id <[email protected]>
and subject line Bug#655972: fixed in network-manager 0.8.1-6+squeeze2
has caused the Debian Bug report #655972,
regarding Creating a new wireless network with WPA results in an unsecured
network instead
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
655972: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655972
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: network-manager-gnome
Version: 0.9.2.0-1
Severity: grave
Tags: security
I followed the following steps:
- Connect to a wired network.
- Click the network-manager-gnome icon, and select "Create New Wireless
Network..."
- Type a network name.
- Select "WPA & WPA2 Personal".
- Click "Show password".
- Paste in a secure password (from pwgen -s 12).
- Click "Create".
- Observe that NetworkManager's icon for the network includes the lock
icon indicating a secure network.
- Attempt to connect to the network from my N900.
- Observe that network icon shows lack of security.
- Observe that I can connect to the network and access the Internet
through the network without providing the previously-specified
password.
Note that creating a network using WEP results in a WEP-"secured"
network, rather than an unsecured network. This issue only seems to
happen when attempting to create a WPA network.
- Josh Triplett
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 3.1.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages network-manager-gnome depends on:
ii dbus-x11 1.4.16-1
ii dpkg 1.16.1.2
ii gconf2 3.2.3-1
ii gnome-icon-theme 3.2.1.2-1
ii libatk1.0-0 2.2.0-2
ii libc6 2.13-24
ii libcairo-gobject2 1.10.2-6.2
ii libcairo2 1.10.2-6.2
ii libdbus-1-3 1.4.16-1
ii libdbus-glib-1-2 0.98-1
ii libfontconfig1 2.8.0-3
ii libfreetype6 2.4.8-1
ii libgconf2-4 3.2.3-1
ii libgdk-pixbuf2.0-0 2.24.0-2
ii libglib2.0-0 2.28.6-1
ii libgnome-bluetooth8 3.2.1-1
ii libgnome-keyring0 3.2.0-3
ii libgtk-3-0 3.0.12-2
ii libnm-glib-vpn1 0.9.2.0-1
ii libnm-glib4 0.9.2.0-1
ii libnm-gtk0 0.9.2.0-1
ii libnm-util2 0.9.2.0-1
ii libnotify4 0.7.4-1
ii libpango1.0-0 1.29.4-2
ii network-manager 0.9.2.0-1
ii policykit-1-gnome 0.105-1
Versions of packages network-manager-gnome recommends:
ii gnome-bluetooth 3.2.1-1
ii iso-codes 3.32-1
ii libpam-gnome-keyring [libpam-keyring] 3.0.3-2
ii mobile-broadband-provider-info <none>
ii notification-daemon 0.7.3-1
Versions of packages network-manager-gnome suggests:
pn network-manager-openvpn-gnome <none>
pn network-manager-pptp-gnome <none>
pn network-manager-vpnc-gnome <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: network-manager
Source-Version: 0.8.1-6+squeeze2
We believe that the bug you reported is fixed in the latest version of
network-manager, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Biebl <[email protected]> (supplier of updated network-manager package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 22 Aug 2012 20:57:08 +0200
Source: network-manager
Binary: network-manager network-manager-dev libnm-glib2 libnm-glib-dev
libnm-glib-vpn1 libnm-glib-vpn-dev libnm-util1 libnm-util-dev
network-manager-dbg
Architecture: source amd64
Version: 0.8.1-6+squeeze2
Distribution: stable
Urgency: low
Maintainer: Utopia Maintenance Team
<[email protected]>
Changed-By: Michael Biebl <[email protected]>
Description:
libnm-glib-dev - network management framework (GLib interface)
libnm-glib-vpn-dev - network management framework (GLib interface)
libnm-glib-vpn1 - network management framework (GLib VPN shared library)
libnm-glib2 - network management framework (GLib shared library)
libnm-util-dev - network management framework (development files)
libnm-util1 - network management framework (shared library)
network-manager - network management framework daemon
network-manager-dbg - network management framework daemon - debugging symbols
network-manager-dev - network management framework (development files)
Closes: 655972
Changes:
network-manager (0.8.1-6+squeeze2) stable; urgency=low
.
* debian/patches/84-CVE-2012-2736.patch
- Disable Ad-Hoc WPA connections as the kernel is broken for Ad-Hoc WPA,
and creates the connections as open connections instead.
- Fixes CVE-2012-2736. (Closes: #655972)
Checksums-Sha1:
5bbbc6add816bd0ec0db4e8d8eac3dadf20443dd 2409
network-manager_0.8.1-6+squeeze2.dsc
092a70b3d6095d8cb81bbfa73a0c1244e517c054 35142
network-manager_0.8.1-6+squeeze2.debian.tar.gz
ad5cd1e5416db7bb82d5fa10697526109927d821 933906
network-manager_0.8.1-6+squeeze2_amd64.deb
5baa4ad210670ff70733479498fc27233ff6dcbe 230596
network-manager-dev_0.8.1-6+squeeze2_amd64.deb
12bc12c4b0e296f237e81e132095caeac25cd452 288612
libnm-glib2_0.8.1-6+squeeze2_amd64.deb
2897e61eb85c590b8581bafd3a110d065c7f037b 379360
libnm-glib-dev_0.8.1-6+squeeze2_amd64.deb
766ef54968d85dd2d29676504db809431aecd537 237138
libnm-glib-vpn1_0.8.1-6+squeeze2_amd64.deb
098631b7e77ea13f47dac4111bf8cf31ace233ab 239406
libnm-glib-vpn-dev_0.8.1-6+squeeze2_amd64.deb
3a6b5879a0c6389ff3b5d686e6390472e366af1a 324148
libnm-util1_0.8.1-6+squeeze2_amd64.deb
0f64048ad8a78647b71336427d4f1414ff525dda 499032
libnm-util-dev_0.8.1-6+squeeze2_amd64.deb
8979c22b36f4fd00f4133d398d7a69aec79c95f6 1196866
network-manager-dbg_0.8.1-6+squeeze2_amd64.deb
Checksums-Sha256:
2625c2fb3db8a2c399faa8f1e218b30b37f67ad9ff42cb5a0acd519f57ff350a 2409
network-manager_0.8.1-6+squeeze2.dsc
b6c586b5ba2d7bc4c2fc6466894406337e5f63370da2aecb4324bb336769b491 35142
network-manager_0.8.1-6+squeeze2.debian.tar.gz
0f5628ca48a43c7a5faa8a1200682abe441e43db2ed7dce089895391dd628c34 933906
network-manager_0.8.1-6+squeeze2_amd64.deb
72cdb4cb17ebbae7d98142430e0ab116b5795fb7e5739ec14a99471b04891768 230596
network-manager-dev_0.8.1-6+squeeze2_amd64.deb
7357aa3be0b6317b15ced04aec44fa1076ff87c7fddd023cf0588ec8b134ae9f 288612
libnm-glib2_0.8.1-6+squeeze2_amd64.deb
991a469412f36aba5d47257b4f055b0fd1ba4400db87b3bc23f5f3489eea4136 379360
libnm-glib-dev_0.8.1-6+squeeze2_amd64.deb
de7655f40f294f6c88187f286b0cc3ca551c26e87803d7d16d3db678aff58d60 237138
libnm-glib-vpn1_0.8.1-6+squeeze2_amd64.deb
ad0a26f90381aa2e518e0b95c48a74028468b01d8aa86cd064f42f7c72f24233 239406
libnm-glib-vpn-dev_0.8.1-6+squeeze2_amd64.deb
947e3b8e42f5bed84fe19250332a827c01f338f70d1ed3ad225420b19d2b886b 324148
libnm-util1_0.8.1-6+squeeze2_amd64.deb
9a8e1fe28d0b1edd08ea10d2203d4e40d1a70ff330a740064c75b0ac48c6e998 499032
libnm-util-dev_0.8.1-6+squeeze2_amd64.deb
51f6a0bd0d827f030e07d6682fb43d0c47309ecc2ac12f0b185b41081535b064 1196866
network-manager-dbg_0.8.1-6+squeeze2_amd64.deb
Files:
65dc8d7f1d7924904b2214a79aec434f 2409 net optional
network-manager_0.8.1-6+squeeze2.dsc
e290776e80e10a2f8ab0357765c1f616 35142 net optional
network-manager_0.8.1-6+squeeze2.debian.tar.gz
015f200cfd726ad8fe36a9cb0a7d8d9c 933906 net optional
network-manager_0.8.1-6+squeeze2_amd64.deb
5d2cfbb400a818c191fa47fd7f0a8fe5 230596 devel optional
network-manager-dev_0.8.1-6+squeeze2_amd64.deb
0218f9c9f850d57ac08f63c2af78569f 288612 libs optional
libnm-glib2_0.8.1-6+squeeze2_amd64.deb
5e0ba2a753e679ecc04f1917b4a91d8d 379360 libdevel optional
libnm-glib-dev_0.8.1-6+squeeze2_amd64.deb
98cca6d9fdea27bbe2ae64df8cd7ec76 237138 libs optional
libnm-glib-vpn1_0.8.1-6+squeeze2_amd64.deb
701a5ef6a0bf38088d7543ae47eb7240 239406 libdevel optional
libnm-glib-vpn-dev_0.8.1-6+squeeze2_amd64.deb
8d04bef4f0c726f4219d5214c88ef2fc 324148 libs optional
libnm-util1_0.8.1-6+squeeze2_amd64.deb
17d8a207d005d26ef50baacdf931b0cc 499032 libdevel optional
libnm-util-dev_0.8.1-6+squeeze2_amd64.deb
3c8a4d550257311061fda72f5fe94e5f 1196866 debug extra
network-manager-dbg_0.8.1-6+squeeze2_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=mZcr
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Pkg-utopia-maintainers mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-utopia-maintainers