This bug was fixed in the package dbus-glib - 0.84-1ubuntu0.2
---------------
dbus-glib (0.84-1ubuntu0.2) lucid-security; urgency=low
* SECURITY UPDATE: fix to honor access flag on specified properties
- debian/patches/01-CVE-2010-1172.patch: don't allow Set/write calls for
readonly properties, or properties not listed in the XML
- CVE-2010-1172
- LP: #616517
-- Jamie Strandboge <[email protected]> Wed, 25 May 2011 15:46:32 -0500
** Changed in: dbus-glib (Ubuntu Lucid)
Status: Fix Committed => Fix Released
** Changed in: dbus-glib (Ubuntu Hardy)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/616517
Title:
CVE-2010-1172 dbus-glib: property access not validated
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
