This bug was fixed in the package dbus-glib - 0.74-2ubuntu0.1
---------------
dbus-glib (0.74-2ubuntu0.1) hardy-security; urgency=low
* SECURITY UPDATE: fix to honor access flag on specified properties
- debian/patches/02-CVE-2010-1172.patch: don't allow Set/write calls for
readonly properties, or properties not listed in the XML
- debian/patches/03-CVE-2010-1172-tests.patch: backport test cases
- CVE-2010-1172
- LP: #616517
* debian/control: Build-Depends on libexpat1-dev
-- Jamie Strandboge <[email protected]> Tue, 24 May 2011 15:48:55 -0500
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/616517
Title:
CVE-2010-1172 dbus-glib: property access not validated
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
