lp:~jtaylor/ubuntu/precise/wicd/CVE-2012-2095

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp:ubuntu/precise/wicd

Ubuntu branches: Pending requested 2012-04-30

Diff: 121 lines (+89/-1)

4 files modified

debian/changelog (+12/-0)
debian/control (+2/-1)
debian/patches/33-fix_local_privilege_escalation.patch (+74/-0)
debian/patches/series (+1/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #979221: priv escalation exploit for wicd possible

Undecided

Fix Released

Link a bug report

Related blueprints

27. By Julian Taylor on 2012-05-03

encode to ascii to avoid crash on unicode input

26. By Julian Taylor on 2012-05-03

fix unicode issue in patch

25. By Julian Taylor on 2012-04-30

update-maintainer

24. By Julian Taylor on 2012-04-30

* SECURITY UPDATE: privilege escalation (LP: #979221)
  - debian/patches/33-fix_local_privilege_escalation.patch:
    sanitize config properties
    Backported from
    http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/767
    Thanks to David Paleino <email address hidden>
  - CVE-2012-2095

23. By David Paleino on 2012-04-22

* New upstram version
  - fix bug with wicd-curses and UTF-8 locales (Closes: #669602)

22. By David Paleino on 2012-04-12

* New upstream version
  - fix crash with wicd-curses (Closes: #668520)

21. By David Paleino on 2012-02-02

* New upstream release
* Patches refreshed to match 1.7.1's code

20. By David Paleino on 2011-10-22

Fix postinst: it breaks dh_python2's layout

19. By David Paleino on 2011-02-12

* debian/patches/:
  - 26-support_etc-network_scripts.patch refreshed, /etc/network/
    scripts should now be properly supported (Closes: #579497)
  - 31-dont_crash_on_notification_exceptions.patch added
    (Closes: #569755, #587303)
  - 32-prefer_gksu.patch added (Closes: #575403)
  - 33-deepcopy_python27_fixes.patch backported from Ubuntu,
    thanks to Matthieu Baerts (LP: #602825)
  - 34-dont_save_useless_config.patch added: don't save link quality,
    signal strength and bitrates in the configuration files.
    (Closes: #612918)
  - 35-restrict_netmode_characters.patch added, don't crash
    if the network mode is not what we expect. Thanks to Julien
    Blache for the patch (Closes: #550957)
* debian/control:
  - removed depedency on python-iniparse from wicd-daemon
  - removed Build-Depends on quilt
  - fixed typo in long description, thanks to Martin Eberhard Schauer
    (Closes: #611567)
  - bump Standards-Version to 3.9.1, no changes needed
  - use Breaks+Replaces instead of Conflicts+Replaces
* debian/rules:
  - don't use "--with quilt" anymore
* debian/po/pt_BR.po added: debconf translation for Brazilian
  Portuguese, thanks to Adriano Rafael Gomes (Closes: #594266)
* debian/wicd-daemon.config: don't ask if all users are already
  in the netdev group (Closes: #588078)
* debian/wicd-cli.8: explain -w/--save and -m/--name (Closes: #583586)
* debian/wicd-daemon.wicd.init, export $PATH, makes the daemon work
  in a clean environment. Thanks to Peter Palfrader (Closes: #604810)
* debian/wicd-curses.postrm: redirect stderr (Closes: #605338)

18. By Matthieu Baerts on 2010-12-11

* debian/patches/
 - Added 31-deepcopy+python27-fixes.patch for python 2.7
   (credit to Archlinux and Remy Oudompheng - LP: #602825)