policykit-1 local root exploit CVE-2011-1485

Debian Bug report logs - #644500
policykit-1 local root exploit CVE-2011-1485

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Thijs Kinkhorst" <thijs@debian.org>

To: submit@bugs.debian.org

Subject: policykit-1 local root exploit CVE-2011-1485

Date: Thu, 6 Oct 2011 14:05:10 +0200

Package: policykit-1
Version: 0.96-4
Severity: grave
Tags: security patch

Hi,

A local root exploit in Policykit has been published a while ago. I has
been resolved in unstable/testing already, but squeeze is still affected.
Please see:

http://security-tracker.debian.org/tracker/CVE-2011-1485
https://bugzilla.redhat.com/show_bug.cgi?id=692922

Can you please see if updated packages can be built for stable-security?
The process is detailed here:
http://www.debian.org/doc/manuals/developers-reference/pkgs.html#bug-security
Also let us know if you're not available for this.


thanks,
Thijs

Message #12 received at 644500-done@bugs.debian.org (full text, mbox, reply):

From: Jonathan Nieder <jrnieder@gmail.com>

To: 644500-done@bugs.debian.org

Subject: Re: policykit-1 local root exploit CVE-2011-1485

Date: Mon, 13 Feb 2012 20:48:00 -0600

Version: 0.96-4+squeeze2

Hi,

Thijs Kinkhorst wrote:

> A local root exploit in Policykit has been published a while ago. I has
> been resolved in unstable/testing already, but squeeze is still affected.
> Please see:
>
> http://security-tracker.debian.org/tracker/CVE-2011-1485
> https://bugzilla.redhat.com/show_bug.cgi?id=692922

Fixed by 0.96-4+squeeze1, but the bug closure didn't reach the BTS (see
bug #657758).

Thanks,
Jonathan

Send a report that this bug log contains spam.