Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 102702

Summary: net-wireless/kismet multiple vulnerabilities
Product: Gentoo Security Reporter: Thomas Krüger <krueger>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: RESOLVED FIXED    
Severity: major CC: mobile+disabled
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: B1? [glsa] jaervosz
Package list:
Runtime testing required: ---

Description Thomas Krüger 2005-08-16 05:18:57 UTC
Three security relateted vulnerabilities with high risk have been found in kismet.

effected: Kismet prior to 2005-08-R1
uneffected: Kismet 2005-08-R1

For details see:
http://www.frsirt.com/english/advisories/2005/1422
http://www.kismetwireless.net/blog/?entry=/kismet/entry-1124158146.txt
http://www.kismetwireless.net/CHANGELOG

Reproducible: Always
Steps to Reproduce:
Comment 1 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2005-08-16 05:39:17 UTC
Mobile please provide an updated ebuild. 
Comment 2 Henrik Brix Andersen 2005-08-16 05:41:37 UTC
I'm on it.
Comment 3 Henrik Brix Andersen 2005-08-16 06:17:58 UTC
I have added net-wireless/kismet-2005.08.1 to portage. I'll mark it stable on
x86 tonight if no obvious bugs pops up.
Comment 4 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2005-08-16 06:27:35 UTC
Thx Brix. 
 
ppc please test and mark stable. 
Comment 5 Henrik Brix Andersen 2005-08-16 06:31:21 UTC
Same goes for amd64.
Comment 6 Henrik Brix Andersen 2005-08-16 06:32:00 UTC
Argh, sorry - forget that. No earlier release is stable on amd64.
Comment 7 Henrik Brix Andersen 2005-08-16 10:00:50 UTC
Stable on x86.
Comment 8 Jory A. Pratt 2005-08-16 14:35:44 UTC
PPC is stable.
Comment 9 Henrik Brix Andersen 2005-08-16 14:54:35 UTC
Ok, stable on all affected ARCHs - ready for GLSA?
Comment 10 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2005-08-18 22:19:53 UTC
GLSA 200508-10