This page tracks the changes needed to fix D-Bus deny-by-default.

Debian bug filed

[http://bugs.debian.org/cgi-bin/pkgreport.cgi?users=pkg-utopia-maintainers@lists.alioth.debian.org&usertags=CVE-2008-4311]

(normal severity bugs are not blockers, but are related)

Debian bug should be filed

knetworkmanager ([https://bugzilla.redhat.com/show_bug.cgi?id=475468 Red Hat bug], upstream unhappy with the patch)

policykit ([https://bugs.freedesktop.org/show_bug.cgi?id=18948])

system-tools-backends (might be [http://bugzilla.gnome.org/show_bug.cgi?id=563857 "GNOME system monitor"], [https://bugzilla.redhat.com/show_bug.cgi?id=475203 system-config-services], [http://cvs.fedoraproject.org/viewvc/rpms/system-config-services/F-10/system-config-services-0.99.28-dbus.patch system-config-services], [https://bugzilla.redhat.com/show_bug.cgi?id=475524 system-config-samba]?)

Might be affected, please check

avahi

dnsmasq

gpe-bluetooth

kerneloops

mumble

network-manager

network-manager-applet

network-manager-openvpn

network-manager-pptp

network-manager-vpnc

odccm

pathfinder

smart-notifier

sugar (probably unaffected, needs a second look; related to nm-applet)

system-config-printer

wpasupplicant

yum

Non-RC severity

cups (mjj29)

Unaffected

galago-daemon (not on system bus)

Being dealt with

pommed (upstream and Debian maintainer fixing it)

libosso, osso-gwconnect (RM requested)