Bug#759300: wheezy-pu: package live-config/3.0.23-1+deb7u1

[Jonathan Wiltshire <jmw@debian.org>]

Control: tag -1 confirmed

On 2014-08-25 16:13, Luciano Bello wrote:
>   After talking with Daniel, we agreed to update the patch for this 
> (non-
> critical security) bug via spu. This will allow to build the next 
> debian-live
> without the vulnerability.
>   The problem is the following: Debian-live allows to SSH access with 
> default
> user and password. The patch disable ssh password authentication.
>   The debdiff is attached.

Please go ahead.

Thanks,

--
Jonathan Wiltshire                                      jmw@debian.org
Debian Developer                         http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

<directhex> i have six years of solaris sysadmin experience, from
            8->10. i am well qualified to say it is made from bonghits
			layered on top of bonghits