Lucene search

K
centosCentOS ProjectCESA-2007:0008
HistoryFeb 09, 2007 - 2:06 a.m.

dbus security update

2007-02-0902:06:35
CentOS Project
lists.centos.org
49

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

0.018 Low

EPSS

Percentile

88.0%

CentOS Errata and Security Advisory CESA-2007:0008

D-BUS is a system for sending messages between applications. It is used
both for the systemwide message bus service, and as a
per-user-login-session messaging facility.

Kimmo Hamalainen discovered a flaw in the way D-BUS processes certain
messages. It is possible for a local unprivileged D-BUS process to disrupt
the ability of another D-BUS process to receive messages. (CVE-2006-6107)

Users of dbus are advised to upgrade to these updated packages, which
contain backported patches to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-February/075683.html
https://lists.centos.org/pipermail/centos-announce/2007-February/075684.html
https://lists.centos.org/pipermail/centos-announce/2007-February/075685.html
https://lists.centos.org/pipermail/centos-announce/2007-February/075686.html

Affected packages:
dbus
dbus-devel
dbus-glib
dbus-python
dbus-x11

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0008

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

0.018 Low

EPSS

Percentile

88.0%