(RHSA-2011:0376) Moderate: dbus security update

2011-03-2200:00:00

access.redhat.com

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

8.6%

JSON

D-Bus is a system for sending messages between applications. It is used for
the system-wide message bus service and as a per-user-login-session
messaging facility.

A denial of service flaw was discovered in the system for sending messages
between applications. A local user could send a message with an excessive
number of nested variants to the system-wide message bus, causing the
message bus (and, consequently, any process using libdbus to receive
messages) to abort. (CVE-2010-4352)

All users are advised to upgrade to these updated packages, which contain a
backported patch to correct this issue. For the update to take effect, all
running instances of dbus-daemon and all running applications using the
libdbus library must be restarted, or the system rebooted.

OSVersionArchitecturePackageVersionFilename
RedHat5s390xdbus< 1.1.2-15.el5_6dbus-1.1.2-15.el5_6.s390x.rpm
RedHat5i386dbus< 1.1.2-15.el5_6dbus-1.1.2-15.el5_6.i386.rpm
RedHat5s390xdbus-x11< 1.1.2-15.el5_6dbus-x11-1.1.2-15.el5_6.s390x.rpm
RedHat5i386dbus-libs< 1.1.2-15.el5_6dbus-libs-1.1.2-15.el5_6.i386.rpm
RedHat6ppc64dbus-libs< 1.2.24-4.el6_0dbus-libs-1.2.24-4.el6_0.ppc64.rpm
RedHat6x86_64dbus-x11< 1.2.24-4.el6_0dbus-x11-1.2.24-4.el6_0.x86_64.rpm
RedHat6s390xdbus< 1.2.24-4.el6_0dbus-1.2.24-4.el6_0.s390x.rpm
RedHat5ia64dbus-libs< 1.1.2-15.el5_6dbus-libs-1.1.2-15.el5_6.ia64.rpm
RedHat6ppcdbus-debuginfo< 1.2.24-4.el6_0dbus-debuginfo-1.2.24-4.el6_0.ppc.rpm
RedHat6i686dbus-devel< 1.2.24-4.el6_0dbus-devel-1.2.24-4.el6_0.i686.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	s390x	dbus	< 1.1.2-15.el5_6	dbus-1.1.2-15.el5_6.s390x.rpm
RedHat	5	i386	dbus	< 1.1.2-15.el5_6	dbus-1.1.2-15.el5_6.i386.rpm
RedHat	5	s390x	dbus-x11	< 1.1.2-15.el5_6	dbus-x11-1.1.2-15.el5_6.s390x.rpm
RedHat	5	i386	dbus-libs	< 1.1.2-15.el5_6	dbus-libs-1.1.2-15.el5_6.i386.rpm
RedHat	6	ppc64	dbus-libs	< 1.2.24-4.el6_0	dbus-libs-1.2.24-4.el6_0.ppc64.rpm
RedHat	6	x86_64	dbus-x11	< 1.2.24-4.el6_0	dbus-x11-1.2.24-4.el6_0.x86_64.rpm
RedHat	6	s390x	dbus	< 1.2.24-4.el6_0	dbus-1.2.24-4.el6_0.s390x.rpm
RedHat	5	ia64	dbus-libs	< 1.1.2-15.el5_6	dbus-libs-1.1.2-15.el5_6.ia64.rpm
RedHat	6	ppc	dbus-debuginfo	< 1.2.24-4.el6_0	dbus-debuginfo-1.2.24-4.el6_0.ppc.rpm
RedHat	6	i686	dbus-devel	< 1.2.24-4.el6_0	dbus-devel-1.2.24-4.el6_0.i686.rpm