Fedora: Security Advisory for fprintd (FEDORA-2020-f997de7d0e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

xdg-desktop-portal bug fix and enhancement update

The xdg-desktop-portal packages provide a portal front-end service to flatpak. Thesis service exposes a series of D-Bus interfaces known as portals under a well-known name org.freedesktop.portal.Desktop and object path /org/freedesktop/portal/desktop. The portal interfaces include APIs for file...

systemd bug fix and enhancement update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes...

Huawei EulerOS: Security Advisory for gdm (EulerOS-SA-2020-2546)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : gdm (EulerOS-SA-2020-2546)

According to the versions of the gdm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The daemon in GDM through 3.29.1 does not properly unexport display objects from its D-Bus interface when they are destroyed, which allows a local...

[ASA-202012-12] blueman: privilege escalation

Arch Linux Security Advisory ASA-202012-12 ========================================== Severity: High Date : 2020-12-09 CVE-ID : CVE-2020-15238 Package : blueman Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-1259 Summary ======= The package blueman before versio...

Denial Of Service (DoS)

phonefsod is vulnerable to denial of service. This vulnerability exist because some packages do not properly filter D-Bus message paths, which might allow local users to cause a denial of service dbus-daemon memory consumption, or execute arbitrary code as root by sending a crafted D-Bus message ...

OPENSUSE-SU-2020:2024-1 Security update for blueman

This update for blueman fixes the following issues: - Update to version 2.1.4 CVE-2020-15238: Fixed a local denial-of-service in the D-Bus interface boo1178196 This update was imported from the openSUSE:Leap:15.2:Update update project...

Security update for blueman (moderate)

openSUSE Security Update: Security update for blueman Announcement ID: openSUSE-SU-2020:2024-1 Rating: moderate References: 1178196 Cross-References: CVE-2020-15238 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available. Description: This update f...

openSUSE Security Update : blueman (openSUSE-2020-1997)

This update for blueman fixes the following issues : - Update to version 2.1.4 - CVE-2020-15238: Fixed a local denial-of-service in the D-Bus interface boo1178196 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Security update for blueman (moderate)

openSUSE Security Update: Security update for blueman Announcement ID: openSUSE-SU-2020:1997-1 Rating: moderate References: 1178196 Cross-References: CVE-2020-15238 Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available...

CVE-2020-16126

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a timely fashion...

Design/Logic Flaw

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a timely fashion...

CVE-2020-16126

The CVE-2020-16126 issue affects Ubuntu’s AccountsService in versions older than 0.6.55-0ubuntu13.2, where an Ubuntu-specific modification dropped the ruid, allowing untrusted users to send signals to AccountsService and hindering its handling of D-Bus messages (denial of service). Remediation: u...

CVE-2020-16126 accountsservice drops ruid, allows unprivileged users to send it signals

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a timely fashion...

CVE-2020-16126

An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a timely fashion...

MGASA-2020-0402 Updated blueman packages fixes a security vulnerability

Vaisha Bernard discovered that blueman did not properly sanitize input on the D-Bus interface to blueman-mechanism. A local attacker could possibly use this issue to escalate privileges and run arbitrary code or cause a denial of service CVE-2020-15238...

Moderate: Red Hat Security Advisory: oddjob security, bug fix, and enhancement update

An update for oddjob is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Moderate: oddjob security, bug fix, and enhancement update

The oddjob packages contain a D-Bus service which performs particular tasks for clients which connect to it and issue requests using the system-wide message bus. The following packages have been upgraded to a later upstream version: oddjob 0.34.5. BZ1833289 Security Fixes: oddjob: race condition ...

[SECURITY] [DLA 2430-1] blueman security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2430-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta November 03, 2020 https://wiki.debian.org/LTS -...