Important: dbus

Issue Overview: A flaw was found in dbus. The implementation of DBUSCOOKIESHA1 is susceptible to a symbolic link attack. A malicious client with write access to its own home directory could manipulate a /.dbus-keyrings symlink to cause the DBusServer to read and write in unintended locations...

CVE-2022-42012 affecting package dbus for versions less than 1.15.2-2

CVE-2022-42012 affecting package dbus for versions less than 1.15.2-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-42010 affecting package dbus for versions less than 1.15.2-2

CVE-2022-42010 affecting package dbus for versions less than 1.15.2-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-42011 affecting package dbus for versions less than 1.15.2-2

CVE-2022-42011 affecting package dbus for versions less than 1.15.2-2. An upgraded version of the package is available that resolves this issue...

flatpak bug fix and enhancement update

An update is available for mozilla-filesystem, sbc, dbus-glib. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list These packages will be released only via the...

flatpak bug fix and enhancement update

An update is available for mozilla-filesystem, sbc, dbus-glib. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list These packages will be released only via the firef...

SUSE SLES12 Security Update : dbus-1 (SUSE-SU-2022:3804-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3804-1 advisory. - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature bsc1204111. - CVE-2022-42011: Fixed an out ...

SUSE: Security Advisory (SUSE-SU-2022:3806-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: dbus-1 / dbus-1-devel / dbus-1-devel-32bit / dbus-1-devel-doc / etc (SUSE-SU-2022:3805-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3805-1 advisory. - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature...

Huawei EulerOS: Security Advisory for dbus (EulerOS-SA-2022-2605)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:3804-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5704-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:3805-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:3806-1 Security update for dbus-1

This update for dbus-1 fixes the following issues: - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature bsc1204111. - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array bsc1204112. - CVE-2022-42012: Fixed a use-after-free that could be...

SUSE-SU-2022:3805-1 Security update for dbus-1

This update for dbus-1 fixes the following issues: - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature bsc1204111. - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array bsc1204112. - CVE-2022-42012: Fixed a use-after-free that could be...

SUSE-SU-2022:3804-1 Security update for dbus-1

This update for dbus-1 fixes the following issues: - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature bsc1204111. - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array bsc1204112. - CVE-2022-42012: Fixed a use-after-free that could be...

USN-5704-1: DBus vulnerabilities

It was discovered that DBus incorrectly handled messages with invalid type signatures. A local attacker could possibly use this issue to cause DBus to crash, resulting in a denial of service. CVE-2022-42010 It was discovered that DBus was incorrectly validating the length of arrays of fixed-lengt...

USN-5704-1 dbus vulnerabilities

It was discovered that DBus incorrectly handled messages with invalid type signatures. A local attacker could possibly use this issue to cause DBus to crash, resulting in a denial of service. CVE-2022-42010 It was discovered that DBus was incorrectly validating the length of arrays of fixed-lengt...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : DBus vulnerabilities (USN-5704-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5704-1 advisory. It was discovered that DBus incorrectly handled messages with invalid type signatures. A local attacker could possibl...

Fedora: Security Advisory for dbus (FEDORA-2022-7a963a79d1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...