[SECURITY] Fedora 30 Update: dbus-broker-20-4.fc30

dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusiv ely written for Linux systems, and makes use of many modern features...

Design/Logic Flaw

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which...

CVE-2015-1327

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which...

CVE-2015-1327

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which...

CVE-2015-1327

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 is vulnerable to an information disclosure via DBUS API where a confined app passes a file path and a malicious actor could cause a transfer of file:///etc/passwd to another app. Root cause: the DBUS API does not require the confined app to...

CVE-2015-1327 Content-hub DBUS API doesn't prevent confined apps from passing paths to files without access

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which...

[SECURITY] Fedora 29 Update: mpris-scrobbler-0.3.2-2.fc29

mpris-scrobbler is a minimalist user daemon that submits the currently play ing song to LastFM, LibreFM, ListenBrainz, and compatible services. To retrieve song information, it uses the MPRIS DBus interface, so it works with any me dia player that exposes this interface...

[SECURITY] Fedora 29 Update: group-service-1.1.0-5.fc29

Dbus Group management CLI tool...

[SECURITY] Fedora 30 Update: mpris-scrobbler-0.3.2-2.fc30

mpris-scrobbler is a minimalist user daemon that submits the currently play ing song to LastFM, LibreFM, ListenBrainz, and compatible services. To retrieve song information, it uses the MPRIS DBus interface, so it works with any me dia player that exposes this interface...

[SECURITY] Fedora 30 Update: group-service-1.1.0-5.fc30

Dbus Group management CLI tool...

[SECURITY] Fedora 30 Update: dbus-broker-20-3.fc30

dbus-broker is an implementation of a message bus as defined by the D-Bus specification. Its aim is to provide high performance and reliability, while keeping compatibility to the D-Bus reference implementation. It is exclusiv ely written for Linux systems, and makes use of many modern features...

EulerOS Virtualization 2.5.4 : systemd (EulerOS-SA-2019-1196)

According to the version of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was discovered that systemd allocates a buffer large enough to store the path field of a dbus message without performing enough...

EulerOS Virtualization 2.5.3 : systemd (EulerOS-SA-2019-1256)

According to the version of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was discovered that systemd allocates a buffer large enough to store the path field of a dbus message without performing enough...

DEBIAN-CVE-2019-6454

An issue was discovered in sd-bus in systemd 239. busprocessobject in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to...

The vulnerability of the graphical user input component in the fly-dm system of the Astra Linux operating system allows a intruder to unauthorizedly alter the level of session integrity.

The vulnerability of the graphical user input component in the fly-dm system of the Astra Linux operating system is related to an error that causes the fly-mac-dialog component to be executed without the required DBUSSESSIONBUSADDRESS=nothing option. This option is necessary for executing the dbu...

systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash

It was discovered that systemd allocates a buffer large enough to store the path field of a dbus message without performing enough checks. A local attacker may trigger this flaw by sending a dbus message to systemd with a large path making systemd crash or possibly elevating his privileges...

openSUSE Security Update : systemd (openSUSE-2019-268)

This update for systemd fixes the following issues : Security vulnerability fixed : - CVE-2019-6454: Fixed a crash of PID1 by sending specially crafted D-BUS message on the system bus by an unprivileged user bsc1125352 Other bug fixes and changes : - journal-remote: set a limit on the number of...

Security update for systemd (important)

openSUSE Security Update: Security update for systemd Announcement ID: openSUSE-SU-2019:0255-1 Rating: important References: 1117025 1121563 1122000 1123333 1123727 1123892 1124153 1125352 Cross-References: CVE-2019-6454 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerabilit...

[ASA-201902-24] systemd: denial of service

Arch Linux Security Advisory ASA-201902-24 ========================================== Severity: High Date : 2019-02-21 CVE-ID : CVE-2019-6454 Package : systemd Type : denial of service Remote : No Link : https://security.archlinux.org/AVG-906 Summary ======= The package systemd before version...

Denial Of Service (DoS)

libsystemd.so is vulnerable to denial of service. A local attacker is able to cause a kernel panic by sending a malicious DBUS message which would cause a stack-based buffer overflow in the function busprocessobject in bus-objects.c...