dbus (1.4.18-1ubuntu1.10) precise-security; urgency=medium
[ Marc Deslauriers ]
* SECURITY UPDATE: DoS via file descriptor leak
- debian/patches/CVE-2020-12049.patch: on MSG_CTRUNC, close the fds
we did receive in dbus/dbus-sysdeps-unix.c.
- CVE-2020-12049
dbus (1.4.18-1ubuntu1.9) precise-security; urgency=medium
* SECURITY UPDATE: DBUS_COOKIE_SHA1 implementation flaw
- debian/patches/CVE-2019-12749*.patch:
reject DBUS_COOKIE_SHA1 for users other than the server owner in
dbus/dbus-auth.c, enforce hardening EXTERNAL auth in
bus/session.conf.in, cmake/CMakeLists.txt, configure.ac.
- CVE-2019-12749
Date: 2020-06-15 19:11:14.457832+00:00
Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa)
Signed-By: Ubuntu Archive Robot <ubuntu-archive-ro...@lists.canonical.com>
https://launchpad.net/ubuntu/+source/dbus/1.4.18-1ubuntu1.10
Sorry, changesfile not available.
--
Precise-changes mailing list
Precise-changes@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/precise-changes
