Advisories » MGAA-2014-0182

Updated dbus packages fix a regression with default auth_timeout

Publication date: 28 Oct 2014
Modification date: 28 Oct 2014
Type: bugfix
Affected Mageia releases : 3 , 4

Description

As part of the earlier security update for dbus (MGASA-2014-0395)
default auth_timeout was changed from 30s to 5s to make it harder
to abuse on systems with no auth_timeout defined.

As it turns out it 5s is not enough for some systems to boot up and
activate services properly, so they ended up with services failing
to start up, leading to slow or unusable systems.

This update changes the default auth_timeout to 20s wich
appears to be enough to fix the issue.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=14251
• https://bugs.mageia.org/show_bug.cgi?id=14249
• https://advisories.mageia.org/MGASA-2014-0395.html

SRPMS

4/core

• dbus-1.6.18-1.7.mga4

3/core

• dbus-1.6.8-4.7.mga3