Advisories » MGASA-2017-0310

Updated dbus packages fix security vulnerabilities

Publication date: 26 Aug 2017
Modification date: 26 Aug 2017
Type: security
Affected Mageia releases : 5

Description

A format string vulnerability in the reference bus implementation,
dbus-daemon, could potentially allow local users to cause arbitrary code
execution or denial of service.

Symlink attack in nonce-tcp transport (bsc#1025950).

Symlink attack in unit tests (bsc#1025951).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=19561
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/YNEU3UPG7YBLXGQ4E4XVZ74PLHP4ZG56/
• https://lists.opensuse.org/opensuse-updates/2017-03/msg00091.html

SRPMS

5/core

• dbus-1.8.22-1.1.mga5