gpp_maybe Security update for dbus-1

SUSE-SLE-Micro-5.3-2022-3806

This update for dbus-1 fixes the following issues: - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111). - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112). - CVE-2022-42012: Fixed a use-after-free that could be trigged by a message in non-native endianness with out-of-band Unix file descriptor (bsc#1204113). Bugfixes: - Disable asserts (bsc#1087072).

• Release Date
  Oct 27 2022
• References
  Bugzilla: 1204112, 1204113, 1204111, 1087072
  CVEs: CVE-2022-42011, CVE-2022-42012, CVE-2022-42010
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Micro 5.3 aarch64

• Packages
  dbus-1
  D-Bus Message Bus System

  1.12.2-150400.18.5.1 lock rpm lock src

  dbus-1-x11
  D-Bus Message Bus System

  1.12.2-150400.18.5.1 lock rpm lock src

  libdbus-1-3
  Library package for D-Bus

  1.12.2-150400.18.5.1 lock rpm

SUSE Linux Enterprise Micro 5.3 s390x

• Packages
  dbus-1
  D-Bus Message Bus System

  1.12.2-150400.18.5.1 lock rpm lock src

  dbus-1-x11
  D-Bus Message Bus System

  1.12.2-150400.18.5.1 lock rpm lock src

  libdbus-1-3
  Library package for D-Bus

  1.12.2-150400.18.5.1 lock rpm

SUSE Linux Enterprise Micro 5.3 x86_64

• Packages
  dbus-1
  D-Bus Message Bus System

  1.12.2-150400.18.5.1 lock rpm lock src

  dbus-1-x11
  D-Bus Message Bus System

  1.12.2-150400.18.5.1 lock rpm lock src

  libdbus-1-3
  Library package for D-Bus

  1.12.2-150400.18.5.1 lock rpm