gpp_maybe Security update for dbus-1

SUSE-SLE-SAP-12-SP4-2022-3804

This update for dbus-1 fixes the following issues: - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111). - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112). - CVE-2022-42012: Fixed a use-after-free that could be trigged by a message in non-native endianness with out-of-band Unix file descriptor (bsc#1204113). Bugfixes: - Disable asserts (bsc#1087072).

• Release Date
  Oct 27 2022
• References
  Bugzilla: 1204113, 1204112, 1204111, 1087072
  CVEs: CVE-2022-42012, CVE-2022-42010, CVE-2022-42011
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  dbus-1
  D-Bus Message Bus System

  1.8.22-29.24.1

  lock rpm

  lock src

  dbus-1-x11
  D-Bus Message Bus System

  1.8.22-29.24.1

  lock rpm

  lock src

  libdbus-1-3
  Library package for D-Bus

  1.8.22-29.24.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64

• Packages
  dbus-1
  D-Bus Message Bus System

  1.8.22-29.24.1

  lock rpm

  lock src

  dbus-1-x11
  D-Bus Message Bus System

  1.8.22-29.24.1

  lock rpm

  lock src

  libdbus-1-3
  Library package for D-Bus

  1.8.22-29.24.1

  lock rpm

  libdbus-1-3-32bit
  Library package for D-Bus

  1.8.22-29.24.1

  lock rpm