< back to search

shield Security update for dbus-1
SUSE-SLE-SDK-12-SP2-2017-153

This update for dbus-1 to version 1.8.22 fixes one security issue and bugs. The following security issue was fixed: - bsc#1003898: Do not treat ActivationFailure message received from root-owned systemd name as a format string. The following upstream changes are included: - Change the default configuration for the session bus to only allow EXTERNAL authentication (secure kernel-mediated credentials-passing), as was already done for the system bus. - Fix a memory leak when GetConnectionCredentials() succeeds (fdo#91008) - Ensure that dbus-monitor does not reply to messages intended for others (fdo#90952) - Add locking to DBusCounter's reference count and notify function (fdo#89297) - Ensure that DBusTransport's reference count is protected by the corresponding DBusConnection's lock (fdo#90312) - Correctly release DBusServer mutex before early-return if we run out of memory while copying authentication mechanisms (fdo#90021) - Correctly initialize all fields of DBusTypeReader (fdo#90021) - Fix some missing \n in verbose (debug log) messages (fdo#90004) - Clean up some memory leaks in test code (fdo#90021)

  • Release Date
    Jan 26 2017
  • References
    Bugzilla: 1003898, 1018556
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.2 ppc64le
  • Packages
    dbus-1
    D-Bus Message Bus System
    1.8.22-24.2.1 lock src
    dbus-1-devel
    Developer package for D-Bus
    1.8.22-24.2.1 lock rpm
    dbus-1-devel-doc
    Developer documentation package for D-Bus
    1.8.22-24.2.1 lock rpm
    dbus-1-x11
    D-Bus Message Bus System
    1.8.22-24.2.1 lock src
SUSE Linux Enterprise Software Development Kit 12.2 aarch64
  • Packages
    dbus-1
    D-Bus Message Bus System
    1.8.22-24.2.1 lock src
    dbus-1-devel
    Developer package for D-Bus
    1.8.22-24.2.1 lock rpm
    dbus-1-devel-doc
    Developer documentation package for D-Bus
    1.8.22-24.2.1 lock rpm
    dbus-1-x11
    D-Bus Message Bus System
    1.8.22-24.2.1 lock src
SUSE Linux Enterprise Software Development Kit 12.2 x86_64
  • Packages
    dbus-1
    D-Bus Message Bus System
    1.8.22-24.2.1 lock src
    dbus-1-devel
    Developer package for D-Bus
    1.8.22-24.2.1 lock rpm
    dbus-1-devel-doc
    Developer documentation package for D-Bus
    1.8.22-24.2.1 lock rpm
    dbus-1-x11
    D-Bus Message Bus System
    1.8.22-24.2.1 lock src
SUSE Linux Enterprise Software Development Kit 12.2 s390x
  • Packages
    dbus-1
    D-Bus Message Bus System
    1.8.22-24.2.1 lock src
    dbus-1-devel
    Developer package for D-Bus
    1.8.22-24.2.1 lock rpm
    dbus-1-devel-doc
    Developer documentation package for D-Bus
    1.8.22-24.2.1 lock rpm
    dbus-1-x11
    D-Bus Message Bus System
    1.8.22-24.2.1 lock src