openSUSE 12.2: 2012:1287-1 Important: dbus-1 Privilege Escalation
opensuse
October 4, 2012
An update that fixes one vulnerability is now available
Description
This update fixed CVE-2012-3524 (getenv() vulnerability),
which can be used by local attackers to escalate privileges
to root.
Topics Covered
Patch
Patch Instructions:
To install this openSUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- openSUSE 12.2:
zypper in -t patch openSUSE-2012-670
- openSUSE 12.1:
zypper in -t patch openSUSE-2012-670
- openSUSE 11.4:
zypper in -t patch openSUSE-2012-670
To bring your system up-to-date, use "zypper patch".
Package List
- openSUSE 12.2 (i586 x86_64):
dbus-1-1.5.12-4.6.1
dbus-1-debuginfo-1.5.12-4.6.1
dbus-1-debugsource-1.5.12-4.6.1
dbus-1-devel-1.5.12-4.6.1
dbus-1-x11-1.5.12-4.6.1
dbus-1-x11-debuginfo-1.5.12-4.6.1
dbus-1-x11-debugsource-1.5.12-4.6.1
libdbus-1-3-1.5.12-4.6.1
libdbus-1-3-debuginfo-1.5.12-4.6.1
- openSUSE 12.2 (x86_64):
dbus-1-32bit-1.5.12-4.6.1
dbus-1-debuginfo-32bit-1.5.12-4.6.1
dbus-1-devel-32bit-1.5.12-4.6.1
libdbus-1-3-32bit-1.5.12-4.6.1
libdbus-1-3-debuginfo-32bit-1.5.12-4.6.1
- openSUSE 12.2 (noarch):
dbus-1-devel-doc-1.5.12-4.6.1
- openSUSE 12.1 (i586 x86_64):
dbus-1-1.5.8-2.6.1
dbus-1-debuginfo-1.5.8-2.6.1
dbus-1-debugsource-1.5.8-2.6.1
dbus-1-devel-1.5.8-2.6.1
dbus-1-x11-1.5.8-2.6.1
dbus-1-x11-debuginfo-1.5.8-2.6.1
dbus-1-x11-debugsource-1.5.8-2.6.1
- openSUSE 12.1 (x86_64):
dbus-1-32bit-1.5.8-2.6.1
dbus-1-debuginfo-32bit-1.5.8-2.6.1
dbus-1-devel-32bit-1.5.8-2.6.1
- openSUSE 12.1 (noarch):
dbus-1-devel-doc-1.5.8-2.6.1
- openSUSE 12.1 (ia64):
dbus-1-debuginfo-x86-1.5.8-2.6.1
dbus-1-x86-1.5.8-2.6.1
- openSUSE 11.4...
Read the Full AdvisoryReferences
https://www.suse.com/security/cve/CVE-2012-3524.html
https://login.microfocus.com/nidp/app/login?sid=0
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2012:1287-1
Rating: important
Affected Products:
openSUSE 12.2
openSUSE 12.1
openSUSE 11.4
.
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!