An update for dbus is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Moderate: dbus security update Advisory ID: RHSA-2023:4569-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:4569 Issue date: 2023-08-08 CVE Names: CVE-2023-34969 ===================================================================== 1. Summary: An update for dbus is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 9) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux BaseOS (v. 9) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: D-Bus is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility. Security Fix(es): * dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered (CVE-2023-34969) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 For theupdate to take effect, all running instances of dbus-daemon and all running applications using the libdbus library must be restarted, or the system rebooted. 5. Bugs fixed (https://bugzilla.redhat.com/): 2213166 - CVE-2023-34969 dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered 6. Package List: Red Hat Enterprise Linux AppStream (v.9): aarch64: dbus-daemon-1.12.20-7.el9_2.1.aarch64.rpm dbus-daemon-debuginfo-1.12.20-7.el9_2.1.aarch64.rpm dbus-debuginfo-1.12.20-7.el9_2.1.aarch64.rpm dbus-debugsource-1.12.20-7.el9_2.1.aarch64.rpm dbus-devel-1.12.20-7.el9_2.1.aarch64.rpm dbus-libs-debuginfo-1.12.20-7.el9_2.1.aarch64.rpm dbus-tests-debuginfo-1.12.20-7.el9_2.1.aarch64.rpm dbus-tools-debuginfo-1.12.20-7.el9_2.1.aarch64.rpm dbus-x11-1.12.20-7.el9_2.1.aarch64.rpm dbus-x11-debuginfo-1.12.20-7.el9_2.1.aarch64.rpm ppc64le: dbus-daemon-1.12.20-7.el9_2.1.ppc64le.rpm dbus-daemon-debuginfo-1.12.20-7.el9_2.1.ppc64le.rpm dbus-debuginfo-1.12.20-7.el9_2.1.ppc64le.rpm dbus-debugsource-1.12.20-7.el9_2.1.ppc64le.rpm dbus-devel-1.12.20-7.el9_2.1.ppc64le.rpm dbus-libs-debuginfo-1.12.20-7.el9_2.1.ppc64le.rpm dbus-tests-debuginfo-1.12.20-7.el9_2.1.ppc64le.rpm dbus-tools-debuginfo-1.12.20-7.el9_2.1.ppc64le.rpm dbus-x11-1.12.20-7.el9_2.1.ppc64le.rpm dbus-x11-debuginfo-1.12.20-7.el9_2.1.ppc64le.rpm s390x: dbus-daemon-1.12.20-7.el9_2.1.s390x.rpm dbus-daemon-debuginfo-1.12.20-7.el9_2.1.s390x.rpm dbus-debuginfo-1.12.20-7.el9_2.1.s390x.rpm dbus-debugsource-1.12.20-7.el9_2.1.s390x.rpm dbus-devel-1.12.20-7.el9_2.1.s390x.rpm dbus-libs-debuginfo-1.12.20-7.el9_2.1.s390x.rpm dbus-tests-debuginfo-1.12.20-7.el9_2.1.s390x.rpm dbus-tools-debuginfo-1.12.20-7.el9_2.1.s390x.rpm dbus-x11-1.12.20-7.el9_2.1.s390x.rpm dbus-x11-debuginfo-1.12.20-7.el9_2.1.s390x.rpm x86_64: dbus-daemon-1.12.20-7.el9_2.1.x86_64.rpm dbus-daemon-debuginfo-1.12.20-7.el9_2.1.i686.rpm dbus-daemon-debuginfo-1.12.20-7.el9_2.1.x86_64.rpm dbus-debuginfo-1.12.20-7.el9_2.1.i686.rpm dbus-debuginfo-1.12.20-7.el9_2.1.x86_64.rpm dbus-debugsource-1.12.20-7.el9_2.1.i686.rpm dbus-debugsource-1.12.20-7.el9_2.1.x86_64.rpm dbus-devel-1.12.20-7.el9_2.1.i686.rpm dbus-devel-1.12.20-7.el9_2.1.x86_64.rpm dbus-libs-debuginfo-1.12.20-7.el9_2.1.i686.rpm dbus-libs-debuginfo-1.12.20-7.el9_2.1.x86_64.rpm dbus-tests-debuginfo-1.12.20-7.el9_2.1.i686.rpm dbus-tests-debuginfo-1.12.20-7.el9_2.1.x86_64.rpm dbus-tools-debuginfo-1.12.20-7.el9_2.1.i686.rpm dbus-tools-debuginfo-1.12.20-7.el9_2.1.x86_64.rpm dbus-x11-1.12.20-7.el9_2.1.x86_64.rpm dbus-x11-debuginfo-1.12.20-7.el9_2.1.i686.rpm dbus-x11-debuginfo-1.12.20-7.el9_2.1.x86_64.rpm Red Hat Enterprise Linux BaseOS (v.9): Source: dbus-1.12.20-7.el9_2.1.src.rpm aarch64: dbus-1.12.20-7.el9_2.1.aarch64.rpm dbus-daemon-debuginfo-1.12.20-7.el9_2.1.aarch64.rpm dbus-debuginfo-1.12.20-7.el9_2.1.aarch64.rpm dbus-debugsource-1.12.20-7.el9_2.1.aarch64.rpm dbus-libs-1.12.20-7.el9_2.1.aarch64.rpm dbus-libs-debuginfo-1.12.20-7.el9_2.1.aarch64.rpm dbus-tests-debuginfo-1.12.20-7.el9_2.1.aarch64.rpm dbus-tools-1.12.20-7.el9_2.1.aarch64.rpm dbus-tools-debuginfo-1.12.20-7.el9_2.1.aarch64.rpm dbus-x11-debuginfo-1.12.20-7.el9_2.1.aarch64.rpm noarch: dbus-common-1.12.20-7.el9_2.1.noarch.rpm ppc64le: dbus-1.12.20-7.el9_2.1.ppc64le.rpm dbus-daemon-debuginfo-1.12.20-7.el9_2.1.ppc64le.rpm dbus-debuginfo-1.12.20-7.el9_2.1.ppc64le.rpm dbus-debugsource-1.12.20-7.el9_2.1.ppc64le.rpm dbus-libs-1.12.20-7.el9_2.1.ppc64le.rpm dbus-libs-debuginfo-1.12.20-7.el9_2.1.ppc64le.rpm dbus-tests-debuginfo-1.12.20-7.el9_2.1.ppc64le.rpm dbus-tools-1.12.20-7.el9_2.1.ppc64le.rpm dbus-tools-debuginfo-1.12.20-7.el9_2.1.ppc64le.rpm dbus-x11-debuginfo-1.12.20-7.el9_2.1.ppc64le.rpm s390x: dbus-1.12.20-7.el9_2.1.s390x.rpm dbus-daemon-debuginfo-1.12.20-7.el9_2.1.s390x.rpm dbus-debuginfo-1.12.20-7.el9_2.1.s390x.rpm dbus-debugsource-1.12.20-7.el9_2.1.s390x.rpm dbus-libs-1.12.20-7.el9_2.1.s390x.rpm dbus-libs-debuginfo-1.12.20-7.el9_2.1.s390x.rpm dbus-tests-debuginfo-1.12.20-7.el9_2.1.s390x.rpm dbus-tools-1.12.20-7.el9_2.1.s390x.rpm dbus-tools-debuginfo-1.12.20-7.el9_2.1.s390x.rpm dbus-x11-debuginfo-1.12.20-7.el9_2.1.s390x.rpm x86_64: dbus-1.12.20-7.el9_2.1.x86_64.rpm dbus-daemon-debuginfo-1.12.20-7.el9_2.1.i686.rpm dbus-daemon-debuginfo-1.12.20-7.el9_2.1.x86_64.rpm dbus-debuginfo-1.12.20-7.el9_2.1.i686.rpm dbus-debuginfo-1.12.20-7.el9_2.1.x86_64.rpm dbus-debugsource-1.12.20-7.el9_2.1.i686.rpm dbus-debugsource-1.12.20-7.el9_2.1.x86_64.rpm dbus-libs-1.12.20-7.el9_2.1.i686.rpm dbus-libs-1.12.20-7.el9_2.1.x86_64.rpm dbus-libs-debuginfo-1.12.20-7.el9_2.1.i686.rpm dbus-libs-debuginfo-1.12.20-7.el9_2.1.x86_64.rpm dbus-tests-debuginfo-1.12.20-7.el9_2.1.i686.rpm dbus-tests-debuginfo-1.12.20-7.el9_2.1.x86_64.rpm dbus-tools-1.12.20-7.el9_2.1.x86_64.rpm dbus-tools-debuginfo-1.12.20-7.el9_2.1.i686.rpm dbus-tools-debuginfo-1.12.20-7.el9_2.1.x86_64.rpm dbus-x11-debuginfo-1.12.20-7.el9_2.1.i686.rpm dbus-x11-debuginfo-1.12.20-7.el9_2.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2023-34969 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJk0qOIAAoJENzjgjWX9erEqicP/Aghm295i1cVKdG1tSNj7isd i9i2+4kzWpNH4jMEwJHGE9Zf5sbkuEo2v+M32CSKXo+ahIt/ZoXV7VNXiUWPAdWF 80Y3kW3YKLXg1a0MqZurVmBz4bj+Pf9bHK+PoRqyr0R+PmDsNvURMyGwAdmkP5e5 qCEZKC3wD0m6cEQR6+CFmw1umc7klvCrzDMDfkBTkT6LHd0L3kx/CdKAhmaD90Wp YyetYsNWX37iBXUYcjK0VNQqiwz3RMMpemZMXMo4v/C4CVVR6cABxnR2YpONy4KW uD2mx84M3gcvSuameqISkw7+QizY/lquA87zPXu/IwskraWzpfpDtQV0SdeSRbni DVsEC7i0OX/7f9uX3bYQXt6evCN5TUzpAFLnJmauPFBuq5+5l3PZXHGTecYJ9ANV JS2RYkCeTKAojeC/QAedKB6nDsg4NYlyK/9DCcbU5ERvAPOT0rsdxMTlcyXkI4TB ATz7zcKJWj1EJvaZZk00+jwwp07g7e0hvhyJqsJazfHaD9djOG0tNoYFG3gQNSCk /ifzbPaHepW6TOayqLOEFN+9A6XuJNDAgF6AOY77qCzSIlJa3wTDWaSUJiQsLhDu deDOjWl/Qjtm+AbNhmuKmnzeOPvnl78xwMazmx7P7GR29s7gfApt6Jebyfbo5YnI SlSOCtfoIWe4qbvVZcp8 =8vma -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Update to 1.12.16 Fix CVE-2019-12749. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-d5ded5326b 2019-06-18 18:13:13.317374 --------------------------------------------------------------------------------Name : dbus Product : Fedora 30 Version : 1.12.16 Release : 1.fc30 URL : https://https:// Summary : D-BUS message bus Description : D-BUS is a system for sending messages between applications. It is used both for the system-wide message bus service, and as a per-user-login-session messaging facility. --------------------------------------------------------------------------------Update Information: Update to 1.12.16 Fix CVE-2019-12749 --------------------------------------------------------------------------------ChangeLog: * Tue Jun 11 2019 David King - 1:1.12.16-1 - Update to 1.12.16 * Fri May 17 2019 David King - 1:1.12.14-1 - Update to 1.12.14 --------------------------------------------------------------------------------References: [ 1 ] Bug #1720995 - CVE-2019-12749 dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1720995 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-d5ded5326b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.