Red Hat Security AdvisoryRHSA-2019:1726
dbus security update
Released 2019-07-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) dbus-1:1.2.24-11.el6_10, dbus-libs-1:1.2.24-11.el6_10, dbus-x11-1:1.2.24-11.el6_10
- Red Hat Enterprise Linux Desktop Optional (v. 6) dbus-devel-1:1.2.24-11.el6_10, dbus-doc-1:1.2.24-11.el6_10
- Red Hat Enterprise Linux HPC Node (v. 6) dbus-1:1.2.24-11.el6_10, dbus-libs-1:1.2.24-11.el6_10, dbus-x11-1:1.2.24-11.el6_10
- Red Hat Enterprise Linux HPC Node Optional (v. 6) dbus-devel-1:1.2.24-11.el6_10, dbus-doc-1:1.2.24-11.el6_10
- Red Hat Enterprise Linux Server (v. 6) dbus-1:1.2.24-11.el6_10, dbus-devel-1:1.2.24-11.el6_10, dbus-devel-1:1.2.24-11.el6_10.ppc +3
- Red Hat Enterprise Linux Server Optional (v. 6) dbus-doc-1:1.2.24-11.el6_10
- Red Hat Enterprise Linux Workstation (v. 6) dbus-1:1.2.24-11.el6_10, dbus-devel-1:1.2.24-11.el6_10, dbus-libs-1:1.2.24-11.el6_10 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) dbus-doc-1:1.2.24-11.el6_10
Fixes 1 record
Priority LOW 34
dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0055 · Published 2019-06-11 · Partial fix CWE-59
