Red Hat Security AdvisoryRHSA-2020:4032
dbus security update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) dbus-1:1.10.24-15.el7, dbus-libs-1:1.10.24-15.el7, dbus-x11-1:1.10.24-15.el7
- Red Hat Enterprise Linux Client Optional (v. 7) dbus-devel-1:1.10.24-15.el7, dbus-doc-1:1.10.24-15.el7, dbus-tests-1:1.10.24-15.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) dbus-1:1.10.24-15.el7, dbus-libs-1:1.10.24-15.el7, dbus-x11-1:1.10.24-15.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) dbus-devel-1:1.10.24-15.el7, dbus-doc-1:1.10.24-15.el7, dbus-tests-1:1.10.24-15.el7
- Red Hat Enterprise Linux Server (v. 7) dbus-1:1.10.24-15.el7, dbus-devel-1:1.10.24-15.el7, dbus-devel-1:1.10.24-15.el7.ppc +3
- Red Hat Enterprise Linux Server Optional (v. 7) dbus-doc-1:1.10.24-15.el7, dbus-tests-1:1.10.24-15.el7
- Red Hat Enterprise Linux Workstation (v. 7) dbus-1:1.10.24-15.el7, dbus-devel-1:1.10.24-15.el7, dbus-libs-1:1.10.24-15.el7 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) dbus-doc-1:1.10.24-15.el7, dbus-tests-1:1.10.24-15.el7
Fixes 1 record
Priority LOW 34
dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.0055 · Published 2019-06-11 · Partial fix CWE-59
