DSA-1837-1 dbus -- programming errorID: oval:org.secpod.oval:def:600438 | Date: (C)2011-05-13 (M)2023-11-09 |
Class: PATCH | Family: unix |
It was discovered that the dbus_signature_validate function in dbus, a simple interprocess messaging system, is prone to a denial of service attack. This issue was caused by an incorrect fix for DSA-1658-1. For the stable distribution , this problem has been fixed in version 1.2.1-5+lenny1. For the oldstable distribution , this problem has been fixed in version 1.0.2-1+etch3. Packages for ia64 and s390 will be released once they are available. For the testing distribution and the unstable distribution , this problem has been fixed in version 1.2.14-1. We recommend that you upgrade your dbus packages.
Platform: |
Debian 5.0 |
Debian 4.0 |