USN-799-1 -- dbus vulnerability
|ID: oval:org.secpod.oval:def:700467||Date: (C)2011-05-13 (M)2018-06-11|
|Class: PATCH||Family: unix|
It was discovered that the D-Bus library did not correctly validate signatures. If a local user sent a specially crafted D-Bus key, they could spoof a valid signature and bypass security policies.