==========================================================================
Ubuntu Security Notice USN-2425-1
November 27, 2014
dbus vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 14.10
– Ubuntu 14.04 LTS
– Ubuntu 12.04 LTS
Summary:
DBus could be made to stop responding under certain conditions.
Software Description:
– dbus: simple interprocess messaging system
Details:
It was discovered that DBus incorrectly handled a large number of file
descriptor messages. A local attacker could use this issue to cause DBus to
stop responding, resulting in a denial of service. (CVE-2014-7824)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.10:
dbus 1.8.8-1ubuntu2.1
libdbus-1-3 1.8.8-1ubuntu2.1
Ubuntu 14.04 LTS:
dbus 1.6.18-0ubuntu4.3
libdbus-1-3 1.6.18-0ubuntu4.3
Ubuntu 12.04 LTS:
dbus 1.4.18-1ubuntu1.7
libdbus-1-3 1.4.18-1ubuntu1.7
After a standard system update you need to reboot your computer to make all
the necessary changes.
References:
http://www.ubuntu.com/usn/usn-2425-1
CVE-2014-7824
Package Information:
https://launchpad.net/ubuntu/+source/dbus/1.8.8-1ubuntu2.1
https://launchpad.net/ubuntu/+source/dbus/1.6.18-0ubuntu4.3
https://launchpad.net/ubuntu/+source/dbus/1.4.18-1ubuntu1.7
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1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=7a1b
—–END PGP SIGNATURE—–
—
