[ubuntu/precise-security] dbus 1.4.18-1ubuntu1.10 (Accepted)

[Steve Langasek]

dbus (1.4.18-1ubuntu1.10) precise-security; urgency=medium

  [ Marc Deslauriers ]
  * SECURITY UPDATE: DoS via file descriptor leak
    - debian/patches/CVE-2020-12049.patch: on MSG_CTRUNC, close the fds
      we did receive in dbus/dbus-sysdeps-unix.c.
    - CVE-2020-12049

dbus (1.4.18-1ubuntu1.9) precise-security; urgency=medium

  * SECURITY UPDATE: DBUS_COOKIE_SHA1 implementation flaw
    - debian/patches/CVE-2019-12749*.patch:
      reject DBUS_COOKIE_SHA1 for users other than the server owner in
      dbus/dbus-auth.c, enforce hardening EXTERNAL auth in
      bus/session.conf.in, cmake/CMakeLists.txt, configure.ac.
    - CVE-2019-12749

Date: 2020-06-15 19:11:14.457832+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
Signed-By: Steve Langasek <steve.langasek at canonical.com>
https://launchpad.net/ubuntu/+source/dbus/1.4.18-1ubuntu1.10
-------------- next part --------------
Sorry, changesfile not available.