Oval Definition:	oval:org.mitre.oval:def:13451
Revision Date: 2014-06-23 Version: 20 Title: DSA-1837-1 dbus -- programming error Description: It was discovered that the dbus_signature_validate function in dbus, a simple interprocess messaging system, is prone to a denial of service attack. This issue was caused by an incorrect fix for DSA-1658-1. For the stable distribution, this problem has been fixed in version 1.2.1-5+lenny1. For the oldstable distribution, this problem has been fixed in version 1.0.2-1+etch3. Packages for ia64 and s390 will be released once they are available. For the testing distribution and the unstable distribution , this problem has been fixed in version 1.2.14-1. We recommend that you upgrade your dbus packages. Family: unix Class: patch Status: ACCEPTED Reference(s): CVE-2009-1189 DSA-1837-1 Platform(s): Debian GNU/Linux 4.0 Debian GNU/Linux 5.0 Product(s): dbus Definition Synopsis Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND us-1-doc DPKG is earlier than 1.2.1-5+lenny1 OR libdbus-1-3 DPKG is earlier than 1.2.1-5+lenny1 OR us DPKG is earlier than 1.2.1-5+lenny1 OR libdbus-1-dev DPKG is earlier than 1.2.1-5+lenny1 OR us-x11 DPKG is earlier than 1.2.1-5+lenny1 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND us-1-doc DPKG is earlier than 1.0.2-1+etch3 OR Architecture depended section Supported architectures section Installed architecture is amd64 OR Installed architecture is sparc OR Installed architecture is arm OR Installed architecture is i386 OR Installed architecture is mips OR Installed architecture is alpha OR Installed architecture is powerpc OR Installed architecture is mipsel OR Installed architecture is hppa AND Packages section libdbus-1-3 DPKG is earlier than 1.0.2-1+etch3 OR us-1-utils DPKG is earlier than 1.0.2-1+etch3 OR us DPKG is earlier than 1.0.2-1+etch3 OR libdbus-1-dev DPKG is earlier than 1.0.2-1+etch3
BACK