[ GLSA 201412-12 ] D-Bus: Multiple Vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: D-Bus: Multiple Vulnerabilities (GLSA 201412-12)
Severity: normal
Exploitable: local
Date: December 13, 2014
Bug(s): #512940, #516080, #522982, #528900
ID: 201412-12

Synopsis

Multiple vulnerabilities have been found in D-Bus, possibly
resulting in local Denial of Service.


Background

D-Bus is a message bus system, a simple way for applications to talk to
one another.


Affected Packages

Package: sys-apps/dbus
Vulnerable: < 1.8.10
Unaffected: >= 1.8.10
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in D-Bus. Please review
the CVE identifiers referenced below for details.


Impact

A local attacker could possibly cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All D-Bus users should upgrade to the latest version: