SUSE-SU-2019:1591-1

HIGH7.1

Security update for dbus-1

Published Jun 21, 2019

Modified 6 years ago

Fix available

Details

Description of the patch:

This update for dbus-1 fixes the following issue:

Security issue fixed:

CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which could have allowed local attackers to bypass authentication (bsc#1137832).

Affected Packages

dbus-1

SUSE Enterprise Storage 4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12-LTSS

Fixed in:

1.8.22-24.19.1

dbus-1-x11

SUSE Enterprise Storage 4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12-LTSS

Fixed in:

1.8.22-24.19.1

libdbus-1-3

SUSE Enterprise Storage 4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12-LTSS

Fixed in:

1.8.22-24.19.1

libdbus-1-3-32bit

SUSE Enterprise Storage 4SUSE Linux Enterprise Server 12 SP1-LTSSSUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12-LTSS

Fixed in:

1.8.22-24.19.1

References

ADVISORY

https://bugzilla.suse.com/1137832

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-June/005601.html

ADVISORY

https://www.suse.com/security/cve/CVE-2019-12749/

WEB

https://www.suse.com/support/security/rating/

ADVISORY