Ubuntu
dbus package

dbus 1.2.16-2ubuntu4.8 source package in Ubuntu

Changelog

dbus (1.2.16-2ubuntu4.8) lucid-security; urgency=medium

  * SECURITY UPDATE: denial of service via large number of pending replies
    - debian/patches/CVE-2014-3638.patch: reduce max_replies_per_connection
      to 128 in bus/config-parser.c.
    - CVE-2014-3638
  * SECURITY UPDATE: denial of service via incomplete connections
    - debian/patches/CVE-2014-3639.patch: reduce auth_timeout in
      bus/config-parser.c, stop listening on DBusServer sockets when
      reaching max_incomplete_connections in bus/bus.*, bus/connection.*,
      dbus/dbus-server-protected.h, dbus/dbus-server.c, dbus/dbus-watch.*.
    - CVE-2014-3639
 -- Marc Deslauriers <email address hidden>   Wed, 17 Sep 2014 12:27:46 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Lucid
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
dbus_1.2.16.orig.tar.gz 1.5 MiB 968a31c16a6c4bbbdb603cbaa3d60d6d19bc8ae30c0ed55d7f8c2e254413e4c8
dbus_1.2.16-2ubuntu4.8.diff.gz 39.8 KiB 3460d127c715fd6aadb77d33a9c3084fb8cc0378873869f56972227a1a6132b4
dbus_1.2.16-2ubuntu4.8.dsc 2.3 KiB 13f87f4dad50c714d5efc3901ebc201dc3cc0a0a13b07d1158d5454b737fd1c6

View changes file

Binary packages built by this source

dbus: No summary available for dbus in ubuntu lucid.

No description available for dbus in ubuntu lucid.

dbus-1-doc: No summary available for dbus-1-doc in ubuntu lucid.

No description available for dbus-1-doc in ubuntu lucid.

dbus-x11: No summary available for dbus-x11 in ubuntu lucid.

No description available for dbus-x11 in ubuntu lucid.

libdbus-1-3: No summary available for libdbus-1-3 in ubuntu lucid.

No description available for libdbus-1-3 in ubuntu lucid.

libdbus-1-dev: No summary available for libdbus-1-dev in ubuntu lucid.

No description available for libdbus-1-dev in ubuntu lucid.