AXSA:2020-545:02

Release date: 
Friday, October 2, 2020 - 07:10
Subject: 
dbus-1.12.8-10.el8
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

the system-wide message bus service, and as a per-user-login-session messaging
facility.

Security Fix(es):

dbus: denial of service via file descriptor leak (CVE-2020-12049)

CVE-2020-12049:
An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus clients.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. dbus-1.12.8-10.el8.src.rpm
    MD5: 7177ec76b2cbf251818f85ee3df541b0
    SHA-256: 5e0dd45f710d75ea43f5e6a3f55de91fcb7a6bf878eb16738d56840c3afd8b84
    Size: 2.03 MB

Asianux Server 8 for x86_64
  1. dbus-1.12.8-10.el8.x86_64.rpm
    MD5: cf74204f54667501f8819f410e5db23b
    SHA-256: 16a748a8b5efea2c2bb9a097f5c678190189f4ec32405eb9f4bf12f991a9124d
    Size: 39.41 kB
  2. dbus-common-1.12.8-10.el8.noarch.rpm
    MD5: cdc8d0b87f973f5848e1a616f4cef7e4
    SHA-256: bf4705610dcee76526a67090c0871adcaac27161c8f3ab5413ceb09b7c550c36
    Size: 44.14 kB
  3. dbus-daemon-1.12.8-10.el8.x86_64.rpm
    MD5: d5a828a4b580e668708ed0b7199257fa
    SHA-256: 788acf7ad83baa84d6dff988e6f08b7d64575341c278988c6eb6616a816b8bd0
    Size: 238.44 kB
  4. dbus-devel-1.12.8-10.el8.x86_64.rpm
    MD5: 7ed938597d10499e1696c5b6ffb4ecd8
    SHA-256: a1a8aeefd6ba5bcf816022952440b719e125fb5ba51a683104ad4d644bc92be6
    Size: 66.18 kB
  5. dbus-libs-1.12.8-10.el8.x86_64.rpm
    MD5: 974477e87e90de7e709e2f22aab3d926
    SHA-256: e0c3630fa17712da06bcd66a72899804e443f9e2d8bf71f6d32a0609b7c71ea0
    Size: 182.05 kB
  6. dbus-tools-1.12.8-10.el8.x86_64.rpm
    MD5: 0373c48911b8369a21a120f7b87bf71a
    SHA-256: c5b1721b873031d791b3d132c4a8ca8b0a2036a2f0b4d945be65f0fbcb7d3c4e
    Size: 83.66 kB
  7. dbus-x11-1.12.8-10.el8.x86_64.rpm
    MD5: 67c6cfc8270c26f1f27c75c5ea55ee34
    SHA-256: c5e8d58c6ace5e20f069df33172947f97dd9f46c93fca8c0785a2964f1626b10
    Size: 57.24 kB
  8. dbus-devel-1.12.8-10.el8.i686.rpm
    MD5: b5889f135420e9580b049ca59926647d
    SHA-256: 8187a8fd2058fd472fd9b587719c965dac7b627bf5866eacd80fb5b7193dee34
    Size: 66.21 kB
  9. dbus-libs-1.12.8-10.el8.i686.rpm
    MD5: 59d2f06c023a96e1e2ec9f9210b6a151
    SHA-256: cced9e065ab2f53bfd9198c91d7f8c9b4e4ac56cc9b033d7ce8c433b931fac1b
    Size: 196.64 kB
Copyright 2007-2022 Cybertrust Japan Co., Ltd. All rights reserved.