FEDORA-2022-7a963a79d1 — security update for dbus

stable

dbus-1.12.24-1.fc35

FEDORA-2022-7a963a79d1 created by amigadave 2 years ago for Fedora 35

Update to 1.12.24

Fix CVE-2022-42010, CVE-2022-42011, CVE-2022-42012

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-7a963a79d1

This update has been submitted for testing by amigadave.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

This update has been pushed to testing.

2 years ago

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

Builds

dbus-1.12.24-1.fc35

BZ#2133619 CVE-2022-42010 dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets [fedora-35]

BZ#2133623 CVE-2022-42011 dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type [fedora-35]

BZ#2133627 CVE-2022-42012 dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly [fedora-35]

dbus-1.12.24-1.fc35

Automated Test Results

passed