New Search

RHSA-2009:0008 -- dbus security update (Moderate)

oval:org.mitre.oval:def:29288

Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. D-Bus is a system for sending messages between applications. It is used for the system-wide message bus service and as a per-user-login-session messaging facility. A denial-of-service flaw was discovered in the system for sending messages between applications. A local user could send a message with a malformed signature to the bus causing the bus (and consequently any process using libdbus to receive messages) to abort. (CVE-2008-3834)

Family:
unix
Status:
ACCEPTED
Platform(s):
  • CentOS Linux 5
  • Red Hat Enterprise Linux 5
Class:
patch
Reference(s):
  • RHSA-2009:0008
  • CESA-2009:0008-CentOS 5
  • CVE-2008-3834
Product(s):
  • dbus