ac2517ed34
openSUSE Security Update: Security update for dbus-1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:0111-1 Rating: moderate References: #912016 Cross-References: CVE-2012-3524 CVE-2014-8148 Affected Products: openSUSE 13.2 openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update fixes the following security issues: * CVE-2014-8148: - Do not allow calls to UpdateActivationEnvironment from uids other than the uid of the dbus-daemon. If a system service installs unsafe security policy rules that allow arbitrary method calls (such as CVE-2014-8148) then this prevents memory consumption and possible privilege escalation via UpdateActivationEnvironment. * CVE-2012-3524: Don't access environment variables (bnc#912016) References: http://support.novell.com/security/cve/CVE-2012-3524.html http://support.novell.com/security/cve/CVE-2014-8148.html https://bugzilla.suse.com/show_bug.cgi?id=912016
15 lines
432 B
Makefile
15 lines
432 B
Makefile
# $NetBSD: Makefile,v 1.9 2015/01/23 10:34:08 obache Exp $
|
|
|
|
PKGNAME= suse_libdbus-${SUSE_VERSION}
|
|
PKGREVISION= 6
|
|
CATEGORIES= emulators
|
|
RPMUPDPKGS+= dbus-1-1.8.14-4.32.3.${SUSE_ARCH}
|
|
RPMUPDPKGS+= libdbus-1-3-1.8.14-4.32.1.${SUSE_ARCH}
|
|
|
|
MAINTAINER= pkgsrc-users@NetBSD.org
|
|
COMMENT= Linux compatibility package for DBus
|
|
|
|
EMUL_MODULES.linux= base
|
|
|
|
.include "../../emulators/suse131_linux/Makefile.common"
|
|
.include "../../mk/bsd.pkg.mk"
|