USN-1044-1: D-Bus vulnerability

Releases

• Ubuntu 10.10
• Ubuntu 10.04
• Ubuntu 9.10
• Ubuntu 8.04

Packages

• dbus - simple interprocess messaging system

Details

Remi Denis-Courmont discovered that D-Bus did not properly validate the
number of nested variants when validating D-Bus messages. A local attacker
could exploit this to cause a denial of service.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 9.10

• libdbus-1-3 - 1.2.16-0ubuntu9.1

Ubuntu 8.04

• libdbus-1-3 - 1.1.20-1ubuntu3.4

Ubuntu 10.10

• libdbus-1-3 - 1.4.0-0ubuntu1.1

Ubuntu 10.04

• libdbus-1-3 - 1.2.16-2ubuntu4.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

• CVE-2010-4352