Medium ELSA-2023-0096 3 CVEs

Moderate: dbus security update (Oracle Linux 8)

Published Jan 12, 2023 · Updated Jan 12, 2023

Ecosystem: Oracle Linux

Summary

[1.12.8-23.0.1]
- fix netlink poll: error 4 (Zhenzhong Duan)

[1:1.12.8-23.1]
- Fix CVE-2022-42010 (#2133644)
- Fix CVE-2022-42011 (#2133638)
- Fix CVE-2022-42012 (#2133632)

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 8	dbus	1:1.12.8-23.0.1.el8_7.1
Oracle Linux · 8	dbus-common	1:1.12.8-23.0.1.el8_7.1
Oracle Linux · 8	dbus-daemon	1:1.12.8-23.0.1.el8_7.1
Oracle Linux · 8	dbus-devel	1:1.12.8-23.0.1.el8_7.1
Oracle Linux · 8	dbus-libs	1:1.12.8-23.0.1.el8_7.1
Oracle Linux · 8	dbus-tools	1:1.12.8-23.0.1.el8_7.1
Oracle Linux · 8	dbus-x11	1:1.12.8-23.0.1.el8_7.1

Vulnerabilities 3

Medium 6.5

CVE-2022-42010

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenti…

dbus dbus dbus dbus Debian Ubuntu Azure Linux Alpine

Oct 9, 2022
Medium 6.5

CVE-2022-42011

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenti…

dbus dbus dbus dbus Debian Ubuntu Azure Linux Alpine

Oct 9, 2022
Medium 6.5

CVE-2022-42012

An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenti…

dbus dbus dbus dbus Debian Ubuntu Azure Linux Alpine

Oct 9, 2022