Technical Description

Fedora has released security updates to address a vulnerability identified D-Bus. This flaw could be exploited by local attackers to cause a denial of service. For additional information, see : VUPEN/ADV-2006-4988

Affected Products

Fedora Core 5
Fedora Core 6

Solution

Upgrade the affected packages :

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/

db0fec6d2e1e91ec71df0b1cc4787b5b027bee55 SRPMS/dbus-0.62-0.2.fc5.src.rpm
db0fec6d2e1e91ec71df0b1cc4787b5b027bee55 noarch/dbus-0.62-0.2.fc5.src.rpm
1e818a68d6f21187ee2e1d4865dda76be278ff57 ppc/debug/dbus-debuginfo-0.62-0.2.fc5.ppc.rpm
42df48c980a60de892dd32cc2db944de49d20723 ppc/dbus-glib-0.62-0.2.fc5.ppc.rpm
4ebfa19a37ef46a296dce2b8f82e9bc88b94ca45 ppc/dbus-x11-0.62-0.2.fc5.ppc.rpm
f01ec3f144d7817f198809f46fb3da89012ff7cd ppc/dbus-devel-0.62-0.2.fc5.ppc.rpm
8c7858034b5333e87555d3d080473e943b3605ec ppc/dbus-sharp-0.62-0.2.fc5.ppc.rpm
2a11ceac7d1c24f22f3a409bc172cc1ff87da090 ppc/dbus-python-0.62-0.2.fc5.ppc.rpm
49999c66ae8e2ef8cd9bae62cb7a8fc92c95bd88 ppc/dbus-0.62-0.2.fc5.ppc.rpm
55fbd18e7682d488eb57afd631e7c26b9d91ed57 x86_64/debug/dbus-debuginfo-0.62-0.2.fc5.x86_64.rpm
f54d8ccb2be24a1a8418c4707c208efc32ccf7a3 x86_64/dbus-glib-0.62-0.2.fc5.x86_64.rpm
71c0fce785f185ff919257826496a48ca2ddbaff x86_64/dbus-sharp-0.62-0.2.fc5.x86_64.rpm
fc00d7a9765824a3592e9fc13e982b31bdde4966 x86_64/dbus-devel-0.62-0.2.fc5.x86_64.rpm
7333930c972249b62a1e35bc1fa733e5847b2c0c x86_64/dbus-python-0.62-0.2.fc5.x86_64.rpm
218956c4043d6d24c982fdde308f284f969364c2 x86_64/dbus-x11-0.62-0.2.fc5.x86_64.rpm
54e1e2421eec1daf56e3c9519ed24b94ff98cc97 x86_64/dbus-0.62-0.2.fc5.x86_64.rpm
fd388d62f23cb650b13bbe93406020fc12a45168 i386/dbus-devel-0.62-0.2.fc5.i386.rpm
d46a9e91f21b416dc2f273191e84f35b4cb8ad5f i386/dbus-glib-0.62-0.2.fc5.i386.rpm
f4a6b5f9c3a515b224cacb98dadba25ca784c83f i386/dbus-x11-0.62-0.2.fc5.i386.rpm
f4b3d7e2e80e2de8e0dc20ffccc0c64d42f3767a i386/dbus-0.62-0.2.fc5.i386.rpm
8f5866f5c947bc97ddbf830f5528dd520704490a i386/dbus-sharp-0.62-0.2.fc5.i386.rpm
138bbefab36af6213d8e4d750dfcace5bc396584 i386/debug/dbus-debuginfo-0.62-0.2.fc5.i386.rpm
1c8490a2e40bd6bc416bb7986f864d5527efd67e i386/dbus-python-0.62-0.2.fc5.i386.rpm

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

8275f2c7eaddf6cc33f81d24176005e5a9156cc4 SRPMS/dbus-1.0.1-8.fc6.src.rpm
8275f2c7eaddf6cc33f81d24176005e5a9156cc4 noarch/dbus-1.0.1-8.fc6.src.rpm
c0bf0b361bc320571d68701106b68838474f0062 ppc/debug/dbus-debuginfo-1.0.1-8.fc6.ppc.rpm
ff8890fd9f0781f86c283d9cc9b4d24eb3fdcb03 ppc/dbus-x11-1.0.1-8.fc6.ppc.rpm
9982dc1b93b1c89d2fa14b79a44f0fb39dabd137 ppc/dbus-1.0.1-8.fc6.ppc.rpm
1be69798ecd58741d4360889bf6ceb43f2b88922 ppc/dbus-devel-1.0.1-8.fc6.ppc.rpm
eae8d97f0e5f199d376bee4c77a6ba6fde8c9285 x86_64/dbus-x11-1.0.1-8.fc6.x86_64.rpm
afec49fb5a9e83aec38693d6e8aac81bad785404 x86_64/dbus-1.0.1-8.fc6.x86_64.rpm
94594f568a4dc1605bb791ff7abf67b9742fdfe1 x86_64/dbus-devel-1.0.1-8.fc6.x86_64.rpm
44e89f61330a0bbdc98b1ff10013596f27b72cea x86_64/debug/dbus-debuginfo-1.0.1-8.fc6.x86_64.rpm
0f95685e0f09dadca9df2a0f337cfe63415d3dc1 i386/dbus-1.0.1-8.fc6.i386.rpm
be5632065dfe9e573462a0820477e8828cdd365f i386/debug/dbus-debuginfo-1.0.1-8.fc6.i386.rpm
a23afc944430818d34ab285312f0dfe15098161d i386/dbus-x11-1.0.1-8.fc6.i386.rpm
5b36d64fa344c0d3afd75a3382d0ddae4eeed0a7 i386/dbus-devel-1.0.1-8.fc6.i386.rpm

References

http://www.vupen.com/english/advisories/2006/5027
https://www.redhat.com/archives/fedora-package-announce/2006-December/msg00105.html
https://www.redhat.com/archives/fedora-package-announce/2006-December/msg00116.html

ChangeLog

2006-12-17 : Initial release
2006-12-19 : Updated Solution

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.