dbusD-Bus supports broadcast messages, asynchronous messages (thus decreasing latency), authentication, and more. It is designed to be low-overhead; messages are sent using a binary protocol, not using XML. D-Bus also supports a method call mapping for its messages, but it is not required; this makes using the system quite simple. It comes with several bindings, including GLib, Python, Qt and Java. This package contains the D-Bus daemon and related utilities. The client-side library can be found in the libdbus-1-3 package, as it is no longer contained in this package.
dbus-x11
Versione 1.2.12-0ubuntu2.1:
* SECURITY UPDATE: Signature spoofing via incorrect logic
- debian/patches/82-security-CVE-2009-1189.patch: fix logic in
dbus/dbus-marshal-validate.c and fix test in
dbus/dbus-marshal-validate-util.c.
- CVE-2009-1189
This package contains the dbus-launch utility which is necessary for packages using a D-Bus session bus. See the dbus description for more information about D-Bus in general.
dhcp3-client
Versione 3.1.1-5ubuntu8.1:
* SECURITY UPDATE: stack overflow when connecting to malicious DHCP v4
server
- debian/patches/CVE-2009-0692.dpatch: update script_write_params() in
dhclient.c to verify that length of data is not longer than netmask
(iaddr)
- CVE-2009-0692
Dynamic Host Configuration Protocol (DHCP) is a protocol like BOOTP (actually dhcpd includes much of the functionality of bootpd). It gives client machines "leases" for IP addresses and can automatically set their network configuration. If your machine depends on DHCP (especially likely if it's a workstation on a large network, or a laptop, or attached to a cable modem), keep this or another DHCP client installed. Extra documentation can be found in the package dhcp3-common.
dhcp3-common
Versione 3.1.1-5ubuntu8.1:
* SECURITY UPDATE: stack overflow when connecting to malicious DHCP v4
server
- debian/patches/CVE-2009-0692.dpatch: update script_write_params() in
dhclient.c to verify that length of data is not longer than netmask
(iaddr)
- CVE-2009-0692
This package contains the files used by all the packages from ISC DHCP version 3.
libdbus-1-3
Versione 1.2.12-0ubuntu2.1:
* SECURITY UPDATE: Signature spoofing via incorrect logic
- debian/patches/82-security-CVE-2009-1189.patch: fix logic in
dbus/dbus-marshal-validate.c and fix test in
dbus/dbus-marshal-validate-util.c.
- CVE-2009-1189
D-Bus supports broadcast messages, asynchronous messages (thus decreasing latency), authentication, and more. It is designed to be low-overhead; messages are sent using a binary protocol, not using XML. D-Bus also supports a method call mapping for its messages, but it is not required; this makes using the system quite simple. It comes with several bindings, including GLib, Python, Qt and Java. The daemon can be found in the dbus package.
libtiff4
Versione 3.8.2-11ubuntu0.9.04.3:
* SECURITY UPDATE: arbitrary code execution via integer overflows in
tiff2rgba and rgb2ycbcr
- debian/patches/CVE-2009-2347.patch: check for integer overflows in
tools/rgb2ycbcr.c and tools/tiff2rgba.c.
- CVE-2009-2347
libtiff is a library providing support for the Tag Image File Format (TIFF), a widely used format for storing image data.
This package includes the shared library.
If you liked this article, subscribe to the feed by clicking the image below to keep informed about new contents of the blog:
0 comments:
Post a Comment