Opened 9 years ago
Closed 9 years ago
#5861 closed enhancement (fixed)
dbus-1.8.12
Reported by: | Fernando de Oliveira | Owned by: | Fernando de Oliveira |
---|---|---|---|
Priority: | normal | Milestone: | 7.7 |
Component: | BOOK | Version: | SVN |
Severity: | normal | Keywords: | |
Cc: |
Description (last modified by )
http://dbus.freedesktop.org/releases/dbus/dbus-1.8.12.tar.gz
D-Bus 1.8.12 (2014-11-24) == The “days of fuchsia passed” release. Fixes: • '''Partially revert the CVE-2014-3639 patch''' by increasing the default authentication timeout on the system bus from 5 seconds back to 30 seconds, since this has been reported to cause boot regressions for some users, mostly with parallel boot ('''systemd''') on slower hardware. On fast systems where local users are considered particularly hostile, administrators can return to the 5 second timeout (or any other value in milliseconds) by saving this as /etc/dbus-1/system-local.conf: <busconfig> <limit name="auth_timeout">5000</limit> </busconfig> (fd.o #86431, Simon McVittie) • '''Add a message in syslog/the Journal''' when the auth_timeout is exceeded (fd.o #86431, Simon McVittie) • Send back an AccessDenied error if the addressed recipient is not allowed to receive a message (and in builds with assertions enabled, don't assert under the same conditions). (fd.o #86194, Jacek Bukarewicz) D-Bus 1.8.10 (2014-11-10) == The “tenants with a leaking roof get priority” release. Security fixes: • Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536 so that CVE-2014-3636 part A cannot exhaust the system bus' file descriptors, completing the incomplete fix in 1.8.8. (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)
Change History (3)
comment:1 by , 9 years ago
Owner: | changed from | to
---|---|
Status: | new → assigned |
comment:2 by , 9 years ago
Description: | modified (diff) |
---|
comment:3 by , 9 years ago
Resolution: | → fixed |
---|---|
Status: | assigned → closed |
Note:
See TracTickets
for help on using tickets.
Problems of connection committing. Sending in one comit.
Fixed at r15010.