更新到 1.8.12 (#1168438)

- 修复 CVE-2014-3635 (fd.o#83622)

- 修复 CVE-2014-3636 (fd.o#82820)

- 修复 CVE-2014-3637 (fd.o#80559)

- 修复 CVE-2014-3638 (fd.o#81053)

- 修复 CVE-2014-3639 (fd.o#80919)

- 修复 CVE-2014-7824 (fd.o#85105)

请注意，Tenable Network Security 已直接从 Fedora 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

远程主机受到 GLSA-201412-12 中所述漏洞的影响（D-Bus：多个漏洞）

    已在 D-Bus 中发现多个漏洞。请检查下方引用的 CVE 标识符以了解详细信息。
  影响：

    本地攻击者可能造成拒绝服务。
  变通方案：

    目前无任何已知的变通方案。

DBUS-1 服务和库已更新到新上游版本 1.6.24，修复了多个安全问题和缺陷。

dbus 1.6.8 以来的上游变更

+ 安全补丁

- 在 cmsg 消息的填充中不接受额外的 fd，否则可能造成 4 字节堆缓冲区溢出。（CVE-2014-3635、fdo#83622；Simon McVittie）

- 将每条消息通过的默认最大 Unix 文件描述符数量从 1024 降低为 16，防止含有默认最大连接数的 uid 耗尽 Linux 的默认 rlimit 下的系统总线的文件描述符。具有更严格 fd 限制的分销商或系统管理员可能希望进一步减少这些限制。此外，在 Linux 上，这将防止二次拒绝服务，否则可能导致 dbus-daemon 超过每个 sendmsg() 的最大 fd 数，并断开将接收这些 fd 的进程。（CVE-2014-3636、fdo#82820；Alban Crequy）

- 在新的可配置限制 pending_fd_timeout（默认为 150 秒）之后，断开的连接仍然具有 fd 待定解组，从而防止通过对连接的文件描述符设置循环引用来创建无法断开的恶意连接。
 （CVE-2014-3637、fdo#80559；Alban Crequy）

- 将每个连接的默认最大待定回复数量从 8192 降低为 128，从而降低拒绝服务攻击的算法复杂性（CVE-2014-3638、fdo#81053；Alban Crequy）

- 将系统总线上认证超时的默认值从 30 秒降低为 5 秒，从而避免因为耗尽所有未经认证的连接槽而导致拒绝服务，当所有未经认证的连接槽用尽时，制作新的连接尝试块，而不是断开连接。（CVE-2014-3639、fdo#80919；Alban Crequy）

- On Linux >= 2.6.37-rc4，如果 sendmsg() 执行 ETOOMANYREFS 失败，则静默终止该消息。这样会防止恶意客户端中的攻击通过创建 dbus-daemon 来断开与系统服务的连接（即本地拒绝服务）。（fdo#80163、CVE-2014-3532；Alban Crequy）

- 连续多个消息中包含 fd 时，跟踪剩余的 Unix 文件描述符。
 这样会防止恶意客户端可使 dbus-daemon 断开与系统服务连接的另一个攻击。
 （fdo#79694、fdo#80469、CVE-2014-3533；Alejandro Martínez Suárez、Simon McVittie、Alban Crequy）

- Collabora Ltd. 的 Alban Crequy 发现并修复了 dbus-daemon（D-Bus 的引用实现的一部分）中的拒绝服务缺陷。此外，在高度异常的环境中，同一缺陷可导致在不应进行通信的进程之间出现边信道。（CVE-2014-3477，fdo#78979）

- CVE-2013-2168：为系统服务修复可用作拒绝服务的 va_list 滥用。
 Alexandru Cornea 报告的漏洞。(Simon)

+ 其他补丁

- 在列出可激活的服务或活动服务时，不在内存不足时泄漏内存（fdo#71526，Radoslaw Pajak）

- 修复回归测试中的不明行为（fdo#69924，DreamNik）

- 匹配规则中的 path_namespace='/' 错误地不匹配任何项；现在匹配所有项。（fdo#70799，Simon McVittie）

- 让 dbus_connection_set_route_peer_messages(x, FALSE) 的行为与记录的一致。以前，它假设其第二个参数是 TRUE。（fdo#69165，Chengwei Yang）

- 修复不太可能的错误路径中的空指针取消引用（fdo#69327，Sviatoslav Chagaev）

- 如果 accept4() 因 EINVAL 发生故障（在采用较高版本 glibc 的较低版本 Linux 内核中就可能发生故障），则尝试 accept() 而不是进入忙循环。（fdo#69026，Chengwei Yang）

- 如果 socket() 或 socketpair() 因 EINVAL 或 EPROTOTYPE（例如在含有新的 glibc 的 Hurd 或较早版本的 Linux 上）发生故障，则尝试不使用 SOCK_CLOEXEC。（fdo#69073；Pino Toscano、Chengwei Yang）

- 修复错误代码路径中的文件描述符泄漏。
 （fdo#69182，Sviatoslav Chagaev）

- writev() 不可用时修复编译（fdo#69409，Vasiliy Balyasnyy）

- 避免信号中断 waitpid() 时无限忙循环（fdo#68945，Simon McVittie）

- 正确转义包含非 ASCII 字符的地址（fdo#53499，Chengwei Yang）

- 如果 malloc() 在 _dbus_string_init() 或类似函数中返回 NULL，并且在之后释放字符串，不释放无效指针（fdo#65959，Chengwei Yang）

- 如果 malloc() 在 dbus_set_error() 中返回 NULL，不为从不曾 va_start() 的 va_list 执行 va_end()（fdo#66300，Chengwei Yang）

- 修复严格对齐平台上的回归测试（fdo#67279，Colin Walters）

- 避免调用函数参数“interface”，因为某些 Windows 标头拥有该名称的命名空间污染宏（fdo#66493，Ivan Romanov）

- 使“make -j check”工作（fdo#68852，Simon McVittie）

- 在 dbus-daemon 中，如果 .service 文件开头为 key=value 则不会崩溃（fdo#60853，Chengwei Yang）

- 修复 systemd 连接到总线之前尝试激活 systemd 服务导致的断言失败（fdo#50199，Chengwei Yang）

- 避免忽略 write() 返回的编译器警告 (Chengwei Yang)

- UTF-8 字符串中再次允许使用以下 Unicode 勘误表 #9、非字符 U+nFFFE、U+nFFFF、U+FDD0..U+FDEF。（fdo#63072，Simon McVittie）

- 通过负插槽（即分配插槽之前）诊断 dbus_connection_get_data() 的不正确使用而非返回垃圾（fdo#63127，Dan Williams）

- 在激活帮助程序中，当编译测试时，不重置系统总线地址，从而修复回归测试。（fdo#52202，Simon）

- 修复 Valgrind 3.8 构建，代价是造成在某些编译器中 Valgrind 3.6 发出无害的警告（fdo#55932，Arun Raghavan）

- 不泄漏指向 /dev/null 的临时 fds（fdo#56927，Michel HERMIER）

- 在 CMake 下创建 session.d、system.d 目录（fdo#41319，Ralf Habacker）

- 包括 alloca.h 用于 alloca()（如果可用），修复对 Solaris 10 的编译（fdo#63071，Dagobert Michelsen）

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - D-Bus 1.3.0 至 1.6.x ] 之前的 1.6.24 和 1.8.x 之前的 1.8.8 允许本地用户 (1) 通过排队达到最大数量的文件描述符造成拒绝服务（防止新连接和连接终止）或 (2 ) 通过多个消息（单个 sendmsg 调用的文件描述符数量超过允许的数量）造成拒绝服务（断开连接）。 (CVE-2014-3636)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

更新到 1.6.28

请注意，Tenable Network Security 已直接从 Fedora 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

Alban Crequy 和 Simon McVittie 发现了 D-Bus 消息后台程序中的多个漏洞。

- CVE-2014-3635 在 64 位平台上，文件描述符传递可被本地用户滥用于造成 dbus-daemon 中的堆损坏，从而导致崩溃或者可能导致任意代码执行。

- CVE-2014-3636 dbus-daemon 中的拒绝服务漏洞允许本地攻击者通过耗尽描述符限制来阻止与 dbus-daemon 建立新连接或者断开现有客户端的连接。

- CVE-2014-3637 恶意本地用户可创建与 dbus-daemon 的 D-Bus 连接，可通过终止参与的进程来终止这些连接，从而导致拒绝服务漏洞。

- CVE-2014-3638 dbus-daemon 受到用于跟踪哪些消息预期收到回复的代码中的拒绝服务漏洞的影响，从而允许本地攻击者降低 dbus-daemon 的性能。

- CVE-2014-3639 dbus-daemon 未正确拒绝来自本地用户的恶意连接，从而导致拒绝服务漏洞。

Simon McVittie 报告：

不接受 cmsg 消息的填充中的额外 fd，这样可导致 4 字节堆缓冲区溢出 (CVE-2014-3635)。

将每条消息传递的最大 Unix 文件描述符的默认值从 1024 减少到 16，从而防止具有默认最大连接数的 uid 在 Linux 的默认 rlimit 下耗尽系统总线的文件描述符 (CVE-2014-3636)。

在新的可配置限制 pending_fd_timeout（默认值为 150 秒）之后断开仍具有待解组 fd 的连接，从而消除创建滥用的连接的可能性，无法通过设置对连接的文件描述符的循环引用来断开这些连接 (CVE-2014-3637)。

将每个连接的最大待定回复的默认值从 8192 减少到 128，从而缓解算法复杂性拒绝服务攻击 (CVE-2014-3638)。

将系统总线上认证超时的默认值从 30 秒降低为 5 秒，从而避免因为耗尽所有未经认证的连接槽而导致拒绝服务，当所有未经认证的连接槽用尽时，制作新的连接尝试块，而不是断开连接 (CVE-2014-3639)。

远程 Ubuntu 14.04 LTS 主机上安装的多个程序包受到 USN-2352-1 公告中提及的多个漏洞影响。

    Simon McVittie 发现 DBus 未正确处理文件描述符消息限制。本地攻击者可利用此问题使 DBus 崩溃，从而导致拒绝服务或者可能执行任意代码。此问题仅影响 Ubuntu 12.04 LTS 和 Ubuntu 14.04 LTS。(CVE-2014-3635)

    Alban Crequy 发现 DBus 未正确处理大量文件描述符消息。本地攻击者可利用此问题造成 DBus 停止响应，从而导致拒绝服务。此问题仅影响 Ubuntu 12.04 LTS 和 Ubuntu 14.04 LTS。(CVE-2014-3636)

    Alban Crequy 发现 DBus 未正确处理某些文件描述符消息。本地攻击者可利用此问题使 DBus 保持永久连接，从而可能导致拒绝服务。此问题仅影响 Ubuntu 12.04 LTS 和 Ubuntu 14.04 LTS。(CVE-2014-3637)

    Alban Crequy 发现 DBus 未正确处理大量并行连接和并行消息调用。本地攻击者可利用此问题使 DBus 消耗资源，从而可能导致拒绝服务。(CVE-2014-3638)

    Alban Crequy 发现 DBus 未正确处理不完整的连接。本地攻击者可利用此问题使 DBus 拒绝合法的连接尝试，从而导致拒绝服务。
    (CVE-2014-3639)

Tenable 已直接从 Ubuntu 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Updated dbus packages fixes the following security issues :

Alban Crequy and Simon McVittie discovered several vulnerabilities in the D-Bus message daemon :

On 64-bit platforms, file descriptor passing could be abused by local users to cause heap corruption in dbus-daemon, leading to a crash, or potentially to arbitrary code execution (CVE-2014-3635).

A denial-of-service vulnerability in dbus-daemon allowed local attackers to prevent new connections to dbus-daemon, or disconnect existing clients, by exhausting descriptor limits (CVE-2014-3636).

Malicious local users could create D-Bus connections to dbus-daemon which could not be terminated by killing the participating processes, resulting in a denial-of-service vulnerability (CVE-2014-3637).

dbus-daemon suffered from a denial-of-service vulnerability in the code which tracks which messages expect a reply, allowing local attackers to reduce the performance of dbus-daemon (CVE-2014-3638).

dbus-daemon did not properly reject malicious connections from local users, resulting in a denial-of-service vulnerability (CVE-2014-3639).

The patch issued by the D-Bus maintainers for CVE-2014-3636 was based on incorrect reasoning, and does not fully prevent the attack described as CVE-2014-3636 part A, which is repeated below. Preventing that attack requires raising the system dbus-daemon's RLIMIT_NOFILE (ulimit -n) to a higher value.

By queuing up the maximum allowed number of fds, a malicious sender could reach the system dbus-daemon's RLIMIT_NOFILE (ulimit -n, typically 1024 on Linux). This would act as a denial of service in two ways :

  - new clients would be unable to connect to the     dbus-daemon

    - when receiving a subsequent message from a       non-malicious client that contained a fd, dbus-daemon       would receive the MSG_CTRUNC flag, indicating that the       list of fds was truncated; kernel fd-passing APIs do       not provide any way to recover from that, so       dbus-daemon responds to MSG_CTRUNC by disconnecting       the sender, causing denial of service to that sender.

This update also resolves the CVE-2014-7824 security vulnerability.

Update to 1.6.28

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the dbus packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - D-BUS is a system for sending messages between     applications. It is used both for the system-wide     message bus service, and as a per-user-login-session     messaging facility.

  - Security Fix(es)

  - dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when     running on Linux 2.6.37-rc4 or later, allows local     users to cause a denial of service (system-bus     disconnect of other services or applications) by     sending a message containing a file descriptor, then     exceeding the maximum recursion depth before the     initial message is forwarded.(CVE-2014-3532)

  - dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows     local users to cause a denial of service (disconnect)     via a certain sequence of crafted messages that cause     the dbus-daemon to forward a message containing an     invalid file descriptor.(CVE-2014-3533)

  - D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before     1.8.16, and 1.9.x before 1.9.10 does not validate the     source of ActivationFailure signals, which allows local     users to cause a denial of service (activation failure     error returned) by leveraging a race condition     involving sending an ActivationFailure signal before     systemd responds.(CVE-2015-0245)

  - D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x     before 1.8.8 allows local users to (1) cause a denial     of service (prevention of new connections and     connection drop) by queuing the maximum number of file     descriptors or (2) cause a denial of service     (disconnect) via multiple messages that combine to have     more than the allowed number of file descriptors for a     single sendmsg call.(CVE-2014-3636)

  - The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x     before 1.6.20, and 1.8.x before 1.8.4, sends an     AccessDenied error to the service instead of a client     when the client is prohibited from accessing the     service, which allows local users to cause a denial of     service (initialization failure and exit) or possibly     conduct a side-channel attack via a D-Bus message to an     inactive service.(CVE-2014-3477)

  - D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x     before 1.8.8 does not properly close connections for     processes that have terminated, which allows local     users to cause a denial of service via a D-bus message     containing a D-Bus connection file     descriptor.(CVE-2014-3637)

  - Off-by-one error in D-Bus 1.3.0 through 1.6.x before     1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit     system and the max_message_unix_fds limit is set to an     odd number, allows local users to cause a denial of     service (dbus-daemon crash) or possibly execute     arbitrary code by sending one more file descriptor than     the limit, which triggers a heap-based buffer overflow     or an assertion failure.(CVE-2014-3635)

  - The bus_connections_check_reply function in     config-parser.c in D-Bus before 1.6.24 and 1.8.x before     1.8.8 allows local users to cause a denial of service     (CPU consumption) via a large number of method     calls.(CVE-2014-3638)

  - The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before     1.8.8 does not properly close old connections, which     allows local users to cause a denial of service     (incomplete connection consumption and prevention of     new connections) via a large number of incomplete     connections.(CVE-2014-3639)

  - D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before     1.8.10, and 1.9.x before 1.9.2 allows local users to     cause a denial of service (prevention of new     connections and connection drop) by queuing the maximum     number of file descriptors. NOTE: this vulnerability     exists because of an incomplete fix for     CVE-2014-3636.1.(CVE-2014-7824)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

DBUS-1 was upgraded to upstream release 1.8.

This brings the version of dbus to the latest stable release from an unstable snapshot 1.7.4 that is know to have several regressions

  - Upstream changes since 1.7.4 :

  + Security fixes :

  - Do not accept an extra fd in the padding of a cmsg     message, which could lead to a 4-byte heap buffer     overrun. (CVE-2014-3635, fdo#83622; Simon McVittie)

  - Reduce default for maximum Unix file descriptors passed     per message from 1024 to 16, preventing a uid with the     default maximum number of connections from exhausting     the system bus' file descriptors under Linux's default     rlimit. Distributors or system administrators with a     restrictive fd limit may wish to reduce these limits     further. Additionally, on Linux this prevents a second     denial of service in which the dbus-daemon can be made     to exceed the maximum number of fds per sendmsg() and     disconnect the process that would have received them.
    (CVE-2014-3636, fdo#82820; Alban Crequy)

  - Disconnect connections that still have a fd pending     unmarshalling after a new configurable limit,     pending_fd_timeout (defaulting to 150 seconds), removing     the possibility of creating an abusive connection that     cannot be disconnected by setting up a circular     reference to a connection's file descriptor.
    (CVE-2014-3637, fdo#80559; Alban Crequy)

  - Reduce default for maximum pending replies per     connection from 8192 to 128, mitigating an algorithmic     complexity denial-of-service attack (CVE-2014-3638,     fdo#81053; Alban Crequy)

  - Reduce default for authentication timeout on the system     bus from 30 seconds to 5 seconds, avoiding denial of     service by using up all unauthenticated connection     slots; and when all unauthenticated connection slots are     used up, make new connection attempts block instead of     disconnecting them. (CVE-2014-3639, fdo#80919; Alban     Crequy)

  - On Linux >0 2.6.37-rc4, if sendmsg() fails with     ETOOMANYREFS, silently drop the message. This prevents     an attack in which a malicious client can make     dbus-daemon disconnect a system service, which is a     local denial of service. (fdo#80163, CVE-2014-3532;
    Alban Crequy)

  - Track remaining Unix file descriptors correctly when     more than one message in quick succession contains fds.
    This prevents another attack in which a malicious client     can make dbus-daemon disconnect a system service.
    (fdo#79694, fdo#80469, CVE-2014-3533; Alejandro     Mart&iacute;nez Su&aacute;rez, Simon McVittie, Alban     Crequy)

  - Alban Crequy at Collabora Ltd. discovered and fixed a     denial-of-service flaw in dbus-daemon, part of the     reference implementation of D-Bus. Additionally, in     highly unusual environments the same flaw could lead to     a side channel between processes that should not be able     to communicate. (CVE-2014-3477, fdo#78979)

  + Other fixes and enhancements :

  - Check for libsystemd from systemd >= 209, falling back     to the older separate libraries if not found (Umut     Tezduyar Lindskog, Simon McVittie)

  - On Linux, use prctl() to disable core dumps from a test     executable that deliberately raises SIGSEGV to test     dbus-daemon's handling of that condition (fdo#83772,     Simon McVittie)

  - Fix compilation with --enable-stats (fdo#81043, Gentoo     #507232; Alban Crequy)

  - Improve documentation for running tests on Windows     (fdo#41252, Ralf Habacker)

  - When dbus-launch --exit-with-session starts a     dbus-daemon but then cannot attach to a session, kill     the dbus-daemon as intended (fdo#74698,     &#x420;&#x43E;&#x43C;&#x430;&#x43D;
    &#x414;&#x43E;&#x43D;&#x447;&#x435;&#x43D;&#x43A;&#x43E;
    )

  - in the CMake build system, add some hints for Linux     users cross-compiling Windows D-Bus binaries to be able     to run tests under Wine (fdo#41252, Ralf Habacker)

  - add Documentation key to dbus.service (fdo#77447,     Cameron Norman)

  - in 'dbus-uuidgen --ensure', try to copy systemd's     /etc/machine-id to /var/lib/dbus/machine-id instead of     generating an entirely new ID (fdo#77941, Simon     McVittie)

  - if dbus-launch receives an X error very quickly, do not     kill unrelated processes (fdo#74698,     &#x420;&#x43E;&#x43C;&#x430;&#x43D;
    &#x414;&#x43E;&#x43D;&#x447;&#x435;&#x43D;&#x43A;&#x43E;
    )

  - on Windows, allow up to 8K connections to the     dbus-daemon, instead of the previous 64 (fdo#71297;
    Cristian Onet, Ralf Habacker)

  - cope with \r\n newlines in regression tests, since on     Windows, dbus-daemon.exe uses text mode (fdo#75863,     &#x420;&#x443;&#x441;&#x43B;&#x430;&#x43D;
    &#x418;&#x436;&#x431;&#x443;&#x43B;&#x430;&#x442;&#x43E;
    &#x432;)

  - Enhance the CMake build system to check for GLib and     compile/run a subset of the regression tests (fdo#41252,     fdo#73495; Ralf Habacker)

  - don't rely on va_copy(), use DBUS_VA_COPY() wrapper     (fdo#72840, Ralf Habacker)

  - fix compilation of systemd journal support on older     systemd versions where sd-journal.h doesn't include     syslog.h (fdo#73455, Ralf Habacker)

  - fix compilation on older MSVC versions by including     stdlib.h (fdo#73455, Ralf Habacker)

  - Allow <allow_anonymous/> to appear in an included     configuration file (fdo#73475, Matt Hoosier)

  - If the tests crash with an assertion failure, they no     longer default to blocking for a debugger to be     attached. Set DBUS_BLOCK_ON_ABORT in the environment if     you want the old behaviour.

  - To improve debuggability, the dbus-daemon and     dbus-daemon-eavesdrop tests can be run with an external     dbus-daemon by setting DBUS_TEST_DAEMON_ADDRESS in the     environment. Test-cases that require an     unusually-configured dbus-daemon are skipped.

  - don't require messages with no INTERFACE to be     dispatched (fdo#68597, Simon McVittie)

  - document 'tcp:bind=...' and 'nonce-tcp:bind=...'     (fdo#72301, Chengwei Yang)

  - define 'listenable' and 'connectable' addresses, and     discuss the difference (fdo#61303, Simon McVittie)

  - support printing Unix file descriptors in dbus-send,     dbus-monitor (fdo#70592, Robert Ancell)

  - don't install systemd units if --disable-systemd is     given (fdo#71818, Chengwei Yang)

  - don't leak memory on out-of-memory while listing     activatable or active services (fdo#71526, Radoslaw     Pajak)

  - fix undefined behaviour in a regression test (fdo#69924,     DreamNik)

  - escape Unix socket addresses correctly (fdo#46013,     Chengwei Yang)

  - on SELinux systems, don't assume that SECCLASS_DBUS,     DBUS__ACQUIRE_SVC and DBUS__SEND_MSG are numerically     equal to their values in the reference policy     (fdo#88719, osmond sun)

  - define PROCESS_QUERY_LIMITED_INFORMATION if missing from     MinGW < 4 headers (fdo#71366, Matt Fischer)

  - define WIN32_LEAN_AND_MEAN to avoid conflicts between     winsock.h and winsock2.h (fdo#71405, Matt Fischer)

  - do not return failure from _dbus_read_nonce() with no     error set, preventing a potential crash (fdo#72298,     Chengwei Yang)

  - on BSD systems, avoid some O(1)-per-process memory and     fd leaks in kqueue, preventing test failures (fdo#69332,     fdo#72213; Chengwei Yang)

  - fix warning spam on Hurd by not trying to set     SO_REUSEADDR on Unix sockets, which doesn't do anything     anyway on at least Linux and FreeBSD (fdo#69492, Simon     McVittie)

  - fix use of TCP sockets on FreeBSD and Hurd by tolerating     EINVAL from sendmsg() with SCM_CREDS (retrying with     plain send()), and looking for credentials more     correctly (fdo#69492, Simon McVittie)

  - ensure that tests run with a temporary XDG_RUNTIME_DIR     to avoid getting mixed up in XDG/systemd 'user sessions'     (fdo#61301, Simon McVittie)

  - refresh cached policy rules for existing connections     when bus configuration changes (fdo#39463, Chengwei     Yang)

  - If systemd support is enabled, libsystemd-journal is now     required.

  - When activating a non-systemd service under systemd,     annotate its stdout/stderr with its bus name in the     Journal. Known limitation: because the socket is opened     before forking, the process will still be logged as if     it had dbus-daemon's process ID and user ID. (fdo#68559,     Chengwei Yang)

  - Document more configuration elements in dbus-daemon(1)     (fdo#69125, Chengwei Yang)

  - Don't leak string arrays or fds if     dbus_message_iter_get_args_valist() unpacks them and     then encounters an error (fdo#21259, Chengwei Yang)

  - If compiled with libaudit, retain CAP_AUDIT_WRITE so we     can write disallowed method calls to the audit log,     fixing a regression in 1.7.6 (fdo#49062, Colin Walters)

  - path_namespace='/' in match rules incorrectly matched     nothing; it now matches everything. (fdo#70799, Simon     McVittie)

  - Directory change notification via dnotify on Linux is no     longer supported; it hadn't compiled successfully since     2010 in any case. If you don't have inotify (Linux) or     kqueue (*BSD), you will need to send SIGHUP to the     dbus-daemon when its configuration changes. (fdo#33001,     Chengwei Yang)

  - Compiling with --disable-userdb-cache is no longer     supported; it didn't work since at least 2008, and would     lead to an extremely slow dbus-daemon even it worked.
    (fdo#15589, fdo#17133, fdo#66947; Chengwei Yang)

  - The DBUS_DISABLE_ASSERTS CMake option didn't actually     disable most assertions. It has been renamed to     DBUS_DISABLE_ASSERT to be consistent with the Autotools     build system. (fdo#66142, Chengwei Yang)

  - --with-valgrind=auto enables Valgrind instrumentation if     and only if valgrind headers are available. The default     is still

    --with-valgrind=no. (fdo#56925, Simon McVittie)

  - Platforms with no 64-bit integer type are no longer     supported. (fdo#65429, Simon McVittie)

  - GNU make is now (documented to be) required. (fdo#48277,     Simon McVittie)

  - Full test coverage no longer requires dbus-glib,     although the tests do not exercise the shared library     (only a static copy) if dbus-glib is missing.
    (fdo#68852, Simon McVittie)

  - D-Bus Specification 0.22

  - Document GetAdtAuditSessionData() and     GetConnectionSELinuxSecurityContext() (fdo#54445, Simon)

  - Fix example .service file (fdo#66481, Chengwei Yang)

  - Don't claim D-Bus is 'low-latency' (lower than what?),     just give factual statements about it supporting async     use (fdo#65141, Justin Lee)

  - Document the contents of .service files, and the fact     that system services' filenames are constrained     (fdo#66608; Simon McVittie, Chengwei Yang)

  - Be thread-safe by default on all platforms, even if     dbus_threads_init_default() has not been called. For     compatibility with older libdbus, library users should     continue to call dbus_threads_init_default(): it is     harmless to do so. (fdo#54972, Simon McVittie)

  - Add GetConnectionCredentials() method (fdo#54445, Simon)

  - New API: dbus_setenv(), a simple wrapper around     setenv(). Note that this is not thread-safe. (fdo#39196,     Simon)

  - Add dbus-send --peer=ADDRESS (connect to a given     peer-to-peer connection, like --address=ADDRESS in     previous versions) and dbus-send --bus=ADDRESS (connect     to a given bus, like dbus-monitor

    --address=ADDRESS). dbus-send --address still exists for     backwards compatibility, but is no longer documented.
    (fdo#48816, Andrey Mazo)

  - 'dbus-daemon --nofork' is allowed on Windows again.
    (fdo#68852, Simon McVittie)

  - Avoid an infinite busy-loop if a signal interrupts     waitpid() (fdo#68945, Simon McVittie)

  - Clean up memory for parent nodes when objects are     unexported (fdo#60176, Thomas Fitzsimmons)

  - Make dbus_connection_set_route_peer_messages(x, FALSE)     behave as documented. Previously, it assumed its second     parameter was TRUE. (fdo#69165, Chengwei Yang)

  - Escape addresses containing non-ASCII characters     correctly (fdo#53499, Chengwei Yang)

  - Document <servicedir> search order correctly (fdo#66994,     Chengwei Yang)

  - Don't crash on 'dbus-send --session / x.y.z' which     regressed in 1.7.4. (fdo#65923, Chengwei Yang)

  - If malloc() returns NULL in _dbus_string_init() or     similar, don't free an invalid pointer if the string is     later freed (fdo#65959, Chengwei Yang)

  - If malloc() returns NULL in dbus_set_error(), don't     va_end() a va_list that was never va_start()ed     (fdo#66300, Chengwei Yang)

  - fix build failure with --enable-stats (fdo#66004,     Chengwei Yang)

  - fix a regression test on platforms with strict alignment     (fdo#67279, Colin Walters)

  - Avoid calling function parameters 'interface' since     certain Windows headers have a namespace-polluting macro     of that name (fdo#66493, Ivan Romanov)

  - Assorted Doxygen fixes (fdo#65755, Chengwei Yang)

  - Various thread-safety improvements to static variables     (fdo#68610, Simon McVittie)

  - Make 'make -j check' work (fdo#68852, Simon McVittie)

  - Fix a NULL pointer dereference on an unlikely error path     (fdo#69327, Sviatoslav Chagaev)

  - Improve valgrind memory pool tracking (fdo#69326,     Sviatoslav Chagaev)

  - Don't over-allocate memory in dbus-monitor (fdo#69329,     Sviatoslav Chagaev)

  - dbus-monitor can monitor dbus-daemon < 1.5.6 again     (fdo#66107, Chengwei Yang)

  - If accept4() fails with EINVAL, as it can on older Linux     kernels with newer glibc, try accept() instead of going     into a busy-loop. (fdo#69026, Chengwei Yang)

  - If socket() or socketpair() fails with EINVAL or     EPROTOTYPE, for instance on Hurd or older Linux with a     new glibc, try without SOCK_CLOEXEC. (fdo#69073; Pino     Toscano, Chengwei Yang)

  - Fix a file descriptor leak on an error code path.
    (fdo#69182, Sviatoslav Chagaev)

  - dbus-run-session: clear some unwanted environment     variables (fdo#39196, Simon)

  - dbus-run-session: compile on FreeBSD (fdo#66197,     Chengwei Yang)

  - Don't fail the autolaunch test if there is no DISPLAY     (fdo#40352, Simon)

  - Use dbus-launch from the builddir for testing, not the     installed copy (fdo#37849, Chengwei Yang)

  - Fix compilation if writev() is unavailable (fdo#69409,     Vasiliy Balyasnyy)

  - Remove broken support for LOCAL_CREDS credentials     passing, and document where each credential-passing     scheme is used (fdo#60340, Simon McVittie)

  - Make autogen.sh work on *BSD by not assuming GNU     coreutils functionality fdo#35881, fdo#69787; Chengwei     Yang)

  - dbus-monitor: be portable to NetBSD (fdo#69842, Chengwei     Yang)

  - dbus-launch: stop using non-portable asprintf     (fdo#37849, Simon)

  - Improve error reporting from the setuid activation     helper (fdo#66728, Chengwei Yang)

  - Remove unavailable command-line options from     'dbus-daemon --help' (fdo#42441, Ralf Habacker)

  - Add support for looking up local TCPv4 clients'     credentials on Windows XP via the undocumented     AllocateAndGetTcpExTableFromStack function (fdo#66060,     Ralf Habacker)

  - Fix insufficient dependency-tracking (fdo#68505, Simon     McVittie)

  - Don't include wspiapi.h, fixing a compiler warning     (fdo#68852, Simon McVittie)

  - add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less     confusing conditionals (fdo#66142, Chengwei Yang)

  - improve verbose-mode output (fdo#63047, Colin Walters)

  - consolidate Autotools and CMake build (fdo#64875, Ralf     Habacker)

  - fix various unused variables, unusual build     configurations etc. (fdo#65712, fdo#65990, fdo#66005,     fdo#66257, fdo#69165, fdo#69410, fdo#70218; Chengwei     Yang, Vasiliy Balyasnyy)

  - dbus-cve-2014-3533.patch: Add patch for CVE-2014-3533 to     fix (fdo#63127) &bull; CVE-2012-3524: Don't access     environment variables (fdo#52202) (fdo#51521, Dave     Reisner) &bull; Remove an incorrect assertion from     DBusTransport (fdo#51657, (fdo#51406, Simon McVittie)     (fdo#51032, Simon McVittie) (fdo#34671, Simon McVittie)     &middot; Check for libpthread under CMake on Unix     (fdo#47237, Simon McVittie) spec-compliance (fdo#48580,     David Zeuthen) non-root when using OpenBSD install(1)     (fdo#48217, Antoine Jacoutot) (fdo#45896, Simon     McVittie) (fdo#39549, Simon McVittie) invent their own     'union of everything' type (fdo#11191, Simon find(1)     (fdo#33840, Simon McVittie) (fdo#46273, Alban Crequy)     again on Win32, but not on WinCE (fdo#46049, Simon     (fdo#47321, Andoni Morales Alastruey) (fdo#39231,     fdo#41012; Simon McVittie)

  - Add a regression test for fdo#38005 (fdo#39836, Simon     McVittie) a service file entry for activation     (fdo#39230, Simon McVittie) (fdo#24317, #34870; Will     Thompson, David Zeuthen, Simon McVittie) and document it     better (fdo#31818, Will Thompson) &bull; Let the bus     daemon implement more than one interface (fdo#33757,     &bull; Optimize _dbus_string_replace_len to reduce waste     (fdo#21261, (fdo#35114, Simon McVittie) &bull; Add     dbus_type_is_valid as public API (fdo#20496, Simon     McVittie) to unknown interfaces in the bus daemon     (fdo#34527, Lennart Poettering) (fdo#32245; Javier     Jard&oacute;n, Simon McVittie) &bull; Correctly give     XDG_DATA_HOME priority over XDG_DATA_DIRS (fdo#34496, in     embedded environments (fdo#19997, NB#219964; Simon     McVittie) &bull; Install the documentation, and an index     for Devhelp (fdo#13495, booleans when sending them     (fdo#16338, NB#223152; Simon McVittie) errors to     dbus-shared.h (fdo#34527, Lennart Poettering) data     (fdo#10887, Simon McVittie) .service files (fdo#19159,     Sven Herzberg) (fdo#35750, Colin Walters) (fdo#32805,     Mark Brand) which could result in a busy-loop     (fdo#32992, NB#200248; possibly &bull; Fix failure to     detect abstract socket support (fdo#29895) (fdo#32262,     NB#180486) &bull; Improve some error code paths     (fdo#29981, fdo#32264, fdo#32262, fdo#33128, fdo#33277,     fdo#33126, NB#180486) &bull; Avoid possible symlink     attacks in /tmp during compilation (fdo#32854) &bull;
    Tidy up dead code (fdo#25306, fdo#33128, fdo#34292,     NB#180486) &bull; Improve gcc malloc annotations     (fdo#32710) &bull; Documentation improvements     (fdo#11190) &bull; Avoid readdir_r, which is difficult     to use correctly (fdo#8284, fdo#15922, LP#241619) &bull;
    Cope with invalid files in session.d, system.d     (fdo#19186, &bull; Don't distribute generated files that     embed our builddir (fdo#30285, fdo#34292) (fdo#33474,     LP#381063) with lcov HTML reports and
    --enable-compiler-coverage (fdo#10887) &middot; support     credentials-passing (fdo#32542) &middot; opt-in to     thread safety (fdo#33464)

ID	名稱	產品	系列	已發布	已更新	嚴重性
80060	Fedora 21：dbus-1.8.12-1.fc21 (2014-16147)	Nessus	Fedora Local Security Checks	2014/12/17	2021/1/11	medium
79965	GLSA-201412-12 : D-Bus：多个漏洞	Nessus	Gentoo Local Security Checks	2014/12/15	2021/1/6	medium
77890	openSUSE 安全更新：dbus-1 (openSUSE-SU-2014:1239-1)	Nessus	SuSE Local Security Checks	2014/9/26	2021/1/19	medium
218168	Linux Distros 未修补的漏洞: CVE-2014-3636	Nessus	Misc.	2025/3/4	2025/3/4	medium
80130	Fedora 19：dbus-1.6.28-1.fc19 (2014-16227)	Nessus	Fedora Local Security Checks	2014/12/22	2021/1/11	medium
77716	Debian DSA-3026-1：dbus - 安全更新	Nessus	Debian Local Security Checks	2014/9/17	2021/1/11	medium
77733	FreeBSD：dbus -- 多种漏洞 (38242d51-3e58-11e4-ac2f-bcaec565249c)	Nessus	FreeBSD Local Security Checks	2014/9/18	2021/1/6	medium
77809	Ubuntu 14.04 LTS：DBus 漏洞 (USN-2352-1)	Nessus	Ubuntu Local Security Checks	2014/9/23	2024/8/27	medium
79322	Mandriva Linux Security Advisory : dbus (MDVSA-2014:214)	Nessus	Mandriva Local Security Checks	2014/11/19	2021/1/6	medium
79924	Fedora 20 : dbus-1.6.28-1.fc20 (2014-16243)	Nessus	Fedora Local Security Checks	2014/12/15	2021/1/11	medium
99800	EulerOS 2.0 SP1 : dbus (EulerOS-SA-2016-1037)	Nessus	Huawei Local Security Checks	2017/5/1	2021/1/6	medium
77845	openSUSE Security Update : dbus-1 (openSUSE-SU-2014:1228-1)	Nessus	SuSE Local Security Checks	2014/9/25	2021/1/19	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium