--===============3798713140226217722==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature";
 boundary="8P1HSweYDcXXzwPJ"
Content-Disposition: inline


--8P1HSweYDcXXzwPJ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

==========================================================================
Ubuntu Security Notice USN-4015-2
June 12, 2019

dbus vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.04 ESM
- Ubuntu 12.04 ESM

Summary:

DBus could allow unintended access to services.

Software Description:
- dbus: simple interprocess messaging system

Details:

USN-4015-1 fixed a vulnerability in DBus. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

 Joe Vennix discovered that DBus incorrectly handled DBUS_COOKIE_SHA1
 authentication. A local attacker could possibly use this issue to bypass
 authentication and connect to DBus servers with elevated privileges.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  dbus                            1.6.18-0ubuntu4.5+esm1
  libdbus-1-3                     1.6.18-0ubuntu4.5+esm1

Ubuntu 12.04 ESM:
  dbus                            1.4.18-1ubuntu1.9
  libdbus-1-3                     1.4.18-1ubuntu1.9

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  https://usn.ubuntu.com/4015-2
  https://usn.ubuntu.com/4015-1
  CVE-2019-12749

--8P1HSweYDcXXzwPJ
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBAgAGBQJdARp8AAoJEEW851uECx9pdX0P/37unOP7OPGMWgUSlmULAyyy
7VPApwOKS6pDCBfRgk7wHgrMun50k1dCSNUtA/nXcfVTJR1CwX87sdIe+1L++52u
yPTCe5eVGWPc0ETyRSLdRI02kU80VOknBL9h12Wk8iKX54nqGO440XvkaJMeZEuz
y4hAnUPdGdQp/EtDq/0H5fDaijRisIyRAScLJf8Mpoxv6xirF4i7WjFrR3bSk4/q
CAokUQclWNydKVF1siUssqV9et7uMVqWzInadwxvPfj1UR0HKlyDVzIBcjF5b0B4
Tb5/GuZJG33EQzSpBqHmkaCT6elmKYivShJpaNxism6ErFp4JcZ01D468PyQo/mk
rmuWVWCaLzZ5Ho4wt7c2C5I5sIxMzT6z9i44zWsqkqTV5K9+pEoVxbfOZZf2MACr
Wd87FrYu4X+5wmeVxvexC9sQz7D0z4uSH8WHqmHHDEsZbB1O1dQ2DH6Ig4q+ocx8
izl2kf77E1OrJt6p5RNgtZDfgGY9FBB+Jmb2nn0xIpEIa2PWswZA5Qa8xQl6B7H0
1bFo6FKjE/NZI4C0uELlIbkiJFJkdzzlOIaydpz2UWzk8zMy+qMbsrwJEpM0OUyh
k/xQYmD3ChPPvHVlwVmSXyOs4EQVYQgB85ujZh3RFdiSokD3/s5nEkJb0/VVN7HT
AC8Ariema8BdzsJWQkSH
=s2mG
-----END PGP SIGNATURE-----

--8P1HSweYDcXXzwPJ--


--===============3798713140226217722==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce