Synopsis

dbus security update.

Type/Severity

Security Advisory: Low

Topic

Updated dbus packages that fix a security issue are now available for
Red Hat Enterprise Linux 4.

This update has been rated as having low security impact by the Red Hat
Security Response Team.

Description

D-BUS is a system for sending messages between applications. It is
used both for the systemwide message bus service, and as a
per-user-login-session messaging facility.

Dan Reed discovered that a user can send and listen to messages on another
user's per-user session bus if they know the address of the socket. The
Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned
the name CAN-2005-0201 to this issue. In Red Hat Enterprise Linux 4, the
per-user session bus is only used for printing notifications, therefore
this issue would only allow a local user to examine or send additional
print notification messages.

Users of dbus are advised to upgrade to these updated packages,
which contain backported patches to correct this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 146766 - CAN-2005-0201 dbus information leak

CVEs

• CVE-2005-0201

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
dbus-0.22-12.EL.2.src.rpm	SHA-256: 03840d805917507917f7c6cb9f2a96ea93e379e9632919b9aee2123e6231762c
x86_64
dbus-0.22-12.EL.2.i386.rpm	SHA-256: 0f3cf607cda019b162a0aaa8e4f7a01b59f1c8e64d1d270a93cd9e5cc85255ec
dbus-0.22-12.EL.2.i386.rpm	SHA-256: 0f3cf607cda019b162a0aaa8e4f7a01b59f1c8e64d1d270a93cd9e5cc85255ec
dbus-0.22-12.EL.2.x86_64.rpm	SHA-256: b2a08530bad3967b854af050dab9f59e60f1cd58c06ac5752b7a22cef2da13d3
dbus-0.22-12.EL.2.x86_64.rpm	SHA-256: b2a08530bad3967b854af050dab9f59e60f1cd58c06ac5752b7a22cef2da13d3
dbus-devel-0.22-12.EL.2.x86_64.rpm	SHA-256: 1d3aec535a4f1b6ae967e5ea88f3a332756553295d604378301afba4041f7ef0
dbus-devel-0.22-12.EL.2.x86_64.rpm	SHA-256: 1d3aec535a4f1b6ae967e5ea88f3a332756553295d604378301afba4041f7ef0
dbus-glib-0.22-12.EL.2.i386.rpm	SHA-256: 12b053d0b9f1f3fe2495f590e2ac653cdb44b3b3198979bced5f782b4552816b
dbus-glib-0.22-12.EL.2.i386.rpm	SHA-256: 12b053d0b9f1f3fe2495f590e2ac653cdb44b3b3198979bced5f782b4552816b
dbus-glib-0.22-12.EL.2.x86_64.rpm	SHA-256: 890480508c4079043f6ba1d4cf196e71d2f0edab9c57d5279015d8aed746d847
dbus-glib-0.22-12.EL.2.x86_64.rpm	SHA-256: 890480508c4079043f6ba1d4cf196e71d2f0edab9c57d5279015d8aed746d847
dbus-python-0.22-12.EL.2.x86_64.rpm	SHA-256: cc463e8c2749b99afcb3304e1e8756ffa882d54b7a7ce69ce574e074729c8994
dbus-python-0.22-12.EL.2.x86_64.rpm	SHA-256: cc463e8c2749b99afcb3304e1e8756ffa882d54b7a7ce69ce574e074729c8994
dbus-x11-0.22-12.EL.2.x86_64.rpm	SHA-256: 1d22cec1df669c15353c6029fbca4b3c08720247181c35a18ffc2f8aa1528bcf
dbus-x11-0.22-12.EL.2.x86_64.rpm	SHA-256: 1d22cec1df669c15353c6029fbca4b3c08720247181c35a18ffc2f8aa1528bcf
ia64
dbus-0.22-12.EL.2.i386.rpm	SHA-256: 0f3cf607cda019b162a0aaa8e4f7a01b59f1c8e64d1d270a93cd9e5cc85255ec
dbus-0.22-12.EL.2.i386.rpm	SHA-256: 0f3cf607cda019b162a0aaa8e4f7a01b59f1c8e64d1d270a93cd9e5cc85255ec
dbus-0.22-12.EL.2.ia64.rpm	SHA-256: 07e334a5ca8aa522267a8832014893cff6d1eb1a24be9b0fe7c23beb4389cddb
dbus-0.22-12.EL.2.ia64.rpm	SHA-256: 07e334a5ca8aa522267a8832014893cff6d1eb1a24be9b0fe7c23beb4389cddb
dbus-devel-0.22-12.EL.2.ia64.rpm	SHA-256: 1d835a017c119970360949a01f25131523552a1d6907f561e7371dc451dee56c
dbus-devel-0.22-12.EL.2.ia64.rpm	SHA-256: 1d835a017c119970360949a01f25131523552a1d6907f561e7371dc451dee56c
dbus-glib-0.22-12.EL.2.i386.rpm	SHA-256: 12b053d0b9f1f3fe2495f590e2ac653cdb44b3b3198979bced5f782b4552816b
dbus-glib-0.22-12.EL.2.i386.rpm	SHA-256: 12b053d0b9f1f3fe2495f590e2ac653cdb44b3b3198979bced5f782b4552816b
dbus-glib-0.22-12.EL.2.ia64.rpm	SHA-256: e4c8d98054d5d9b6c2fd45fe740e6e358b1a9ec4eaa64b52e3bc63151b946c7a
dbus-glib-0.22-12.EL.2.ia64.rpm	SHA-256: e4c8d98054d5d9b6c2fd45fe740e6e358b1a9ec4eaa64b52e3bc63151b946c7a
dbus-python-0.22-12.EL.2.ia64.rpm	SHA-256: 1a7a1848f3a4db4ea5e332a04f4738560cfd0e1e750568c67c535c25a50ca99a
dbus-python-0.22-12.EL.2.ia64.rpm	SHA-256: 1a7a1848f3a4db4ea5e332a04f4738560cfd0e1e750568c67c535c25a50ca99a
dbus-x11-0.22-12.EL.2.ia64.rpm	SHA-256: eeee00b5599cf41f316bcb246b92891d45af6703b253a270eb16848267a5838b
dbus-x11-0.22-12.EL.2.ia64.rpm	SHA-256: eeee00b5599cf41f316bcb246b92891d45af6703b253a270eb16848267a5838b
i386
dbus-0.22-12.EL.2.i386.rpm	SHA-256: 0f3cf607cda019b162a0aaa8e4f7a01b59f1c8e64d1d270a93cd9e5cc85255ec
dbus-0.22-12.EL.2.i386.rpm	SHA-256: 0f3cf607cda019b162a0aaa8e4f7a01b59f1c8e64d1d270a93cd9e5cc85255ec
dbus-devel-0.22-12.EL.2.i386.rpm	SHA-256: 732c8e9546693768deafdabdcd567d883aeb7c8d1b21e86b8f3c75e26e7ef2bc
dbus-devel-0.22-12.EL.2.i386.rpm	SHA-256: 732c8e9546693768deafdabdcd567d883aeb7c8d1b21e86b8f3c75e26e7ef2bc
dbus-glib-0.22-12.EL.2.i386.rpm	SHA-256: 12b053d0b9f1f3fe2495f590e2ac653cdb44b3b3198979bced5f782b4552816b
dbus-glib-0.22-12.EL.2.i386.rpm	SHA-256: 12b053d0b9f1f3fe2495f590e2ac653cdb44b3b3198979bced5f782b4552816b
dbus-python-0.22-12.EL.2.i386.rpm	SHA-256: cd7b93f8407d3aa8bc709124400071431f87ff1000daceba2ac1765936deec6f
dbus-python-0.22-12.EL.2.i386.rpm	SHA-256: cd7b93f8407d3aa8bc709124400071431f87ff1000daceba2ac1765936deec6f
dbus-x11-0.22-12.EL.2.i386.rpm	SHA-256: a33cd58c3d4fe20f65ee76ddf2de53076a6d5a20d10ea8bd973891c819bdb571
dbus-x11-0.22-12.EL.2.i386.rpm	SHA-256: a33cd58c3d4fe20f65ee76ddf2de53076a6d5a20d10ea8bd973891c819bdb571

Red Hat Enterprise Linux Workstation 4

SRPM
dbus-0.22-12.EL.2.src.rpm	SHA-256: 03840d805917507917f7c6cb9f2a96ea93e379e9632919b9aee2123e6231762c
x86_64
dbus-0.22-12.EL.2.i386.rpm	SHA-256: 0f3cf607cda019b162a0aaa8e4f7a01b59f1c8e64d1d270a93cd9e5cc85255ec
dbus-0.22-12.EL.2.x86_64.rpm	SHA-256: b2a08530bad3967b854af050dab9f59e60f1cd58c06ac5752b7a22cef2da13d3
dbus-devel-0.22-12.EL.2.x86_64.rpm	SHA-256: 1d3aec535a4f1b6ae967e5ea88f3a332756553295d604378301afba4041f7ef0
dbus-glib-0.22-12.EL.2.i386.rpm	SHA-256: 12b053d0b9f1f3fe2495f590e2ac653cdb44b3b3198979bced5f782b4552816b
dbus-glib-0.22-12.EL.2.x86_64.rpm	SHA-256: 890480508c4079043f6ba1d4cf196e71d2f0edab9c57d5279015d8aed746d847
dbus-python-0.22-12.EL.2.x86_64.rpm	SHA-256: cc463e8c2749b99afcb3304e1e8756ffa882d54b7a7ce69ce574e074729c8994
dbus-x11-0.22-12.EL.2.x86_64.rpm	SHA-256: 1d22cec1df669c15353c6029fbca4b3c08720247181c35a18ffc2f8aa1528bcf
ia64
dbus-0.22-12.EL.2.i386.rpm	SHA-256: 0f3cf607cda019b162a0aaa8e4f7a01b59f1c8e64d1d270a93cd9e5cc85255ec
dbus-0.22-12.EL.2.ia64.rpm	SHA-256: 07e334a5ca8aa522267a8832014893cff6d1eb1a24be9b0fe7c23beb4389cddb
dbus-devel-0.22-12.EL.2.ia64.rpm	SHA-256: 1d835a017c119970360949a01f25131523552a1d6907f561e7371dc451dee56c
dbus-glib-0.22-12.EL.2.i386.rpm	SHA-256: 12b053d0b9f1f3fe2495f590e2ac653cdb44b3b3198979bced5f782b4552816b
dbus-glib-0.22-12.EL.2.ia64.rpm	SHA-256: e4c8d98054d5d9b6c2fd45fe740e6e358b1a9ec4eaa64b52e3bc63151b946c7a
dbus-python-0.22-12.EL.2.ia64.rpm	SHA-256: 1a7a1848f3a4db4ea5e332a04f4738560cfd0e1e750568c67c535c25a50ca99a
dbus-x11-0.22-12.EL.2.ia64.rpm	SHA-256: eeee00b5599cf41f316bcb246b92891d45af6703b253a270eb16848267a5838b
i386
dbus-0.22-12.EL.2.i386.rpm	SHA-256: 0f3cf607cda019b162a0aaa8e4f7a01b59f1c8e64d1d270a93cd9e5cc85255ec
dbus-devel-0.22-12.EL.2.i386.rpm	SHA-256: 732c8e9546693768deafdabdcd567d883aeb7c8d1b21e86b8f3c75e26e7ef2bc
dbus-glib-0.22-12.EL.2.i386.rpm	SHA-256: 12b053d0b9f1f3fe2495f590e2ac653cdb44b3b3198979bced5f782b4552816b
dbus-python-0.22-12.EL.2.i386.rpm	SHA-256: cd7b93f8407d3aa8bc709124400071431f87ff1000daceba2ac1765936deec6f
dbus-x11-0.22-12.EL.2.i386.rpm	SHA-256: a33cd58c3d4fe20f65ee76ddf2de53076a6d5a20d10ea8bd973891c819bdb571

Red Hat Enterprise Linux Desktop 4

SRPM
dbus-0.22-12.EL.2.src.rpm	SHA-256: 03840d805917507917f7c6cb9f2a96ea93e379e9632919b9aee2123e6231762c
x86_64
dbus-0.22-12.EL.2.i386.rpm	SHA-256: 0f3cf607cda019b162a0aaa8e4f7a01b59f1c8e64d1d270a93cd9e5cc85255ec
dbus-0.22-12.EL.2.x86_64.rpm	SHA-256: b2a08530bad3967b854af050dab9f59e60f1cd58c06ac5752b7a22cef2da13d3
dbus-devel-0.22-12.EL.2.x86_64.rpm	SHA-256: 1d3aec535a4f1b6ae967e5ea88f3a332756553295d604378301afba4041f7ef0
dbus-glib-0.22-12.EL.2.i386.rpm	SHA-256: 12b053d0b9f1f3fe2495f590e2ac653cdb44b3b3198979bced5f782b4552816b
dbus-glib-0.22-12.EL.2.x86_64.rpm	SHA-256: 890480508c4079043f6ba1d4cf196e71d2f0edab9c57d5279015d8aed746d847
dbus-python-0.22-12.EL.2.x86_64.rpm	SHA-256: cc463e8c2749b99afcb3304e1e8756ffa882d54b7a7ce69ce574e074729c8994
dbus-x11-0.22-12.EL.2.x86_64.rpm	SHA-256: 1d22cec1df669c15353c6029fbca4b3c08720247181c35a18ffc2f8aa1528bcf
i386
dbus-0.22-12.EL.2.i386.rpm	SHA-256: 0f3cf607cda019b162a0aaa8e4f7a01b59f1c8e64d1d270a93cd9e5cc85255ec
dbus-devel-0.22-12.EL.2.i386.rpm	SHA-256: 732c8e9546693768deafdabdcd567d883aeb7c8d1b21e86b8f3c75e26e7ef2bc
dbus-glib-0.22-12.EL.2.i386.rpm	SHA-256: 12b053d0b9f1f3fe2495f590e2ac653cdb44b3b3198979bced5f782b4552816b
dbus-python-0.22-12.EL.2.i386.rpm	SHA-256: cd7b93f8407d3aa8bc709124400071431f87ff1000daceba2ac1765936deec6f
dbus-x11-0.22-12.EL.2.i386.rpm	SHA-256: a33cd58c3d4fe20f65ee76ddf2de53076a6d5a20d10ea8bd973891c819bdb571

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
dbus-0.22-12.EL.2.src.rpm	SHA-256: 03840d805917507917f7c6cb9f2a96ea93e379e9632919b9aee2123e6231762c
s390x
dbus-0.22-12.EL.2.s390.rpm	SHA-256: 0f28b1905eb0bf271f557cf9aaa4fbf85b466c162332523dc36de45476d1bf13
dbus-0.22-12.EL.2.s390x.rpm	SHA-256: 91e1955ae43d5c5395e8107f9db5892866d20a1eb1ab3324c0c6b6ca134f555a
dbus-devel-0.22-12.EL.2.s390x.rpm	SHA-256: c4da943dd7a828d87d5981892ae3dc7ab4179a26c8f83e8c3506a3bc72c7143a
dbus-glib-0.22-12.EL.2.s390.rpm	SHA-256: 6e7faa9be872e53843fee75bc8a5a5f6c91914d7c278cfef4212a9fb1ee32bb8
dbus-glib-0.22-12.EL.2.s390x.rpm	SHA-256: 00e55172da12624472ed27a7a03cbe2a3589b6c27dff265a4cabc219ba65693b
dbus-python-0.22-12.EL.2.s390x.rpm	SHA-256: 6ddbf191a81a4969d6567480f6884ae20db54eedb6284ddeaebf7315090bb671
dbus-x11-0.22-12.EL.2.s390x.rpm	SHA-256: c8740edf59b7a7055d4351bde3ca52d61683d0a9c544d07c69f789ffbf2251b9
s390
dbus-0.22-12.EL.2.s390.rpm	SHA-256: 0f28b1905eb0bf271f557cf9aaa4fbf85b466c162332523dc36de45476d1bf13
dbus-devel-0.22-12.EL.2.s390.rpm	SHA-256: 57f73fcbf5a0a04d63aec082ea6907faa1dabf0b10d45ff6d7f60a4d0acca724
dbus-glib-0.22-12.EL.2.s390.rpm	SHA-256: 6e7faa9be872e53843fee75bc8a5a5f6c91914d7c278cfef4212a9fb1ee32bb8
dbus-python-0.22-12.EL.2.s390.rpm	SHA-256: 7fd5700a3c1199c400b442405069379ed37ee049755862f53c920f8bc2d25022
dbus-x11-0.22-12.EL.2.s390.rpm	SHA-256: 935ad6780d952db1856ff3ddd68400c677cd669cdf0dbde33f491a012c52df89

Red Hat Enterprise Linux for Power, big endian 4

SRPM
dbus-0.22-12.EL.2.src.rpm	SHA-256: 03840d805917507917f7c6cb9f2a96ea93e379e9632919b9aee2123e6231762c
ppc
dbus-0.22-12.EL.2.ppc.rpm	SHA-256: 59c9c53c673f08202efb716d5975b5326557b78aadc54c1283293a921eb318a3
dbus-0.22-12.EL.2.ppc64.rpm	SHA-256: 58d90006cf3975dde50518e8e5364d8af98219b31928731878ba286b12085cb5
dbus-devel-0.22-12.EL.2.ppc.rpm	SHA-256: 6542d6271de53a3512bbf1deb5563054e44dcb2e79a6ace54f4bf074e2f0b4a0
dbus-glib-0.22-12.EL.2.ppc.rpm	SHA-256: 2cbb8de17c0df0c2d5a0cc292e719710e2ae76f572153f0ed4c8be0658d286d7
dbus-glib-0.22-12.EL.2.ppc64.rpm	SHA-256: fcc118fa900abeb293125c1e2b8da0b2dc3ade874e67d1bc13c19c52733671f9
dbus-python-0.22-12.EL.2.ppc.rpm	SHA-256: 12f64c9d98c61bd03f51d2064d6482b1b5e6994d17a91e94f159892d7ceceebd
dbus-x11-0.22-12.EL.2.ppc.rpm	SHA-256: ac1045d1088d07270870252388f90bbfe92c0dad50b77f4fc35d9cdc00d63143