Debian alert DLA-3628-1 (dbus)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 3628-1] dbus security update
Date:
             
 
Mon, 23 Oct 2023 15:37:49 +0200
Message-ID:
             
 
<20231023133749.62A632AA6F7@andromeda>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3628-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
October 23, 2023                              https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : dbus
Version        : 1.12.28-0+deb10u1
CVE ID         : CVE-2023-34969

It was found that D-Bus, a simple interprocess messaging system, was
susceptible to a denial of service vulnerability if a monitor was being
run.

For Debian 10 buster, this problem has been fixed in version
1.12.28-0+deb10u1.

We recommend that you upgrade your dbus packages.

For the detailed security status of dbus please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/dbus

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=9+1o
-----END PGP SIGNATURE-----