USN-1753-1: DBus-GLib vulnerability

Releases

• Ubuntu 12.10
• Ubuntu 12.04
• Ubuntu 11.10
• Ubuntu 10.04

Packages

• dbus-glib - simple interprocess messaging system

Details

Sebastian Krahmer and Bastien Nocera discovered that DBus-GLib did not
properly validate the message sender when the "NameOwnerChanged" signal was
received. A local attacker could possibly use this issue to escalate their
privileges.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 12.10

• libdbus-glib-1-2 - 0.100-1ubuntu0.1

Ubuntu 12.04

• libdbus-glib-1-2 - 0.98-1ubuntu1.1

Ubuntu 11.10

• libdbus-glib-1-2 - 0.94-4ubuntu0.1

Ubuntu 10.04

• libdbus-glib-1-2 - 0.84-1ubuntu0.3

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

• CVE-2013-0292