From owner-svn-ports-head@FreeBSD.ORG Wed Sep 17 11:04:34 2014 Return-Path: Delivered-To: svn-ports-head@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 58D44E76; Wed, 17 Sep 2014 11:04:34 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 3945CD84; Wed, 17 Sep 2014 11:04:34 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id s8HB4Y2h081130; Wed, 17 Sep 2014 11:04:34 GMT (envelope-from kwm@FreeBSD.org) Received: (from kwm@localhost) by svn.freebsd.org (8.14.9/8.14.9/Submit) id s8HB4XLJ081129; Wed, 17 Sep 2014 11:04:33 GMT (envelope-from kwm@FreeBSD.org) Message-Id: <201409171104.s8HB4XLJ081129@svn.freebsd.org> X-Authentication-Warning: svn.freebsd.org: kwm set sender to kwm@FreeBSD.org using -f From: Koop Mast Date: Wed, 17 Sep 2014 11:04:33 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r368362 - head/security/vuxml X-SVN-Group: ports-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-head@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: SVN commit messages for the ports tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Sep 2014 11:04:34 -0000 Author: kwm Date: Wed Sep 17 11:04:33 2014 New Revision: 368362 URL: http://svnweb.freebsd.org/changeset/ports/368362 QAT: https://qat.redports.org/buildarchive/r368362/ Log: Document new dbus vulnabilities. MFH: 2014Q3 Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Wed Sep 17 10:19:57 2014 (r368361) +++ head/security/vuxml/vuln.xml Wed Sep 17 11:04:33 2014 (r368362) @@ -57,6 +57,58 @@ Notes: --> + + dbus -- multiple vulnabilities + + + dbus + 1.8.8 + + + + +

Simon McVittie reports:

+
Do not accept an extra fd in the padding of a cmsg message, + which could lead to a 4-byte heap buffer overrun + (CVE-2014-3635).
+
Reduce default for maximum Unix file descriptors passed per + message from 1024 to 16, preventing a uid with the default + maximum number of connections from exhausting the system + bus' file descriptors under Linux's default rlimit + (CVE-2014-3636).
+
Disconnect connections that still have a fd pending + unmarshalling after a new configurable limit, + pending_fd_timeout (defaulting to 150 seconds), removing + the possibility of creating an abusive connection that + cannot be disconnected by setting up a circular reference + to a connection's file descriptor (CVE-2014-3637).
+
Reduce default for maximum pending replies per connection + from 8192 to 128, mitigating an algorithmic complexity + denial-of-service attack (CVE-2014-3638).
+
Reduce default for authentication timeout on the system + bus from 30 seconds to 5 seconds, avoiding denial of service + by using up all unauthenticated connection slots; and when + all unauthenticated connection slots are used up, make new + connection attempts block instead of disconnecting them + (CVE-2014-3639).
+

+ + + + CVE-2014-3635 + CVE-2014-3636 + CVE-2014-3637 + CVE-2014-3638 + CVE-2014-3639 + http://lists.freedesktop.org/archives/dbus/2014-September/016343.html + + + 2014-09-16 + 2014-09-17 + + + nginx -- inject commands into SSL session vulnerability