Bug 893662

Summary:	<sys-apps/dbus-1.15.4[debug]: Crash when assertions are enabled
Product:	Gentoo Security	Reporter:	Sam James <sam>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor	CC:	freedesktop-bugs
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
See Also:	https://bugs.freedesktop.org/show_bug.cgi?id=92546 https://bugs.gentoo.org/show_bug.cgi?id=893666
Whiteboard:	B3 [noglsa]
Package list:		Runtime testing required:	---

Description Sam James archtester

2023-02-09 01:51:38 UTC

```
Denial of service fixes:

• Fix an incorrect assertion that could be used to crash dbus-daemon or
  other users of DBusServer prior to authentication, if libdbus was compiled
  with assertions enabled.
  We recommend that production builds of dbus, for example in OS distributions,
  should be compiled with checks but without assertions.
  (dbus#421, Ralf Habacker; thanks to Evgeny Vereshchagin)
```

Comment 1 Larry the Git Cow gentoo-dev

2023-02-09 01:59:07 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e2fef5a770a1f148174f54eec6ca874c6ee4f611

commit e2fef5a770a1f148174f54eec6ca874c6ee4f611
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-02-09 01:54:05 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-02-09 01:54:05 +0000

    sys-apps/dbus: add 1.15.4
    
    Bug: https://bugs.gentoo.org/893662
    Signed-off-by: Sam James <sam@gentoo.org>

 sys-apps/dbus/Manifest           |   1 +
 sys-apps/dbus/dbus-1.15.4.ebuild | 297 +++++++++++++++++++++++++++++++++++++++
 2 files changed, 298 insertions(+)