File _patchinfo of Package patchinfo.10136
<patchinfo incident="10136">
<issue tracker="bnc" id="1137832">VUL-0: CVE-2019-12749: dbus-1: DBusServer DBUS_COOKIE_SHA1 authentication bypass</issue>
<issue tracker="bnc" id="1082318">Packages must not mark license files as %doc</issue>
<issue tracker="cve" id="2019-12749"/>
<category>security</category>
<rating>important</rating>
<packager>alarrosa</packager>
<description>This update for dbus-1 fixes the following issues:
Security issue fixed:
- CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which
could have allowed local attackers to bypass authentication (bsc#1137832).
- Fixes in spec file:
* fix warning and error messages.
* fix licensing directory. (bsc#1082318)
</description>
<summary>Security update for dbus-1</summary>
</patchinfo>