diff options
author | Simon McVittie <smcv@debian.org> | 2016-10-10 10:22:01 +0100 |
---|---|---|
committer | Simon McVittie <smcv@debian.org> | 2016-10-10 10:22:01 +0100 |
commit | 65eb442a393fa5e8695e00047c78dba82903b72e (patch) | |
tree | beaf1d68257568800c63fee0e3ecb418998c145a | |
parent | 9a4d7453813c8f1264736887a15463a4a08da321 (diff) |
1.8.22dbus-1.8.22
-rw-r--r-- | NEWS | 20 | ||||
-rw-r--r-- | configure.ac | 4 |
2 files changed, 20 insertions, 4 deletions
@@ -1,7 +1,23 @@ -D-Bus 1.8.22 (UNRELEASED) +D-Bus 1.8.22 (2016-10-10) == -... +The “barren and lifeless” release. + +Security fixes: + +• Do not treat ActivationFailure message received from root-owned systemd + name as a format string. In principle this is a security vulnerability, + but we do not believe it is exploitable in practice, because only + privileged processes can own the org.freedesktop.systemd1 bus name, and + systemd does not appear to send activation failures that contain "%". + + Please note that this probably *was* exploitable in dbus versions + older than 1.6.30, 1.8.16 and 1.9.10 due to a missing check which at + the time was only thought to be a denial of service vulnerability + (CVE-2015-0245). If you are still running one of those versions, + patch or upgrade immediately. + + (fd.o #98157, Simon McVittie) D-Bus 1.8.20 (2015-07-21) == diff --git a/configure.ac b/configure.ac index 495dacca..dee06f4a 100644 --- a/configure.ac +++ b/configure.ac @@ -3,7 +3,7 @@ AC_PREREQ([2.63]) m4_define([dbus_major_version], [1]) m4_define([dbus_minor_version], [8]) -m4_define([dbus_micro_version], [21]) +m4_define([dbus_micro_version], [22]) m4_define([dbus_version], [dbus_major_version.dbus_minor_version.dbus_micro_version]) AC_INIT([dbus],[dbus_version],[https://bugs.freedesktop.org/enter_bug.cgi?product=dbus],[dbus]) @@ -37,7 +37,7 @@ LT_CURRENT=11 ## increment any time the source changes; set to ## 0 if you increment CURRENT -LT_REVISION=13 +LT_REVISION=14 ## increment if any interfaces have been added; set to 0 ## if any interfaces have been changed or removed. removal has |