summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSimon McVittie <simon.mcvittie@collabora.co.uk>2014-06-05 14:54:44 +0100
committerSimon McVittie <simon.mcvittie@collabora.co.uk>2014-06-05 14:54:44 +0100
commit7100a39624005db3626c3fd33d3a4114b94040b1 (patch)
tree3ae744691897a11631875a48992e80344fdfe347
parentcab1c56bb9d70469128d2ae1c40539c0d3b30f13 (diff)
Prepare embargoed security releasedbus-1.6.20
-rw-r--r--NEWS12
-rw-r--r--configure.ac4
2 files changed, 12 insertions, 4 deletions
diff --git a/NEWS b/NEWS
index 2bf70466..ab4771e1 100644
--- a/NEWS
+++ b/NEWS
@@ -1,7 +1,15 @@
-D-Bus 1.6.19 (UNRELEASED)
+D-Bus 1.6.20 (2014-06-10)
==
-Fixes:
+Security fix backported from 1.8.4:
+
+• Alban Crequy at Collabora Ltd. discovered and fixed a denial-of-service
+ flaw in dbus-daemon, part of the reference implementation of D-Bus.
+ Additionally, in highly unusual environments the same flaw could lead to
+ a side channel between processes that should not be able to communicate.
+ (CVE-2014-3477, fd.o #78979)
+
+Other bug fixes new to this branch, previously fixed in 1.7.x and 1.8.0:
• don't leak memory on out-of-memory while listing activatable or
active services (fd.o #71526, Radoslaw Pajak)
diff --git a/configure.ac b/configure.ac
index 25996f5e..9d072e66 100644
--- a/configure.ac
+++ b/configure.ac
@@ -3,7 +3,7 @@ AC_PREREQ([2.63])
m4_define([dbus_major_version], [1])
m4_define([dbus_minor_version], [6])
-m4_define([dbus_micro_version], [19])
+m4_define([dbus_micro_version], [20])
m4_define([dbus_version],
[dbus_major_version.dbus_minor_version.dbus_micro_version])
AC_INIT([dbus],[dbus_version],[https://bugs.freedesktop.org/enter_bug.cgi?product=dbus],[dbus])
@@ -37,7 +37,7 @@ LT_CURRENT=10
## increment any time the source changes; set to
## 0 if you increment CURRENT
-LT_REVISION=6
+LT_REVISION=7
## increment if any interfaces have been added; set to 0
## if any interfaces have been changed or removed. removal has