diff options
| author | Simon McVittie <smcv@collabora.com> | 2019-06-09 12:27:45 +0100 |
|---|---|---|
| committer | Simon McVittie <smcv@collabora.com> | 2019-06-09 13:09:11 +0100 |
| commit | f3ab0e4527165d0cf235356eeee6263784ee7502 (patch) | |
| tree | ff5bc9b3dd4e2033df59c0fb5027a710f70d12a5 | |
| parent | c251e7ea9525c1fc81360bbaf48f86ef6a0ad598 (diff) | |
Prepare version 1.10.28
Signed-off-by: Simon McVittie <smcv@collabora.com>
| -rw-r--r-- | NEWS | 19 | ||||
| -rw-r--r-- | configure.ac | 4 |
2 files changed, 19 insertions, 4 deletions
@@ -1,12 +1,27 @@ -dbus 1.10.28 (UNRELEASED) +dbus 1.10.28 (2019-06-11) == +The “kitchen slug” release. + dbus version control is now hosted on freedesktop.org's Gitlab installation, and bug reports and feature requests have switched from Bugzilla bugs (indicated by "fd.o #nnn") to Gitlab issues ("dbus#nnn") and merge requests ("dbus!nnn"). -Fixes: +Security fixes: + +• CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1 + authentication for identities that differ from the user running the + DBusServer. Previously, a local attacker could manipulate symbolic + links in their own home directory to bypass authentication and connect + to a DBusServer with elevated privileges. The standard system and + session dbus-daemons in their default configuration were immune to this + attack because they did not allow DBUS_COOKIE_SHA1, but third-party + users of DBusServer such as Upstart could be vulnerable. + Thanks to Joe Vennix of Apple Information Security. + (dbus#269, Simon McVittie) + +Other fixes: • Prevent reading up to 3 bytes beyond the end of a truncated message. This could in principle be an information leak or denial of service diff --git a/configure.ac b/configure.ac index 61eebcc9..04ebae5f 100644 --- a/configure.ac +++ b/configure.ac @@ -3,7 +3,7 @@ AC_PREREQ([2.63]) m4_define([dbus_major_version], [1]) m4_define([dbus_minor_version], [10]) -m4_define([dbus_micro_version], [27]) +m4_define([dbus_micro_version], [28]) m4_define([dbus_version], [dbus_major_version.dbus_minor_version.dbus_micro_version]) AC_INIT([dbus],[dbus_version],[https://bugs.freedesktop.org/enter_bug.cgi?product=dbus],[dbus]) @@ -38,7 +38,7 @@ LT_CURRENT=17 ## increment any time the source changes; set to ## 0 if you increment CURRENT -LT_REVISION=15 +LT_REVISION=16 ## increment if any interfaces have been added; set to 0 ## if any interfaces have been changed or removed. removal has |