dbus-1.2.14 and dbus-1.2.4.6permissive
Colin Walters
walters at verbum.org
Wed May 6 14:06:46 PDT 2009
New releases of dbus are available.
This release is a followup for an incorrect fix for a previous
security issue (CVE-2008-3834). The CVE assigned to this release is
CVE-2009-1189, though no exploits are known at this time. In this
release, the "permissive" stream is only getting the security fix,
while the primary one has other enhancements.
http://dbus.freedesktop.org/releases/dbus/dbus-1.2.14.tar.gz
http://dbus.freedesktop.org/releases/dbus/dbus-1.2.4.6permissive.tar.gz
Changes in 1.2.14:
* Bug 17803 - Fix both test case and validation logic [CVE-2009-1189]
* Bug 19567 - Make marshaling code usable without DBusConnection
And a small number of other fixes, for more details see the git log.
Contributors to this release: Federico Mena Quintero, Eamon Walsh,
Colin Walters, Tomas Hoger, Marc Mutz, Xan Lopez, Johan Gyllenspetz.
Changes in 1.2.4.6permissive:
* Bug 17803 - Fix both test case and validation logic [CVE-2009-1189]
The following is the git log for 1.2.14:
commit f76d17437ee95bb2621cb55c79707b9f01dcf89a
Author: Colin Walters <walters at verbum.org>
Release 1.2.14
commit b38c433bf713324b5d17eae626e8c7404bcb6554
Author: Eamon Walsh <ewalsh at tycho.nsa.gov>
libselinux behavior in permissive mode wrt invalid domains
commit 73ec6964d7a14eba3ec7118041e48e0a21438e52
Author: Federico Mena Quintero <federico at novell.com>
bfo20738 - Return a useful error message from dbus_signature_validate()
commit 0f19140b527ee946dd368dde9314c5c5e9d24177
Author: Federico Mena Quintero <federico at novell.com>
bfo20738 - Translate DBusValidity into error message
commit 0cf4583b5a4772b9c2a381ce78f6e3a3afcf705d
Author: William Lachance <wrlach at gmail.com>
Bug 19567 - Make marshaling code usable without DBusConnection
commit 86df8ad59229bc511689e0e1d431a5cf246685db
Author: Colin Walters <walters at verbum.org>
Followup Bug 19502 - Don't attempt to init va_list, not portable
commit eb3b99e7c610988823804f5e6c92aa13459605c7
Author: Kjartan Maraas <kmaraas at gnome.org>
Bug 19502 - Sparse warning cleanups
commit da75989b3918508058ed056ae9e2092e14023ebc
Author: Eamon Walsh <ewalsh at tycho.nsa.gov>
dbus-launch: use InputOnly X window
commit 5b4ee5fb40269afaa106b55dd4755125c2f9107a
Author: Johan Gyllenspetz <johangy at axis.com>
Bug 20494 - Fix signed confusion for dbus_message_get_reply_serial return
commit 15f518301605ed748fbcecdf5e38d0a5ef982c3b
Author: Colin Walters <walters at verbum.org>
Bug 20137 - Fix alignment usage when demarshaling basics
commit a709566edd8358ba431b7427a1530a7db0d1832d
Author: Colin Walters <walters at verbum.org>
Always append closing quote in log command
commit b5a1f3c54a48ea3079622b0ec3023c79b95ed135
Author: Colin Walters <walters at verbum.org>
Bug 17803 - Fix both test case and validation logic
commit b2f943e9c0d5ae1d6293d418b0c0b2a03799bb84
Author: Marc Mutz <marc at kdab.net>
configure.in: fix help string alignment
commit 5a3907f28f963e05682bb29019774bf5843ab1ee
Author: Xan Lopez <xan at gnome.org>
Fix typo in docs.
commit c30270f18255b9fc503b3fdfc5e3c4f01d8888f7
Author: Colin Walters <walters at verbum.org>
Bump for unstable cycle
More information about the dbus
mailing list