Announcing dbus 1.8.4

Simon McVittie simon.mcvittie at collabora.co.uk
Tue Jun 10 10:32:33 PDT 2014


http://dbus.freedesktop.org/releases/dbus/dbus-1.8.4.tar.gz
http://dbus.freedesktop.org/releases/dbus/dbus-1.8.4.tar.gz.asc
git tag: dbus-1.8.4
git branch: dbus-1.8

Security fix:

• Alban Crequy at Collabora Ltd. discovered and fixed a
  denial-of-service flaw in dbus-daemon, part of the reference
  implementation of D-Bus. Additionally, in highly unusual environments
  the same flaw could lead to a side channel between processes that
  should not be able to communicate. (CVE-2014-3477, fd.o #78979)

(See my previous mail for technical details of the local DoS.)

Regards,
    S


More information about the dbus mailing list