dbus-1.4.24

Colin Walters walters at verbum.org
Fri Sep 28 14:11:15 PDT 2012


http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.4&id=8e9fe4e78be0c019f67ac8d90978de0e5f6ca40f
http://dbus.freedesktop.org/releases/dbus/

D-Bus 1.4.24 (2012-09-28)
==

• CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.

• Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)

• Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)

DBus 1.4.22 (never released as a tarball)
==





More information about the dbus mailing list