Colin Walters walters at verbum.org
Fri Sep 28 14:11:15 PDT 2012


D-Bus 1.4.24 (2012-09-28)

• CVE-2012-3524: Don't access environment variables (fd.o #52202)
  Thanks to work and input from Colin Walters, Simon McVittie,
  Geoffrey Thomas, and others.

• Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
  spec-compliance (fd.o #48580, David Zeuthen)

• Don't use install(1) within the source/build trees, fixing the build as
  non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)

DBus 1.4.22 (never released as a tarball)

More information about the dbus mailing list