dbus-1.4.24
Colin Walters
walters at verbum.org
Fri Sep 28 14:11:15 PDT 2012
http://cgit.freedesktop.org/dbus/dbus/commit/?h=dbus-1.4&id=8e9fe4e78be0c019f67ac8d90978de0e5f6ca40f
http://dbus.freedesktop.org/releases/dbus/
D-Bus 1.4.24 (2012-09-28)
==
• CVE-2012-3524: Don't access environment variables (fd.o #52202)
Thanks to work and input from Colin Walters, Simon McVittie,
Geoffrey Thomas, and others.
• Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
spec-compliance (fd.o #48580, David Zeuthen)
• Don't use install(1) within the source/build trees, fixing the build as
non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
DBus 1.4.22 (never released as a tarball)
==
More information about the dbus
mailing list