walters at verbum.org
Fri Sep 28 14:54:42 PDT 2012
On Fri, 2012-09-28 at 16:28 -0400, Colin Walters wrote:
Also, for anyone who is confused by all of this - I believe the original
patch here is sufficient to prevent all escalation vectors I am aware
The subsequent patches fixed one regression that only affected one
non-public application that we're aware of:
...and attempted to further harden, but this turned out to create
a different regression, so what's ultimately in 1.6.8 is the original
patch, plus a relatively minor patch.
In other words, if you already shipped the original patch, we believe
you likely don't need to do another update.
More information about the dbus