summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSimon McVittie <smcv@debian.org>2012-09-29 13:39:19 +0100
committerSimon McVittie <smcv@debian.org>2012-09-29 13:39:19 +0100
commit68e64b1eb65815f552be6a674c464216befdb3a9 (patch)
tree646109ddbef62b277dd35e4c4a3af43dc1400240
parent3a96c52eed487830210327c10aac1ce7c0640ee3 (diff)
downloaddbus-68e64b1eb65815f552be6a674c464216befdb3a9.tar.gz
New upstream stable release 1.6.6, 1.6.8debian/1.6.8-1
* New upstream stable release 1.6.6 - CVE-2012-3524: avoid arbitrary code execution in setuid or otherwise privileged binaries that incorrectly use libdbus without first sanitizing the environment variables inherited from their less-privileged caller (Closes: #689070) * New upstream stable release 1.6.8 - Revert part of 1.6.6 (do not check filesystem capabilities, only setuid/setgid), fixing regressions in certain configurations of gnome-keyring
-rw-r--r--debian/changelog15
1 files changed, 12 insertions, 3 deletions
diff --git a/debian/changelog b/debian/changelog
index 885718ba..2c6cae69 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,17 @@
-dbus (1.6.4-2) UNRELEASED; urgency=low
+dbus (1.6.8-1) unstable; urgency=low
* Merge from experimental
-
- -- Simon McVittie <smcv@debian.org> Sat, 29 Sep 2012 13:10:43 +0100
+ * New upstream stable release 1.6.6
+ - CVE-2012-3524: avoid arbitrary code execution in setuid or otherwise
+ privileged binaries that incorrectly use libdbus without first
+ sanitizing the environment variables inherited from their
+ less-privileged caller (Closes: #689070)
+ * New upstream stable release 1.6.8
+ - Revert part of 1.6.6 (do not check filesystem capabilities, only
+ setuid/setgid), fixing regressions in certain configurations of
+ gnome-keyring
+
+ -- Simon McVittie <smcv@debian.org> Sat, 29 Sep 2012 13:25:50 +0100
dbus (1.6.4-1) experimental; urgency=low