summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorColin Walters <walters@verbum.org>2012-09-28 13:08:42 -0400
committerColin Walters <walters@verbum.org>2012-09-28 13:08:42 -0400
commitcf13cd08c74bd35bf834befb27af56a7f7ed7de1 (patch)
tree3f365e4eb2278e4b15153b7d3a9a0b7860e65398 /NEWS
parentfc4547fe089136f119b49dd067a3cb876d487893 (diff)
downloaddbus-cf13cd08c74bd35bf834befb27af56a7f7ed7de1.tar.gz
Release 1.6.6
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS7
1 files changed, 6 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index bab9dda5..ae87020c 100644
--- a/NEWS
+++ b/NEWS
@@ -1,6 +1,11 @@
-D-Bus 1.6.6 (UNRELEASED)
+D-Bus 1.6.6 (2012-09-28)
==
+The "Clear the environment in your setuid binaries, please" release.
+
+• CVE-2012-3524: Don't access environment variables (fd.o #52202)
+ Thanks to work and input from Colin Walters, Simon McVittie,
+ Geoffrey Thomas, and others.
• Unix-specific:
· Fix compilation on Solaris (fd.o #53286, Jonathan Perkin)
· Work around interdependent headers on OpenBSD by including sys/types.h