diff options
-rw-r--r-- | debian/changelog | 2 | ||||
-rw-r--r-- | debian/patches/13-629938-_dbus_header_byteswap.patch | 1 |
2 files changed, 2 insertions, 1 deletions
diff --git a/debian/changelog b/debian/changelog index cae746d3..0fed2be5 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,7 +1,7 @@ dbus (1.2.24-4+squeeze1) stable; urgency=low * Update Vcs-* control fields to reflect the move to git - * Apply patch to fix upstream bug fd.o #38120, which is a local DoS for + * Apply patch to fix CVE-2011-2200 (fd.o #38120), which is a local DoS for system services (Closes: #629938) -- Simon McVittie <smcv@debian.org> Tue, 14 Jun 2011 19:45:00 +0100 diff --git a/debian/patches/13-629938-_dbus_header_byteswap.patch b/debian/patches/13-629938-_dbus_header_byteswap.patch index 226eff9b..a59cba5c 100644 --- a/debian/patches/13-629938-_dbus_header_byteswap.patch +++ b/debian/patches/13-629938-_dbus_header_byteswap.patch @@ -9,6 +9,7 @@ http://lists.freedesktop.org/archives/dbus/2007-March/007357.html This prevents a local DoS, in which users can disconnect a system service from the system bus by sending a non-native-endian message to it. +CVE: CVE-2011-2200 Bug: https://bugs.freedesktop.org/show_bug.cgi?id=38120 Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629938 Reviewed-by: Will Thompson <will.thompson@collabora.co.uk> |