Opened 22 months ago
Closed 21 months ago
#5212 closed enhancement (fixed)
dbus-1.14.6
Reported by: | Douglas R. Reno | Owned by: | lfs-book |
---|---|---|---|
Priority: | normal | Milestone: | 11.3 |
Component: | Book | Version: | git |
Severity: | normal | Keywords: | |
Cc: |
Description
New point version
Change History (3)
comment:2 by , 21 months ago
Replying to Xi Ruoyao:
Denial of service fixes:
- Fix an incorrect assertion that could be used to crash dbus-daemon or other users of DBusServer prior to authentication, if libdbus was compiled with assertions enabled. We recommend that production builds of dbus, for example in OS distributions, should be compiled with checks but without assertions. (dbus#421, Ralf Habacker; thanks to Evgeny Vereshchagin)
We are compiling dbus with the default configuration (checks enabled but assertions disabled) in LFS and BLFS, so this does not affect us and we don't need a SA.
comment:3 by , 21 months ago
Resolution: | → fixed |
---|---|
Status: | new → closed |
Fixed at commit c6550e11c86cf253a48910ede162a962a7d6b08d
Update to iana-etc-20230202. Update to zstd-1.5.4. Update to Python3-3.11.2. Update to e2fsprogs-1.47.0. Update to dbus-1.14.6. Update to linux-6.1.11. Update to libcap-2.67. Update to bc-6.2.4.
Note:
See TracTickets
for help on using tickets.
dbus 1.14.6 (2023-02-08)
Denial of service fixes:
Other fixes:
Internal changes: