summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSimon McVittie <smcv@collabora.com>2023-02-08 10:47:08 +0000
committerSimon McVittie <smcv@collabora.com>2023-02-08 11:41:25 +0000
commitde0bfb45879438677d604efdf25cad7bc77c853a (patch)
treef166b5adafed587b13dbb620a622e035d519e2c4
parent5ef6e3664bd2202f7fed46f67f68dd823b8cebe0 (diff)
downloaddbus-de0bfb45879438677d604efdf25cad7bc77c853a.tar.gz
NEWS: Add #421
Signed-off-by: Simon McVittie <smcv@collabora.com>
-rw-r--r--NEWS9
1 files changed, 8 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index 8c3d62bf..8248e385 100644
--- a/NEWS
+++ b/NEWS
@@ -1,7 +1,14 @@
dbus 1.12.26 (UNRELEASED)
=========================
-...
+Denial of service fixes:
+
+• Fix an incorrect assertion that could be used to crash dbus-daemon or
+ other users of DBusServer prior to authentication, if libdbus was compiled
+ with assertions enabled.
+ We recommend that production builds of dbus, for example in OS distributions,
+ should be compiled with checks but without assertions.
+ (dbus#421, Ralf Habacker; thanks to Evgeny Vereshchagin)
dbus 1.12.24 (2022-10-05)
=========================