diff options
| author | Simon McVittie <smcv@debian.org> | 2017-07-28 11:22:50 +0100 |
|---|---|---|
| committer | Simon McVittie <smcv@debian.org> | 2017-07-28 11:22:50 +0100 |
| commit | ebc8fe8da25d70c488964de04d08ac511f403f4c (patch) | |
| tree | c2dbfba934f5b60cf15036e60115af093b53499b | |
| parent | 8d8b5eb8a409031e224d088c1e3385bc2874c873 (diff) | |
| parent | 3cf2d6a1ca43253e5be916b8cfa30fd9ba1a2ef0 (diff) | |
| download | dbus-ebc8fe8da25d70c488964de04d08ac511f403f4c.tar.gz | |
Merge branch 'dbus-1.10'
| -rw-r--r-- | NEWS | 11 |
1 files changed, 10 insertions, 1 deletions
@@ -1,7 +1,16 @@ D-Bus 1.11.18 (UNRELEASED) == -... +Fixes: + +• When parsing dbus-daemon configuration, tell Expat not to use + cryptographic-quality entropy as a salt for its hash tables: we trust + the configuration files, so we are not concerned about algorithmic + complexity attacks via hash table collisions. This prevents + dbus-daemon --system from holding up the boot process (and causing + early-boot system services like systemd, logind, networkd to time + out) on entropy-starved embedded systems. + (fd.o #101858, Simon McVittie) D-Bus 1.11.16 (2017-07-27) == |