summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorSimon McVittie <simon.mcvittie@collabora.co.uk>2013-06-12 13:36:54 +0100
committerSimon McVittie <simon.mcvittie@collabora.co.uk>2013-06-12 13:59:33 +0100
commit6700bc2c464258ad71848e4a4e1aa49f980f689f (patch)
tree0fe482b7a41ae04f177f0511cebc46692638745a /NEWS
parentfd635a65cf7642a4f6d005e201d1ba221841c8f0 (diff)
downloaddbus-6700bc2c464258ad71848e4a4e1aa49f980f689f.tar.gz
Prepare embargoed release for tomorrowdbus-1.4.26
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS6
1 files changed, 5 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index 79d13a12..62424783 100644
--- a/NEWS
+++ b/NEWS
@@ -1,6 +1,10 @@
-D-Bus 1.4.26 (UNRELEASED)
+D-Bus 1.4.26 (2013-06-13)
==
+• CVE-2013-2168: Fix misuse of va_list that could be used as a denial
+ of service for system services. Vulnerability reported by Alexandru Cornea.
+ (Simon)
+
• In the activation helper, when compiled for tests, do not reset the system
bus address, fixing the regression tests. (fd.o #52202, Simon)