summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorSimon McVittie <simon.mcvittie@collabora.co.uk>2014-11-06 20:57:51 +0000
committerSimon McVittie <simon.mcvittie@collabora.co.uk>2014-11-06 20:57:51 +0000
commitd5685bcfb27fceb4bdc5eb0f46b6403fbbc319b2 (patch)
treeda6b77d39527b0a0aeb06b877e55c201f0bbf7b5 /NEWS
parent68cb9ead957314b30e604018f2dd5b0fc3b2127c (diff)
downloaddbus-1.6.26.tar.gz
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS10
1 files changed, 10 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 9b4cccd7..2ce0009f 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,13 @@
+D-Bus 1.6.26 (2014-11-10)
+==
+
+Security fix backported from 1.8.10:
+
+• Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
+ so that CVE-2014-3636 part A cannot exhaust the system bus'
+ file descriptors, completing the incomplete fix in 1.8.8.
+ (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)
+
D-Bus 1.6.24 (2014-09-16)
==