Announcing D-Bus 1.8.10 (security fix release)

Simon McVittie <simon.mcvittie-ZGY8ohtN/[email protected]> Mon, 10 Nov 2014 16:08:02 +0000

Newsgroups	gmane.comp.freedesktop.dbus
Organization	Collabora Ltd.
Message-ID	<[email protected]>

The "tenants with a leaking roof get priority" release.

This is a security fix release for the current stable branch, 1.8.x.
Please upgrade unless you have a reason to keep using an older branch.

http://dbus.freedesktop.org/releases/dbus/dbus-1.8.10.tar.gz
http://dbus.freedesktop.org/releases/dbus/dbus-1.8.10.tar.gz.asc
git tag: dbus-1.8.10
git branch: dbus-1.8

Security fixes:

• Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
  so that CVE-2014-3636 part A cannot exhaust the system bus'
  file descriptors, completing the incomplete fix in 1.8.8.
  (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)

-- 
Simon McVittie, Collabora Ltd.
for the D-Bus maintainers
_______________________________________________
dbus mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/dbus