]> rtime.felk.cvut.cz Git - coffee/buildroot.git/commit
dbus: security bump to version 1.10.16
authorPeter Korsgaard <peter@korsgaard.com>
Thu, 16 Feb 2017 18:38:46 +0000 (19:38 +0100)
committerPeter Korsgaard <peter@korsgaard.com>
Thu, 16 Feb 2017 20:20:55 +0000 (21:20 +0100)
commitc9556ed90f22185b3abf822f0fe07afea661938a
tree2f8354ce26cb23212a5ff57704900b732e6a5226
parent23fa0f66a0ef05358c340adf807033db69faeb19
dbus: security bump to version 1.10.16

>From http://www.openwall.com/lists/oss-security/2017/02/16/4

The latest dbus release 1.10.16 fixes two symlink attacks in
non-production-suitable configurations. I am treating these as bugs
rather than practical vulnerabilities, and very much hope neither of
these is going to affect any real users, but I'm reporting them to
oss-security in case there's an attack vector that I've missed.

No CVEs assigned so far.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/dbus/dbus.hash
package/dbus/dbus.mk