[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#840350: jessie-pu: package dbus/1.8.22-0+deb8u1



Control: tags -1 + confirmed

On Mon, 2016-10-10 at 21:10 +0100, Simon McVittie wrote:
> I've released a new upstream version of dbus which fixes a potential
> security vulnerability. I don't *think* it's exploitable in Debian
> oldstable or later, so the security team don't intend to do a DSA;
> but I'd like to get the fix into jessie in case we were wrong.
> Advisory: <http://www.openwall.com/lists/oss-security/2016/10/10/9>
> 
> In addition, I'd like to fix dbus RC bug
> <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=813970> (dbus fails
> to remove if something is trying to connect to the system bus in
> parallel with the removal process), which has been fixed in unstable
> since March.

Please go ahead; apologies for the delay.

Regards,

Adam


Reply to: