Bug#840350: jessie-pu: package dbus/1.8.22-0+deb8u1
Control: tags -1 + confirmed
On Mon, 2016-10-10 at 21:10 +0100, Simon McVittie wrote:
> I've released a new upstream version of dbus which fixes a potential
> security vulnerability. I don't *think* it's exploitable in Debian
> oldstable or later, so the security team don't intend to do a DSA;
> but I'd like to get the fix into jessie in case we were wrong.
> Advisory: <http://www.openwall.com/lists/oss-security/2016/10/10/9>
>
> In addition, I'd like to fix dbus RC bug
> <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=813970> (dbus fails
> to remove if something is trying to connect to the system bus in
> parallel with the removal process), which has been fixed in unstable
> since March.
Please go ahead; apologies for the delay.
Regards,
Adam
Reply to: