dbus: security bump to version 1.8.8
authorGustavo Zacarias <gustavo@zacarias.com.ar>
Wed, 17 Sep 2014 12:18:39 +0000 (09:18 -0300)
committerPeter Korsgaard <peter@korsgaard.com>
Wed, 17 Sep 2014 13:16:11 +0000 (15:16 +0200)
Fixes:
CVE-2014-3635 - Buffer access with incorrect length value
CVE-2014-3636 - Allocation of file descriptors or handles
without limits or throttling
CVE-2014-3637 - Missing release of file descriptor or handle after
effective lifetime
CVE-2014-3638 - Algorithmic complexity
CVE-2014-3639 - Allocation of file descriptors or handles without
limits or throttling

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/dbus/dbus.mk

index 63cec6e46941de7b2ede7dfae3bf605e48138fdc..3f29a30a3c0e4da71da0c37042c888d807cae884 100644 (file)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-DBUS_VERSION = 1.8.6
+DBUS_VERSION = 1.8.8
 DBUS_SITE = http://dbus.freedesktop.org/releases/dbus
 DBUS_LICENSE = AFLv2.1 GPLv2+
 DBUS_LICENSE_FILES = COPYING