[ubuntu/hardy-security] dbus, dbus (delayed) 1.1.20-1ubuntu3.4 (Accepted)
Ubuntu Installer
archive at ubuntu.com
Tue Jan 18 17:04:00 UTC 2011
dbus (1.1.20-1ubuntu3.4) hardy-security; urgency=low
* SECURITY UPDATE: fix DoS with too deeply nested messages
- debian/patches/84-CVE-2010-4352.patch: Limit nesting to 64 for dynamic
message variants. Backported from upstream.
- CVE-2010-4352
- LP: #688992
* debian/control: Build-Depends on libexpat1-dev instead of libexpat-dev
Date: Tue, 04 Jan 2011 15:04:29 -0600
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/hardy/+source/dbus/1.1.20-1ubuntu3.4
-------------- next part --------------
Format: 1.7
Date: Tue, 04 Jan 2011 15:04:29 -0600
Source: dbus
Binary: dbus dbus-x11 libdbus-1-3 dbus-1-doc libdbus-1-dev
Architecture: source
Version: 1.1.20-1ubuntu3.4
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description:
dbus - simple interprocess messaging system
dbus-1-doc - simple interprocess messaging system (documentation)
dbus-x11 - simple interprocess messaging system (X11 deps)
libdbus-1-3 - simple interprocess messaging system
libdbus-1-dev - simple interprocess messaging system (development headers)
Launchpad-Bugs-Fixed: 688992
Changes:
dbus (1.1.20-1ubuntu3.4) hardy-security; urgency=low
.
* SECURITY UPDATE: fix DoS with too deeply nested messages
- debian/patches/84-CVE-2010-4352.patch: Limit nesting to 64 for dynamic
message variants. Backported from upstream.
- CVE-2010-4352
- LP: #688992
* debian/control: Build-Depends on libexpat1-dev instead of libexpat-dev
Files:
7132713f4351d60638d2f9a7c7b50187 1915 devel optional dbus_1.1.20-1ubuntu3.4.dsc
14911ba9f71e4c7a457441a0654c1568 30731 devel optional dbus_1.1.20-1ubuntu3.4.diff.gz
Original-Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers at lists.alioth.debian.org>
More information about the Hardy-changes
mailing list