From 74a865a3408726108162eb193a30656a48c0dc97 Mon Sep 17 00:00:00 2001 From: "John (J5) Palmieri" Date: Mon, 29 Aug 2005 21:29:10 +0000 Subject: [PATCH] upgrade to 0.36.2 which fixes an exploit where users can attach to another user's session bus (CAN-2005-0201) --- .cvsignore | 1 + dbus.spec | 6 +++++- sources | 2 +- 3 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.cvsignore b/.cvsignore index 2294a26..a6e8e01 100644 --- a/.cvsignore +++ b/.cvsignore @@ -7,3 +7,4 @@ dbus-0.34.tar.gz dbus-0.35.2.tar.gz dbus-0.36.tar.gz dbus-0.36.1.tar.gz +dbus-0.36.2.tar.gz diff --git a/dbus.spec b/dbus.spec index a4d74b6..5f90be5 100644 --- a/dbus.spec +++ b/dbus.spec @@ -15,7 +15,7 @@ Summary: D-BUS message bus Name: dbus -Version: 0.36.1 +Version: 0.36.2 Release: 1 URL: http://www.freedesktop.org/software/dbus/ Source0: %{name}-%{version}.tar.gz @@ -248,6 +248,10 @@ fi %{_libdir}/python*/site-packages/dbus/*.py* %changelog +* Mon Aug 29 2005 John (J5) Palmieri - 0.36.2-1 +- upgrade to 0.36.2 which fixes an exploit where + users can attach to another user's session bus (CAN-2005-0201) + * Wed Aug 24 2005 John (J5) Palmieri - 0.36.1-1 - Upgrade to dbus-0.36.1 - Install all files to lib64/ on 64bit machines diff --git a/sources b/sources index 582786d..00eb0f1 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -48bcfc0806bb7bc914cc5cd2f7d40d69 dbus-0.36.1.tar.gz +45468e46967d3e70f082d0d0e6049225 dbus-0.36.2.tar.gz