Skip to contentSkip to conversation

dbus: security bump to version 1.8.14

PATCH New Gustavo Zacarias 2 participants 2 messages Jan 6, 2015

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 dbus: security bump to version 1.8.14

Fixes CVE-2014-8148 - If a system service installs unsafe security policy rules that allow arbitrary method calls then this prevents memory consumption and possible privilege escalation via UpdateActivationEnvironment.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/dbus/dbus.hash | 2 +-
 package/dbus/dbus.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
package/dbus/dbus.hash +1 -1
index 4ae6d03..2079929 100644
@@ -1,2 +1,2 @@
 # Locally calculated
-sha256	c91428f28d2925ba32d34ffc824bfcf4d40d5e1e67befc4bcf2202f0a862501e  dbus-1.8.12.tar.gz
+sha256	83425250a6a4c93b9ab4a349771a7700e8ddff2d73a5a088222ca47ae9ce1f1a  dbus-1.8.14.tar.gz
package/dbus/dbus.mk +1 -1
index 5e4fd19..faad2b5 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-DBUS_VERSION = 1.8.12
+DBUS_VERSION = 1.8.14
 DBUS_SITE = http://dbus.freedesktop.org/releases/dbus
 DBUS_LICENSE = AFLv2.1 GPLv2+
 DBUS_LICENSE_FILES = COPYING
Signature · 1 line
2.0.5
Applied
#1 lore raw

PATCH 1/1 dbus: security bump to version 1.8.14

Dear Gustavo Zacarias,

Quoted 10 lines · Gustavo Zacarias

Fixes CVE-2014-8148 - If a system service installs unsafe security policy rules that allow arbitrary method calls then this prevents memory consumption and possible privilege escalation via UpdateActivationEnvironment.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/dbus/dbus.hash | 2 +-
 package/dbus/dbus.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

Applied, thanks!

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com