Update NEWS

Signed-off-by: Simon McVittie <smcv@collabora.com>
(cherry picked from commit 05367daa10)
This commit is contained in:
Simon McVittie 2023-06-06 12:04:03 +01:00
parent 2c699f6ba9
commit 0531ae1dcc

11
NEWS
View file

@ -1,7 +1,16 @@
dbus 1.12.27 (UNRELEASED)
=========================
Fixes:
Denial-of-service fixes:
• Fix an assertion failure in dbus-daemon when a privileged Monitoring
connection (dbus-monitor, busctl monitor, gdbus monitor or similar)
is active, and a message from the bus driver cannot be delivered to a
client connection due to <deny> rules or outgoing message quota. This
is a denial of service if triggered maliciously by a local attacker.
(dbus#457; hongjinghao, Simon McVittie)
Other fixes:
• Documentation:
· Fix syntax of a code sample in dbus-api-design