This commit is contained in:
Simon McVittie 2017-07-28 11:21:07 +01:00
parent 1252dc1d1f
commit 3cf2d6a1ca

11
NEWS
View file

@ -1,7 +1,16 @@
D-Bus 1.10.24 (UNRELEASED)
==
...
Fixes:
• When parsing dbus-daemon configuration, tell Expat not to use
cryptographic-quality entropy as a salt for its hash tables: we trust
the configuration files, so we are not concerned about algorithmic
complexity attacks via hash table collisions. This prevents
dbus-daemon --system from holding up the boot process (and causing
early-boot system services like systemd, logind, networkd to time
out) on entropy-starved embedded systems.
(fd.o #101858, Simon McVittie)
D-Bus 1.10.22 (2017-07-27)
==