From 50852eb085e4e5a88f5c647905c293cdfba33580 Mon Sep 17 00:00:00 2001 From: Simon McVittie Date: Wed, 8 Feb 2023 10:47:08 +0000 Subject: [PATCH] NEWS: Add #421 Signed-off-by: Simon McVittie --- NEWS | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/NEWS b/NEWS index b144a818..31da9e34 100644 --- a/NEWS +++ b/NEWS @@ -38,6 +38,15 @@ New features: strongly recommended. See test/use-as-subproject for sample code. (dbus!368, dbus!388; Daniel Wagner) +Denial of service fixes: + +• Fix an incorrect assertion that could be used to crash dbus-daemon or + other users of DBusServer prior to authentication, if libdbus was compiled + with assertions enabled. + We recommend that production builds of dbus, for example in OS distributions, + should be compiled with checks but without assertions. + (dbus#421, Ralf Habacker; thanks to Evgeny Vereshchagin) + Fixes: • When connected to a dbus-broker, stop dbus-monitor from incorrectly