Update NEWS

This commit is contained in:
Simon McVittie 2018-08-02 19:24:00 +01:00
parent 75914f3bff
commit 657ca7a915

6
NEWS
View file

@ -3,6 +3,12 @@ dbus 1.12.10 (UNRELEASED)
Fixes:
• Prevent reading up to 3 bytes beyond the end of a truncated message.
This could in principle be an information leak or denial of service
on the system bus, but is not believed to be exploitable to crash
the system bus or leak interesting information in practice.
(fd.o #107332, Simon McVittie)
• Fix build with gcc 8 -Werror=cast-function-type
(fd.o #107349, Simon McVittie)