From ee0e42ae2d157a5d4c9d5f1a9114632897bc47ad Mon Sep 17 00:00:00 2001 From: Simon McVittie Date: Mon, 23 Apr 2018 18:33:42 +0100 Subject: [PATCH] Update NEWS --- NEWS | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/NEWS b/NEWS index 515385c6..d15dfa73 100644 --- a/NEWS +++ b/NEWS @@ -11,6 +11,12 @@ Dependencies: Enhancements: +• D-Bus Specification v0.32 + · Be clearer about the security properties of TCP transports, which + have no integrity or confidentiality protection and so should not + normally be used, except via the loopback interface on Windows + (fd.o #106004, Simon McVittie) + • On Linux 4.13 or later, now uses the SO_PEERGROUPS credentials-passing socket option to get the effective group IDs of the initiator of the connection. On platforms where that socket @@ -38,6 +44,11 @@ Enhancements: • The Devhelp documentation index is now in version 2 format (fd.o #106186, Simon McVittie) +• Give the dbus-daemon man page some scarier warnings about + , which is insecure and should not be used, + particularly for the standard system and session buses + (fd.o #106004, Simon McVittie) + Fixes: • Listening on TCP sockets copes better with IPv6 being disabled