Release 1.6.6 dbus-1.6.6
authorColin Walters <walters@verbum.org>
Fri, 28 Sep 2012 17:08:42 +0000 (13:08 -0400)
committerColin Walters <walters@verbum.org>
Fri, 28 Sep 2012 17:08:42 +0000 (13:08 -0400)
NEWS
configure.ac

diff --git a/NEWS b/NEWS
index bab9dda..ae87020 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,6 +1,11 @@
-D-Bus 1.6.6 (UNRELEASED)
+D-Bus 1.6.6 (2012-09-28)
 ==
 
+The "Clear the environment in your setuid binaries, please" release.
+
+• CVE-2012-3524: Don't access environment variables (fd.o #52202)
+  Thanks to work and input from Colin Walters, Simon McVittie,
+  Geoffrey Thomas, and others.
 • Unix-specific:
   · Fix compilation on Solaris (fd.o #53286, Jonathan Perkin)
   · Work around interdependent headers on OpenBSD by including sys/types.h
index 4eb530a..4cdb71b 100644 (file)
@@ -3,7 +3,7 @@ AC_PREREQ([2.63])
 
 m4_define([dbus_major_version], [1])
 m4_define([dbus_minor_version], [6])
-m4_define([dbus_micro_version], [5])
+m4_define([dbus_micro_version], [6])
 m4_define([dbus_version],
           [dbus_major_version.dbus_minor_version.dbus_micro_version])
 AC_INIT([dbus],[dbus_version],[https://bugs.freedesktop.org/enter_bug.cgi?product=dbus],[dbus])