From: Simon McVittie <smcv@collabora.com>
Date: Wed, 8 Feb 2023 10:47:08 +0000 (+0000)
Subject: NEWS: Add #421
X-Git-Tag: dbus-1.15.4~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=50852eb085e4e5a88f5c647905c293cdfba33580;p=thirdparty%2Fdbus.git

NEWS: Add #421

Signed-off-by: Simon McVittie <smcv@collabora.com>
---

diff --git a/NEWS b/NEWS
index b144a8186..31da9e348 100644
--- a/NEWS
+++ b/NEWS
@@ -38,6 +38,15 @@ New features:
   strongly recommended. See test/use-as-subproject for sample code.
   (dbus!368, dbus!388; Daniel Wagner)
 
+Denial of service fixes:
+
+• Fix an incorrect assertion that could be used to crash dbus-daemon or
+  other users of DBusServer prior to authentication, if libdbus was compiled
+  with assertions enabled.
+  We recommend that production builds of dbus, for example in OS distributions,
+  should be compiled with checks but without assertions.
+  (dbus#421, Ralf Habacker; thanks to Evgeny Vereshchagin)
+
 Fixes:
 
 • When connected to a dbus-broker, stop dbus-monitor from incorrectly