Release 1.4.22

diff --git a/NEWS b/NEWS
index 187b215d18ab868d6e2ee9287b18ab369e398c6d..ba4f37de1c79547042914c5e6695325ef9c07a60 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,7 +1,9 @@
-D-Bus 1.4.22 (UNRELEASED)
+D-Bus 1.4.22 (2012-09-28)
 ==
 
-Changes:
+• CVE-2012-3524: Don't access environment variables (fd.o #52202)
+  Thanks to work and input from Colin Walters, Simon McVittie,
+  Geoffrey Thomas, and others.
 
 • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
   spec-compliance (fd.o #48580, David Zeuthen)

diff --git a/configure.ac b/configure.ac
index 9f57a0000c6cc0dff44a8b31c908d7ea2c2c1fdd..e63ede38aa7ecccc74453004747c92d3d76d39db 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -3,7 +3,7 @@ AC_PREREQ([2.63])
 
 m4_define([dbus_major_version], [1])
 m4_define([dbus_minor_version], [4])
-m4_define([dbus_micro_version], [21])
+m4_define([dbus_micro_version], [22])
 m4_define([dbus_version],
           [dbus_major_version.dbus_minor_version.dbus_micro_version])
 AC_INIT([dbus],[dbus_version],[https://bugs.freedesktop.org/enter_bug.cgi?product=dbus],[dbus])