dbus 1.10.14

Signed-off-by: Simon McVittie <simon.mcvittie@collabora.co.uk>

diff --git a/NEWS b/NEWS
index 2164f8141c5ea37506c8aff9e82bf5689dd9529c..f72754d3af07893aec753dad0c6ade1aed82b8ea 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,8 +1,20 @@
-D-Bus 1.10.14 (UNRELEASED)
+D-Bus 1.10.14 (2016-11-28)
 ==
 
+The “Well, other bands know more than three chords” release.
+
 Fixes:
 
+• Work around an undesired effect of the fix for CVE-2014-3637
+  (fd.o #80559), in which processes that frequently send fds, such as
+  logind during a flood of new PAM sessions, can get disconnected for
+  continuously having at least one fd "in flight" for too long;
+  dbus-daemon interprets that as a potential denial of service attack.
+  The workaround is to disable that check for uid 0 process such as
+  logind, with a message in the system log. The bug remains open while
+  we look for a more general solution.
+  (fd.o #95263, LP#1591411; Simon McVittie)
+
 • Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
   was disabled at compile time. That test is not expected to work
   in that configuration. (fd.o #98665, Simon McVittie)

diff --git a/configure.ac b/configure.ac
index 7fca2b23308e5c3c43a1f5a7933f1b1e68ec7e05..74174f9440ce51c3d1588d7a80623bfe2330efd4 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -3,7 +3,7 @@ AC_PREREQ([2.63])
 
 m4_define([dbus_major_version], [1])
 m4_define([dbus_minor_version], [10])
-m4_define([dbus_micro_version], [13])
+m4_define([dbus_micro_version], [14])
 m4_define([dbus_version],
           [dbus_major_version.dbus_minor_version.dbus_micro_version])
 AC_INIT([dbus],[dbus_version],[https://bugs.freedesktop.org/enter_bug.cgi?product=dbus],[dbus])
@@ -38,7 +38,7 @@ LT_CURRENT=17
 
 ## increment any time the source changes; set to
 ##  0 if you increment CURRENT
-LT_REVISION=8
+LT_REVISION=9
 
 ## increment if any interfaces have been added; set to 0
 ## if any interfaces have been changed or removed. removal has