From: Simon McVittie Date: Thu, 19 Feb 2015 14:47:30 +0000 (+0000) Subject: clarify NEWS X-Git-Tag: dbus-1.9.14~35 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=65a84fd56d1f04b7c390aaf45384f188c74e6d8a;p=thirdparty%2Fdbus.git clarify NEWS --- diff --git a/NEWS b/NEWS index 9edde9018..910694a13 100644 --- a/NEWS +++ b/NEWS @@ -10,7 +10,8 @@ The “monster lasagna” release. Dependencies: -• Ducktype and yelp-tools are now required to build complete documentation. +• Ducktype and yelp-tools are now required to build complete documentation + (they are optional for normal builds). Enhancements: @@ -65,7 +66,7 @@ Security fixes merged from 1.8.16: the actual service activation and causing an error reply to be sent back when service auto-activation was requested. This does not prevent the real service from being started, - so it only works while the real service is not running. + so the attack only works while the real service is not running. (CVE-2015-0245, fd.o #88811; Simon McVittie) Enhancements: