Will Dietz 6d7cdd7f8b dbus: 1.12.14 -> 1.12.16 ... https://gitlab.freedesktop.org/dbus/dbus/blob/dbus-1.12.16/NEWS It's short and explains the CVE a bit, including below: > CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1 > authentication for identities that differ from the user running the > DBusServer. Previously, a local attacker could manipulate symbolic > links in their own home directory to bypass authentication and connect > to a DBusServer with elevated privileges. The standard system and > session dbus-daemons in their default configuration were immune to this > attack because they did not allow DBUS_COOKIE_SHA1, but third-party > users of DBusServer such as Upstart could be vulnerable. Thanks to Joe > Vennix of Apple Information Security. (dbus#269, Simon McVittie)		2019-06-15 18:16:58 +02:00
..
androidndk-pkgs
arduino
beam-modules
bower-modules/generic
compilers	Merge staging-next into staging	2019-06-15 08:43:33 +02:00
coq-modules
dhall-modules
dotnet-modules/patches
em-modules/generic
go-modules
go-packages
guile-modules
haskell-modules	Merge pull request #62876 from endgame/unbreak-reflex	2019-06-14 17:21:46 +02:00
idris-modules
interpreters
java-modules
libraries	dbus: 1.12.14 -> 1.12.16	2019-06-15 18:16:58 +02:00
lisp-modules
lua-modules
misc
mobile	Merge staging-next into master	2019-06-15 10:46:55 +02:00
node-packages
ocaml-modules
perl-modules
pharo
pure-modules
python-modules	Merge staging-next into master	2019-06-15 10:46:55 +02:00
r-modules	rPackages.git2r: Use system libgit2	2019-06-14 10:05:07 -05:00
ruby-modules
tools	Merge branch 'master' into staging-next	2019-06-14 17:47:23 +02:00
web