dbus 1.2.24-4+squeeze2 source package in Debian

Changelog

dbus (1.2.24-4+squeeze2) stable; urgency=low


  * CVE-2012-3524: apply patches from upstream 1.6.6 to avoid arbitrary
    code execution in setuid/setgid binaries that incorrectly use libdbus
    without first sanitizing the environment variables inherited from
    their less-privileged caller (Closes: #689070).
    - As per upstream 1.6.8, do not check filesystem capabilities for now,
      only setuid/setgid, fixing regressions in certain configurations of
      gnome-keyring

 -- Simon McVittie <email address hidden>  Thu, 04 Oct 2012 08:47:10 +0100