Update to 1.8.6: D-Bus 1.8.6 (2014-06-02) == Security fixes: • On Linux ≥ 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS, silently drop the message. This prevents an attack in which a malicious client can make dbus-daemon disconnect a system service, which is a local denial of service. (fd.o #80163, CVE-2014-3532; Alban Crequy) • Track remaining Unix file descriptors correctly when more than one message in quick succession contains fds. This prevents another attack in which a malicious client can make dbus-daemon disconnect a system service. (fd.o #79694, fd.o #80469, CVE-2014-3533; Alejandro Martínez Suárez, Simon McVittie, Alban Crequy) Other fixes: • When dbus-launch --exit-with-session starts a dbus-daemon but then cannot attach to a session, kill the dbus-daemon as intended (fd.o #74698, Роман Донченко)diff -r1.71 -r1.72 pkgsrc/sysutils/dbus/Makefile
(wiz)
@@ -1,17 +1,16 @@ | @@ -1,17 +1,16 @@ | |||
1 | # $NetBSD: Makefile,v 1.71 2014/06/14 21:59:20 wiz Exp $ | 1 | # $NetBSD: Makefile,v 1.72 2014/07/06 14:54:32 wiz Exp $ | |
2 | 2 | |||
3 | DISTNAME= dbus-1.8.4 | 3 | DISTNAME= dbus-1.8.6 | |
4 | PKGREVISION= 1 | |||
5 | CATEGORIES= sysutils | 4 | CATEGORIES= sysutils | |
6 | MASTER_SITES= http://dbus.freedesktop.org/releases/dbus/ | 5 | MASTER_SITES= http://dbus.freedesktop.org/releases/dbus/ | |
7 | 6 | |||
8 | MAINTAINER= pkgsrc-users@NetBSD.org | 7 | MAINTAINER= pkgsrc-users@NetBSD.org | |
9 | HOMEPAGE= http://www.freedesktop.org/Software/dbus | 8 | HOMEPAGE= http://www.freedesktop.org/Software/dbus | |
10 | COMMENT= Message bus system | 9 | COMMENT= Message bus system | |
11 | LICENSE= gnu-gpl-v2 | 10 | LICENSE= gnu-gpl-v2 | |
12 | 11 | |||
13 | CONFLICTS+= dbus-glib<0.71 | 12 | CONFLICTS+= dbus-glib<0.71 | |
14 | CONFLICTS+= py26-dbus<0.71 | 13 | CONFLICTS+= py26-dbus<0.71 | |
15 | CONFLICTS+= py27-dbus<0.71 | 14 | CONFLICTS+= py27-dbus<0.71 | |
16 | 15 | |||
17 | GNU_CONFIGURE= YES | 16 | GNU_CONFIGURE= YES |
@@ -1,13 +1,13 @@ | @@ -1,13 +1,13 @@ | |||
1 | $NetBSD: distinfo,v 1.56 2014/06/14 21:57:34 wiz Exp $ | 1 | $NetBSD: distinfo,v 1.57 2014/07/06 14:54:32 wiz Exp $ | |
2 | 2 | |||
3 | SHA1 (dbus-1.8.4.tar.gz) = 316f1196312a88cc858ba810d4e5d16f70ab9d58 | 3 | SHA1 (dbus-1.8.6.tar.gz) = ad7cb87cdce66533479a9d7c1c956bdb0243ad87 | |
4 | RMD160 (dbus-1.8.4.tar.gz) = 929ec1d4ff1a1087fc4ca920f49ee6f89d55b3b7 | 4 | RMD160 (dbus-1.8.6.tar.gz) = 78dcfa48f4d780b27a8c144e481bc285fcf5fd62 | |
5 | Size (dbus-1.8.4.tar.gz) = 1860286 bytes | 5 | Size (dbus-1.8.6.tar.gz) = 1861784 bytes | |
6 | SHA1 (patch-aa) = 0c3d145979e3b2358261c9f7f34701d02eb6ecd4 | 6 | SHA1 (patch-aa) = 0c3d145979e3b2358261c9f7f34701d02eb6ecd4 | |
7 | SHA1 (patch-ak) = 6d05ebde29acb3f6cb6f577dd2f2b734f590e8dd | 7 | SHA1 (patch-ak) = 6d05ebde29acb3f6cb6f577dd2f2b734f590e8dd | |
8 | SHA1 (patch-al) = 57d08196e9daf49eb6bda2b30f019ce2cad77c6f | 8 | SHA1 (patch-al) = 57d08196e9daf49eb6bda2b30f019ce2cad77c6f | |
9 | SHA1 (patch-am) = 8c794ff8b0981e90243ee20c26ae1ecc72e68de8 | 9 | SHA1 (patch-am) = 8c794ff8b0981e90243ee20c26ae1ecc72e68de8 | |
10 | SHA1 (patch-ba) = f9126faf18cd19e897865748ebea1011fe516225 | 10 | SHA1 (patch-ba) = f9126faf18cd19e897865748ebea1011fe516225 | |
11 | SHA1 (patch-bus_dir-watch-kqueue.c) = 86a1f0f78b4d16d8ab29d351057885d8001dd39c | 11 | SHA1 (patch-bus_dir-watch-kqueue.c) = 86a1f0f78b4d16d8ab29d351057885d8001dd39c | |
12 | SHA1 (patch-configure) = 08fb6cc6e9bc9f23825a6a0f2b8b241169d1cda7 | 12 | SHA1 (patch-configure) = 08fb6cc6e9bc9f23825a6a0f2b8b241169d1cda7 | |
13 | SHA1 (patch-dbus_dbus-sysdeps-unix.c) = 043e7bf03686f51faf763f87f43e00308b29571e | 13 | SHA1 (patch-dbus_dbus-sysdeps-unix.c) = 043e7bf03686f51faf763f87f43e00308b29571e |