Update to 1.8.8, many security fixes. D-Bus 1.8.8 (2014-09-16) == The "smashy smashy egg man" release. Security fixes: * Do not accept an extra fd in the padding of a cmsg message, which could lead to a 4-byte heap buffer overrun. (CVE-2014-3635, fd.o #83622; Simon McVittie) * Reduce default for maximum Unix file descriptors passed per message from 1024 to 16, preventing a uid with the default maximum number of connections from exhausting the system bus' file descriptors under Linux's default rlimit. Distributors or system administrators with a more restrictive fd limit may wish to reduce these limits further. Additionally, on Linux this prevents a second denial of service in which the dbus-daemon can be made to exceed the maximum number of fds per sendmsg() and disconnect the process that would have received them. (CVE-2014-3636, fd.o #82820; Alban Crequy) * Disconnect connections that still have a fd pending unmarshalling after a new configurable limit, pending_fd_timeout (defaulting to 150 seconds), removing the possibility of creating an abusive connection that cannot be disconnected by setting up a circular reference to a connection's file descriptor. (CVE-2014-3637, fd.o #80559; Alban Crequy) * Reduce default for maximum pending replies per connection from 8192 to 128, mitigating an algorithmic complexity denial-of-service attack (CVE-2014-3638, fd.o #81053; Alban Crequy) * Reduce default for authentication timeout on the system bus from 30 seconds to 5 seconds, avoiding denial of service by using up all unauthenticated connection slots; and when all unauthenticated connection slots are used up, make new connection attempts block instead of disconnecting them. (CVE-2014-3639, fd.o #80919; Alban Crequy) Other fixes: * Check for libsystemd from systemd >= 209, falling back to the older separate libraries if not found (Umut Tezduyar Lindskog, Simon McVittie) * On Linux, use prctl() to disable core dumps from a test executable that deliberately raises SIGSEGV to test dbus-daemon's handling of that condition (fd.o #83772, Simon McVittie) * Fix compilation with --enable-stats (fd.o #81043, Gentoo #507232; Alban Crequy) * Improve documentation for running tests on Windows (fd.o #41252, Ralf Habacker)diff -r1.73 -r1.74 pkgsrc/sysutils/dbus/Makefile
(wiz)
@@ -1,17 +1,16 @@ | @@ -1,17 +1,16 @@ | |||
1 | # $NetBSD: Makefile,v 1.73 2014/09/13 09:47:11 richard Exp $ | 1 | # $NetBSD: Makefile,v 1.74 2014/09/16 21:30:18 wiz Exp $ | |
2 | 2 | |||
3 | DISTNAME= dbus-1.8.6 | 3 | DISTNAME= dbus-1.8.8 | |
4 | PKGREVISION= 1 | |||
5 | CATEGORIES= sysutils | 4 | CATEGORIES= sysutils | |
6 | MASTER_SITES= http://dbus.freedesktop.org/releases/dbus/ | 5 | MASTER_SITES= http://dbus.freedesktop.org/releases/dbus/ | |
7 | 6 | |||
8 | MAINTAINER= pkgsrc-users@NetBSD.org | 7 | MAINTAINER= pkgsrc-users@NetBSD.org | |
9 | HOMEPAGE= http://www.freedesktop.org/Software/dbus | 8 | HOMEPAGE= http://www.freedesktop.org/Software/dbus | |
10 | COMMENT= Message bus system | 9 | COMMENT= Message bus system | |
11 | LICENSE= gnu-gpl-v2 | 10 | LICENSE= gnu-gpl-v2 | |
12 | 11 | |||
13 | CONFLICTS+= dbus-glib<0.71 | 12 | CONFLICTS+= dbus-glib<0.71 | |
14 | CONFLICTS+= py26-dbus<0.71 | 13 | CONFLICTS+= py26-dbus<0.71 | |
15 | CONFLICTS+= py27-dbus<0.71 | 14 | CONFLICTS+= py27-dbus<0.71 | |
16 | 15 | |||
17 | GNU_CONFIGURE= YES | 16 | GNU_CONFIGURE= YES |
@@ -1,14 +1,14 @@ | @@ -1,14 +1,14 @@ | |||
1 | $NetBSD: distinfo,v 1.58 2014/09/13 09:47:11 richard Exp $ | 1 | $NetBSD: distinfo,v 1.59 2014/09/16 21:30:18 wiz Exp $ | |
2 | 2 | |||
3 | SHA1 (dbus-1.8.6.tar.gz) = ad7cb87cdce66533479a9d7c1c956bdb0243ad87 | 3 | SHA1 (dbus-1.8.8.tar.gz) = e0d10e8b4494383c7e366ac80a942ba45a705a96 | |
4 | RMD160 (dbus-1.8.6.tar.gz) = 78dcfa48f4d780b27a8c144e481bc285fcf5fd62 | 4 | RMD160 (dbus-1.8.8.tar.gz) = dc0dbd1ed515e8efe2e30a429e35efa69924c0a4 | |
5 | Size (dbus-1.8.6.tar.gz) = 1861784 bytes | 5 | Size (dbus-1.8.8.tar.gz) = 1864881 bytes | |
6 | SHA1 (patch-aa) = 0c3d145979e3b2358261c9f7f34701d02eb6ecd4 | 6 | SHA1 (patch-aa) = 0c3d145979e3b2358261c9f7f34701d02eb6ecd4 | |
7 | SHA1 (patch-ak) = 6d05ebde29acb3f6cb6f577dd2f2b734f590e8dd | 7 | SHA1 (patch-ak) = 6d05ebde29acb3f6cb6f577dd2f2b734f590e8dd | |
8 | SHA1 (patch-al) = 57d08196e9daf49eb6bda2b30f019ce2cad77c6f | 8 | SHA1 (patch-al) = 57d08196e9daf49eb6bda2b30f019ce2cad77c6f | |
9 | SHA1 (patch-am) = 8c794ff8b0981e90243ee20c26ae1ecc72e68de8 | 9 | SHA1 (patch-am) = 8c794ff8b0981e90243ee20c26ae1ecc72e68de8 | |
10 | SHA1 (patch-ba) = f9126faf18cd19e897865748ebea1011fe516225 | 10 | SHA1 (patch-ba) = f9126faf18cd19e897865748ebea1011fe516225 | |
11 | SHA1 (patch-bus_dir-watch-kqueue.c) = 86a1f0f78b4d16d8ab29d351057885d8001dd39c | 11 | SHA1 (patch-bus_dir-watch-kqueue.c) = 86a1f0f78b4d16d8ab29d351057885d8001dd39c | |
12 | SHA1 (patch-configure) = 08fb6cc6e9bc9f23825a6a0f2b8b241169d1cda7 | 12 | SHA1 (patch-configure) = 08fb6cc6e9bc9f23825a6a0f2b8b241169d1cda7 | |
13 | SHA1 (patch-dbus_dbus-sysdeps-unix.c) = 043e7bf03686f51faf763f87f43e00308b29571e | 13 | SHA1 (patch-dbus_dbus-sysdeps-unix.c) = 043e7bf03686f51faf763f87f43e00308b29571e | |
14 | SHA1 (patch-dbus_dbus-sysdeps-util-unix.c) = 9c967cdac585220a3e65443dc9642e7d4478567c | 14 | SHA1 (patch-dbus_dbus-sysdeps-util-unix.c) = 9c967cdac585220a3e65443dc9642e7d4478567c |