summaryrefslogtreecommitdiff
path: root/debian
AgeCommit message (Collapse)AuthorFilesLines
2015-03-27dbus (1.8.16-1+dyson1)HEADdyson/1.8.16-1+dyson1masterIgor Pashev2-3/+6
2015-03-27Merge branch 'master' of git://anonscm.debian.org/pkg-utopia/dbusIgor Pashev20-254/+1006
Conflicts: debian/changelog debian/dbus.postinst
2015-02-04New upstream release fixes a local denial of service when using systemd ↵debian/1.8.16-1Simon McVittie1-0/+7
activation (CVE-2015-0245)
2015-02-03releasedebian/1.8.14-2Simon McVittie1-2/+2
2015-01-31adjust changelog: point to the bug the triggers addressedSimon McVittie1-1/+1
2015-01-30Relax the triggers from interest to interest-noawait (Closes: #771989; ↵Simon McVittie2-2/+17
mitigates: #776063) This is not strictly correct, because the purpose of the triggers is to set up the .conf, .service files for system services before those services satisfy dependencies. However, it mitigates #776063 (apt getting into a stuck state during upgrades), and should in principle be redundant anyway, because dbus-daemon is meant to use inotify to keep up with configuration changes. See #771989, #776063 for details.
2015-01-02New upstream release to harden dbus-daemon against packages that install ↵Simon McVittie1-0/+7
unsafe security policy configurations.
2014-12-23preinst: partially revert change from 1.8.12-2debian/1.8.12-3Simon McVittie3-23/+14
* preinst: partially revert change from 1.8.12-2. It seems that the preinst is too late to add a useful dpkg-statoverride entry: dpkg has already loaded the statoverride database by this point, and if we add the entry in the preinst, dpkg-statoverride won't run and have its --update side-effect in the postinst. (Closes: #773107, #773838) * postinst: don't run dpkg-statoverride with 2>/dev/null: in the unlikely event that it fails for a reason other than "not overridden" (which results in silently exiting 1), we'll want to know about it.
2014-12-21Make dbus-daemon-launch-helper permissions more robust (Closes: #773107)debian/1.8.12-2Simon McVittie4-2/+42
* postinst: use dpkg-statoverride to set the permissions for dbus-daemon-launch-helper (expected to be 04754 root:messagebus) as suggested in Policy §10.9. This avoids a temporarily broken state when an upgraded dbus is unpacked but not yet configured (Closes: #773107) * preinst: opportunistically set up the same dpkg-statoverride entry if the group already exists, to avoid the same broken state during upgrades from older versions without needing Pre-Depends: adduser * postrm: delete the dpkg-statoverride entry on purge
2014-11-241.8.12-1debian/1.8.12-1Simon McVittie2-0/+44
2014-11-06prepare releasedebian/1.8.10-1Simon McVittie1-2/+2
2014-11-06Start 'dbus-daemon --system' as root under sysvinit, so it can increase its ↵Simon McVittie2-1/+4
file descriptor limit
2014-11-06New upstream release 1.8.10Simon McVittie1-0/+9
- raise dbus-daemon's file descriptor limit to 65536 to avoid an opportunity for denial of service (CVE-2014-7824, an incomplete fix for CVE-2014-3636)
2014-10-06releasedebian/1.8.8-2Simon McVittie1-2/+2
2014-10-06Remove Build-Profiles control field until the syntax settles down (Closes: ↵Simon McVittie2-3/+2
#764222)
2014-10-06Use --with-valgrind=auto (supported since 1.7.6) for the debug buildSimon McVittie2-10/+2
2014-10-06Make Build-Profiles field comply with updated spec (patch from Johannes ↵Simon McVittie2-5/+7
Schauer, Closes: #764222)
2014-09-30Build against libsystemd-devMichael Biebl2-6/+7
In systemd v209 the various libraries were merged into a single libsystemd library.
2014-09-22debian/dbus.bug-control: when people report bugs against dbus, also report ↵Simon McVittie2-0/+10
the status of systemd and systemd-sysv (because those alter how system service activation works), and dbus-x11 (because that's responsible for normal session bus setup)
2014-09-15debian/copyright: fix glob syntax, .[ch] is not supporteddebian/1.8.8-1Simon McVittie2-3/+4
2014-09-15New upstream release fixes several security issuesSimon McVittie1-3/+19
- CVE-2014-3635: do not accept an extra fd in cmsg padding, avoiding a buffer overrun in dbus-daemon or system services - CVE-2014-3636: reduce maximum number of file descriptors per message from 1024 to 16, to avoid two separate denial-of-service attacks that could cause system services to be dropped from the bus - CVE-2014-3637: time out connections that have a partially-sent message containing a file descriptor, so that malicious processes cannot use self-referential file descriptors to make a connection that will never close - CVE-2014-3638: reduce maximum number of pending replies per connection to avoid algorithmic complexity DoS - CVE-2014-3639: reduce timeout for authentication and do not accept() new connections when all unauthenticated connection slots are in use, so that malicious processes cannot prevent new connections to the system bus
2014-09-12Bump dbus up to Priority: standardSimon McVittie2-0/+7
Without it, systemd-logind does not run a getty on tty2..tty6. (Matching ftp-master action in #759293)
2014-08-21Don't attempt config reload if dbus system bus is not running.Michael Biebl2-6/+8
There is no point to attemp a reload if the system bus is not running and we avoid a warning upon initial installation this way. Update the comment to reflect recent changes.
2014-08-13Target unstabledebian/1.8.6-2Sjoerd Simons1-2/+2
2014-08-13debian/dbus.posinst: When triggered only poke the dbus-daemon, don't run ↵Sjoerd Simons2-10/+29
update-rc.d/invoke-rc.d as added by dh_installinit. This prevent some odd-corner when being triggered during init system upgrade (Closes: #754404)
2014-06-30New upstream releasedebian/1.8.6-1Simon McVittie1-0/+7
- fix two local DoS vulnerabilities (CVE-2014-3532, CVE-2014-3533)
2014-06-05New upstream release, fixing a DoS vulnerability (CVE-2014-3477)debian/1.8.4-1Simon McVittie1-0/+6
2014-04-30New upstream releasedebian/1.8.2-1Simon McVittie1-0/+6
2014-03-26Improve autopkgtest supportdebian/1.8.0-3Simon McVittie3-5/+15
- use a shell wildcard instead of dpkg-architecture, to avoid stderr spam failing the test if gcc is missing - wrap each test-case in an arbitrary (5 minute) timeout so that one test-case failing won't halt the whole build
2014-02-26releasedebian/1.8.0-2Simon McVittie1-2/+2
2014-02-26debian/rules: say why no tests during buildSimon McVittie1-1/+4
2014-02-26add XS-Testsuite: autopkgtestSimon McVittie1-0/+1
2014-02-26Close #738317Simon McVittie1-1/+1
2014-02-26Add autopkgtest supportSimon McVittie4-0/+76
* Hook up the installed tests to DEP-8 metadata * Add a simple compile/link/run test
2014-02-26Clean debian/tmp-udeb in `debian/rules clean`Simon McVittie2-0/+5
2014-02-26Register a dpkg trigger on /usr/share/dbus-1/system-services and ↵Simon McVittie3-8/+16
/etc/dbus-1/system.d that calls ReloadConfig on the system dbus-daemon, in case our inotify monitoring isn't completely reliable (see #740139)
2014-02-15Mark dbus-1-doc with Build-Profiles: !stage1Simon McVittie2-0/+2
2014-02-15Don't try to install systemd units in a stage1 build (they are no longer ↵Simon McVittie3-2/+5
installed unless libsystemd*-dev are found)
2014-02-15debian/rules: look for DEB_BUILD_PROFILES, the new name for DEB_BUILD_PROFILESimon McVittie2-3/+10
2014-01-20New upstream stable releasedebian/1.8.0-1Simon McVittie2-0/+43
- add debian/copyright stanzas for some new BSD-licensed cmake macros
2014-01-07Conditionalize libaudit build-dependency to [linux-any]debian/1.7.10-2Simon McVittie3-3/+21
* Explicitly enable libaudit, SELinux and systemd on Linux; do not enable them elsewhere
2014-01-06releasedebian/1.7.10-1Simon McVittie1-2/+2
2014-01-06Generate debian/dbus.install from a generic part and a Linux-specific part, ↵Simon McVittie5-5/+13
since systemd metadata doesn't get installed on non-Linux any more
2014-01-06New upstream release 1.7.10 (1.8 rc1)Simon McVittie1-1/+2
2014-01-06Merge from experimental into unstableSimon McVittie8-825/+86
2013-12-02Disable valgrind integration in the debug build on armel, since valgrind no ↵debian/1.6.18-2Simon McVittie2-1/+8
longer supports armel (Closes: #729136)
2013-11-01New upstream releasedebian/1.7.8-1Simon McVittie2-1/+5
- add new dependency on libsystemd-journal-dev for linux-any
2013-11-01Enable libaudit support so messages that violate SELinux policy go to the ↵Simon McVittie3-1/+7
audit log (Closes: #727771)
2013-11-01Standards-Version: 3.9.5 (no changes needed)Simon McVittie2-1/+4
2013-11-01New upstream release 1.6.18debian/1.6.18-1Simon McVittie2-3/+5
* Standards-Version: 3.9.5 (no changes needed)
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-24 02:13:25 +0000