diff options
| author | tron <tron> | 2014-07-07 09:23:34 +0000 |
|---|---|---|
| committer | tron <tron> | 2014-07-07 09:23:34 +0000 |
| commit | 69d5331ee503c405793620fa4edce231d5c9a168 (patch) | |
| tree | 29a04c51ee950a187a79fe8109a9fd4e96765f30 | |
| parent | 2325ecc377967d98332779881f45ac556fee7f20 (diff) | |
| download | pkgsrc-69d5331ee503c405793620fa4edce231d5c9a168.tar.gz | |
Pullup ticket #4442 - requested by wiz
sysutils/dbus: security update
Revisions pulled up:
- sysutils/dbus/Makefile 1.72
- sysutils/dbus/distinfo 1.57
---
Module Name: pkgsrc
Committed By: wiz
Date: Sun Jul 6 14:54:32 UTC 2014
Modified Files:
pkgsrc/sysutils/dbus: Makefile distinfo
Log Message:
Update to 1.8.6:
D-Bus 1.8.6 (2014-06-02)
==
Security fixes:
• On Linux ≥ 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS, silently drop
the message. This prevents an attack in which a malicious client can
make dbus-daemon disconnect a system service, which is a local
denial of service.
(fd.o #80163, CVE-2014-3532; Alban Crequy)
• Track remaining Unix file descriptors correctly when more than one
message in quick succession contains fds. This prevents another attack
in which a malicious client can make dbus-daemon disconnect a system
service.
(fd.o #79694, fd.o #80469, CVE-2014-3533; Alejandro Martínez Suárez,
Simon McVittie, Alban Crequy)
Other fixes:
• When dbus-launch --exit-with-session starts a dbus-daemon but then cannot
attach to a session, kill the dbus-daemon as intended
(fd.o #74698, Роман Донченко)
| -rw-r--r-- | sysutils/dbus/Makefile | 5 | ||||
| -rw-r--r-- | sysutils/dbus/distinfo | 8 |
2 files changed, 6 insertions, 7 deletions
diff --git a/sysutils/dbus/Makefile b/sysutils/dbus/Makefile index a83c895456a..9294548b982 100644 --- a/sysutils/dbus/Makefile +++ b/sysutils/dbus/Makefile @@ -1,7 +1,6 @@ -# $NetBSD: Makefile,v 1.71 2014/06/14 21:59:20 wiz Exp $ +# $NetBSD: Makefile,v 1.71.2.1 2014/07/07 09:23:34 tron Exp $ -DISTNAME= dbus-1.8.4 -PKGREVISION= 1 +DISTNAME= dbus-1.8.6 CATEGORIES= sysutils MASTER_SITES= http://dbus.freedesktop.org/releases/dbus/ diff --git a/sysutils/dbus/distinfo b/sysutils/dbus/distinfo index 68f1b05cec9..7f0c500b6c1 100644 --- a/sysutils/dbus/distinfo +++ b/sysutils/dbus/distinfo @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.56 2014/06/14 21:57:34 wiz Exp $ +$NetBSD: distinfo,v 1.56.2.1 2014/07/07 09:23:34 tron Exp $ -SHA1 (dbus-1.8.4.tar.gz) = 316f1196312a88cc858ba810d4e5d16f70ab9d58 -RMD160 (dbus-1.8.4.tar.gz) = 929ec1d4ff1a1087fc4ca920f49ee6f89d55b3b7 -Size (dbus-1.8.4.tar.gz) = 1860286 bytes +SHA1 (dbus-1.8.6.tar.gz) = ad7cb87cdce66533479a9d7c1c956bdb0243ad87 +RMD160 (dbus-1.8.6.tar.gz) = 78dcfa48f4d780b27a8c144e481bc285fcf5fd62 +Size (dbus-1.8.6.tar.gz) = 1861784 bytes SHA1 (patch-aa) = 0c3d145979e3b2358261c9f7f34701d02eb6ecd4 SHA1 (patch-ak) = 6d05ebde29acb3f6cb6f577dd2f2b734f590e8dd SHA1 (patch-al) = 57d08196e9daf49eb6bda2b30f019ce2cad77c6f |