From 71013a5d3d54af0fa90e05c7191638a0dd7fa8dc Mon Sep 17 00:00:00 2001 From: wiz Date: Thu, 14 May 2015 17:21:06 +0000 Subject: Update to 1.8.18: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit D-Bus 1.8.18 (2015-05-14) == The “unicorn rifts” release. Security hardening: • On Unix platforms, change the default configuration for the session bus to only allow EXTERNAL authentication (secure kernel-mediated credentials-passing), as was already done for the system bus. This avoids falling back to DBUS_COOKIE_SHA1, which relies on strongly unpredictable pseudo-random numbers; under certain circumstances (/dev/urandom unreadable or malloc() returns NULL), dbus could fall back to using rand(), which does not have the desired unpredictability. The fallback to rand() has not been changed in this stable-branch since the necessary code changes for correct error-handling are rather intrusive. If you are using D-Bus over the (unencrypted!) tcp: or nonce-tcp: transport, in conjunction with DBUS_COOKIE_SHA1 and a shared home directory using NFS or similar, you will need to reconfigure the session bus to accept DBUS_COOKIE_SHA1 by commenting out the element. This configuration is not recommended. (fd.o #90414, Simon McVittie) Other fixes: • Add locking to DBusCounter's reference count and notify function (fd.o #89297, Adrian Szyndela) • Ensure that DBusTransport's reference count is protected by the corresponding DBusConnection's lock (fd.o #90312, Adrian Szyndela) • On Windows, listen on the same port for IPv4 and IPv6 (previously broken by an endianness mistake), and fix a failure to bind TCP sockets on approximately 1 attempt in 256 (fd.o #87999, Ralf Habacker) • Correctly release DBusServer mutex before early-return if we run out of memory while copying authentication mechanisms (fd.o #90004, Ralf Habacker) • Fix some missing \n in verbose (debug log) messages (fd.o #90004, Ralf Habacker) • Clean up some memory leaks in test code (fd.o #90004, Ralf Habacker) --- sysutils/dbus/Makefile | 4 ++-- sysutils/dbus/distinfo | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/sysutils/dbus/Makefile b/sysutils/dbus/Makefile index c472f6c4754..c5e62898bbd 100644 --- a/sysutils/dbus/Makefile +++ b/sysutils/dbus/Makefile @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.82 2015/04/14 11:40:32 wiz Exp $ +# $NetBSD: Makefile,v 1.83 2015/05/14 17:21:06 wiz Exp $ -DISTNAME= dbus-1.8.16 +DISTNAME= dbus-1.8.18 CATEGORIES= sysutils MASTER_SITES= http://dbus.freedesktop.org/releases/dbus/ diff --git a/sysutils/dbus/distinfo b/sysutils/dbus/distinfo index 154dc70b283..9a3aa95dbd6 100644 --- a/sysutils/dbus/distinfo +++ b/sysutils/dbus/distinfo @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.63 2015/02/17 13:48:24 wiz Exp $ +$NetBSD: distinfo,v 1.64 2015/05/14 17:21:06 wiz Exp $ -SHA1 (dbus-1.8.16.tar.gz) = 1504f03289dc4a694dae4980a773f63dd7fd1a01 -RMD160 (dbus-1.8.16.tar.gz) = c333f4e5808fc4c5b6a5d77f06bd473971411e60 -Size (dbus-1.8.16.tar.gz) = 1866436 bytes +SHA1 (dbus-1.8.18.tar.gz) = a30be4a6efe3fe570d2a2cc4265f0ef9be9367aa +RMD160 (dbus-1.8.18.tar.gz) = 96215bbd9d2ba322d8ddfe7b2fde74e37ed44671 +Size (dbus-1.8.18.tar.gz) = 1868625 bytes SHA1 (patch-aa) = 0c3d145979e3b2358261c9f7f34701d02eb6ecd4 SHA1 (patch-ak) = 6d05ebde29acb3f6cb6f577dd2f2b734f590e8dd SHA1 (patch-al) = 57d08196e9daf49eb6bda2b30f019ce2cad77c6f -- cgit v1.2.3