-
dbus (1.4.6-1ubuntu6.4) natty-security; urgency=low
* REGRESSION FIX: some applications launched with the activation helper
may need DBUS_STARTER_ADDRESS. (LP: #1058343)
- debian/patches/CVE-2012-3524-regression-fix.patch: hardcode the
starter address to the default system bus address.
* REGRESSION FIX: unclean shutdown after dbus upgrade (LP: #740390)
- debian/libdbus-1-3.postinst: trigger an upstart re-exec before
shutdown or reboot so that it can safely unmount the root
filesystem.
-- Marc Deslauriers <email address hidden> Wed, 03 Oct 2012 07:03:55 -0400
-
dbus (1.4.6-1ubuntu6.2) natty-security; urgency=low
* SECURITY UPDATE: privilege escalation via unsanitized environment
- debian/patches/CVE-2012-3524-dbus.patch: Don't access environment
variables or run dbus-launch when setuid in configure.in,
dbus/dbus-keyring.c, dbus/dbus-sysdeps*
- CVE-2012-3524
-- Marc Deslauriers <email address hidden> Fri, 14 Sep 2012 09:06:44 -0400
-
dbus (1.4.6-1ubuntu6.1) natty-security; urgency=low
* SECURITY UPDATE: denial of service via messages with non-native byte order
- debian/patches/9000-CVE-2011-2200.patch: update dbus-marshal-header.c
to verify header->data byte order and header->byte_order match in
_dbus_header_byteswap()
- CVE-2011-2200
-- Jamie Strandboge <email address hidden> Fri, 22 Jul 2011 08:53:35 -0500
-
dbus (1.4.6-1ubuntu6) natty; urgency=low
* debian/rules: fix up the sed of the .pc file, we need the path to be
relative to the multiarch dir. Thanks to Lionel Le Folgoc for pointing
this out.
-- Steve Langasek <email address hidden> Sun, 20 Mar 2011 22:07:49 +0000
-
dbus (1.4.6-1ubuntu5) natty; urgency=low
* FFe LP: #733501
* Build for multiarch.
-- Steve Langasek <email address hidden> Sat, 19 Mar 2011 23:15:23 -0700
-
dbus (1.4.6-1ubuntu4) natty; urgency=low
* debian/rules: update dh_installinit to use the old '|| :' behavior instead
of the default behavior (exiting with error) by specifying
'--error-handler=:' to dh_installinit (LP: #728434)
-- Jamie Strandboge <email address hidden> Tue, 08 Mar 2011 15:41:27 -0600
-
dbus (1.4.6-1ubuntu3) natty; urgency=low
* debian/dbus.postinst: Prevent dbus.postinst from failing in chroots
(LP: #552404).
-- Alkis Georgopoulos <email address hidden> Mon, 14 Feb 2011 11:21:53 +0200
-
dbus (1.4.6-1ubuntu2) natty; urgency=low
* debian/rules: Reinstate Cflags seddery for the .pc file, which got lost in
merging the cdbs->dh conversion.
-- Martin Pitt <email address hidden> Thu, 24 Feb 2011 18:45:10 +0100
-
dbus (1.4.6-1ubuntu1) natty; urgency=low
* Merge with Debian unstable. Remaining Ubuntu changes:
- Install into / rather than /usr.
- debian/dbus.postinst: Use upstart call instead of invoking the init.d
script for checking if we are already running.
- Add debian/dbus.upstart.
- 0001-activation-allow-for-more-variation-than-just-system.patch,
0002-bus-change-systemd-activation-to-activation-systemd.patch,
0003-upstart-add-upstart-as-a-possible-activation-type.patch,
0004-upstart-add-UpstartJob-to-service-desktop-files.patch,
0005-activation-implement-upstart-activation.patch: Patches from Scott
James Remnant to implement Upstart service activation. Not upstream.
- 20_system_conf_limit.patch: Increase max_match_rules_per_connection for
the system bus to 5000 (LP #454093)
- 81-session.conf-timeout.patch: Raise the service startup timeout from 25
to 60 seconds. It may be too short on the live CD with slow machines.
* debian/rules: Fix creation of /usr/lib/libdbus-1.so symlink.
* debian/libdbus-1-dev.install: Put back .pc.
dbus (1.4.6-1) unstable; urgency=low
* Switch from cdbs to dh.
* Bump debhelper compatibility level to 8.
* Remove doxygen call from debian/rules and cleaning up doc/api manually.
The upstream build system takes care of that already.
[ Simon McVittie ]
* New upstream version
- remove 00_dbus-quiesce-startup-errors.patch, no longer needed
* Ignore changes to generated Doxygen HTML instead of deleting it in clean,
for easier use of git-buildpackage
* Unapply patches after building from git
-- Martin Pitt <email address hidden> Thu, 24 Feb 2011 16:41:36 +0100
-
dbus (1.4.1-0ubuntu2) natty; urgency=low
* Apply patches to implement Upstart service activation.
* Switch to using Upstart activation for the system bus.
-- Scott James Remnant <email address hidden> Wed, 22 Dec 2010 17:00:17 +0000
-
dbus (1.4.1-0ubuntu1) natty; urgency=low
* New upstream release:
- Fix for CVE-2010-4352: sending messages with excessively-nested
variants can crash the bus. The existing restriction to 64-levels
of nesting previously only applied to the static type signature;
now it also applies to dynamic nesting using variants.
- Various bug fixes.
* Dropped patch from 1.4.0-0ubuntu2 since it's now included upstream
-- Scott James Remnant <email address hidden> Tue, 21 Dec 2010 13:43:26 +0000
-
dbus (1.4.0-0ubuntu2) natty; urgency=low
* dbus/dbus-sysdeps-unix.c: If systemd had a test suite, Lennart wouldn't
have missed these needed MSG_NOSIGNAL flags and if Doko hadn't had just
commented out the failing test case in libnih, we wouldn't have missed
it either.
-- Scott James Remnant <email address hidden> Wed, 08 Dec 2010 19:33:44 +0000
-
dbus (1.4.0-0ubuntu1) maverick; urgency=low
* New upstream release
- Fixes https://bugs.freedesktop.org/show_bug.cgi?id=17754 Race condition in protected_change_timeout
- Requested by various upstream KDE developers http://lists.kde.org/?t=128514970000004&r=1&w=2
-- Jonathan Riddell <email address hidden> Mon, 27 Sep 2010 13:06:32 +0100
