D-Bus 1.6.8 (2012-09-28)
==
The "Fix one thing, break another" release.
• Follow up to CVE-2012-3524: The additional hardening
work to use __secure_getenv() as a followup to bug #52202
broke certain configurations of gnome-keyring. Given
the difficulty of making this work without extensive
changes to gnome-keyring, use of __secure_getenv() is
deferred.
D-Bus 1.6.6 (2012-09-28)
==
The "Clear the environment in your setuid binaries, please" release.
• CVE-2012-3524: Don't access environment variables (fd.o #52202)
Thanks to work and input from Colin Walters, Simon McVittie,
Geoffrey Thomas, and others.
• Unix-specific:
· Fix compilation on Solaris (fd.o #53286, Jonathan Perkin)
· Work around interdependent headers on OpenBSD by including sys/types.h
before each use of sys/socket.h (fd.o #54418, Brad Smith)
this is a step of two major branches, to much to list here
pkgsrc notes:
-I've left out our NETBSD_ATOMIC_OPS patch because it is very invasive
and gcc intrinsics are hopefully good enough
-A workaround for non-standard behavior of vsnprintf has been added
upstream, for HPUX as the comment says. We had a patch for __hpux||__sgi
which is removed now - the sgi case should be checked.
This changes the buildlink3.mk files to use an include guard for the
recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS,
BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new
variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of
enter/exit marker, which can be used to reconstruct the tree and
to determine first level includes. Avoiding := for large variables
(BUILDLINK_ORDER) speeds up parse time as += has linear complexity.
The include guard reduces system time by avoiding reading files over and
over again. For complex packages this reduces both %user and %sys time to
half of the former time.
Pkgsrc changes:
o Add BUILDLINK_TRANSFORM settings which deactivate -fPIE and -pie
in the compiler invocation. The configure script of this package
checks to see if gcc accepts those options, and uses them if it
does. However, apparently that does not mean that we universally
will be able to run the resulting executables -- on NetBSD/4.0
macppc the run-time linker says
"Unsupported relocation type 6 in non-PLT relocations"
Tested that the dbus-daemon executable remains runnable on both i386
and that it is so now on macppc.
Thanks to jmcneill@ and joerg@ for hints leading to this fix.
Pkgsrc changes:
o Modify one of the patches with a patch reported as part of
PR#40347 to make this package build on NetBSD 4.0 and probably
earlier versions as well. Many thanks to Hasso Tepper for the
patch.
in /var/folders/xx/...+++... via the TMPDIR environment and cheerfully
installs it in /usr/pkg/etc/dbus-1/session.conf meaning that only the
user who installed the package will be able to write to that directory...
except that dbus rejects directories with "+"'s in the filename so it
won't work anyway. use configure --with-session-socket-dir=/tmp
to work around this. found a description of this issue here:
http://wiki.gnucash.org/wiki/MacOSX/Quartz in the
"Running from the commandline" section.
dbus also cannot cope with $DISPLAY containing "/" chars (like in
darwin ... /tmp/launch-kcvznx/:0 ) so get rid of the ":" as described
here:
https://trac.macports.org/attachment/ticket/16833/patch-dbus-launch-x11.c.diff
* Change "${VARBASE}/lib/dbus" to "${VARBASE}/db/dbus".
* Create "${VARBASE}/db/dbus" with OWN_DIRS_PERMS at install time.
* Generate "${VARBASE}/db/dbus/machine-id" file at install time.
* Install dbus-daemon-launch-helper with mode 04550 instead of 04750.
It solves start gimp successfully without running dbus-daemon as before.
Bump PKGREVISION.
1.2.3:
* New UpdateActivationEnvironment bus API (#16669)
* Solaris Auditing (ADT) support (#15740)
* Various notable bug fixes: #16727, #16294, #15947#15588
* Other more minor bugs
- Fix up some inconsistent handing of CONFIGURE_ARGS (mostly related
to the debug option).
- Add test target (commented out, see Makefile).
- Add some patches from freedesktop.org git (see comments atop new patches).
- Remove trailing comma from an enum in tools/dbus-monitor.c.
Passes all tests on NetBSD/amd64 4.99.65, save for spawn test, which seems
to hang (?). I'm also running GNOME now and everything seems to be in order.
There is some stuff in the pkg which is not completed or doesn't work yet,
as support for NetBSD's new atomic increment ops, but this is not
essential. It is a good moment to do the update right now because gtk2
was just updated, and there is just enough time before the next branch.
This is a major update, too many changes to list here.
Stop lying and drop maintainership of these packages. I have not
maintained them for a very long time already, so leave room for
fresh blood to take over them.
