D-Bus 1.6.8 (2012-09-28)
==
The "Fix one thing, break another" release.
• Follow up to CVE-2012-3524: The additional hardening
work to use __secure_getenv() as a followup to bug #52202
broke certain configurations of gnome-keyring. Given
the difficulty of making this work without extensive
changes to gnome-keyring, use of __secure_getenv() is
deferred.
D-Bus 1.6.6 (2012-09-28)
==
The "Clear the environment in your setuid binaries, please" release.
• CVE-2012-3524: Don't access environment variables (fd.o #52202)
Thanks to work and input from Colin Walters, Simon McVittie,
Geoffrey Thomas, and others.
• Unix-specific:
· Fix compilation on Solaris (fd.o #53286, Jonathan Perkin)
· Work around interdependent headers on OpenBSD by including sys/types.h
before each use of sys/socket.h (fd.o #54418, Brad Smith)
this is a step of two major branches, to much to list here
pkgsrc notes:
-I've left out our NETBSD_ATOMIC_OPS patch because it is very invasive
and gcc intrinsics are hopefully good enough
-A workaround for non-standard behavior of vsnprintf has been added
upstream, for HPUX as the comment says. We had a patch for __hpux||__sgi
which is removed now - the sgi case should be checked.
Pkgsrc changes:
o Add BUILDLINK_TRANSFORM settings which deactivate -fPIE and -pie
in the compiler invocation. The configure script of this package
checks to see if gcc accepts those options, and uses them if it
does. However, apparently that does not mean that we universally
will be able to run the resulting executables -- on NetBSD/4.0
macppc the run-time linker says
"Unsupported relocation type 6 in non-PLT relocations"
Tested that the dbus-daemon executable remains runnable on both i386
and that it is so now on macppc.
Thanks to jmcneill@ and joerg@ for hints leading to this fix.
Pkgsrc changes:
o Modify one of the patches with a patch reported as part of
PR#40347 to make this package build on NetBSD 4.0 and probably
earlier versions as well. Many thanks to Hasso Tepper for the
patch.
in /var/folders/xx/...+++... via the TMPDIR environment and cheerfully
installs it in /usr/pkg/etc/dbus-1/session.conf meaning that only the
user who installed the package will be able to write to that directory...
except that dbus rejects directories with "+"'s in the filename so it
won't work anyway. use configure --with-session-socket-dir=/tmp
to work around this. found a description of this issue here:
http://wiki.gnucash.org/wiki/MacOSX/Quartz in the
"Running from the commandline" section.
dbus also cannot cope with $DISPLAY containing "/" chars (like in
darwin ... /tmp/launch-kcvznx/:0 ) so get rid of the ":" as described
here:
https://trac.macports.org/attachment/ticket/16833/patch-dbus-launch-x11.c.diff
* Change "${VARBASE}/lib/dbus" to "${VARBASE}/db/dbus".
* Create "${VARBASE}/db/dbus" with OWN_DIRS_PERMS at install time.
* Generate "${VARBASE}/db/dbus/machine-id" file at install time.
* Install dbus-daemon-launch-helper with mode 04550 instead of 04750.
It solves start gimp successfully without running dbus-daemon as before.
Bump PKGREVISION.
1.2.3:
* New UpdateActivationEnvironment bus API (#16669)
* Solaris Auditing (ADT) support (#15740)
* Various notable bug fixes: #16727, #16294, #15947#15588
* Other more minor bugs
- Fix up some inconsistent handing of CONFIGURE_ARGS (mostly related
to the debug option).
- Add test target (commented out, see Makefile).
- Add some patches from freedesktop.org git (see comments atop new patches).
- Remove trailing comma from an enum in tools/dbus-monitor.c.
Passes all tests on NetBSD/amd64 4.99.65, save for spawn test, which seems
to hang (?). I'm also running GNOME now and everything seems to be in order.
There is some stuff in the pkg which is not completed or doesn't work yet,
as support for NetBSD's new atomic increment ops, but this is not
essential. It is a good moment to do the update right now because gtk2
was just updated, and there is just enough time before the next branch.
This is a major update, too many changes to list here.
Stop lying and drop maintainership of these packages. I have not
maintained them for a very long time already, so leave room for
fresh blood to take over them.
the owner of all installed files is a non-root user. This change
affects most packages that require special users or groups by making
them use the specified unprivileged user and group instead.
(1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to
unprivileged.mk. These two variables are lists of other bmake
variables that define package-specific users and groups. Packages
that have user-settable variables for users and groups, e.g. apache
and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP},
etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS
so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER}
and ${UNPRIVILEGED_GROUP}.
(2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.
changes:
-Fix bug where calling dbus_threads_init_default would assert
-Fix UUID output to match the spec
-Clear up documentation on UUIDs
-Fix security bug CVE-2006-6107 match rules can be removed by apps that
did not create them
-pthread fix
pkgsrc changes:
-create /var/lib/dbus on startup
-build against X11 to get the automatic startup of the session bus
(can be switched off per pkgsrc option)
defaults messagebus:messagebus trigger daily security warnings (more than 8
characters). The default values are set in mk/defaults/mk.conf but kept the
same for backwards compatibility, so no PKGREVISION bump.
- Add support for LOCAL_CREDS socket credentials so that we can connect to
the system daemon under NetBSD. It was useless before...
Changes since 0.91:
- Proper thread locking added to pending calls
- Threading semantics changed from init early to init before the second thread
is started
- Correctly error out when an application tries to acquire or release the
org.freedesktop.DBus name instead of sending false result codes
- kqueue directory watching code can now be used to monitor config file changes
on FreeBSD
- --with-dbus-daemondir configure switch added so the daemon can be installed
separate from the user binaries
- Makefiles fixed for cygwin
- Various fixes for the ongoing Windows port
- Fixed docs and comments to use the D-Bus spelling instead of D-BUS
- Many memleaks and bugs fixed
D-Bus 0.91 (24 July 2006)
==
- Remove some lingering bits left over from the bindings split
- Fix assertion causing D-Bus applications to crash when checks are enabled
- Fix a timeout bug which would block applications from being auto started
D-Bus 0.90 (17 July 2006)
==
- API/ABI freeze for 1.0
- Bindings are now split out into seperate packages
- ListActivatableNames added as a method on the bus
- Removed deprecated dbus_connection_disconnect (use dbus_connection_close)
- Shared connections are now unreffed on disconnect
- Fixed pending calls for threaded enviornments
- Pending calls get timed out on connection disconnect
- dbus_connection_send_with_reply returns TRUE and a NULL pending call
if you call it on a connection object which has been disconnected already
(it returns FALSE on Out of Memory errors only)
- dbus-monitor now correctly catches methods, not just signals
- dbus-monitor now prints object paths
D-BUS 0.62 (12 June 2006)
==
- Doc fixes
- Added support for all data-types for the dbus tools
- Fixed eavesdropping on method calls (dbus-monitor)
- Fixed silent dropping of method calls with interface=NULL
- Fixed console ownership problems in Solaris
- Fixed installation of dbus-signature.h and #include it in dbus/dbus.h
- Flush the user database cache on config reload
- GLib bindings:
- Fix memory leaks
- Fix properties in DBusGProxy so that they can be given in any
order
- Added lots of assertions to ensure correct use
- Remove duplicated code
- Fix static string pointer uses in GPtrArray-based collections
- Python bindings:
- Remove reference to sys/cdefs.h
- Qt4 bindings:
- Code reorganized
- Added the dbusidl2cpp, dbuscpp2xml and dbus tools
- Added example programs (ping-pong, complex ping-pong, listnames, chat)
- Updated selftests
- Fixed compilation and .moc- and .ui-file processing and cleaning
- Made central classes derive from QObject
- Enhance error reporting
- Many bugfixes
- Mono bindings:
- Minor bugfixes
