- update to 1.14.8:

* Denial-of-service fixes:
  * Fix an assertion failure in dbus-daemon when a privileged
    Monitoring connection (dbus-monitor, busctl monitor, gdbus
    monitor or similar) is active, and a message from the bus
    driver cannot be delivered to a client connection due to
    <deny> rules or outgoing message quota. This
    is a denial of service if triggered maliciously by a local
    attacker.
  * Fix compilation on compilers not supporting __FUNCTION__
  * Fix some memory leaks on out-of-memory conditions
  * Fix syntax of a code sample in dbus-api-design

OBS-URL: https://build.opensuse.org/package/show/Base:System/dbus-1?expand=0&rev=335

dbus-1-devel-doc.spec

@@ -23,7 +23,7 @@
 %global _backup %{_sysconfdir}/sysconfig/services.rpmbak.%{name}-%{version}-%{release}
 %bcond_without selinux
 Name:           dbus-1-devel-doc
-Version:        1.14.6
+Version:        1.14.8
 Release:        0
 Summary:        Developer documentation package for D-Bus
 License:        AFL-2.1 OR GPL-2.0-or-later

dbus-1-x11.spec

@@ -23,7 +23,7 @@
 %endif
 %bcond_without selinux
 Name:           dbus-1-x11
-Version:        1.14.6
+Version:        1.14.8
 Release:        0
 Summary:        D-Bus Message Bus System
 License:        AFL-2.1 OR GPL-2.0-or-later

dbus-1.14.6.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:fd2bdf1bb89dc365a46531bff631536f22b0d1c6d5ce2c5c5e59b55265b3d66b
-size 1370540

dbus-1.14.6.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAmPj0IkACgkQ4FrhR4+B
-TE8b6w//U29k+u6pC4LVeB93U9hjEaTdRNYb3hkR0gQJ3f8KnmNgYRQo2U2Kio4g
-tUfZ/euopGOp8NjARtxzfPIGQ+O3g/kwHtFQvhTSZi21A966nlXzMoDApUf/L/uV
-OS+sZbpc8DecE50JR2kZ/vRRr5Xss/IIqqib8Q4yhUiRbydCAiUczMbAVD61QdEG
-wVBNpCJcATQr+fivFf2nTaqwIkq9g09LNKeVWCyDPs+54z9dvfA2sOXP5w9wqV1Z
-jNIPYAEdK3X3N0fASEyRkNpIIKglZjHtzUIu7RgJ8F/8XEw6579bd+9KDN5LoUvN
-JgBzCBVinqrqluLzEzz4CvA1Pp2N8hy4vZ3wIrlNmLKtl8wO5RDek2UL7DbEpcfP
-aPlVt+C/he62iBGRRd0p32CjuZbUyCz94yCqwl1bkMqujO6tuo0L8g8QBMTo386t
-hayvobag+oi6KUGMv/1hNbfV4DprEo0koebc6bQWEVqovceIoOa4ImvkWI1CmNQw
-/Bwe3Q1NyaVoAtjFwp55UvTxaaj5JVxF938NXLHWLzORzc0ATGtl3xvijfNxnsbp
-45in6QmRL3ruIb6m8beqrvD0p3Bho2HGtobIBNkJsHfRqwyMgKb7qBq4rAY4fEX9
-9faJxlJz+6kVPMIcgCmfytTpfqYKj12t/iCBbzdYfKzGYbbHa4E=
-=XM3I
------END PGP SIGNATURE-----

dbus-1.14.8.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=6hJs
+-----END PGP SIGNATURE-----

dbus-1.changes

@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Mon Jun 12 21:14:39 UTC 2023 - Dirk Müller <dmueller@suse.com>
+
+- update to 1.14.8:
+  * Denial-of-service fixes:
+  * Fix an assertion failure in dbus-daemon when a privileged
+    Monitoring connection (dbus-monitor, busctl monitor, gdbus
+    monitor or similar) is active, and a message from the bus
+    driver cannot be delivered to a client connection due to
+    <deny> rules or outgoing message quota. This
+    is a denial of service if triggered maliciously by a local
+    attacker.
+  * Fix compilation on compilers not supporting __FUNCTION__
+  * Fix some memory leaks on out-of-memory conditions
+  * Fix syntax of a code sample in dbus-api-design
+
 -------------------------------------------------------------------
 Thu Feb 23 14:48:12 UTC 2023 - Callum Farmer <gmbr3@opensuse.org>
 

dbus-1.spec

@@ -21,7 +21,7 @@
 %define _libname libdbus-1-3
 %bcond_without selinux
 Name:           dbus-1
-Version:        1.14.6
+Version:        1.14.8
 Release:        0
 Summary:        D-Bus Message Bus System
 License:        AFL-2.1 OR GPL-2.0-or-later