pool/dbus-1
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 5cfcf1f7a8 Expedited checkin of diffutils -> cmp migration factory Dominique Leuenberger 2023-11-17 14:11:48 +0000
  • c4836eae87 Accepting request 1112496 from Base:System Ana Guerrero 2023-09-22 19:47:07 +0000
  • a2330cfb84 - update to 1.14.10: * Avoid a dbus-daemon crash if re-creating a connection's policy fails. If it isn't possible to re-create its policy (for example if it belongs to a user account that has been deleted or if the Name Service Switch is broken, on a system not supporting SO_PEERGROUPS), we now log a warning, continue to use its current policy, and continue to reload other connections' policies. * If getting the groups from a user ID fails, report the error correctly, instead of logging "(null)" * Return the primary group ID in GetConnectionCredentials()' UnixGroupIDs field for processes with a valid-but-empty supplementary group list - Disable asserts (bsc#1087072) - set runstatedir correctly - avoid listing cmake directory - owned by cmake package - Use sysusers.d to create messagebus user Dirk Mueller 2023-09-13 08:46:45 +0000
  • bef8189712 Accepting request 1092691 from Base:System Dominique Leuenberger 2023-06-14 14:28:56 +0000
  • dcd95237cf - update to 1.14.8 (bsc#1212126, CVE-2023-34969): Dirk Mueller 2023-06-12 21:17:59 +0000
  • 3aa97ec44a - update to 1.14.8: * Denial-of-service fixes: * Fix an assertion failure in dbus-daemon when a privileged Monitoring connection (dbus-monitor, busctl monitor, gdbus monitor or similar) is active, and a message from the bus driver cannot be delivered to a client connection due to <deny> rules or outgoing message quota. This is a denial of service if triggered maliciously by a local attacker. * Fix compilation on compilers not supporting __FUNCTION__ * Fix some memory leaks on out-of-memory conditions * Fix syntax of a code sample in dbus-api-design Dirk Mueller 2023-06-12 21:16:15 +0000
  • 7af63810f2 Accepting request 1067484 from Base:System Dominique Leuenberger 2023-03-02 22:02:00 +0000
  • b54e0829fa Accepting request 1067438 from home:gmbr3:Active Simon Lees 2023-02-23 23:38:21 +0000
  • b56bd0fa36 Accepting request 1066638 from home:gmbr3:Active Dirk Mueller 2023-02-23 14:02:44 +0000
  • 9109799af2 Accepting request 1064302 from Base:System Dominique Leuenberger 2023-02-11 20:55:59 +0000
  • fabec3cb1f OBS-URL: https://build.opensuse.org/package/show/Base:System/dbus-1?expand=0&rev=330 Fridrich Strba 2023-02-10 16:31:13 +0000
  • 6fc53b808d Accepting request 1064293 from home:dimstar:Factory Fridrich Strba 2023-02-10 16:29:55 +0000
  • 6a83c1aecf - update to 1.14.6: * Fix an incorrect assertion that could be used to crash dbus-daemon or other users of DBusServer prior to authentication, if libdbus was compiled with assertions enabled. We recommend that production builds of dbus, for example in OS distributions, should be compiled with checks but without assertions. * When connected to a dbus-broker, stop dbus-monitor from incorrectly replying to Peer method calls that were sent to the dbus-broker with a NULL destination * Fix out-of-bounds varargs read in the dbus-daemon's config- parser. This is not attacker-triggerable and appears to be harmless in practice, but is technically undefined behaviour and is detected as such by AddressSanitizer. * Avoid a data race in multi-threaded use of DBusCounter * Fix a crash with some glibc versions when non-auditable SELinux events are logged (dbus!386, Jeremi Piotrowski) * If dbus_message_demarshal() runs out of memory while validating a message, report it as NoMemory rather than InvalidArgs (dbus#420, Simon McVittie) * Use C11 _Alignof if available, for better standards- compliance * Stop including an outdated copy of pkg.m4 in the git tree * Documentation: * Fix the test-apparmor-activation test after dbus#416 * Internal changes: * Fix CI builds with recent git versions (dbus#447, Simon McVittie) - switch to using multibuild Dirk Mueller 2023-02-09 17:09:45 +0000
  • 97c139473e Accepting request 1031295 from Base:System Dominique Leuenberger 2022-10-27 11:54:08 +0000
  • a8bd6c1553 - update to 1.14.4 (bsc#1204111, CVE-2022-42010, bsc#1204112, CVE-2022-42011, bsc#1204113, CVE-2022-42012): This is a security update for the dbus 1.14.x stable branch, fixing denial-of-service issues (CVE-2022-42010, -42011, -42012) and applying security hardening (dbus#416). Behaviour changes: * On Linux, dbus-daemon and other uses of DBusServer now create a path-based Unix socket, unix:path=..., when asked to listen on a unix:tmpdir=... address. This makes unix:tmpdir=... equivalent to unix:dir=... on all platforms. Previous versions would have created an abstract socket, unix:abstract=..., in this situation. This change primarily affects the well-known session bus when run via dbus-launch(1) or dbus-run-session(1). The user bus, enabled by configuring dbus with --enable-user-session and running it on a systemd system, already used path-based Unix sockets and is unaffected by this change. This behaviour change prevents a sandbox escape via the session bus socket in sandboxing frameworks that can share the network namespace with the host system, such as Flatpak. This change might cause a regression in situations where the abstract socket is intentionally shared between the host system and a chroot or container, such as some use-cases of schroot(1). That regression can be resolved by using a bind-mount to share either the D-Bus socket, or the whole /tmp directory, with the chroot or container. (dbus#416, Simon McVittie) * Denial of service fixes: - Evgeny Vereshchagin discovered several ways in which an authenticated local attacker could cause a crash (denial of service) in dbus-daemon --system or a custom DBusServer. In uncommon configurations Dirk Mueller 2022-10-26 09:05:34 +0000
  • ab1bfa144e Accepting request 1011186 from Base:System Dominique Leuenberger 2022-10-17 12:57:21 +0000
  • 7cc928f081 Accepting request 1011151 from home:iznogood:branches:Base:System Simon Lees 2022-10-15 23:02:03 +0000
  • 9151565052 Accepting request 1010413 from Base:System Dominique Leuenberger 2022-10-14 13:40:20 +0000
  • 6b7a0f88d7 - Disable asserts (bsc#1087072) Dirk Mueller 2022-10-13 07:30:23 +0000
  • 69bcb04113 Accepting request 981473 from Base:System Dominique Leuenberger 2022-06-12 15:36:52 +0000
  • 030bfd6f94 - update to 2.23: * Python now waits on child processes with os.wait() * open() call with O_CREAT now passes permissions * -Ttext-segment argument on aarch64 passes page size in hex * Build system improvements - add disable-morecore.patch: fix build and working with glibc >= 2.34 - rediff patches Dirk Mueller 2022-06-09 09:57:20 +0000
  • fc4d97e228 - version provides - add split provides - remove unused/obsolete pre_checkin.sh Dirk Mueller 2022-06-08 12:36:41 +0000
  • f939af0947 Accepting request 979267 from home:simotek:broker Dirk Mueller 2022-06-08 12:33:33 +0000
  • ce628c6a80 Accepting request 962877 from Base:System Dominique Leuenberger 2022-03-19 21:20:29 +0000
  • 8b9e5e4ae2 Accepting request 962625 from home:Vogtinator:branches:Base:System Dirk Mueller 2022-03-18 16:09:03 +0000
  • 63a30f45a2 Accepting request 961966 from Base:System Dominique Leuenberger 2022-03-16 20:30:31 +0000
  • e47922d8b1 OBS-URL: https://build.opensuse.org/package/show/Base:System/dbus-1?expand=0&rev=314 Dirk Mueller 2022-03-15 16:26:11 +0000
  • aa2309df38 - set runstatedir correctly Dirk Mueller 2022-03-14 10:47:02 +0000
  • c97c98bd1f Accepting request 960278 from Base:System Dominique Leuenberger 2022-03-11 20:39:55 +0000
  • 11f4778ee0 Accepting request 960246 from home:iznogood:branches:Base:System Dirk Mueller 2022-03-08 18:40:09 +0000
  • 46ad4084dc Accepting request 958730 from Base:System Dominique Leuenberger 2022-03-05 13:43:38 +0000
  • dec2cdcef2 Accepting request 958337 from home:iznogood:branches:Base:System Dirk Mueller 2022-03-03 10:22:48 +0000
  • 20f8054c59 Accepting request 933402 from Base:System Dominique Leuenberger 2021-11-26 23:50:36 +0000
  • 357aa54d6f Accepting request 932654 from home:gmbr3:Active Dirk Mueller 2021-11-24 08:38:49 +0000
  • c47005334b Accepting request 921166 from home:schubi2 Simon Lees 2021-09-23 23:01:29 +0000
  • ae009a5b64 Accepting request 919778 from home:schubi2 Simon Lees 2021-09-18 01:10:28 +0000
  • cdb990ae1f Accepting request 919476 from home:schubi2 Simon Lees 2021-09-16 09:31:14 +0000
  • cdbb1ecf05 Accepting request 883704 from Base:System Dominique Leuenberger 2021-04-12 10:33:41 +0000
  • 7bd2317d01 - avoid listing cmake directory - owned by cmake package Dirk Mueller 2021-04-07 22:36:23 +0000
  • 2381ff0538 Accepting request 876715 from Base:System Dominique Leuenberger 2021-03-08 14:15:25 +0000
  • 901a0bf25e Accepting request 876251 from home:lnussel:usrmove Simon Lees 2021-03-04 10:58:45 +0000
  • f9b07f568e Accepting request 850346 from Base:System Dominique Leuenberger 2020-11-25 18:27:20 +0000
  • 5f12625bff Accepting request 849587 from home:lnussel:usrmove Simon Lees 2020-11-24 01:49:00 +0000
  • 5d9d4a8d16 Accepting request 828602 from Base:System Dominique Leuenberger 2020-08-28 21:44:51 +0000
  • 22a5e1447b Accepting request 828587 from home:dancermak:branches:Base:System Simon Lees 2020-08-22 03:47:45 +0000
  • 4c060df29f Accepting request 826904 from Base:System Dominique Leuenberger 2020-08-19 16:44:38 +0000
  • d498fb8aa2 - Update to 1.12.20 * On Unix, avoid a use-after-free if two usernames have the same numeric uid. In older versions this could lead to a crash (denial of service) or other undefined behaviour, possibly including incorrect authorization decisions if <policy group=...> is used. Like Unix filesystems, D-Bus' model of identity cannot distinguish between users of different names with the same numeric uid, so this configuration is not advisable on systems where D-Bus will be used. Thanks to Daniel Onaca. (dbus#305, dbus!166; Simon McVittie) - From 1.12.18 * CVE-2020-12049: If a message contains more file descriptors than can be sent, close those that did get through before reporting error. Previously, a local attacker could cause the system dbus-daemon (or another system service with its own DBusServer) to run out of file descriptors, by repeatedly connecting to the server and sending fds that would get leaked. Thanks to Kevin Backhouse of GitHub Security Lab. (dbus#294, GHSL-2020-057; Simon McVittie) * Fix a crash when the dbus-daemon is terminated while one or more monitors are active (dbus#291, dbus!140; Simon McVittie) * The dbus-send(1) man page now documents --bus and --peer instead of the old --address synonym for --peer, which has been deprecated since the introduction of --bus and --peer in 1.7.6 (fd.o #48816, dbus!115; Chris Morin) * Fix a wrong environment variable name in dbus-daemon(1) (dbus#275, dbus!122; Mubin, Philip Withnall) * Fix formatting of dbus_message_append_args example (dbus!126, Felipe Franciosi) * Avoid a test failure on Linux when built in a container as uid 0, but Dirk Mueller 2020-08-15 22:45:02 +0000
  • 8b4cd106c1 Accepting request 821367 from home:elimat:branches:Base:System Simon Lees 2020-07-17 00:09:42 +0000
  • b91aa737db Accepting request 765601 from home:StefanBruens:branches:Base:System Dirk Mueller 2020-01-30 10:30:51 +0000
  • fa2cc5666b Accepting request 765871 from Base:System Dominique Leuenberger 2020-01-25 12:22:54 +0000
  • b8daf232e5 Accepting request 765344 from home:kukuk:ei-demo Dirk Mueller 2020-01-20 14:47:46 +0000
  • e84297260d Accepting request 754618 from Base:System Dominique Leuenberger 2019-12-11 10:58:55 +0000
  • 5f58e7ecf7 Accepting request 754602 from home:simotek:branches:Base:System Simon Lees 2019-12-06 08:48:07 +0000
  • 3740353f8a Accepting request 754216 from home:simotek:branches:Base:System Simon Lees 2019-12-06 04:01:33 +0000
  • bfb7330fe6 Accepting request 750039 from Base:System Dominique Leuenberger 2019-11-23 22:48:37 +0000
  • 61719e7394 Accepting request 750036 from home:StefanBruens:branches:Base:System Simon Lees 2019-11-21 03:04:57 +0000
  • cc326c7f86 Accepting request 707154 from Base:System Dominique Leuenberger 2019-06-05 09:38:23 +0000
  • 7b48e6ed74 Accepting request 706332 from home:simotek:branches:Base:System Simon Lees 2019-06-03 11:19:27 +0000
  • c5ff095bdb Accepting request 700434 from Base:System Dominique Leuenberger 2019-05-10 07:08:43 +0000
  • 69849756b4 Accepting request 697415 from home:scarabeus_iv:branches:Base:System Dirk Mueller 2019-05-03 15:57:18 +0000
  • 100df64c11 Accepting request 678175 from Base:System Dominique Leuenberger 2019-02-26 21:13:54 +0000
  • 3aec557a5c Accepting request 678161 from home:fbui:branches:Base:System Simon Lees 2019-02-22 08:13:10 +0000
  • 33bb6be280 Accepting request 670283 from Base:System Stephan Kulow 2019-02-06 13:04:59 +0000
  • 2cce4e930f Accepting request 670264 from home:scarabeus_iv:branches:Base:System Simon Lees 2019-01-31 09:20:00 +0000
  • 4d25b8bfea Accepting request 666660 from Base:System Dominique Leuenberger 2019-01-29 13:45:09 +0000
  • bbbde572a1 Accepting request 666307 from home:alarrosa:branches:Base:System Dirk Mueller 2019-01-17 10:52:59 +0000
  • c182fed8b9 Accepting request 666200 from home:alarrosa:branches:Base:System Dirk Mueller 2019-01-15 16:31:31 +0000
  • 6dd88831d4 Accepting request 665897 from home:kukuk:branches:Base:System Dirk Mueller 2019-01-15 08:12:38 +0000
  • 67a3814e77 Accepting request 660109 from Base:System Dominique Leuenberger 2018-12-28 11:32:54 +0000
  • ad77c422a0 Accepting request 660057 from home:jengelh:branches:Base:System Fridrich Strba 2018-12-19 19:15:58 +0000
  • 79c8595d8b Accepting request 650572 from home:eeich:branches:Base:System Dirk Mueller 2018-12-19 13:13:41 +0000
  • 05f5b541e7 Accepting request 631640 from Base:System Dominique Leuenberger 2018-09-03 08:32:36 +0000
  • 6f0289c92e Accepting request 630995 from home:simotek:branches:Base:System Simon Lees 2018-08-27 01:01:00 +0000
  • c2869a8577 Accepting request 594690 from Base:System Yuchen Lin 2018-04-11 11:47:54 +0000
  • 6082f75259 Accepting request 591768 from home:simotek:branches:Base:System Simon Lees 2018-04-09 00:51:22 +0000
  • 6f728adf51 Accepting request 587171 from Base:System Dominique Leuenberger 2018-03-19 22:32:38 +0000
  • 2e41693731 Accepting request 584475 from home:dimstar:Factory Marcus Meissner 2018-03-14 22:47:17 +0000
  • 426e349927 Accepting request 555922 from Base:System Dominique Leuenberger 2017-12-15 13:02:09 +0000
  • 5fbec90463 Accepting request 555921 from home:simotek:branches:Base:System Simon Lees 2017-12-11 12:11:51 +0000
  • 47203d484b Accepting request 544570 from home:simotek:branches:Base:System Simon Lees 2017-11-23 10:15:57 +0000
  • 78606b6921 Accepting request 544566 from home:simotek:branches:Base:System Simon Lees 2017-11-23 10:04:56 +0000
  • 709b54b4f4 Accepting request 544487 from home:simotek:branches:Base:System Simon Lees 2017-11-22 22:28:31 +0000
  • 9b1a5ce8b3 Accepting request 542535 from home:simotek:branches:Base:System Simon Lees 2017-11-17 05:00:45 +0000
  • 4df4088ce4 Accepting request 523461 from home:simotek:branches:Base:System Simon Lees 2017-09-16 00:45:31 +0000
  • f78125f2e7 Accepting request 510425 from Base:System Dominique Leuenberger 2017-07-30 09:22:03 +0000
  • 3d7da61173 Accepting request 509331 from home:simotek:branches:Base:System Simon Lees 2017-07-15 00:46:53 +0000
  • 96e6bd26ab Accepting request 507223 from Base:System Dominique Leuenberger 2017-07-04 09:54:20 +0000
  • e6a6c09abd OBS-URL: https://build.opensuse.org/package/show/Base:System/dbus-1?expand=0&rev=253 Fridrich Strba 2017-06-30 06:42:41 +0000
  • 136f25b9a6 Accepting request 507203 from home:simotek:branches:Base:System Fridrich Strba 2017-06-30 06:37:06 +0000
  • 89d940708b Accepting request 504640 from Base:System Dominique Leuenberger 2017-06-21 11:51:54 +0000
  • 641faa1ad0 Accepting request 503558 from home:simotek:branches:Base:System Simon Lees 2017-06-19 11:30:43 +0000
  • 14313fd113 Accepting request 486269 from Base:System Yuchen Lin 2017-04-11 10:42:35 +0000
  • 07536dbbce 1.10.18 Fridrich Strba 2017-04-07 06:00:05 +0000
  • 2298c492b6 Accepting request 461743 from Base:System Dominique Leuenberger 2017-03-05 16:57:33 +0000
  • 19ccd91c15 Accepting request 461299 from home:simotek:branches:Base:System Simon Lees 2017-03-02 03:04:22 +0000
  • 407da71eca Accepting request 455648 from Base:System OBS User buildservice-autocommit 2017-02-10 09:03:50 +0000
  • e325cb424b Accepting request 455648 from Base:System Dominique Leuenberger 2017-02-10 09:03:49 +0000
  • c907cfd851 Updating link to change in openSUSE:Factory/dbus-1 revision 143.0 OBS User buildservice-autocommit 2017-02-10 09:03:49 +0000
  • ae1ae4159f Accepting request 454055 from home:simotek:branches:Base:System Simon Lees 2017-02-02 05:41:19 +0000
  • c9a0ccbc38 Accepting request 453362 from Base:System Dominique Leuenberger 2017-01-31 11:28:57 +0000