c4836eae87Accepting request 1112496 from Base:System
Ana Guerrero
2023-09-22 19:47:07 +0000
a2330cfb84- update to 1.14.10: * Avoid a dbus-daemon crash if re-creating a connection's policy fails. If it isn't possible to re-create its policy (for example if it belongs to a user account that has been deleted or if the Name Service Switch is broken, on a system not supporting SO_PEERGROUPS), we now log a warning, continue to use its current policy, and continue to reload other connections' policies. * If getting the groups from a user ID fails, report the error correctly, instead of logging "(null)" * Return the primary group ID in GetConnectionCredentials()' UnixGroupIDs field for processes with a valid-but-empty supplementary group list - Disable asserts (bsc#1087072) - set runstatedir correctly - avoid listing cmake directory - owned by cmake package - Use sysusers.d to create messagebus userDirk Mueller2023-09-13 08:46:45 +0000
bef8189712Accepting request 1092691 from Base:System
Dominique Leuenberger
2023-06-14 14:28:56 +0000
dcd95237cf- update to 1.14.8 (bsc#1212126, CVE-2023-34969):Dirk Mueller2023-06-12 21:17:59 +0000
3aa97ec44a- update to 1.14.8: * Denial-of-service fixes: * Fix an assertion failure in dbus-daemon when a privileged Monitoring connection (dbus-monitor, busctl monitor, gdbus monitor or similar) is active, and a message from the bus driver cannot be delivered to a client connection due to <deny> rules or outgoing message quota. This is a denial of service if triggered maliciously by a local attacker. * Fix compilation on compilers not supporting __FUNCTION__ * Fix some memory leaks on out-of-memory conditions * Fix syntax of a code sample in dbus-api-designDirk Mueller2023-06-12 21:16:15 +0000
7af63810f2Accepting request 1067484 from Base:System
Dominique Leuenberger
2023-03-02 22:02:00 +0000
b54e0829faAccepting request 1067438 from home:gmbr3:ActiveSimon Lees2023-02-23 23:38:21 +0000
b56bd0fa36Accepting request 1066638 from home:gmbr3:ActiveDirk Mueller2023-02-23 14:02:44 +0000
9109799af2Accepting request 1064302 from Base:System
Dominique Leuenberger
2023-02-11 20:55:59 +0000
6fc53b808dAccepting request 1064293 from home:dimstar:Factory
Fridrich Strba
2023-02-10 16:29:55 +0000
6a83c1aecf- update to 1.14.6: * Fix an incorrect assertion that could be used to crash dbus-daemon or other users of DBusServer prior to authentication, if libdbus was compiled with assertions enabled. We recommend that production builds of dbus, for example in OS distributions, should be compiled with checks but without assertions. * When connected to a dbus-broker, stop dbus-monitor from incorrectly replying to Peer method calls that were sent to the dbus-broker with a NULL destination * Fix out-of-bounds varargs read in the dbus-daemon's config- parser. This is not attacker-triggerable and appears to be harmless in practice, but is technically undefined behaviour and is detected as such by AddressSanitizer. * Avoid a data race in multi-threaded use of DBusCounter * Fix a crash with some glibc versions when non-auditable SELinux events are logged (dbus!386, Jeremi Piotrowski) * If dbus_message_demarshal() runs out of memory while validating a message, report it as NoMemory rather than InvalidArgs (dbus#420, Simon McVittie) * Use C11 _Alignof if available, for better standards- compliance * Stop including an outdated copy of pkg.m4 in the git tree * Documentation: * Fix the test-apparmor-activation test after dbus#416 * Internal changes: * Fix CI builds with recent git versions (dbus#447, Simon McVittie) - switch to using multibuildDirk Mueller2023-02-09 17:09:45 +0000
97c139473eAccepting request 1031295 from Base:System
Dominique Leuenberger
2022-10-27 11:54:08 +0000
a8bd6c1553- update to 1.14.4 (bsc#1204111, CVE-2022-42010, bsc#1204112, CVE-2022-42011, bsc#1204113, CVE-2022-42012): This is a security update for the dbus 1.14.x stable branch, fixing denial-of-service issues (CVE-2022-42010, -42011, -42012) and applying security hardening (dbus#416). Behaviour changes: * On Linux, dbus-daemon and other uses of DBusServer now create a path-based Unix socket, unix:path=..., when asked to listen on a unix:tmpdir=... address. This makes unix:tmpdir=... equivalent to unix:dir=... on all platforms. Previous versions would have created an abstract socket, unix:abstract=..., in this situation. This change primarily affects the well-known session bus when run via dbus-launch(1) or dbus-run-session(1). The user bus, enabled by configuring dbus with --enable-user-session and running it on a systemd system, already used path-based Unix sockets and is unaffected by this change. This behaviour change prevents a sandbox escape via the session bus socket in sandboxing frameworks that can share the network namespace with the host system, such as Flatpak. This change might cause a regression in situations where the abstract socket is intentionally shared between the host system and a chroot or container, such as some use-cases of schroot(1). That regression can be resolved by using a bind-mount to share either the D-Bus socket, or the whole /tmp directory, with the chroot or container. (dbus#416, Simon McVittie) * Denial of service fixes: - Evgeny Vereshchagin discovered several ways in which an authenticated local attacker could cause a crash (denial of service) in dbus-daemon --system or a custom DBusServer. In uncommon configurationsDirk Mueller2022-10-26 09:05:34 +0000
ab1bfa144eAccepting request 1011186 from Base:System
Dominique Leuenberger
2022-10-17 12:57:21 +0000
7cc928f081Accepting request 1011151 from home:iznogood:branches:Base:SystemSimon Lees2022-10-15 23:02:03 +0000
9151565052Accepting request 1010413 from Base:System
Dominique Leuenberger
2022-10-14 13:40:20 +0000
69bcb04113Accepting request 981473 from Base:System
Dominique Leuenberger
2022-06-12 15:36:52 +0000
030bfd6f94- update to 2.23: * Python now waits on child processes with os.wait() * open() call with O_CREAT now passes permissions * -Ttext-segment argument on aarch64 passes page size in hex * Build system improvements - add disable-morecore.patch: fix build and working with glibc >= 2.34 - rediff patchesDirk Mueller2022-06-09 09:57:20 +0000
2381ff0538Accepting request 876715 from Base:System
Dominique Leuenberger
2021-03-08 14:15:25 +0000
901a0bf25eAccepting request 876251 from home:lnussel:usrmoveSimon Lees2021-03-04 10:58:45 +0000
f9b07f568eAccepting request 850346 from Base:System
Dominique Leuenberger
2020-11-25 18:27:20 +0000
5f12625bffAccepting request 849587 from home:lnussel:usrmoveSimon Lees2020-11-24 01:49:00 +0000
5d9d4a8d16Accepting request 828602 from Base:System
Dominique Leuenberger
2020-08-28 21:44:51 +0000
22a5e1447bAccepting request 828587 from home:dancermak:branches:Base:SystemSimon Lees2020-08-22 03:47:45 +0000
4c060df29fAccepting request 826904 from Base:System
Dominique Leuenberger
2020-08-19 16:44:38 +0000
d498fb8aa2- Update to 1.12.20 * On Unix, avoid a use-after-free if two usernames have the same numeric uid. In older versions this could lead to a crash (denial of service) or other undefined behaviour, possibly including incorrect authorization decisions if <policy group=...> is used. Like Unix filesystems, D-Bus' model of identity cannot distinguish between users of different names with the same numeric uid, so this configuration is not advisable on systems where D-Bus will be used. Thanks to Daniel Onaca. (dbus#305, dbus!166; Simon McVittie) - From 1.12.18 * CVE-2020-12049: If a message contains more file descriptors than can be sent, close those that did get through before reporting error. Previously, a local attacker could cause the system dbus-daemon (or another system service with its own DBusServer) to run out of file descriptors, by repeatedly connecting to the server and sending fds that would get leaked. Thanks to Kevin Backhouse of GitHub Security Lab. (dbus#294, GHSL-2020-057; Simon McVittie) * Fix a crash when the dbus-daemon is terminated while one or more monitors are active (dbus#291, dbus!140; Simon McVittie) * The dbus-send(1) man page now documents --bus and --peer instead of the old --address synonym for --peer, which has been deprecated since the introduction of --bus and --peer in 1.7.6 (fd.o #48816, dbus!115; Chris Morin) * Fix a wrong environment variable name in dbus-daemon(1) (dbus#275, dbus!122; Mubin, Philip Withnall) * Fix formatting of dbus_message_append_args example (dbus!126, Felipe Franciosi) * Avoid a test failure on Linux when built in a container as uid 0, butDirk Mueller2020-08-15 22:45:02 +0000
8b4cd106c1Accepting request 821367 from home:elimat:branches:Base:SystemSimon Lees2020-07-17 00:09:42 +0000
b91aa737dbAccepting request 765601 from home:StefanBruens:branches:Base:SystemDirk Mueller2020-01-30 10:30:51 +0000
fa2cc5666bAccepting request 765871 from Base:System
Dominique Leuenberger
2020-01-25 12:22:54 +0000
b8daf232e5Accepting request 765344 from home:kukuk:ei-demoDirk Mueller2020-01-20 14:47:46 +0000
e84297260dAccepting request 754618 from Base:System
Dominique Leuenberger
2019-12-11 10:58:55 +0000
5f58e7ecf7Accepting request 754602 from home:simotek:branches:Base:SystemSimon Lees2019-12-06 08:48:07 +0000
3740353f8aAccepting request 754216 from home:simotek:branches:Base:SystemSimon Lees2019-12-06 04:01:33 +0000
bfb7330fe6Accepting request 750039 from Base:System
Dominique Leuenberger
2019-11-23 22:48:37 +0000
61719e7394Accepting request 750036 from home:StefanBruens:branches:Base:SystemSimon Lees2019-11-21 03:04:57 +0000
cc326c7f86Accepting request 707154 from Base:System
Dominique Leuenberger
2019-06-05 09:38:23 +0000
7b48e6ed74Accepting request 706332 from home:simotek:branches:Base:SystemSimon Lees2019-06-03 11:19:27 +0000
c5ff095bdbAccepting request 700434 from Base:System
Dominique Leuenberger
2019-05-10 07:08:43 +0000
69849756b4Accepting request 697415 from home:scarabeus_iv:branches:Base:SystemDirk Mueller2019-05-03 15:57:18 +0000
100df64c11Accepting request 678175 from Base:System
Dominique Leuenberger
2019-02-26 21:13:54 +0000
3aec557a5cAccepting request 678161 from home:fbui:branches:Base:SystemSimon Lees2019-02-22 08:13:10 +0000
33bb6be280Accepting request 670283 from Base:System
Stephan Kulow
2019-02-06 13:04:59 +0000
2cce4e930fAccepting request 670264 from home:scarabeus_iv:branches:Base:SystemSimon Lees2019-01-31 09:20:00 +0000
4d25b8bfeaAccepting request 666660 from Base:System
Dominique Leuenberger
2019-01-29 13:45:09 +0000
bbbde572a1Accepting request 666307 from home:alarrosa:branches:Base:SystemDirk Mueller2019-01-17 10:52:59 +0000
c182fed8b9Accepting request 666200 from home:alarrosa:branches:Base:SystemDirk Mueller2019-01-15 16:31:31 +0000
6dd88831d4Accepting request 665897 from home:kukuk:branches:Base:SystemDirk Mueller2019-01-15 08:12:38 +0000
67a3814e77Accepting request 660109 from Base:System
Dominique Leuenberger
2018-12-28 11:32:54 +0000
ad77c422a0Accepting request 660057 from home:jengelh:branches:Base:System
Fridrich Strba
2018-12-19 19:15:58 +0000
79c8595d8bAccepting request 650572 from home:eeich:branches:Base:SystemDirk Mueller2018-12-19 13:13:41 +0000
05f5b541e7Accepting request 631640 from Base:System
Dominique Leuenberger
2018-09-03 08:32:36 +0000
6f0289c92eAccepting request 630995 from home:simotek:branches:Base:SystemSimon Lees2018-08-27 01:01:00 +0000
c2869a8577Accepting request 594690 from Base:System
Yuchen Lin
2018-04-11 11:47:54 +0000
6082f75259Accepting request 591768 from home:simotek:branches:Base:SystemSimon Lees2018-04-09 00:51:22 +0000
6f728adf51Accepting request 587171 from Base:System
Dominique Leuenberger
2018-03-19 22:32:38 +0000
2e41693731Accepting request 584475 from home:dimstar:FactoryMarcus Meissner2018-03-14 22:47:17 +0000
426e349927Accepting request 555922 from Base:System
Dominique Leuenberger
2017-12-15 13:02:09 +0000
5fbec90463Accepting request 555921 from home:simotek:branches:Base:SystemSimon Lees2017-12-11 12:11:51 +0000
47203d484bAccepting request 544570 from home:simotek:branches:Base:SystemSimon Lees2017-11-23 10:15:57 +0000
78606b6921Accepting request 544566 from home:simotek:branches:Base:SystemSimon Lees2017-11-23 10:04:56 +0000
709b54b4f4Accepting request 544487 from home:simotek:branches:Base:SystemSimon Lees2017-11-22 22:28:31 +0000
9b1a5ce8b3Accepting request 542535 from home:simotek:branches:Base:SystemSimon Lees2017-11-17 05:00:45 +0000
4df4088ce4Accepting request 523461 from home:simotek:branches:Base:SystemSimon Lees2017-09-16 00:45:31 +0000
f78125f2e7Accepting request 510425 from Base:System
Dominique Leuenberger
2017-07-30 09:22:03 +0000
3d7da61173Accepting request 509331 from home:simotek:branches:Base:SystemSimon Lees2017-07-15 00:46:53 +0000
96e6bd26abAccepting request 507223 from Base:System
Dominique Leuenberger
2017-07-04 09:54:20 +0000