-
dbus (0.60-6ubuntu8.4) dapper-security; urgency=low
* SECURITY UPDATE: Signature spoofing via incorrect logic
- debian/patches/84-security-CVE-2009-1189.patch: fix logic in
dbus/dbus-marshal-validate.c and fix test in
dbus/dbus-marshal-validate-util.c.
- CVE-2009-1189
-- Marc Deslauriers <email address hidden> Mon, 06 Jul 2009 11:20:45 -0400
-
dbus (0.60-6ubuntu8.3) dapper-security; urgency=low
* SECURITY UPDATE: policy bypass with NULL interfaces.
- Add 82-NULL-policy-bypass.patch: upstream fixes.
- CVE-2008-0595
* SECURITY UPDATE: application crash via corrupt signatures.
- Add 83-signature-validation.patch: upstream fixes.
- CVE-2008-3834
-- Kees Cook <email address hidden> Mon, 13 Oct 2008 19:49:21 -0700
-
dbus (0.60-6ubuntu8.1) dapper-security; urgency=low
* SECURITY UPDATE: denial of service, dbus can be made to ignore
registered matches for other local users.
* Add debian/patches/match_removal.patch: fix from upstream CVS.
* References
http://webcvs.freedesktop.org/dbus/dbus/bus/signals.c?r1=1.14&r2=1.14.2.1&view=patch&pathrev=DBUS_1_0
CVE-2006-6107
-- Kees Cook <email address hidden> Wed, 13 Dec 2006 17:58:53 -0800
-
dbus (0.60-6ubuntu8) dapper; urgency=low
* Add a small hack to debian/rules to get us the content for the
monodoc-dbus-1-manual package. (Ubuntu: #44449)
-- Sebastian Dröge <email address hidden> Mon, 15 May 2006 20:02:55 +0200
-
dbus (0.60-6ubuntu7) dapper; urgency=low
* debian/dbus.preinst:
- Fix typo to finally really remove the
/etc/X11/Xsession.d/75dbus-1-utils_dbus-launch duplicate
-- Sebastian Dröge <email address hidden> Sun, 14 May 2006 13:28:58 +0200
-
dbus (0.60-6ubuntu6) dapper; urgency=low
* debian/patches/dbus-python-service-py-typo.diff:
+ Fix typo in a variable name in service.py (Closes: Malone #30043)
* debian/dbus.preinst:
+ Remove /etc/X11/Xsession.d/75dbus-1-utils_dbus-launch when we update
from something lower than 0.60-6ubuntu6, not only for updates from below
0.50-2. (Closes: Malone #31998)
-- Sebastian Dröge <email address hidden> Wed, 29 Mar 2006 19:28:10 +0200
-
dbus (0.60-6ubuntu5) dapper; urgency=low
* debian/dbus.{install,postinst}: Install dbus-foreground-console into
/usr/lib/dbus-1.0, not into /usr/bin, since it's not supposed (and
possible) to call as normal user.
* debian/patches/dbus-change-at-console-policy.patch:
- Change default path of dbus-foreground-console to /usr/lib/dbus-1.0/.
- Use fork/exec instead of system() to call dbus-foreground-console; this
avoids invoking the shell and nasty shell errors if it cannot be
executed (like in the test suite).
- Do not set a dbus error if dbus-foreground-console could be successfully
called, but returns 0 (i. e. it could not determine a dbus console).
This broke dbus clients like hal if there was no foreground console (on
headless machines, for example).
-- Martin Pitt <email address hidden> Wed, 15 Mar 2006 11:47:08 +0100
-
dbus (0.60-6ubuntu4) dapper; urgency=low
* Add debian/patches/dbus-poll-hang.patch:
- Check to see if our data has already been read off the connection by
another blocking pending call before we block in poll.
(check_for_reply_and_update_dispatch_unlocked): Code taken from
_dbus_connection_block_pending_call - checks for an already read reply and
updates the dispatch if there is one.
- This fixes e. g. the long startup hang of hal-device-manager.
(Malone #31517)
- Patch taken from upstream CVS.
-- Martin Pitt <email address hidden> Fri, 3 Mar 2006 11:13:57 +0100
-
dbus (0.60-6ubuntu3) dapper; urgency=low
* Remove DEB_AUTO_UPDATE_AUTOCONF line from debian/rules to fix FTBFS
-- Sebastian Dröge <email address hidden> Tue, 28 Feb 2006 18:56:28 +0100
-
dbus (0.60-6ubuntu2) dapper; urgency=low
* Remove unnecessary libgtk-cil build dependency.
* debian/rules: Disable DEB_AUTO_UPDATE_AUTOCONF to fix FTBFS.
-- Martin Pitt <email address hidden> Tue, 28 Feb 2006 12:55:26 +0100
-
dbus (0.60-6ubuntu1) dapper; urgency=low
* Synchronize to Debian.
* debian/dbus.postinst: Improve confusing rcX.d symlink transition, there is
no runlevel 12.
* Add debian/patches/int64detection.diff: Proper patch for amd64 build fix
in configure.in.
* Add debian/patches/monodoc-base.diff: Proper patch for using only
monodoc-base in Makefile.am and configure.in.
* debian/control:
- Drop build dependency on auto{conf,make} and libtool, and statically
ship changes in debian/patches/z_autoreconf.diff.
- dbus-1-utils description: Point out that this package is necessary to
get a session dbus.
* debian/rules: Remove tools/dbus-foreground-console in clean.
dbus (0.60-6) unstable; urgency=low
* Sync relavant changes from ubuntu
+ dbus-0.60-mono-arguments-fix.diff
- Added. 64bit fixes ((fd.o bugzilla #4410)
+ dbus-0.60-mono-return-null-fix.diff
- Added. Don't return null for the session bus (fd.o bugzilla #5716)
+ Send the update-notifier reboot required notification if it's installed
+ Build mono bindings as arch indep.
dbus (0.60-5) unstable; urgency=low
* Fix a bashim in the postinst script (Closes: #347453)
dbus (0.60-4) unstable; urgency=low
* Upload to unstable
dbus (0.60-3) experimental; urgency=low
* debian/patches/dbus-qdbusmarshall-amd64.patch
+ Fix build failure on amd64 (Closes: #343746)
* Ignore the exit code of run-parts in the init script.
-- Martin Pitt <email address hidden> Mon, 27 Feb 2006 10:26:16 +0100
-
dbus (0.60-2ubuntu14) dapper; urgency=low
* dbus-disable-mono-examples.patch:
+ Disable building of the mono examples... we don't ship them and they
only need another Build-Dependency, namely gtk#
-- Sebastian Dröge <email address hidden> Fri, 24 Feb 2006 18:17:34 +0100
-
dbus (0.60-2ubuntu13) dapper; urgency=low
* Drop libgtk-cil from Build-Depends as it isn't needed in reality
-- Sebastian Dröge <email address hidden> Fri, 24 Feb 2006 18:04:31 +0100
-
dbus (0.60-2ubuntu12) dapper; urgency=low
* dbus-0.60-mono-return-null-fix.diff:
+ Renamed from dbus-0.60-mono-connection-null-fix.diff:
+ Add the fix for Message.cs too
-
dbus (0.60-2ubuntu11) dapper; urgency=low
* dbus-0.60-mono-connection-null-fix.diff:
+ Don't return null for the session bus (fd.o bugzilla #5716)
* dbus-0.60-mono-arguments-fix.diff
+ Make it more 64bit clean (fd.o bugzilla #4410)
-
dbus (0.60-2ubuntu10) dapper; urgency=low
* Build-depend on libtool
-- Matthew Garrett <email address hidden> Tue, 24 Jan 2006 22:27:39 +0000
-
dbus (0.60-2ubuntu8) dapper; urgency=low
* Fix the at_console check to look for the correct console
-- Matthew Garrett <email address hidden> Tue, 24 Jan 2006 00:44:47 +0000
-
dbus (0.60-2ubuntu7) dapper; urgency=low
* Add dbus-change-at-console-policy.patch - changes at_console to
refer to the foreground console rather than any console user
* Add autotools to build-depends and regenerate on build
-- Matthew Garrett <email address hidden> Fri, 23 Dec 2005 20:50:59 +0000
-
dbus (0.60-2ubuntu6) dapper; urgency=low
* check for versions < 0.50-2 in preinst (malone #6022)
* Ignore the exit code of run-parts in the init script.
-- Michael Vogt <email address hidden> Thu, 22 Dec 2005 16:24:58 +0100
-
dbus (0.60-2ubuntu5) dapper; urgency=low
* added python2.4-libxml2 to dependencies of python2.4-dbus
-- Michael Vogt <email address hidden> Wed, 21 Dec 2005 19:25:12 +0100
-
dbus (0.60-2ubuntu4) dapper; urgency=low
* build monodoc-dbus-1-manual and libdbus-1-cil as arch: all
* move the mono build-deps to Build-Depends-Indep
-- Michael Vogt <email address hidden> Tue, 20 Dec 2005 18:03:55 +0100
