Subject: CVS commit: [pkgsrc-2013Q1] pkgsrc/sysutils/dbus
From: Matthias Scheler
Date: 2013-06-19 16:44:07
Message id: 20130619144407.8BD3A96@cvs.netbsd.org

Log Message:
Pullup ticket #4162 - requested by wiz
sysutils/dbus: security update

Revisions pulled up:
- sysutils/dbus/Makefile                                        1.60-1.61
- sysutils/dbus/distinfo                                        1.43-1.44
- sysutils/dbus/patches/patch-ab                                1.21

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Sun May 26 18:06:05 UTC 2013

   Modified Files:
   	pkgsrc/sysutils/dbus: Makefile distinfo
   	pkgsrc/sysutils/dbus/patches: patch-ab

   Log Message:
   Update to 1.6.10:

   D-Bus 1.6.10 (2013-04-24)
   ==

   The “little-known facts about bananas” release.

   • Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
     U+FDD0..U+FDEF are allowed in UTF-8 strings again.
     (fd.o #63072, Simon McVittie)

   • Diagnose incorrect use of dbus_connection_get_data() with negative slot
     (i.e. before allocating the slot) rather than returning junk
     (fd.o #63127, Dan Williams)

   • In the activation helper, when compiled for tests, do not reset the system
     bus address, fixing the regression tests. (fd.o #52202, Simon)

   • Fix building with Valgrind 3.8, at the cost of causing harmless warnings
     with Valgrind 3.6 on some compilers (fd.o #55932, Arun Raghavan)

   • Don't leak temporary fds pointing to /dev/null (fd.o #56927, Michel \ 
HERMIER)

   • Create session.d, system.d directories under CMake (fd.o #41319,
     Ralf Habacker)

   • Unix-specific:
     · Include alloca.h for alloca() if available, fixing compilation on
       Solaris 10 (fd.o #63071, Dagobert Michelsen)

---
   Module Name:	pkgsrc
   Committed By:	wiz
   Date:		Thu Jun 13 13:00:34 UTC 2013

   Modified Files:
   	pkgsrc/sysutils/dbus: Makefile distinfo

   Log Message:
   Update to 1.6.12:

   D-Bus 1.6.12 (2013-06-13)
   ==

   Fixes:

   • CVE-2013-2168: Fix misuse of va_list that could be used as a denial
     of service for system services. Vulnerability reported by Alexandru Cornea.
     (Simon)

   • In dbus-daemon, don't crash if a .service file starts with key=value
     (fd.o #60853, Chengwei Yang)

   • Unix-specific:
     · Fix an assertion failure if we try to activate systemd services before
       systemd connects to the bus (fd.o #50199, Chengwei Yang)
     · Avoid compiler warnings for ignoring the return from write()
       (Chengwei Yang)

Files:
RevisionActionfile
1.59.2.1modifypkgsrc/sysutils/dbus/Makefile
1.42.4.1modifypkgsrc/sysutils/dbus/distinfo
1.20.6.1modifypkgsrc/sysutils/dbus/patches/patch-ab