./sysutils/dbus, Message bus system

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2020Q1, Version: 1.12.16, Package name: dbus-1.12.16, Maintainer: pkgsrc-users

D-BUS is a message bus, used for sending messages between applications.
Conceptually, it fits somewhere in between raw sockets and CORBA in terms
of complexity.

D-BUS supports broadcast messages, asynchronous messages (thus decreasing
latency), authentication, and more. It is designed to be low-overhead;
messages are sent using a binary protocol, not using XML. D-BUS also
supports a method call mapping for its messages, but it is not required;
this makes using the system quite simple.

This package provides the D-BUS core library and daemon, as well as
some utilities that complement it.

MESSAGE.launchd [+/-]


Package options: kqueue, x11

Master sites:

SHA1: 06e3412a7d9c7e345bfcfb027016c634e20f7ece
RMD160: fb9c2f01d3068600cb43eae05ccd687878a31e4f
Filesize: 2044.234 KB

Version history: (Expand)

CVS history: (Expand)


   2020-06-09 13:59:41 by Benny Siegert | Files touched by this commit (2) | Package updated
Log message:
Pullup ticket #6233 - requested by wiz
sysutils/dbus: security fix

Revisions pulled up:
- sysutils/dbus/Makefile                                        1.121
- sysutils/dbus/distinfo                                        1.93

---
   Module Name:    pkgsrc
   Committed By:   wiz
   Date:           Tue Jun  9 07:13:31 UTC 2020

   Modified Files:
           pkgsrc/sysutils/dbus: Makefile distinfo

   Log message:
   dbus: update to 1.12.18.

   dbus 1.12.18 (2020-06-02)
   =========================

   The “telepathic vines” release.

   Denial of service fixes:

   • CVE-2020-12049: If a message contains more file descriptors than can
     be sent, close those that did get through before reporting error.
     Previously, a local attacker could cause the system dbus-daemon (or
     another system service with its own DBusServer) to run out of file
     descriptors, by repeatedly connecting to the server and sending fds that
     would get leaked.
     Thanks to Kevin Backhouse of GitHub Security Lab.
     (dbus#294, GHSL-2020-057; Simon McVittie)

   Other fixes:

   • Fix a crash when the dbus-daemon is terminated while one or more
     monitors are active (dbus#291, dbus!140; Simon McVittie)

   • The dbus-send(1) man page now documents --bus and --peer instead of
     the old --address synonym for --peer, which has been deprecated since
     the introduction of --bus and --peer in 1.7.6
     (fd.o #48816, dbus!115; Chris Morin)

   • Fix a wrong environment variable name in dbus-daemon(1)
     (dbus#275, dbus!122; Mubin, Philip Withnall)

   • Fix formatting of dbus_message_append_args example
     (dbus!126, Felipe Franciosi)

   • Avoid a test failure on Linux when built in a container as uid 0, but
     without the necessary privileges to increase resource limits
     (dbus!58, Debian #908092; Simon McVittie)

   • When building with CMake, cope with libX11 in a non-standard location
     (dbus!129, Tuomo Rinne)