Subject: CVS commit: pkgsrc/sysutils/dbus
From: Thomas Klausner
Date: 2020-07-18 01:38:56
Message id: 20200717233856.3F3B5FB28@cvs.NetBSD.org

Log Message:
dbus: update to 1.12.20.

dbus 1.12.20 (2020-07-02)
=========================

The “temporary nemesis” release.

Maybe security fixes:

• On Unix, avoid a use-after-free if two usernames have the same
  numeric uid. In older versions this could lead to a crash (denial of
  service) or other undefined behaviour, possibly including incorrect
  authorization decisions if <policy group=...> is used.
  Like Unix filesystems, D-Bus' model of identity cannot distinguish
  between users of different names with the same numeric uid, so this
  configuration is not advisable on systems where D-Bus will be used.
  Thanks to Daniel Onaca.
  (dbus#305, dbus!166; Simon McVittie)

Other fixes:

• On Solaris and its derivatives, if a cmsg header is truncated, ensure
  that we do not overrun the buffer used for fd-passing, even if the
  kernel tells us to.
  (dbus#304, dbus!165; Andy Fiddaman)

Files:
RevisionActionfile
1.122modifypkgsrc/sysutils/dbus/Makefile
1.94modifypkgsrc/sysutils/dbus/distinfo