---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2006-1475
2006-12-19
---------------------------------------------------------------------
Product : Fedora Core 6
Name : dbus
Version : 1.0.1
Release : 8.fc6
Summary : D-BUS message bus
Description :
D-BUS is a system for sending messages between applications. It is
used both for the systemwide message bus service, and as a
per-user-login-session messaging facility.
---------------------------------------------------------------------
Update Information:
Kimmo Hämäläinen reported a DoS flaw in D-Bus that can cause
a local user to disable the the ability of another process
to receive certain messages. This flaw does not contain any
potential for arbitrary code execution.
---------------------------------------------------------------------
* Fri Dec 15 2006 Ray Strode <rstrode@redhat.com> - 1.0.1-8
- undo the patch in 1.0.1-5.fc6 to get the security update
in 1.0.1-7.fc6 out independent of bug 218207
* Fri Dec 15 2006 David Zeuthen <davidz@redhat.com> - 1.0.1-7.fc6
- CVE-2006-6107: D-Bus denial of service
- Resolves: #219665
* Fri Dec 15 2006 Ray Strode <rstrode@redhat.com> - 1.0.1-5
- don't die when reloading config if config file gains new
options that aren't understood. Move config file to new
location and keep compatible, but obsolete config file in
old location (one last try at bug 218207).
* Thu Dec 14 2006 Ray Strode <rstrode@redhat.com> - 1.0.1-4
- don't die when reloading config if config file gains new
options that aren't understood. Add a PreReq:
selinux-policy-targeted >= version to create ordering
constraints during transaction (one more try at bug 218207)
* Thu Dec 14 2006 Ray Strode <rstrode@redhat.com> - 1.0.1-3
- don't die when reloading config if config file gains new
options that aren't understood. Add a conflicts:
selinux-policy-targeted < version to create ordering constraints
during transaction (bug 218207)
* Fri Dec 1 2006 John (J5) Palmieri <johnp@redhat.com> - 1.0.1-2
- Make sure we own the /var/lib/dbus directory so that it is created on install
* Mon Nov 20 2006 Ray Strode <rstrode@redhat.com> - 1.0.1-1
- Update to 1.0.1
- Add patch from Thiago Macieira <thiago@kde.org> to fix
assertion failure
* Tue Nov 14 2006 John (J5) Palmieri <johnp@redhat.com> - 1.0.0-2
- add patch to fix dbus_threads_init_default
* Mon Nov 13 2006 John (J5) Palmieri <johnp@redhat.com> - 1.0.0-1
- update to D-Bus 1.0.0 "Blue Bird"
- build tests, asserts and verbose mode off
- patch so we are not fatal when checks fail
* Sun Oct 1 2006 Jesse Keating <jkeating@redhat.com> - 0.93-3
- rebuilt for unwind info generation, broken in gcc-4.1.1-21
* Tue Sep 19 2006 Matthias Clasen <mclasen@redhat.com> - 0.93-2
- Add a Requires for libxml2-python (#201877)
* Thu Sep 14 2006 John (J5) Palmieri <johnp@redhat.com> - 0.93-1
- Updated from upstream D-Bus 1.0 RC 1 (0.93)
* Wed Sep 6 2006 Dan Walsh <dwalsh@redhat.com> - 0.92-2
- Only audit on the system bus
* Fri Aug 18 2006 John (J5) Palmieri <johnp@redhat.com> - 0.92-1
- Update to 0.92
- remove old patches
* Sat Jul 22 2006 John (J5) Palmieri <johnp@redhat.com> - 0.90-8
- add patch to fix timeout removal assertion
* Thu Jul 20 2006 John (J5) Palmieri <johnp@redhat.com> - 0.90-7
- add patch to fix taking a connection ref when it is locked
* Wed Jul 19 2006 John (J5) Palmieri <johnp@redhat.com> - 0.90-6
- change the arch-deps.h include directory to /usr/lib[64] instead of /lib[64]
in the dbus-1.pc file after compile
* Wed Jul 19 2006 John (J5) Palmieri <johnp@redhat.com> - 0.90-5
- Move arch include file from lib to libdir
* Tue Jul 18 2006 John (J5) Palmieri <johnp@redhat.com> - 0.90-4
- add patch that pregenerates the xml introspect file so d-bus doesn't
have to be running suring the build.
* Tue Jul 18 2006 John (J5) Palmieri <johnp@redhat.com> - 0.90-3
- s/--libdir=\/lib/--libdir=% {_lib}/ in configure stage
- add / before % {_lib}
* Tue Jul 18 2006 John (J5) Palmieri <johnp@redhat.com> - 0.90-2
- Remove some remnants of the GLIB bindings from configure.in
* Mon Jul 17 2006 John (J5) Palmieri <johnp@redhat.com> - 0.90-1
- Update to upstream 0.90
- Split out bindings
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 0.62-1.1
- rebuild
* Mon Jun 12 2006 John (J5) Palmieri <johnp@redhat.com> - 0.62-1
- Update to upstream 0.62
- Remove mono for s390s
* Tue Jun 6 2006 Matthias Clasen <mclasen@redhat.com> 0.61-6
- Rebuild
* Wed May 17 2006 Karsten Hopp <karsten@redhat.de> 0.61-5.2
- add buildrequires libICE-devel, libSM-devel, libcap-devel
- change buildrequires form libX11 to libX11-devel
* Mon May 15 2006 John (J5) Palmieri <johnp@redhat.com> - 0.61-5.1
- Bump and rebuild. Add a BR and R for libX11
* Tue Apr 25 2006 John (J5) Palmieri <johnp@redhat.com> - 0.61-5
- Backport patch from dbus-connection.c
- Allows interfaces to be NULL in the message header as per the spec
- Fixes a problem with pendings calls blocking on a data starved socket
* Mon Apr 17 2006 John (J5) Palmieri <johnp@redhat.com> 0.61-4
- New audit patch
* Fri Feb 24 2006 John (J5) Palmieri <johnp@redhat.com> 0.61-3
- ABI hasn't changed so add patch that makes dbus-sharp think
it is still 0.60 (mono uses hard version names so any change
means apps need to recompile)
* Fri Feb 24 2006 John (J5) Palmieri <johnp@redhat.com> 0.61-2
- Make sure chkconfig rests the priorities so we can start earlier
* Fri Feb 24 2006 John (J5) Palmieri <johnp@redhat.com> 0.61-1
- Upgrade to upstream version 0.61
- remove python callchain patch
- update avc patch
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 0.60-7.2
- bump again for double-long bug on ppc(64)
* Tue Feb 7 2006 Jesse Keating <jkeating@redhat.com> - 0.60-7.1
- rebuilt for new gcc4.1 snapshot and glibc changes
* Mon Jan 23 2006 John (J5) Palmieri <johnp@redhat.com> 0.60-7
- Add patch to fix the python callchain
- Symlink dbus-send to /usr/bin because some applications
look for it there
* Fri Jan 20 2006 John (J5) Palmieri <johnp@redhat.com> 0.60-6
- Fix up patch to init script so it refrences /bin not /usr/bin
* Fri Jan 20 2006 John (J5) Palmieri <johnp@redhat.com> 0.60-5
- move base libraries and binaries to /bin and /lib so they can be started
before /usr is mounted on network mounted /usr systems
- have D-Bus start early
* Thu Jan 19 2006 Alexander Larsson <alexl@redhat.com> 0.60-4
- mono now built on s390x
* Mon Jan 9 2006 Alexander Larsson <alexl@redhat.com> 0.60-3
- Don't exclude non-mono arches
* Mon Jan 9 2006 Alexander Larsson <alexl@redhat.com> - 0.60-2
- Add dbus-sharp sub-package
* Fri Dec 9 2005 Jesse Keating <jkeating@redhat.com> - 0.60-1.1
- rebuilt
* Thu Dec 1 2005 John (J5) Palmieri <johnp@redhat.com> - 0.60-1
- upgrade to 0.60
* Thu Sep 8 2005 John (J5) Palmieri <johnp@redhat.com> - 0.50-1
- upgrade to 0.50
* Mon Aug 29 2005 John (J5) Palmieri <johnp@redhat.com> - 0.36.2-1
- upgrade to 0.36.2 which fixes an exploit where
users can attach to another user's session bus (
CAN-2005-0201)
* Wed Aug 24 2005 John (J5) Palmieri <johnp@redhat.com> - 0.36.1-1
- Upgrade to dbus-0.36.1
- Install all files to lib64/ on 64bit machines
* Tue Aug 23 2005 John (J5) Palmieri <johnp@redhat.com> - 0.36-1
- Upgrade to dbus-0.36
- Split modules that go into lib/python2.4/site-packages/dbus
and those that go into %{python_sitelib}/dbus (they differ on 64bit)
- Renable Qt bindings since packages in core can use them
* Mon Jul 18 2005 John (J5) Palmieri <johnp@redhat.com> - 0.35.2-1
- Upgrade to dbus-0.35.2
- removed dbus-0.34-kill-babysitter.patch
- removed dbus-0.34-python-threadsync.patch
- removed dbus-0.23-selinux-avc-audit.patch
- added dbus-0.35.2-selinux-avc-audit.patch
- take out restarts on upgrade
* Tue Jun 28 2005 John (J5) Palmieri <johnp@redhat.com> - 0.34-1
- Upgrade to dbus-0.34
- added dbus-0.34-kill-babysitter.patch
- added dbus-0.34-python-threadsync.patch
- remove dbus-0.32-print_child_pid.patch
- remove dbus-0.32-deadlock-fix.patch
- remove dbus-0.33-types.patch
* Sat Jun 18 2005 John (J5) Palmieri <johnp@redhat.com> - 0.33-4
- Add new libaudit patch from Steve Grub and enable in configure
(Bug #159218)
* Mon May 23 2005 Bill Nottingham <notting@redhat.com> - 0.33-3
- remove static libraries from python bindings
* Sun May 1 2005 John (J5) Palmieri <johnp@redhat.com> - 0.33-2
- Backport patch from CVS that fixes int32's being marshaled as
uint16's in the python bindings
* Mon Apr 25 2005 John (J5) Palmieri <johnp@redhat.com> - 0.33-1
- update to upstream 0.33
- renable selinux audit patch
* Tue Apr 12 2005 John (J5) Palmieri <johnp@redhat.com> - 0.32-6
- Added patch to fix deadlocks when using recursive g_mains
* Tue Apr 12 2005 John (J5) Palmieri <johnp@redhat.com> - 0.32-5
- replace selinux_init patch with selinux_chroot_workaround patch
to work around bad selinux interactions when using chroots
on the beehive build machines
* Mon Apr 11 2005 John (J5) Palmieri <johnp@redhat.com> - 0.32-4
- add print_child_pid patch which make sure we prin the child's pid if we fork
* Thu Apr 7 2005 David Zeuthen <davidz@redhat.com> - 0.32-3
- add fix for glib infinite loop (fdo #2889)
* Thu Mar 31 2005 John (J5) Palmieri <johnp@redhat.com> - 0.32-2
- add selinux-init patch to fix dbus from segfaulting when
building on machines that don't have selinux enabled
* Thu Mar 31 2005 John (J5) Palmieri <johnp@redhat.com> - 0.32-1
- update to upstream version 0.32
* Wed Mar 23 2005 John (J5) Palmieri <johnp@redhat.com> - 0.31-4
- Pyrex has been patched to generate gcc4.0 complient code
- Rebuild for gcc4.0
* Wed Mar 16 2005 John (J5) Palmieri <johnp@redhat.com> - 0.31-3
- change compat-gcc requirement to compat-gcc-32
- rebuild with gcc 3.2
* Tue Mar 8 2005 John (J5) Palmieri <johnp@redhat.com> - 0.31-2
- Remove precompiled init script and let the sources generate it
* Mon Mar 7 2005 John (J5) Palmieri <johnp@redhat.com> - 0.31-1
- update to upstream version 0.31
- take out user has same id patch (merged upstream)
- udi patch updated
- dbus-daemon-1 renamed to dbus-daemon
- dbus-glib-tool renamed to dbus-binding-tool
- force gcc33 because pyrex generate improper lvalue code
- disable audit patch for now
* Tue Feb 1 2005 John (J5) Palmieri <johnp@redhat.com> - 0.23-4
- Explicitly pass in the pid file location to ./configure instead of
letting it guess based on the build enviornment
* Mon Jan 31 2005 John (J5) Palmieri <johnp@redhat.com> - 0.23-3
- Add patch to fix random users from connecting to a users session bus
* Fri Jan 21 2005 John (J5) Palmieri <johnp@redhat.com> - 0.23-2
- Add Steve Grubb's SE-Linux audit patch (Bug# 144920)
* Fri Jan 21 2005 John (J5) Palmieri <johnp@redhat.com> - 0.23-1
- Update to upstream version 0.23
- Drop all patches except for the UDI patch as they have been
integrated upstream
- List of API changes:
* add setgroups() to drop supplementary groups
* removed dbus_bug_get_with_g_main since it's been replaced by dbus_g_bus_get
* added support for int64 and uint64 to the python bindings
* use SerivceOwnerChanges signal instead of ServiceCreated and ServiceDeleted
* Mon Nov 8 2004 Jeremy Katz <katzj@redhat.com> - 0.22-12
- rebuild against python 2.4
* Tue Nov 2 2004 John (J5) Palmieri <johnp@redhat.com>
- Add a requires for glib2-devel in the devel package
- Add SE-Linux backport from Colin Walters that fixes
messages getting lost in SE-Linux contexts
* Wed Oct 13 2004 John (J5) Palmieri <johnp@redhat.com>
- Bump up release and rebuild
* Mon Oct 11 2004 Tim Waugh <twaugh@redhat.com>
- Run /sbin/ldconfig for glib sub-package (bug #134062).
* Wed Sep 22 2004 John (J5) Palmieri <johnp@redhat.com>
- Fixed patch to use dbus-1 instead of dbus-1.0
- (configure.in): Exported just the datadir instead of
the full path to the dbus datadir for consistency
* Wed Sep 22 2004 John (J5) Palmieri <johnp@redhat.com>
- Adding patch to move /usr/lib/dbus-1.0/services to
/usr/share/dbus-1.0/services
* Thu Sep 16 2004 John (J5) Palmieri <johnp@redhat.com>
- reverting BuildRequires: redhat-release because of issues with build system
- added precompiled version of the messagebus init script
* Thu Sep 16 2004 John (J5) Palmieri <johnp@redhat.com>
- changed /etc/redhat-release to the package redhat-release
* Thu Sep 16 2004 John (J5) Palmieri <johnp@redhat.com>
- added python int64 patch from davidz
* Thu Sep 16 2004 John (J5) Palmieri <johnp@redhat.com>
- added BuildRequires: /etc/redhat-release (RH Bug #132436)
* Wed Aug 18 2004 John (J5) Palmieri <johnp@redhat.com>
- Added Steve Grubb's spec file patch (RH Bug #130201)
* Mon Aug 16 2004 John (J5) Palmieri <johnp@redhat.com>
- Disabled dbus-gtk since dbus-viewer doesn't do anything right now
* Mon Aug 16 2004 John (J5) Palmieri <johnp@redhat.com>
- Moved dbus-viewer to new dbus-gtk package so that dbus-glib
no longer requires X or GTK libraries. (RH Bug #130029)
* Thu Aug 12 2004 John (J5) Palmieri <johnp@redhat.com>
- Update to new 0.22 release
* Thu Aug 5 2004 John (J5) Palmieri <johnp@redhat.com>
- Added BuildRequires for libselinux-devel and Requires for libselinux
* Mon Aug 2 2004 Colin Walters <walters@redhat.com>
- Add SE-DBus patch
* Fri Jul 30 2004 John (J5) Palmieri <johnp@redhat.com>
- Added lib64 workaround for python bindings installing to
the wrong lib directory on 64 bit archs
* Fri Jul 30 2004 John (J5) Palmieri <johnp@redhat.com>
- Updated console-auth patch
- rebuild
* Thu Jul 22 2004 John (J5) Palmieri <johnp@redhat.com>
- Update to upstream CVS build
- Added console-auth patch
* Fri Jun 25 2004 John (J5) Palmieri <johnp@redhat.com>
- Workaround added to fix gcc-3.4 bug on ia64
* Fri Jun 25 2004 John (J5) Palmieri <johnp@redhat.com>
- require new Pyrex version and see if it builds this time
* Fri Jun 25 2004 John (J5) Palmieri <johnp@redhat.com>
- rebuild with updated Pyrex (0.9.2.1)
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
* Fri Jun 4 2004 John (J5) Palmieri <johnp@redhat.com>
- Moved dbus-viewer, dbus-monitor and dbus-glib-tool
into the dbus-glib package so that the main dbus
package does not depend on glib (Bug #125285)
* Thu Jun 3 2004 John (J5) Palmieri <johnp@redhat.com>
- rebuilt
* Thu May 27 2004 John (J5) Palmieri <johnp@redhat.com>
- added my Python patch
- took out the qt build requires
- added a gtk+ build requires
* Fri Apr 23 2004 John (J5) Palmieri <johnp@redhat.com>
- Changed build requirement to version 0.9-3 of Pyrex
to fix problem with builing on x86_64
* Tue Apr 20 2004 John (J5) Palmieri <johnp@redhat.com>
- update to upstream 0.21
- removed dbus-0.20-varargs.patch patch (fixed upstream)
* Mon Apr 19 2004 John (J5) Palmieri <johnp@redhat.com>
- added a dbus-python package to generate python bindings
- added Pyrex build dependacy
* Tue Mar 2 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
* Wed Feb 25 2004 Bill Nottingham <notting@redhat.com> 0.20-4
- fix dbus error functions on x86-64 (#116324)
- add prereq (#112027)
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
- rebuilt
* Fri Feb 13 2004 Tim Waugh <twaugh@redhat.com>
- Conflict with cups prior to configuration file change, so that the
%postun service condrestart works.
* Wed Feb 11 2004 Havoc Pennington <hp@redhat.com> 0.20-2
- rebuild in fc2, cups now updated
* Wed Jan 7 2004 Bill Nottingham <notting@redhat.com> 0.20-1
- update to upstream 0.20
* Thu Oct 16 2003 Havoc Pennington <hp@redhat.com> 0.13-6
- hmm, dbus doesn't support uids in the config file. fix.
* Thu Oct 16 2003 Havoc Pennington <hp@redhat.com> 0.13-5
- put uid instead of username in the config file, to keep things working with name change
* Thu Oct 16 2003 Havoc Pennington <hp@redhat.com> 0.13-4
- make subpackages require the specific release, not just version, of base package
* Thu Oct 16 2003 Havoc Pennington <hp@redhat.com> 0.13-3
- change system user "messagebus" -> "dbus" to be under 8 chars
* Mon Sep 29 2003 Havoc Pennington <hp@redhat.com> 0.13-2
- see if removing qt subpackage for now will get us through the build system,
qt bindings not useful yet anyway
* Sun Sep 28 2003 Havoc Pennington <hp@redhat.com> 0.13-1
- 0.13 fixes a little security oops
* Mon Aug 4 2003 Havoc Pennington <hp@redhat.com> 0.11.91-3
- break the tiny dbus-launch that depends on X into separate package
so a CUPS server doesn't need X installed
* Wed Jun 4 2003 Elliot Lee <sopwith@redhat.com>
- rebuilt
* Sat May 17 2003 Havoc Pennington <hp@redhat.com> 0.11.91-1
- 0.11.91 cvs snap properly merges system.d
* Fri May 16 2003 Havoc Pennington <hp@redhat.com> 0.11.90-1
- build a cvs snap with a few more fixes
* Fri May 16 2003 Havoc Pennington <hp@redhat.com> 0.11-2
- fix a crash that was breaking cups
* Thu May 15 2003 Havoc Pennington <hp@redhat.com> 0.11-1
- 0.11
* Thu May 15 2003 Havoc Pennington <hp@redhat.com> 0.10.90-1
- use rc.d/init.d not init.d, bug #90192
- include the new man pages
* Fri Apr 11 2003 Havoc Pennington <hp@redhat.com> 0.9-1
- 0.9
- export QTDIR explicitly
- re-enable qt, the problem was most likely D-BUS configure
* Tue Apr 1 2003 Havoc Pennington <hp@redhat.com> 0.6.94-1
- update from CVS with a fix to set uid after gid
* Tue Apr 1 2003 Havoc Pennington <hp@redhat.com> 0.6.93-1
- new cvs snap that actually forks to background and changes
user it's running as and so forth
- create our system user in pre
* Mon Mar 31 2003 Havoc Pennington <hp@redhat.com> 0.6.92-1
- fix for "make check" test that required a home directory
* Mon Mar 31 2003 Havoc Pennington <hp@redhat.com> 0.6.91-1
- disable qt for now because beehive hates me
- pull a slightly newer cvs snap that creates socket directory
- cat the make check log after make check fails
* Mon Mar 31 2003 Havoc Pennington <hp@redhat.com> 0.6.90-1
- initial build
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
8275f2c7eaddf6cc33f81d24176005e5a9156cc4 SRPMS/dbus-1.0.1-8.fc6.src.rpm
8275f2c7eaddf6cc33f81d24176005e5a9156cc4 noarch/dbus-1.0.1-8.fc6.src.rpm
c0bf0b361bc320571d68701106b68838474f0062 ppc/debug/dbus-debuginfo-1.0.1-8.fc6.ppc.rpm
ff8890fd9f0781f86c283d9cc9b4d24eb3fdcb03 ppc/dbus-x11-1.0.1-8.fc6.ppc.rpm
9982dc1b93b1c89d2fa14b79a44f0fb39dabd137 ppc/dbus-1.0.1-8.fc6.ppc.rpm
1be69798ecd58741d4360889bf6ceb43f2b88922 ppc/dbus-devel-1.0.1-8.fc6.ppc.rpm
eae8d97f0e5f199d376bee4c77a6ba6fde8c9285 x86_64/dbus-x11-1.0.1-8.fc6.x86_64.rpm
afec49fb5a9e83aec38693d6e8aac81bad785404 x86_64/dbus-1.0.1-8.fc6.x86_64.rpm
94594f568a4dc1605bb791ff7abf67b9742fdfe1 x86_64/dbus-devel-1.0.1-8.fc6.x86_64.rpm
44e89f61330a0bbdc98b1ff10013596f27b72cea x86_64/debug/dbus-debuginfo-1.0.1-8.fc6.x86_64.rpm
0f95685e0f09dadca9df2a0f337cfe63415d3dc1 i386/dbus-1.0.1-8.fc6.i386.rpm
be5632065dfe9e573462a0820477e8828cdd365f i386/debug/dbus-debuginfo-1.0.1-8.fc6.i386.rpm
a23afc944430818d34ab285312f0dfe15098161d i386/dbus-x11-1.0.1-8.fc6.i386.rpm
5b36d64fa344c0d3afd75a3382d0ddae4eeed0a7 i386/dbus-devel-1.0.1-8.fc6.i386.rpm
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at
http://fedora.redhat.com/docs/yum/.
---------------------------------------------------------------------
