Files
bpfire/lfs
Adolf Belka 6d144d259f dbus: Update to version 1.14.4
- Update from version 1.14.0 to 1.14.4
- Update of rootfile
- Changelog
    dbus 1.14.4 (2022-10-05)
     This is a security update for the dbus 1.14.x stable branch, fixing
     denial-of-service issues (CVE-2022-42010, -42011, -42012) and applying
     security hardening (dbus#416).
	Behaviour changes:
		• On Linux, dbus-daemon and other uses of DBusServer now create a
		  path-based Unix socket, unix:path=..., when asked to listen on a
		  unix:tmpdir=... address. This makes unix:tmpdir=... equivalent to
		  unix:dir=... on all platforms.
		  Previous versions would have created an abstract socket, unix:abstract=...,
		  in this situation.
		  This change primarily affects the well-known session bus when run via
		  dbus-launch(1) or dbus-run-session(1). The user bus, enabled by configuring
		  dbus with --enable-user-session and running it on a systemd system,
		  already used path-based Unix sockets and is unaffected by this change.
		  This behaviour change prevents a sandbox escape via the session bus socket
		  in sandboxing frameworks that can share the network namespace with the host
		  system, such as Flatpak.
		  This change might cause a regression in situations where the abstract socket
		  is intentionally shared between the host system and a chroot or container,
		  such as some use-cases of schroot(1). That regression can be resolved by
		  using a bind-mount to share either the D-Bus socket, or the whole /tmp
		  directory, with the chroot or container.
		  (dbus#416, Simon McVittie)
	Denial of service fixes:
		Evgeny Vereshchagin discovered several ways in which an authenticated
		local attacker could cause a crash (denial of service) in
		dbus-daemon --system or a custom DBusServer. In uncommon configurations
		these could potentially be carried out by an authenticated remote attacker.
		• An invalid array of fixed-length elements where the length of the array
		  is not a multiple of the length of the element would cause an assertion
		  failure in debug builds or an out-of-bounds read in production builds.
		  This was a regression in version 1.3.0.
		  (dbus#413, CVE-2022-42011; Simon McVittie)
		• A syntactically invalid type signature with incorrectly nested parentheses
		  and curly brackets would cause an assertion failure in debug builds.
		  Similar messages could potentially result in a crash or incorrect message
		  processing in a production build, although we are not aware of a practical
		  example. (dbus#418, CVE-2022-42010; Simon McVittie)
		• A message in non-native endianness with out-of-band Unix file descriptors
		  would cause a use-after-free and possible memory corruption in production
		  builds, or an assertion failure in debug builds. This was a regression in
		  version 1.3.0. (dbus#417, CVE-2022-42012; Simon McVittie)
    dbus 1.14.2 (2022-09-26)
	Fixes:
		• Fix build failure on FreeBSD (dbus!277, Alex Richardson)
		• Fix build failure on macOS with launchd enabled
		  (dbus!287, Dawid Wróbel)
		• Preserve errno on failure to open /proc/self/oom_score_adj
		  (dbus!285, Gentoo#834725; Mike Gilbert)
		• On Linux, don't log warnings if oom_score_adj is read-only but does not
		  need to be changed (dbus!291, Simon McVittie)
		• Slightly improve error-handling for inotify
		  (dbus!235, Simon McVittie)
		• Don't crash if dbus-daemon is asked to watch more than 128 directories
		  for changes (dbus!302, Jan Tojnar)
		• Autotools build system fixes:
			  · Don't treat --with-x or --with-x=yes as a request to disable X11,
			    fixing a regression in 1.13.20. Instead, require X11 libraries and
			    fail if they cannot be detected. (dbus!263, Lars Wendler)
			  · When a CMake project uses an Autotools-built libdbus in a
			    non-standard prefix, find dbus-arch-deps.h successfully
			    (dbus#314, Simon McVittie)
			  · Don't include generated XML catalog in source releases
			    (dbus!317, Jan Tojnar)
			  · Improve robustness of detecting gcc __sync atomic builtins
			    (dbus!320, Alex Richardson)
		• CMake build system fixes:
			  · Detect endianness correctly, fixing interoperability with other D-Bus
			    implementations on big-endian systems (dbus#375, Ralf Habacker)
			  · When building for Unix, install session and system bus setup
			    in the intended locations
			    (dbus!267, dbus!297; Ralf Habacker, Alex Richardson)
			  · Detect setresuid() and getresuid() (dbus!319, Alex Richardson)
			  · Detect backtrace() on FreeBSD (dbus!281, Alex Richardson)
			  · Don't include headers from parent directory (dbus!282, Alex Richardson)
			  · Distinguish between host and target TMPDIR when cross-compiling
			    (dbus!279, Alex Richardson)
			  · Fix detection of atomic operations (dbus!306, Alex Richardson)
		Tests and CI enhancements:
			• On Unix, skip tests that switch uid if run in a container that is
			  unable to do so, instead of failing (dbus#407, Simon McVittie)
			• Use the latest MSYS2 packages for CI
			  (Ralf Habacker, Simon McVittie)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Peter Müller <peter.mueller@ipfire.org>
2022-12-26 08:43:27 +00:00
..
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-06-09 19:55:07 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-05-30 19:21:59 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-11-18 19:53:21 +00:00
2022-09-11 08:36:17 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-11-18 14:37:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-06 17:11:47 +00:00
2022-04-02 14:19:25 +00:00
2022-09-11 08:36:17 +00:00
2022-04-02 14:19:25 +00:00
2022-04-04 16:03:18 +00:00
2022-12-17 17:20:46 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-07-27 09:49:36 +00:00
2022-11-25 11:55:48 +00:00
2022-12-26 08:43:27 +00:00
2022-04-05 05:54:38 +00:00
2022-11-28 13:04:55 +01:00
2022-11-19 19:26:21 +00:00
2022-04-02 14:19:25 +00:00
2022-10-10 18:39:31 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-09-12 09:42:12 +00:00
2022-09-12 09:48:04 +00:00
2022-09-12 09:41:11 +00:00
2022-11-28 13:05:19 +01:00
2022-04-02 14:19:25 +00:00
2022-11-28 13:05:59 +01:00
2022-04-02 14:19:25 +00:00
2022-11-08 11:11:57 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-11-28 13:06:46 +01:00
2022-11-28 13:07:17 +01:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-11-29 13:44:15 +01:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-11-28 13:07:44 +01:00
2022-04-02 14:19:25 +00:00
2022-09-01 21:16:50 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-05-05 15:31:03 +00:00
2022-04-24 14:07:44 +00:00
2022-05-30 19:11:14 +00:00
2022-04-02 14:19:25 +00:00
2022-09-11 08:36:17 +00:00
2022-04-02 14:19:25 +00:00
2022-11-21 10:58:32 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-06-17 16:39:12 +00:00
2022-11-28 13:08:19 +01:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-08-03 10:57:24 +00:00
2022-08-12 10:43:38 +00:00
2022-04-02 14:19:25 +00:00
2022-07-09 09:08:11 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-07-09 09:08:22 +00:00
2022-07-09 09:08:44 +00:00
2022-09-11 08:36:17 +00:00
2022-04-02 14:19:25 +00:00
2022-09-01 21:15:18 +00:00
2022-07-09 09:09:10 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-07-11 13:04:01 +00:00
2022-11-28 13:08:35 +01:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-06-29 20:11:34 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-07-09 09:09:21 +00:00
2022-04-02 14:19:25 +00:00
2022-11-28 13:09:08 +01:00
2022-04-24 14:17:14 +00:00
2022-05-30 19:11:45 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-24 19:02:42 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-09-11 08:35:18 +00:00
2022-04-02 14:19:25 +00:00
2022-07-29 17:04:28 +00:00
2022-04-23 14:24:13 +00:00
2022-07-19 07:49:14 +00:00
2022-04-02 14:19:25 +00:00
2022-09-15 19:45:26 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-30 08:56:30 +00:00
2022-09-12 06:08:49 +00:00
2022-11-21 11:01:16 +00:00
2022-04-30 08:56:00 +00:00
2022-04-30 08:54:59 +00:00
2022-04-02 14:19:25 +00:00
2022-12-26 08:30:22 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-10 10:20:01 +00:00
2022-12-17 17:20:45 +00:00
2022-11-29 14:38:49 +01:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-29 19:47:23 +00:00
2022-04-02 14:19:25 +00:00
2022-10-24 08:57:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-10 10:18:40 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-08-10 10:44:31 +00:00
2022-11-25 11:57:30 +00:00
2022-12-17 17:20:45 +00:00
2022-10-03 21:58:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-08-10 10:44:31 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-11-28 13:09:53 +01:00
2022-11-28 13:10:59 +01:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-11-28 13:18:12 +01:00
2022-12-26 08:36:06 +00:00
2022-11-21 11:02:10 +00:00
2022-12-26 08:39:00 +00:00
2022-05-30 19:45:10 +00:00
2022-11-21 11:03:00 +00:00
2022-11-08 11:12:38 +00:00
2022-12-26 08:40:14 +00:00
2022-04-02 14:19:25 +00:00
2022-12-26 08:40:51 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-06-06 12:11:34 +00:00
2022-05-30 19:13:56 +00:00
2022-07-27 07:10:18 +00:00
2022-04-02 14:19:25 +00:00
2022-12-17 14:48:00 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-06-13 20:46:58 +00:00
2022-04-02 14:19:25 +00:00
2022-05-30 19:20:19 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-05-01 08:43:05 +00:00
2022-05-01 08:43:14 +00:00
2022-04-23 14:24:09 +00:00
2022-04-29 19:39:42 +00:00
2022-04-02 14:19:25 +00:00
2022-11-18 14:37:25 +00:00
2022-11-29 13:40:13 +01:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-05-02 20:22:22 +00:00
2022-09-01 21:16:50 +00:00
2022-04-29 18:58:17 +00:00
2022-11-23 12:26:01 +00:00
2022-04-29 19:37:10 +00:00
2022-09-30 21:18:38 +00:00
2022-04-29 18:56:17 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-09-12 09:43:25 +00:00
2022-04-02 14:19:25 +00:00
2022-11-25 11:58:45 +00:00
2022-08-03 10:55:43 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-29 21:11:50 +00:00
2022-04-29 19:01:37 +00:00
2022-04-29 18:59:39 +00:00
2022-10-24 08:59:27 +00:00
2022-11-19 19:26:35 +00:00
2022-11-21 11:04:37 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-24 16:29:35 +00:00
2022-04-02 14:19:25 +00:00
2022-04-24 14:07:03 +00:00
2022-04-02 14:19:25 +00:00
2022-04-24 19:13:10 +00:00
2022-09-01 21:16:49 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-09-01 21:16:49 +00:00
2022-04-10 10:05:27 +00:00
2022-09-01 21:16:49 +00:00
2022-04-02 14:19:25 +00:00
2022-06-17 10:22:31 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-11-29 13:40:40 +01:00
2022-04-02 14:19:25 +00:00
2022-11-18 14:38:17 +00:00
2022-12-06 10:05:47 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-24 18:59:49 +00:00
2022-04-02 14:19:25 +00:00
2022-11-10 15:13:51 +00:00
2022-11-25 11:58:58 +00:00
2022-11-25 11:58:58 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-08-02 06:47:20 +00:00
2022-04-02 14:19:25 +00:00
2022-11-29 13:42:08 +01:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-08-06 06:46:06 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-11-29 13:42:21 +01:00
2022-07-09 14:58:58 +00:00
2022-11-29 13:29:30 +01:00
2022-11-21 11:05:13 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-04 20:17:05 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-06-17 16:39:12 +00:00
2022-04-02 14:19:25 +00:00
2022-11-19 19:27:09 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-24 14:18:16 +00:00
2022-04-24 14:18:20 +00:00
2022-11-25 11:59:10 +00:00
2022-11-29 14:32:57 +01:00
2022-09-01 21:16:50 +00:00
2022-11-23 12:25:36 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-11-29 13:42:35 +01:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-06-04 08:36:55 +00:00
2022-12-11 11:57:34 +00:00
2022-04-02 14:19:25 +00:00
2022-06-17 16:39:12 +00:00
2022-10-24 08:58:58 +00:00
2022-09-11 08:50:57 +00:00
2022-10-24 09:03:34 +00:00
2022-04-02 14:19:25 +00:00
2022-11-21 11:05:44 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-07-11 13:04:05 +00:00
2022-04-02 14:19:25 +00:00
2022-11-08 14:39:26 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-04-10 10:04:27 +00:00
2022-04-18 21:13:09 +00:00
2022-04-02 14:19:25 +00:00
2022-06-25 11:12:01 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-11-21 11:03:36 +00:00
2022-04-02 14:19:25 +00:00
2022-04-02 14:19:25 +00:00
2022-11-08 11:10:59 +00:00
2022-04-02 14:19:25 +00:00