- SECURITY UPDATE for dbus to 1.2.6

fixes CVE-2008-4311
The default policy for both sent and received messages was
effectively *allow*, and not deny as stated.

"looks good" todd@
This commit is contained in:
jasper 2008-12-09 14:12:08 +00:00
parent fba6be3632
commit 51924015e8
6 changed files with 24 additions and 25 deletions

View File

@ -1,9 +1,8 @@
# $OpenBSD: Makefile,v 1.18 2008/11/24 11:20:13 ajacoutot Exp $
# $OpenBSD: Makefile,v 1.19 2008/12/09 14:12:08 jasper Exp $
COMMENT= message bus system
DISTNAME= dbus-1.2.4
PKGNAME= ${DISTNAME}p0
DISTNAME= dbus-1.2.6
SHARED_LIBS+= dbus-1 7.0
CATEGORIES= x11

View File

@ -1,5 +1,5 @@
MD5 (dbus-1.2.4.tar.gz) = LmQ5EKCfRLAAoNdgOGN5mQ==
RMD160 (dbus-1.2.4.tar.gz) = BEHri2aO1wJQ5ISwL+aoPAXJoIg=
SHA1 (dbus-1.2.4.tar.gz) = kT15a3mAK27myisO9ZxnDz/Xl3Q=
SHA256 (dbus-1.2.4.tar.gz) = qzwk2AKKV5LmLo47QKlzOxCyEyfcTFeONLCSoXk6+7g=
SIZE (dbus-1.2.4.tar.gz) = 1564370
MD5 (dbus-1.2.6.tar.gz) = Xe2+CdTWoyRRhIfFJ336UA==
RMD160 (dbus-1.2.6.tar.gz) = I+FiOOSOOVeEOcgjvIR2iC8aEi0=
SHA1 (dbus-1.2.6.tar.gz) = rdXBagxwrRtBhL250tme6PNTJTI=
SHA256 (dbus-1.2.6.tar.gz) = a5rqzXk/yntSWYVS8fnZdPTo95uUkQR/n/iXM01BSsE=
SIZE (dbus-1.2.6.tar.gz) = 1569599

View File

@ -1,7 +1,7 @@
$OpenBSD: patch-bus_Makefile_in,v 1.2 2008/10/12 22:08:04 brad Exp $
--- bus/Makefile.in.orig Wed Oct 1 18:50:44 2008
+++ bus/Makefile.in Wed Oct 1 18:51:42 2008
@@ -1298,13 +1298,6 @@ install-data-hook:
$OpenBSD: patch-bus_Makefile_in,v 1.3 2008/12/09 14:12:08 jasper Exp $
--- bus/Makefile.in.orig Fri Dec 5 17:53:44 2008
+++ bus/Makefile.in Tue Dec 9 13:23:40 2008
@@ -1301,13 +1301,6 @@ install-data-hook:
$(mkinstalldirs) $(DESTDIR)$(datadir)/dbus-1/system-services
$(mkinstalldirs) $(DESTDIR)$(libexecdir)/dbus-1
$(INSTALL_PROGRAM) dbus-daemon-launch-helper $(DESTDIR)$(libexecdir)

View File

@ -1,7 +1,7 @@
$OpenBSD: patch-dbus_Makefile_in,v 1.2 2008/10/12 22:08:04 brad Exp $
--- dbus/Makefile.in.orig Wed Aug 6 15:43:39 2008
+++ dbus/Makefile.in Thu Aug 7 14:58:28 2008
@@ -310,7 +310,7 @@ top_builddir = @top_builddir@
$OpenBSD: patch-dbus_Makefile_in,v 1.3 2008/12/09 14:12:08 jasper Exp $
--- dbus/Makefile.in.orig Fri Dec 5 17:53:44 2008
+++ dbus/Makefile.in Tue Dec 9 13:23:40 2008
@@ -313,7 +313,7 @@ top_builddir = @top_builddir@
top_srcdir = @top_srcdir@
configdir = $(sysconfdir)/dbus-1
INCLUDES = -I$(top_builddir) -I$(top_srcdir) $(DBUS_CLIENT_CFLAGS) @PIC_CFLAGS@ -DDBUS_COMPILATION \

View File

@ -1,7 +1,7 @@
$OpenBSD: patch-doc_Makefile_in,v 1.2 2008/10/12 22:08:04 brad Exp $
--- doc/Makefile.in.orig Wed Aug 6 15:43:39 2008
+++ doc/Makefile.in Thu Aug 7 14:58:28 2008
@@ -412,16 +412,16 @@ uninstall-am:
$OpenBSD: patch-doc_Makefile_in,v 1.3 2008/12/09 14:12:08 jasper Exp $
--- doc/Makefile.in.orig Fri Dec 5 17:53:44 2008
+++ doc/Makefile.in Tue Dec 9 13:23:40 2008
@@ -415,16 +415,16 @@ uninstall-am:
@DBUS_XML_DOCS_ENABLED_TRUE@all-local: $(HTML_FILES)
@DBUS_XML_DOCS_ENABLED_TRUE@dbus-specification.html: dbus-specification.xml

View File

@ -1,7 +1,7 @@
$OpenBSD: patch-tools_Makefile_in,v 1.2 2008/10/12 22:08:04 brad Exp $
--- tools/Makefile.in.orig Wed Aug 6 15:43:39 2008
+++ tools/Makefile.in Thu Aug 7 14:58:28 2008
@@ -301,7 +301,7 @@ target_vendor = @target_vendor@
$OpenBSD: patch-tools_Makefile_in,v 1.3 2008/12/09 14:12:08 jasper Exp $
--- tools/Makefile.in.orig Fri Dec 5 17:53:44 2008
+++ tools/Makefile.in Tue Dec 9 13:23:40 2008
@@ -304,7 +304,7 @@ top_build_prefix = @top_build_prefix@
top_builddir = @top_builddir@
top_srcdir = @top_srcdir@
configdir = $(sysconfdir)/dbus-1
@ -10,7 +10,7 @@ $OpenBSD: patch-tools_Makefile_in,v 1.2 2008/10/12 22:08:04 brad Exp $
dbus_send_SOURCES = \
dbus-print-message.c \
dbus-print-message.h \
@@ -337,8 +337,8 @@ CLEANFILES = \
@@ -340,8 +340,8 @@ CLEANFILES = \
run-with-tmp-session-bus.conf