CVS commit: pkgsrc/sysutils/dbus

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Thu Feb 16 16:07:05 UTC 2017

Modified Files:
        pkgsrc/sysutils/dbus: Makefile distinfo

Log Message:
Updated dbus to 1.10.16.

D-Bus 1.10.16 (2017-02-16)
==

The “super digging powers” release.

The fixes in this release are arguably security fixes, but if they
affect you, please take this opportunity to rethink how you are
configuring dbus.

Enhancements:

• Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  stable and Debian testing in addition to the older Ubuntu that is
  the default (fd.o #98889, Simon McVittie)

Fixes:

• Prevent symlink attacks in the nonce-tcp transport on Unix that could
  allow an attacker to overwrite a file named "nonce", in a directory
  that the user running dbus-daemon can write, with a random value
  known only to the user running dbus-daemon. This is unlikely to be
  exploitable in practice, particularly since the nonce-tcp transport
  is really only useful on Windows.

  On Unix systems we strongly recommend using only the unix: and systemd:
  transports, together with EXTERNAL authentication. These are the only
  transports and authentication mechanisms enabled by default,

  (fd.o #99828, Simon McVittie)

• Avoid symlink attacks in the "embedded tests", which are not enabled
  by default and should never be enabled in production builds of dbus.
  (fd.o #99828, Simon McVittie)


To generate a diff of this commit:
cvs rdiff -u -r1.104 -r1.105 pkgsrc/sysutils/dbus/Makefile
cvs rdiff -u -r1.77 -r1.78 pkgsrc/sysutils/dbus/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/sysutils/dbus/Makefile
diff -u pkgsrc/sysutils/dbus/Makefile:1.104 pkgsrc/sysutils/dbus/Makefile:1.105
--- pkgsrc/sysutils/dbus/Makefile:1.104 Mon Dec 12 13:57:44 2016
+++ pkgsrc/sysutils/dbus/Makefile       Thu Feb 16 16:07:05 2017
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.104 2016/12/12 13:57:44 wiz Exp $
+# $NetBSD: Makefile,v 1.105 2017/02/16 16:07:05 wiz Exp $
 
-DISTNAME=      dbus-1.10.14
+DISTNAME=      dbus-1.10.16
 CATEGORIES=    sysutils
 MASTER_SITES=  http://dbus.freedesktop.org/releases/dbus/
 

Index: pkgsrc/sysutils/dbus/distinfo
diff -u pkgsrc/sysutils/dbus/distinfo:1.77 pkgsrc/sysutils/dbus/distinfo:1.78
--- pkgsrc/sysutils/dbus/distinfo:1.77  Mon Dec 12 13:57:44 2016
+++ pkgsrc/sysutils/dbus/distinfo       Thu Feb 16 16:07:05 2017
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.77 2016/12/12 13:57:44 wiz Exp $
+$NetBSD: distinfo,v 1.78 2017/02/16 16:07:05 wiz Exp $
 
-SHA1 (dbus-1.10.14.tar.gz) = ea9efcf5439b53c3bdcabf8efba838c783c3639d
-RMD160 (dbus-1.10.14.tar.gz) = 1d7143cb689a8d23faa964cda7b8d4b9d5badbde
-SHA512 (dbus-1.10.14.tar.gz) = 87eda0117ee5fd47952f37a227cc017acdaa174a28e59ecd0c9f2501ffd5d56d015865d472dd9a922d8a52184662bfebff86279eb7431d19583958dd9e4dae26
-Size (dbus-1.10.14.tar.gz) = 1985828 bytes
+SHA1 (dbus-1.10.16.tar.gz) = 8749b63ad911436f116182a321fa06c68070c19d
+RMD160 (dbus-1.10.16.tar.gz) = 2cea27c18634487942dee32a94df87820272fe89
+SHA512 (dbus-1.10.16.tar.gz) = 1f3cbed3be80fe33b2a05774b17acd63132daa6b93102ac8b287443220ae27358457ddf4ecf2f4d974f881b0361136da785a52db45cd5da160c91b6674ba4a22
+Size (dbus-1.10.16.tar.gz) = 1986063 bytes
 SHA1 (patch-ak) = ebb0c291297577a9cff246e7bc71412bf6157254
 SHA1 (patch-al) = c70be84ae79698cc4d83087427646bfb0500f194
 SHA1 (patch-am) = ed334bc76911c9db9f5472c58fb762c56255c5b4