Changelog for dbus-1-1.4.1-7.35.1.i586.rpm :

* Fri Jun 20 2014 lijewski.stefanAATTgmail.com- add patch CVE-2014-3477.patch fixing DoS in dbus-daemon (bnc#881137)
* Wed Oct 10 2012 thoenigAATTsuse.de- Replace patches for CVE-2012-3524 with upstream patches (bnc#697105). 23fe78ceefb6cefcd58a49c77d1154b68478c8d2 4b351918b9f70eaedbdb3ab39208bc1f131efae0 57ae3670508bbf4ec57049de47c9cae727a64802 f68dbdc3e6f895012ce33939fb524accf31bcca5
* Wed Sep 19 2012 thoenigAATTsuse.de- Add patch for CVE-2012-3524 to fix getenv() vulnerability in suids (bnc#697105)
* Fri Jul 13 2012 lnusselAATTsuse.de- add patch: dbus-1.2.10-fd-limit-backport.patch - Raise file descriptor limit to match configuration. The default configuration has hardcoded 2048 complete connections, and 64 incomplete. We need at least that number of file descriptors, plus some for internal use. In the bus, attempt to call setrlimit() before we drop privileges. Practically speaking for this means the system bus gets it, the session bus doesn\'t. Upstream: bugs.freedesktop.org/show_bug.cgi?id=33474 . Fixes bnc#739743).
* Fri Aug 05 2011 thoenigAATTsuse.de- add patch: dbus-1.4.1-byteorder.patch - Byte-swap foreign-endian messages correctly, preventing a long-standing local DoS if foreign-endian messages are relayed through the dbus-daemon (bnc#699712)
* Sun Jan 02 2011 javierAATTopensuse.org- Update to 1.4.1 + Fix for CVE-2010-4352: sending messages with excessively-nested variants can crash the bus. The existing restriction to 64-levels of nesting previously only applied to the static type signature; now it also applies to dynamic nesting using variants. Thanks to Rémi Denis-Courmont for discoving this issue. + Various bug fixes. + For details, see http://lists.freedesktop.org/archives/dbus/2010-December/013861.html
* Mon Nov 08 2010 ajAATTsuse.de- Fix package list, own /lib/systemd directories.
* Tue Oct 12 2010 cristian.rodriguezAATTopensuse.org- ConsoleKit may not be installed on the system, so kill the process at \"stop\" only if it is running
* Fri Sep 24 2010 cristian.rodriguezAATTopensuse.org- add missimg BuildRequires on libcap-ng-devel so dbus can drop capabilities when needed.
* Mon Sep 06 2010 kay.sieversAATTnovell.com- version 1.4.0 - make dbus-uuidgen atomic - fix socket descriptor leak in _dbus_connect_tcp_socket_with_nonce - unconditionally enable D-Bus on systemd boots
* Sat Jul 24 2010 kay.sieversAATTnovell.com- update systemd service installation
* Tue Jul 13 2010 kay.sieversAATTnovell.com- drop systemd-units
* Sat Jul 10 2010 kay.sieversAATTnovell.com- update to 1.3.2 snapshot - New standardized PropertiesChanged signal in the properties interface - Support forking bus services, for compatibility- install systemd service files
* Mon Jun 28 2010 jengelhAATTmedozas.de- use %_smp_mflags
* Thu Mar 25 2010 vuntzAATTopensuse.org- Update to version 1.2.24: + For details, see http://lists.freedesktop.org/archives/dbus/2010-March/012436.html + Highlights: - Fix a critical crasher bug in the syslog code + [bus] While creating a syslog, correctly get pointer data from DBusString + [bus] Don\'t install a SIGTERM handler + [64 bit printf] Update to use DBUS_PID_FORMAT, print (omitted) + Move dispatching to destination to bus_dispatch_matches() + Dispatch post-activation messages to anyone interested + Build changes.- Changes from version 1.2.22: + For details, see http://lists.freedesktop.org/archives/dbus/2010-March/012395.html + Highlights: - Fix to avoid UI freezes in newer Evolution versions (and any other program that makes synchronous DBus calls from a non-main thread). - Monitor service directories for changes + When handling a watch, return if another thread is doing I/O + Monitor service directories for changes + Sync up UNICODE_VALID with glib, add documentation + Support inotify on older kernels + Handle OOM in reload watch + Refactor _dbus_log_info, _dbus_log_security into _dbus_log_system + Add DBUS_SYSTEM_LOG_FATAL severity + Add _dbus_credentials_to_string_append + Add a prefix to our syslog messages + Make SELinux initialization failure fatal + Don\'t send an reply for driver messages if one isn\'t requested + Fix double-free in error case. + Other simple fixes, build fixes. + Explicitly specify in the spec lower-case hex must be used + Use AM_SILENT_RULES if available- Changes from version 1.2.20: + For details, see http://lists.freedesktop.org/archives/dbus/2010-February/012156.html + Fix inotify shutdown + Fix compilation in --disable-selinux case- Changes from version 1.2.18: + For details, see http://lists.freedesktop.org/archives/dbus/2010-February/012150.html + Ignore exit code zero from activated services + Switch to libcap-ng, avoid linking libdbus against libcap[-ng] + Don\'t drop pending activations when reloading configuration + Update messagebus.in init script to start earlier + Clean up inotify watch handling + Don\'t crash when reloading if we haven\'t loaded user database yet + fdo#23502 - corrected wrong verbose-output + Correct timeout handling + dbus-monitor: use unbuffered stdout instead of handling SIGINT + fdo#25697 - Fix memory leak in policy reload + fdo#23977 - dbus-launch --exit-with-session not killing dbus-daemon on SIGINT + Use monotonic clock for _dbus_get_current_time() if it\'s available. + Make array-printing code easier to follow + Forbid zero serial numbers + Include reason when reporting corrupt messages + Add an accessor for the loader\'s corruption reason + Print byte arrays as nicely-formatted hex. + Print all-printable-ASCII byte arrays as strings + Build fixes, including fdo#19432, fdo#22788, fdo#22805
* Mon Dec 14 2009 jengelhAATTmedozas.de- add baselibs.conf as a source- package documentation as noarch
* Wed Sep 02 2009 mvidnerAATTsuse.cz- Implemented /etc/init.d/dbus reload (bnc#503074).
* Thu Jul 23 2009 kay.sieversAATTnovell.com- fix %changelog
* Fri Jul 17 2009 meissnerAATTsuse.de- added dbus-1-devel to baselibs.conf
* Fri Jul 17 2009 kay.sieversAATTnovell.com- fix --libexecdir to be the proper /lib/dbus-1/ directory
* Wed Jul 15 2009 kay.sieversAATTnovell.com- update to 1.2.16 release - Avoid race conditions reading message from exited process - Ensure initialized variable in dbus_connection_remove_filter - Don\'t fail autolaunching if process has SIGCHLD handler - Ensure inotify fd is set close on exec - Make sure a pending call timeout isn\'t assumed - Allow a pending call to block forever - Don\'t allocate DBusTimeout for pending call when passed INT_MAX - Update documentation now that INT_MAX means no timeout - Fix issue where timeouts can overflow - Remove 6 hour timeout restriction - Unrestrict session bus timeout
* Thu Apr 16 2009 crrodriguezAATTsuse.de- use --disable-static instead of removing static libraries
* Thu Apr 02 2009 wernerAATTsuse.de- Make boot script smart