<feed xmlns='http://www.w3.org/2005/Atom'>
<title>buildroot/package/dbus, branch 2017.02</title>
<subtitle>OpenPOWER buildroot sources</subtitle>
<id>https://git.raptorcs.com/git/buildroot/atom?h=2017.02</id>
<link rel='self' href='https://git.raptorcs.com/git/buildroot/atom?h=2017.02'/>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/'/>
<updated>2017-02-16T20:20:55+00:00</updated>
<entry>
<title>dbus: security bump to version 1.10.16</title>
<updated>2017-02-16T20:20:55+00:00</updated>
<author>
<name>Peter Korsgaard</name>
<email>peter@korsgaard.com</email>
</author>
<published>2017-02-16T18:38:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=c9556ed90f22185b3abf822f0fe07afea661938a'/>
<id>urn:sha1:c9556ed90f22185b3abf822f0fe07afea661938a</id>
<content type='text'>
&gt;From http://www.openwall.com/lists/oss-security/2017/02/16/4

The latest dbus release 1.10.16 fixes two symlink attacks in
non-production-suitable configurations. I am treating these as bugs
rather than practical vulnerabilities, and very much hope neither of
these is going to affect any real users, but I'm reporting them to
oss-security in case there's an attack vector that I've missed.

No CVEs assigned so far.

Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
<entry>
<title>dbus: remove init script status op</title>
<updated>2017-02-01T21:12:50+00:00</updated>
<author>
<name>Baruch Siach</name>
<email>baruch@tkos.co.il</email>
</author>
<published>2017-02-01T20:48:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=0b4848d6b94dc722fd6cdd6b512bdfe9efaf014a'/>
<id>urn:sha1:0b4848d6b94dc722fd6cdd6b512bdfe9efaf014a</id>
<content type='text'>
The status command calls the Upstart status utility which we don't have.

Signed-off-by: Baruch Siach &lt;baruch@tkos.co.il&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>dbus: bump to version 1.10.14</title>
<updated>2016-12-02T16:17:09+00:00</updated>
<author>
<name>Gustavo Zacarias</name>
<email>gustavo@zacarias.com.ar</email>
</author>
<published>2016-12-02T14:23:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=3229c7c12d6edee36c9fe0c8755d8bbdfc092a52'/>
<id>urn:sha1:3229c7c12d6edee36c9fe0c8755d8bbdfc092a52</id>
<content type='text'>
Signed-off-by: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
<entry>
<title>dbus: security bump to version 1.10.12</title>
<updated>2016-10-13T06:04:45+00:00</updated>
<author>
<name>Gustavo Zacarias</name>
<email>gustavo@zacarias.com.ar</email>
</author>
<published>2016-10-10T15:56:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=420bfabf4702f511d1472a0a31ee928209966266'/>
<id>urn:sha1:420bfabf4702f511d1472a0a31ee928209966266</id>
<content type='text'>
Fixes:
Format string vulnerability processing ActivationFailure messages

See:
https://bugs.freedesktop.org/show_bug.cgi?id=98157

CVE not assigned yet.

Signed-off-by: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
<entry>
<title>dbus: bump to version 1.10.10</title>
<updated>2016-08-16T21:56:46+00:00</updated>
<author>
<name>Gustavo Zacarias</name>
<email>gustavo@zacarias.com.ar</email>
</author>
<published>2016-08-16T12:37:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=d3a1d96f8903b3d8ba288a932f3427109854c674'/>
<id>urn:sha1:d3a1d96f8903b3d8ba288a932f3427109854c674</id>
<content type='text'>
Signed-off-by: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Signed-off-by: Peter Korsgaard &lt;peter@korsgaard.com&gt;
</content>
</entry>
<entry>
<title>dbus: disable bundled initscript</title>
<updated>2016-07-16T14:40:11+00:00</updated>
<author>
<name>Gustavo Zacarias</name>
<email>gustavo.zacarias@free-electrons.com</email>
</author>
<published>2016-07-16T14:32:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=ab173610fc51be27edca90337ef91b39c0c754db'/>
<id>urn:sha1:ab173610fc51be27edca90337ef91b39c0c754db</id>
<content type='text'>
Otherwise it will install $(TARGET_DIR)/etc/rc.d/init.d/messagebus when
building on a redhat/fedora host.
Regardless of that we provide our own initscript.

Signed-off-by: Gustavo Zacarias &lt;gustavo.zacarias@free-electrons.com&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>dbus: update legal info</title>
<updated>2016-07-05T07:16:12+00:00</updated>
<author>
<name>Rahul Bedarkar</name>
<email>rahul.bedarkar@imgtec.com</email>
</author>
<published>2016-07-04T12:46:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=3cbb78389a5454c7754d92acce38c72425c29244'/>
<id>urn:sha1:3cbb78389a5454c7754d92acce38c72425c29244</id>
<content type='text'>
Library and some tools (dbus-lanuch, dbus-run-session) are dual
licensed under GPLv2 or AFLv2.1 and others (dbus-monitor, dbus-send,
dbus-cleanup-sockets, dbus-uuidgen) are licensed under GPLv2+
only.

Reviewed-by: Marcin Nowakowski &lt;marcin.nowakowski@imgtec.com&gt;
Signed-off-by: Rahul Bedarkar &lt;rahul.bedarkar@imgtec.com&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>package/systemd: Remove SYSTEMD_COMPAT option</title>
<updated>2016-07-02T14:45:34+00:00</updated>
<author>
<name>Maxime Hadjinlian</name>
<email>maxime.hadjinlian@gmail.com</email>
</author>
<published>2016-07-02T13:59:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=638cfb5e0e4f93c7d3ccddf17dd95d719943c5fe'/>
<id>urn:sha1:638cfb5e0e4f93c7d3ccddf17dd95d719943c5fe</id>
<content type='text'>
Since v230 of systemd, the compat libraries have been fully removed.
https://github.com/systemd/systemd/commit/4de282cf9324ab13d17ac334244d0d7cae2df37d

Signed-off-by: Maxime Hadjinlian &lt;maxime.hadjinlian@gmail.com&gt;
[Thomas: rewrap Config.in help text in Config.in.legacy and put the
option at the right place.]
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>dbus: bump to version 1.10.8</title>
<updated>2016-03-08T20:00:46+00:00</updated>
<author>
<name>Gustavo Zacarias</name>
<email>gustavo@zacarias.com.ar</email>
</author>
<published>2016-03-08T13:28:50+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=68e34ea9f39a1a183cd02ea1e06c3dbff5f2381e'/>
<id>urn:sha1:68e34ea9f39a1a183cd02ea1e06c3dbff5f2381e</id>
<content type='text'>
Signed-off-by: Gustavo Zacarias &lt;gustavo@zacarias.com.ar&gt;
Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
<entry>
<title>dbus: audit support needs both audit and libcap-ng</title>
<updated>2015-12-30T16:27:59+00:00</updated>
<author>
<name>Thomas Petazzoni</name>
<email>thomas.petazzoni@free-electrons.com</email>
</author>
<published>2015-12-30T16:27:59+00:00</published>
<link rel='alternate' type='text/html' href='https://git.raptorcs.com/git/buildroot/commit/?id=af0d7a1fb6fb83ff44a48c4c2556dd991411ff5c'/>
<id>urn:sha1:af0d7a1fb6fb83ff44a48c4c2556dd991411ff5c</id>
<content type='text'>
As was suggested by the &lt;pkg&gt;_DEPENDENCIES variable, the audit support
in DBus requires both audit and libcap-ng. However, it didn't take
care of the fact that libcap-ng must be enabled in the configuration
to depend on it, causing some build failures with the newly added
check.

DBus configure.ac confirms that both packages are needed to enable
audit support, so we simply fix the condition to only be true when
both BR2_PACKAGE_AUDIT *and* BR2_PACKAGE_LIBCAP_NG are true.

Fixes:

  http://autobuild.buildroot.org/results/239/23953cc66faecb65e9ebf1f6980924f823d736a2/

Signed-off-by: Thomas Petazzoni &lt;thomas.petazzoni@free-electrons.com&gt;
</content>
</entry>
</feed>
