~racb/ubuntu/+source/dbus:lpusip/ubuntu/oneiric-security

Last commit made on 2012-10-04
Get this branch:
git clone -b lpusip/ubuntu/oneiric-security https://git.launchpad.net/~racb/ubuntu/+source/dbus
Only Robie Basak can upload to this branch. If you are Robie Basak please log in for upload directions.

Branch merges

Branch information

Name:
lpusip/ubuntu/oneiric-security
Repository:
lp:~racb/ubuntu/+source/dbus

Recent commits

945a983... by Marc Deslauriers

Import patches-unapplied version 1.4.14-1ubuntu1.3 to ubuntu/oneiric-security

Imported using usd-importer.

Publish parent: 84e160a5f8ac8a8dde16e3f33e25e5ffcd04184f

New changelog entries:
  * REGRESSION FIX: some applications launched with the activation helper
    may need DBUS_STARTER_ADDRESS. (LP: #1058343)
    - debian/patches/CVE-2012-3524-regression-fix.patch: hardcode the
      starter address to the default system bus address.
  * REGRESSION FIX: unclean shutdown after dbus upgrade (LP: #740390)
    - debian/libdbus-1-3.postinst: trigger an upstart re-exec before
      shutdown or reboot so that it can safely unmount the root
      filesystem.

84e160a... by Marc Deslauriers

Import patches-unapplied version 1.4.14-1ubuntu1.1 to ubuntu/oneiric-security

Imported using usd-importer.

Publish parent: 76ec7bc2e4a06f34456ea7a46ceb19da09e25616

New changelog entries:
  * SECURITY UPDATE: privilege escalation via unsanitized environment
    - debian/patches/CVE-2012-3524-dbus.patch: Don't access environment
      variables or run dbus-launch when setuid in configure.ac,
      dbus/dbus-keyring.c, dbus/dbus-sysdeps*
    - CVE-2012-3524

76ec7bc... by Martin Pitt

Import patches-unapplied version 1.4.14-1ubuntu1 to ubuntu/oneiric

Imported using usd-importer.

Publish parent: e07971a5e33a3d356b7834e57b1f58eea65e4cd8
Changelog parent: d19585689271183ae230ecc2bc6a7c70953ec4bd

New changelog entries:
  * Merge with Debian unstable. Remaining changes:
    - Install binaries into / rather than /usr:
      + debian/rules: Set --exec-prefix=/
      + debian/dbus.install, debian/dbus-x11.install: Install from /bin
    - Use upstart to start:
      + Add debian/dbus.upstart.
      + debian/control: Add upstart dependency.
      + debian/dbus.postinst: Use upstart call instead of invoking the init.d
        script for checking if we are already running.
      + debian/control: versioned dependency on netbase that emits the new
        deconfiguring-networking event used in upstart script.
    - 20_system_conf_limit.patch: Increase max_match_rules_per_connection for
      the system bus to 5000 (LP #454093)
    - 81-session.conf-timeout.patch: Raise the service startup timeout from 25
      to 60 seconds. It may be too short on the live CD with slow machines.
    - Add 0001-activation-allow-for-more-variation-than-just-system.patch,
      0002-bus-change-systemd-activation-to-activation-systemd.patch,
      0003-upstart-add-upstart-as-a-possible-activation-type.patch,
      0004-upstart-add-UpstartJob-to-service-desktop-files.patch,
      0005-activation-implement-upstart-activation.patch: Patches from Scott
      James Remnant to implement Upstart service activation. Not upstream.

d195856... by Simon McVittie

Import patches-unapplied version 1.4.14-1 to debian/sid

Imported using usd-importer.

Publish parent: 6e7f206771990e8f9b6e2e7904c702df0b2bd7f1

New changelog entries:
  * New upstream release
    - no longer needs workarounds to build or install the documentation
  * Remove --disable-gc-sections, unnecessary since 1.4.12

6e7f206... by Simon McVittie

Import patches-unapplied version 1.4.12-5 to debian/sid

Imported using usd-importer.

Publish parent: e518ebab28d530ebe3216d2c888c5f72a8412105

New changelog entries:
  * Undo the changed invocation for dbus-launch, which seems to cause
    more problems than it solves (LP: #807614, LP: #809900, probably also
    Closes: #633652)
  * Work around #453755 by just reopening stdin from /dev/null instead,
    until fd.o #39197 gets fixed

e07971a... by Sebastien Bacher

Import patches-unapplied version 1.4.12-4ubuntu2 to ubuntu/oneiric

Imported using usd-importer.

Publish parent: 007f8a85cd474c8c1e22e66f134feda496f9dcce

New changelog entries:
  * debian/dbus-Xession: revert debian's commit which changed the way the
    environment is updated for dbus-launch commands, the issue it fixes is
    rather marginal but it creates issues commands run using gio, which is
    the case of i.e indicators or unity "run a command" (lp: #807614, #809900)

007f8a8... by Martin Pitt

Import patches-unapplied version 1.4.12-4ubuntu1 to ubuntu/oneiric

Imported using usd-importer.

Publish parent: f07885fce06521fec9d21c056a41b894154d6892
Changelog parent: e518ebab28d530ebe3216d2c888c5f72a8412105

New changelog entries:
  * Merge with Debian unstable. Remaining changes:
    - Install binaries into / rather than /usr:
      + debian/rules: Set --exec-prefix=/
      + debian/dbus.install, debian/dbus-x11.install: Install from /bin
    - Use upstart to start:
      + Add debian/dbus.upstart.
      + debian/control: Add upstart dependency.
      + debian/dbus.postinst: Use upstart call instead of invoking the init.d
        script for checking if we are already running.
      + debian/control: versioned dependency on netbase that emits the new
        deconfiguring-networking event used in upstart script.
    - 20_system_conf_limit.patch: Increase max_match_rules_per_connection for
      the system bus to 5000 (LP #454093)
    - 81-session.conf-timeout.patch: Raise the service startup timeout from 25
      to 60 seconds. It may be too short on the live CD with slow machines.
    - Add 0001-activation-allow-for-more-variation-than-just-system.patch,
      0002-bus-change-systemd-activation-to-activation-systemd.patch,
      0003-upstart-add-upstart-as-a-possible-activation-type.patch,
      0004-upstart-add-UpstartJob-to-service-desktop-files.patch,
      0005-activation-implement-upstart-activation.patch: Patches from Scott
      James Remnant to implement Upstart service activation. Not upstream.

e518eba... by Simon McVittie

Import patches-unapplied version 1.4.12-4 to debian/sid

Imported using usd-importer.

Publish parent: f1181e90bba9912e0f541ccee2567ac7b809005d

New changelog entries:
  * Override missing-pre-dependency-on-multiarch-support for the -dev
    package, ftp-master doesn't have lintian 2.5.1 yet
  * Check all Description fields for correct use of dbus (package name)
    vs. D-Bus (project name), and override lintian false-positives
  * Mention CVE-2011-2200 in the changelog for 1.4.12-1 now it has a CVE ID
  * Merge some things from Ubuntu, via experimental:
    - move libraries into multiarch locations (but don't move binaries
      from /usr to /, which is not needed on Debian)
    - run dbus-uuidgen --ensure in postinst
    - call ReloadConfig with dbus-send in the postinst, since that'll work
      regardless of whether dbus was started with sysvinit or Upstart; just
      call it unconditionally, and ignore any failures we might see (in
      chroots or if dbus-daemon wasn't running)
  * and more things from experimental:
    - improve comments in postinst explaining why it behaves as it does
  * Run dbus-launch for X sessions in a way that doesn't consume characters
    from startx's stdin, or the stdin of certain display managers' init scripts
    (known to affect slim, but not xdm or gdm) (Closes: #453755)
  * Remove the .la file for the debug build, not just the normal build

f1181e9... by Simon McVittie

Import patches-unapplied version 1.4.12-2 to debian/sid

Imported using usd-importer.

Publish parent: 9dd896fa8187947f62da6a7ab680b25e909e2873

New changelog entries:
  * Don't run tests during build (again), it appears they time out on most of
    of the buildds
  * Explicitly build-depend on automake 1.10, so buildds won't try and fail
    with automake1.9 like kfreebsd-i386 did

9dd896f... by Simon McVittie

Import patches-unapplied version 1.4.12-1 to debian/sid

Imported using usd-importer.

Publish parent: 7cbf41dbb166731c0ca3dfa700bc617c678eff61

New changelog entries:
  * New upstream release fixes local DoS (Closes: #629938, no CVE number yet)
  * Don't delete jquery.js, no longer installed by recent Doxygen
  * Build-depend on libglib2.0-dev, libdbus-glib-1-dev for better regression
    test coverage (dbus-glib is a circular dependency, but both of these
    dependencies can be dropped if bootstrapping new architectures)