-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathNEWS
3690 lines (2688 loc) · 141 KB
/
NEWS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
dbus 1.13.18 (2020-07-02)
=========================
The “carnivorous border” release.
Maybe security fixes:
• On Unix, avoid a use-after-free if two usernames have the same
numeric uid. In older versions this could lead to a crash (denial of
service) or other undefined behaviour, possibly including incorrect
authorization decisions if <policy group=...> is used.
Like Unix filesystems, D-Bus' model of identity cannot distinguish
between users of different names with the same numeric uid, so this
configuration is not advisable on systems where D-Bus will be used.
Thanks to Daniel Onaca.
(dbus#305, dbus!166, CVE-2020-35512; Simon McVittie)
Other fixes:
• On Solaris and its derivatives, if a cmsg header is truncated, ensure
that we do not overrun the buffer used for fd-passing, even if the
kernel tells us to.
(dbus#304, dbus!165; Andy Fiddaman)
• When built with CMake, use GNUInstallDirs' special-cases for prefixes
/, /usr and /opt/*
(dbus!155, Ralf Habacker)
• When built with CMake on Linux, allow systemd-specific features to be
enabled, for feature parity with Autotools
(dbus!155, Ralf Habacker)
• When built with CMake, install the same example files as with Autotools
(dbus!155, Ralf Habacker)
• Correct the doc-comment for DBUS_ERROR_SPAWN_NO_MEMORY
(dbus!163, Marc-André Lureau)
dbus 1.13.16 (2020-06-02)
=========================
The “ominous mushroom hat” release.
Denial of service fixes:
• CVE-2020-12049: If a message contains more file descriptors than can
be sent, close those that did get through before reporting error.
Previously, a local attacker could cause the system dbus-daemon (or
another system service with its own DBusServer) to run out of file
descriptors, by repeatedly connecting to the server and sending fds that
would get leaked.
Thanks to Kevin Backhouse of GitHub Security Lab.
(dbus#294, GHSL-2020-057; Simon McVittie)
Enhancements:
• The API reference manual can be built as a Qt compiled help file if
qhelpgenerator(-qt5) is available. This is controlled by
--enable-qt-help and --with-qchdir in the Autotools build, or
-DENABLE_QT_HELP and -DINSTALL_QCH_DIR in CMake.
(dbus!150, Ralf Habacker)
Fixes:
• When built for Windows, return all autolaunch error information in
the DBusError rather than printing some of it to stderr
(dbus#191, dbus!131; Ralf Habacker)
• When built for Windows, don't truncate long log messages
(dbus!134, Ralf Habacker)
• When built using CMake for a Unix platform, dbus-cleanup-sockets and
dbus-uuidgen are now included (dbus!154, Ralf Habacker)
• When built for Windows with verbose mode enabled, don't print debugging
messages related to poll() emulation into a fixed-size buffer that
could overflow (dbus!125, Ralf Habacker)
• Adjust .desktop file parser to avoid a Coverity false positive
(dbus!146, Coverity CID 354884; Ralf Habacker)
• Print shell-test diagnostics to stderr, avoiding warnings or errors
from strict TAP parsers (dbus!157, Félix Piédallu)
Tests and CI enhancements:
• When the CI cross-builds Windows binaries on Linux, run unit tests
using Wine (dbus#296, dbus!158; Ralf Habacker)
• Really build x86_64 Windows binaries in Gitlab-CI, instead of building
i686 binaries a second time (Ralf Habacker)
• When tests will be run using Wine, use STABS debug symbol format so
that Wine can display backtraces (dbus#133, dbus!104; Ralf Habacker)
dbus 1.13.14 (2020-04-21)
=========================
The “mystery allium” release.
Dependencies:
• On Unix platforms, if getpwnam_r() and getgrnam_r() are implemented,
they must be POSIX-conformant. The non-POSIX signature seen in ancient
Solaris versions will no longer work. (dbus!11, Simon McVittie)
Enhancements:
• D-Bus Specification 0.36:
· Fix a typo in an annotated hexdump of part of a message
(dbus!152, Zygmunt Krynicki)
• On Linux, use getrandom(2) in preference to /dev/urandom
(dbus!147, Natanael Copa)
• Add a --sender option to dbus-send, which requests a name and holds it
until the signal has been sent. (dbus!116, Christopher Morin)
Fixes:
• Fix a crash when the dbus-daemon is terminated while one or more
monitors are active (dbus#291, dbus!140; Simon McVittie)
• Fix several test failures if the build-time tests were run as uid 0.
Note that running the tests with elevated privileges is likely to be
insecure, and should only be attempted in an expendable container or
virtual machine. (dbus!117, Simon McVittie)
• Fix an assertion failure if a client encounters an out-of-memory
condition while sending its response to the "OK" authentication
message, and processing of the "OK" message is subsequently retried
when more memory is available (dbus!119, Simon McVittie)
• Don't leak struct addrinfo if we run out of memory during a TCP
connect()
(dbus!143, dbus!144, Coverity CID 354880; Ralf Habacker, Simon McVittie)
• On Linux with SELinux, don't assume that the system policy has the
"dbus" security class or the associated AV
(dbus#198, dbus!128; Laurent Bigonville)
• Handle dbus_connection_set_change_sigpipe() in a thread-safe way
(dbus!132; Simon McVittie, Ralf Habacker)
• On Unix, use POSIX <poll.h> in preference to <sys/poll.h>
(dbus!148, Natanael Copa)
• When building with CMake, cope with libX11 in a non-standard location
(dbus!129, Tuomo Rinne)
• On Windows with verbose mode enabled and outputting to the debug port,
use a dynamically-allocated buffer to avoid potential stack buffer
overflows in long messages (dbus#45, dbus!133; Ralf Habacker)
• The dbus-send(1) man page now documents --bus and --peer instead of
the old --address synonym for --peer, which has been deprecated since
the introduction of --bus and --peer in 1.7.6
(fd.o #48816, dbus!115; Chris Morin)
• Fix a wrong environment variable name in dbus-daemon(1)
(dbus#275, dbus!122; Mubin, Philip Withnall)
• Fix formatting of dbus_message_append_args example
(dbus!126, Felipe Franciosi)
Internal changes:
• Move more test-only code from dbus/ to tests/
(dbus!120, dbus!121, dbus!153; Simon McVittie)
• Improve diagnostics if memory or fd leaks are detected
(dbus!118, dbus!120; Simon McVittie)
• Move from Debian 9 to Debian 10 for most continuous integration jobs
(dbus!151, Simon McVittie)
• On Windows, improve embedded version information
(dbus!136, dbus!138, dbus!139; Ralf Habacker)
• Indentation fixes (dbus!149, Taras Zaporozhets)
dbus 1.13.12 (2019-06-11)
=========================
The “patio squirrel” release.
Security fixes:
• CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1
authentication for identities that differ from the user running the
DBusServer. Previously, a local attacker could manipulate symbolic
links in their own home directory to bypass authentication and connect
to a DBusServer with elevated privileges. The standard system and
session dbus-daemons in their default configuration were immune to this
attack because they did not allow DBUS_COOKIE_SHA1, but third-party
users of DBusServer such as Upstart could be vulnerable.
Thanks to Joe Vennix of Apple Information Security.
(dbus#269, Simon McVittie)
Enhancements:
• dbus-daemon <allow> and <deny> rules can now specify a
send_destination_prefix attribute, which is like a combination of
send_destination and the arg0namespace keyword in match rules: a rule
with send_destination_prefix="com.example.Foo" matches messages sent to
any destination that is in the queue to own well-known names like
com.example.Foo or com.example.Foo.A.B (but not com.example.Foobar).
(dbus!85, Adrian Szyndela)
dbus 1.13.10 (2019-05-13)
=========================
The “engineering brick” release.
Dependencies:
• GLib >= 2.38 is required if full test coverage is enabled
(reduced from 2.40 in dbus 1.12.x.)
Deprecations:
• Third-party software should install default dbus policies for the system
bus into ${datadir}/dbus-1/system.d (this has been supported since dbus
1.10, released in August 2015). Installing default dbus policies in
${sysconfdir}/dbus-1/system.d is now considered to be deprecated. Policy
files in ${sysconfdir}/dbus-1/system.d continue to be read, but this
directory should only be used by system administrators wishing to
override the default policies.
The ${datadir} applicable to dbus is usually /usr/share and the
${sysconfdir} is usually /etc.
• A similar pattern applies to the session bus policies in session.d.
Enhancements:
• D-Bus Specification 0.35:
· Add UnixGroupIDs to GetConnectionCredentials()
(dbus#196, dbus!105; Matthijs van Duin)
· Remove some redundancies from the spec for interface names
(dbus!102, Felipe Gasper)
• Raise soft fd limit to match hard limit, even if unprivileged.
This makes session buses with many clients, or with clients that make
heavy use of fd-passing, less likely to suffer from fd exhaustion.
(dbus!103, Simon McVittie)
• On Linux 4.13 or later when built against a suitable glibc version,
GetConnectionCredentials() now includes UnixGroupIDs, the effective
group IDs of the initiator of the connection, taken from
SO_PEERGROUPS. (dbus#196, dbus!105; Matthijs van Duin)
• Embedded/special-purpose builds of dbus can now be configured with
--disable-traditional-activation, to disable services being launched
as a subprocess of the dbus-daemon. This allows the system dbus-daemon
to be run in a more tightly restricted security profile (an example
"drop-in" for systemd is provided).
If systemd support is enabled, then services with a SystemdService
configured can still be activated in these builds, via IPC to systemd.
Otherwise, services will not be activatable at all.
Please note that this option is not suitable for general-purpose
Linux distributions that are intended to support running third-party
D-Bus services.
(dbus!107, Topi Miettinen)
• Move CMake build system to top level, matching normal practice for
CMake projects (dbus!84, Ralf Habacker)
• Reformat CMake files (dbus#252, dbus!82, dbus!91; Ralf Habacker)
• Avoid GLib 2.40 dependencies (dbus!79, Ralf Habacker)
• Officially deprecate packaged XML policies in ${sysconfdir}, and
document how to install system services correctly
(dbus!76, Simon McVittie)
• Add AddressSanitizer and ubsan support (dbus!57, Simon McVittie)
Fixes:
• If a privileged dbus-daemon has a hard fd limit greater than 64K, don't
reduce it to 64K, ensuring that we can put back the original fd limits
when carrying out traditional (non-systemd) activation. This fixes a
regression with systemd >= 240 in which system services inherited
dbus-daemon's hard and soft limit of 64K fds, instead of the intended
soft limit of 1K and hard limit of 512K or 1M.
(dbus!103, Debian#928877; Simon McVittie)
• Fix build failures caused by an AX_CODE_COVERAGE API change in newer
autoconf-archive versions (dbus#249, dbus!88; Simon McVittie)
• Fix build failures with newer autoconf-archive versions that include
AX_-prefixed shell variable names (dbus#249, dbus!86; Simon McVittie)
• Avoid possible memory corruption in certain DBusHashTableIter use
patterns, which in practice were never used (dbus!44, Simon McVittie)
• Avoid a test failure on Linux when built in a container as uid 0, but
without the necessary privileges to increase resource limits
(dbus!58, Debian #908092; Simon McVittie)
• Don't overwrite PKG_CONFIG_PATH and related environment variables when
the pkg-config-based version of DBus1Config is used in a CMake project
(dbus#267, dbus!96; Clemens Lang)
• In CMake builds, respect GNUInstallDirs variables
(dbus!77, Ralf Habacker)
• In CMake builds, don't rebuild documentation every time
(dbus!94, Ralf Habacker)
• In CMake builds for Windows, don't require libiconv
(dbus#262, dbus!100; Ralf Habacker)
• Fix intermittent build failures with parallel CMake
(dbus#266, dbus!113; Simon McVittie)
• Don't assume we can set permissions on a directory, for the benefit of
MSYS and Cygwin builds (dbus#216, dbus!110; Simon McVittie)
• Avoid test failures with non-trivial NSS modules
(dbus#256, dbus!93; Simon McVittie)
• Fix test failures in test-syslog and test-sysdeps under Windows
(dbus#238, dbus#243, dbus!61, dbus!62; Simon McVittie)
• Ensure that CTest build-time tests on Windows use the just-built
libdbus-1-3.dll (dbus!83, Ralf Habacker)
• Don't take so long to run test-refs on Windows
(dbus#244, dbus!65; Ralf Habacker)
• Fix memory leaks in tests (dbus!68, Simon McVittie)
• Avoid casting user-supplied pointers to DBusBasicValue *, which is
formally undefined behaviour (dbus!69, Simon McVittie)
• Fix a non-exploitable stack array overrun in dbus-run-session on Windows
(Ralf Habacker)
Tests and CI enhancements:
• Verify that the result of an Autotools `make dist` can be used for a
successful CMake build (dbus#255, dbus!87; Simon McVittie)
• Rewrite Python tests into C to reduce circular dependencies and
facilitate use of AddressSanitizer (dbus!37, Simon McVittie)
• Refactor tests to extract most of their code from the bus/ and dbus/
directories, and break them up into smaller modules
(dbus#223, dbus#240, dbus!1, dbus!99, dbus!73, dbus!74, dbus!75;
Simon McVittie, Ralf Habacker)
• Do CI builds in a more minimal environment (dbus!63, Simon McVittie)
• Improve test coverage with CMake (dbus#135, dbus!23; Ralf Habacker)
• Avoid firewall exception requests when running build-time tests on
Windows (dbus!64, Ralf Habacker)
• Allow use of Wine to run cross-compiled Windows tests on Linux
(dbus!60, Ralf Habacker)
Internal changes:
• Rename DBusSocketSet to the more accurate DBusPollableSet
(dbus!81, Ralf Habacker)
• Refactor Windows implementation of dbus-spawn
(dbus!80; Ralf Habacker, Simon McVittie)
• Delete unused code from userdb module (dbus!92, Simon McVittie)
• Remove unnecessary _dbus_threads_init_debug() (dbus!72, Simon McVittie)
dbus 1.13.8 (2018-12-04)
========================
The “demanding dragon” release.
dbus version control is now hosted on freedesktop.org's Gitlab
installation, and bug reports and feature requests have switched from
Bugzilla bugs (indicated by "fd.o #nnn") to Gitlab issues ("dbus#nnn")
and merge requests ("dbus!nnn"). See README and CONTRIBUTING.md for
more details.
Dependencies:
• dbus now requires at least a basic level of support for C99 variadic
macros, as implemented in gcc >= 3, all versions of Clang, and
MSVC >= 2005. In practice this requirement has existed since version
1.9.2, but it is now official.
• dbus now requires a C99-compatible va_copy() macro (or a __va_copy()
macro with the same behaviour), except when building for Windows using
MSVC and CMake.
• Building documentation using CMake now requires xsltproc, Docbook DTDs
(for example docbook-xml on Debian derivatives), and Docbook XSLT
stylesheets (for example docbook-xsl on Debian derivatives). Using
KDE's meinproc4 documentation processor is no longer supported.
Enhancements:
• Rewrite CONTRIBUTING.md to reflect the current setup
(dbus!8, Simon McVittie)
• D-Bus Specification v0.34:
· Fix an incorrect AddMatch() call in sample code
(dbus#221, dbus!56; Philip Withnall)
• Tarball releases no longer contain pre-2007 changelogs and are now
compressed with xz, so they should be somewhat smaller
(fd.o #107630; Francesco Turco, Simon McVittie)
• Reference the freedesktop.org Code of Conduct (Simon McVittie)
• Build an implementation of dbus-run-session for Windows
(dbus#135, dbus!22; Ralf Habacker)
• On Linux with SELinux, use avc_open() and monitor the AVC netlink fd
in the main event loop, instead of using the deprecated avc_init()
and a thread (dbus#134, dbus!31; Laurent Bigonville)
• On Linux with SELinux, use the SELINUX_CB_POLICYRELOAD callback
to detect policy reloads, instead of monitoring the access vector
cache with AVC_CALLBACK_RESET
(dbus#134, dbus!31; Laurent Bigonville)
• Avoid double slashes in pkg-config paths (dbus!30, Ralf Habacker)
• Improve test coverage and clean up dead code
(fd.o #107739, dbus#222; Simon McVittie)
• Allow --enable-relocation in combination with absolute paths for
--exec-prefix, --libdir (fd.o #107662, Simon McVittie)
• Don't run a test program to check how to copy a va_list, which is
awkward for cross-compiling; instead require that va_copy() or
__va_copy() exists, except in older MSVC versions where we already
know that simple assignment is enough (dbus!35, Simon McVittie)
• Simplify configure checks (dbus!10, Simon McVittie)
• Improve CMake build system parity with Autotools, including:
· Detect inotify, prctl() and getpwnam_r() correctly on Linux
· Use xsltproc instead of meinproc4 for documentation
(dbus#57, dbus#117, dbus#193, dbus#227, dbus!18, dbus!39;
Ralf Habacker, Simon McVittie)
Fixes:
• Stop the dbus-daemon leaking memory (an error message) if delivering
the message that triggered auto-activation is forbidden. This is
technically a denial of service because the dbus-daemon will
run out of memory eventually, but it's a very slow and noisy one,
because all the rejected messages are also very likely to have
been logged to the system log, and its scope is typically limited by
the finite number of activatable services available.
(dbus#234, Simon McVittie)
• Remove __attribute__((__malloc__)) attribute on dbus_realloc(),
which does not meet the criteria for that attribute in gcc 4.7+,
potentially leading to miscompilation (fd.o #107741, Simon McVittie)
• Parse section/group names in .service files according to the syntax
from the Desktop Entry Specification:
· reject control characters and non-ASCII in section/group names
· backslash escapes are not interpreted in section/group names
(dbus#208; David King, Simon McVittie)
• Always use select()-based poll() emulation on Darwin-based OSs
(macOS, etc.) and on Interix, similar to what libcurl does
(dbus#232, dbus!19; Simon McVittie)
• Avoid undefined integer shifts when generating random tokens for
the DBUS_COOKIE_SHA1 mechanism (dbus!45, Simon McVittie)
• Document the max-connections-per-user limit as unimplemented on
Windows, and don't fail tests when it isn't enforced there
(dbus!54, Simon McVittie)
• Avoid unnecessary file descriptors being inherited by dbus-daemon and
dbus-launch subprocesses (dbus!50, Simon McVittie)
• Fix some minor memory leaks
(fd.o #107320, dbus!41, dbus!42; Simon McVittie)
• Don't fail tests if GetConnectionUnixProcessID() succeeds on Windows,
which it normally will since 1.7.x
(dbus#239, dbus!55; Simon McVittie)
• Extend a test timeout to avoid spurious failures in CI
(dbus!26, Simon McVittie)
• Avoid undefined signed integer operations when generating random
message content during regression tests (dbus!46, Simon McVittie)
• Fix build warnings with recent gcc (dbus#208, dbus#225; David King)
• Fix build warnings without libX11 (dbus#228, Simon McVittie)
• Fix whitespace and error behaviour for _dbus_command_from_pid()
(dbus#222, dbus!28; Simon McVittie)
• Fix a race condition in the containers test
(dbus!47, Simon McVittie)
• When built with CMake, install dbus-daemon-launch-helper to
${CMAKE_INSTALL_LIBEXECDIR}, analogous to ${libexecdir} in
Autotools (dbus!9, Simon McVittie)
• When built with CMake and disabling tests, still install
dbus-daemon-launch-helper (dbus!9, Simon McVittie)
Tests and CI:
• Add Travis-CI builds for 64-bit Windows using mingw-w64
(fd.o #105662, Ralf Habacker)
• Add Gitlab-CI integration (fd.o #108177, Simon McVittie)
dbus 1.13.6 (2018-08-02)
========================
The “vine cutting” release.
Fixes:
• Prevent reading up to 3 bytes beyond the end of a truncated message.
This could in principle be an information leak or denial of service
on the system bus, but is not believed to be exploitable to crash
the system bus or leak interesting information in practice.
(fd.o #107332, Simon McVittie)
• Fix build with gcc 8 -Werror=cast-function-type
(fd.o #107349, Simon McVittie)
• Fix warning from gcc 8 about suspicious use of strncpy() when
populating struct sockaddr_un (fd.o #107350, Simon McVittie)
• Fix a minor memory leak when a DBusServer listens on a new address
(fd.o #107194, Simon McVittie)
• Fix an invalid NULL argument to rmdir() if a nonce-tcp DBusServer
runs out of memory (fd.o #107194, Simon McVittie)
• Fix various memory leaks during unit tests
(fd.o #107194, Simon McVittie)
• Don't use misleading errno-derived error names if getaddrinfo() or
getnameinfo() fails with a code other than EAI_SYSTEM
(fd.o #106395, Simon McVittie)
• Skip tests that require working TCP if we are in a container environment
where 127.0.0.1 cannot be resolved (fd.o #106812, Simon McVittie)
dbus 1.13.4 (2018-04-30)
========================
The “parsimonious topping” release.
Dependencies:
• All Windows builds now require Windows Vista or later.
(Note that we do not recommend or support use of dbus on operating
systems outside their vendor's security support lifetime, such as Vista.)
Enhancements:
• D-Bus Specification v0.33
· Be clearer about the security properties of TCP transports, which
have no integrity or confidentiality protection and so should not
normally be used, except via the loopback interface on Windows
(fd.o #106004, Simon McVittie)
• On Linux 4.13 or later, <policy group="…"> now uses the SO_PEERGROUPS
credentials-passing socket option to get the effective group IDs
of the initiator of the connection. On platforms where that socket
option is not available, dbus-daemon continues to look up the
connection's user ID in the system user and group databases and
assume that it has the groups that would have been granted by
initgroups(). (fd.o #103737, #97821; Simon McVittie)
• If the dbus-daemon is compiled for Linux with systemd support, it
now informs systemd that it is ready for use via the sd_notify()
mechanism. (fd.o #104641; Michal Sekletar, Simon McVittie)
• Several environment variables set by systemd are no longer passed
on to activated services (fd.o #104641, Simon McVittie)
• Failing to bind a TCP socket to an address produces better error
messages. (fd.o #61922; Simon McVittie, Ralf Habacker)
• Windows builds now set the SO_REUSEADDR and TCP_NODELAY options on
TCP sockets (as Unix builds already did), which should improve
robustness and performance (fd.o #61922, Ralf Habacker)
• Windows executables built with cmake have version information.
When building for Windows with Autotools, only libdbus-1-3.dll
has version information, matching previous behaviour with cmake.
(fd.o #103387, Ralf Habacker)
• The Devhelp documentation index is now in version 2 format
(fd.o #106186, Simon McVittie)
• Give the dbus-daemon man page some scarier warnings about
<allow_anonymous/> and non-local TCP, which are insecure and should
not be used, particularly for the standard system and session buses
(fd.o #106004, Simon McVittie)
Fixes:
• Listening on TCP sockets copes better with IPv6 being disabled
(fd.o #61922; Ralf Habacker, Simon McVittie)
• Fix installation of Ducktype documentation with newer yelp-build
versions (fd.o #106171, Simon McVittie)
• Fix printf formats for pointer-sized integers on 64-bit Windows
(fd.o #105662, Ralf Habacker)
Internal changes:
• The _DBUS_GNUC_WARN_UNUSED_RESULT macro has been replaced with
_DBUS_WARN_UNUSED_RESULT, which is effective with gcc, clang and MSVC
(with cl.exe /analyze). Note that for MSVC compatibility, it must
appear before the return type in function declarations, whereas the
older macro could also have appeared after the arguments.
(fd.o #105460; Daniel Wendt, Ralf Habacker)
dbus 1.13.2 (2018-03-01)
========================
The “can break a man's arm” release.
Enhancements:
• When a container manager creates an extra server at runtime, services
can now request that messages from connections to that server are
tagged with the container instance ID, providing a fast-path for
identifying such connections. (fd.o #101899, Simon McVittie)
Fixes:
• Increase system dbus-daemon's RLIMIT_NOFILE rlimit before it drops
privileges, because it won't have permission afterwards. This fixes a
regression in dbus 1.10.18 and 1.11.0 which made the standard system bus
more susceptible to deliberate or accidental denial of service.
(fd.o #105165, David King)
dbus 1.13.0 (2018-02-08)
========================
The “Citispeed Eco 75” release.
This is a new development branch for the adventurous, and comes with a
risk of regressions. OS distributions should stay with the 1.12.x branch,
unless they can commit to following the 1.13.x branch until it reaches
a 1.14.0 stable release at an unspecified point in the future.
In particular, the new Containers API is subject to change and shouldn't
be enabled in distributions yet, even those aimed at early adopters
(hello, Arch Linux).
Behaviour changes:
• DBusServer (and hence the dbus-daemon) no longer accepts usernames
(login names) for the recommended EXTERNAL authentication mechanism,
only numeric user IDs or the empty string. This is not believed to
affect real D-Bus clients in practice, because most D-Bus clients
send numeric user IDs: the only known client implementation that
sends usernames is dbus-java, and that only when run on a system
where the com.sun.security.auth.module.UnixSystem.getUid() method is
not available. (fd.o #104588, Simon McVittie)
Enhancements:
• D-Bus Specification v0.32
· Deprecate hyphen/minus in reversed domain names, recommending
underscores instead. Recommend prepending an underscore to domain
components that start with a digit, which would not be allowed.
(fd.o #103914, Simon McVittie)
· Clarify how the SASL authentication handshake works
(fd.o #104224, Simon McVittie)
· Recommend that the message bus should remove message header fields
that it does not understand. The new item "HeaderFiltering" in the
message bus' Features property indicates that it promises to do so.
(fd.o #100317, Simon McVittie)
• Add experimental support for creating extra servers at runtime, to
be used by app containers like Flatpak or Snap. This API is still
subject to change and is not compiled in by default.
(fd.o #101354, Simon McVittie)
• Improve automated test logging (fd.o #103601, Simon McVittie)
• The dbus-daemon now filters the messages that it relays, removing
header fields that it does not understand. Clients must not rely on
this behaviour unless they have confirmed that they are connected to
a suitable message bus implementation, for example by querying its
Features property. (fd.o #100317, Simon McVittie)
Fixes:
• When iterating the DBusConnection while blocking on a pending call,
don't wait for I/O if that pending call already has a result; and make
sure that whether it has a result is propagated in a thread-safe way.
This prevents certain multi-threaded calling patterns from blocking
until their timeout even when they should have succeeded sooner.
(fd.o #102839; Manish Narang, Michael Searle)
• Do not look up client-supplied strings in the system user database
(NSS or equivalent) when using the recommended EXTERNAL auth mechanism.
This could previously lead to a deadlock or timeout in the presence of
slow or network-dependent NSS modules. (fd.o #104588, Simon McVittie)
• Report the correct error if OOM is reached while trying to listen
on a TCP socket (fd.o #89104, Simon McVittie)
• Fix a crash and an assertion failure in the server side of the
nonce-tcp: transport under error conditions
(fd.o #89104, Simon McVittie)
• Fix assertion failures in recovery from OOM while setting up a
DBusServer (fd.o #89104, Simon McVittie)
• Don't leak a file descriptor if setting up a launchd server fails
(fd.o #89104, Simon McVittie)
• Add a missing space to a warning message (fd.o #103729, Thomas Zajic)
• Fix some memory leaks in automated tests
(fd.o #103600, Simon McVittie)
• Expand ${bindir} correctly when pkg-config is asked for dbus_daemondir
(fd.o #104265, Benedikt Heine)
• On Linux systems with systemd < 237, if ${localstatedir}/lib/dbus doesn't
exist, create it before trying to create ${localstatedir}/lib/dbus/machine-id
(fd.o #104577, Chris Lesiak)
• Fix escaping in dbus-api-design document (fd.o #104925, Philip Withnall)
Internal changes:
• Harden the nonce-tcp: transport against resource leaks and
use-after-free (fd.o #103597, Simon McVittie)
• Make _DBUS_STRING_DEFINE_STATIC more consistent with
_dbus_string_init_const() (fd.o #89104, Simon McVittie)
• Add _DBUS_STRING_INIT_INVALID, analogous to NULL, and use it to
simplify error unwinding code paths (fd.o #89104, Simon McVittie)
• Make the behaviour of _dbus_string_init_const()/_dbus_string_free()
consistent with _dbus_string_init()/_dbus_string_free(): it now clears
the string to _DBUS_STRING_INIT_INVALID, whereas previously it left
the string untouched (fd.o #89104, Simon McVittie)
• Remove automated test data for wire protocol version 0, which has not
been supported since 2005 (fd.o #103758, Simon McVittie)
• Simplify method calls in automated tests
(fd.o #103600, Simon McVittie)
dbus 1.12.2 (2017-11-13)
========================
The “spider pumpkin” release.
Enhancements:
• Log a warning if a new connection cannot be accepted due to an
out-of-memory condition or failure to identify its AppArmor or
SELinux context (fd.o #103592, Simon McVittie)
Fixes:
• Make use of $(MKDIR_P) compatible with install-sh, fixing build when a
GNU-compatible `mkdir -p` is not available (fd.o #103521, ilovezfs)
• When building for Windows with Autotools, avoid `echo -e`, fixing
cross-compilation on non-GNU platforms like macOS
(fd.o #103493, Tony Theodore)
• Fix crashes in the server side of the nonce-tcp: transport under
various error conditions. This transport should normally only be used
on Windows, where AF_UNIX sockets are unavailable; the unix: transport
is the only one recommended for production use on Unix platforms.
(fd.o #103597, Simon McVittie)
Internal changes:
• Improve test coverage on Travis-CI (Simon McVittie)
dbus 1.12.0 (2017-10-30)
========================
The “gingerbread skull” release.
1.12.x is a new stable branch, recommended for use in OS
distributions.
Summary of major changes between 1.10.x and 1.12.0
--------------------------------------------------
Dependencies:
• Expat >= 2.1.0 is required.
• GLib >= 2.40 is required if full test coverage is enabled.
• [Linux] libselinux >= 2.0.86 is required if SELinux support is
enabled.
• [Unix] dbus now requires an <inttypes.h> that defines C99 constants
such as PRId64 and PRIu64, except when building for Windows.
• [Autotools] Building from git (but not from tarballs) with Autotools
now requires macros from the GNU Autoconf Archive.
• [CMake] Builds done using CMake now require CMake 3.0.2.
Build-time configuration changes:
• Expat is now found using pkg-config. See the release notes for
1.11.14.
• The --disable-compiler-optimisations and --enable-compiler-coverage
options no longer exist. See the release notes for 1.11.4 and 1.11.8.
• [Unix] The --enable-abstract-sockets and --disable-abstract-sockets
options no longer exist. See the release notes for 1.11.20.
• [Unix] Flag files in /var/run/console/${username} are no longer
checked for at_console by default. See the release notes for 1.11.18.
• [Unix, Cygwin] Init scripts are no longer provided by upstream dbus,
and packagers will now need to add these downstream (most already do).
See the release notes for 1.11.18.
• [Unix] The process ID file no longer has a different default location
on Red Hat derivatives. See the release notes for 1.11.18.
• [Unix] ${runstatedir} is now independent of ${localstatedir} with
recent Autotools versions. See the release notes for 1.11.16.
• [Windows] The WINDRES variable is no longer used. See the release
notes for 1.11.22.
Deprecations:
• Eavesdropping is officially deprecated in favour of BecomeMonitor.
See the release notes for spec version 0.31 (in dbus 1.11.14).
• [Unix] Flag files in /var/run/console/${username} are deprecated.
See the release notes for 1.11.18.
New APIs:
• <allow> and <deny> rules in dbus-daemon configuration can now
include send_broadcast="true", send_broadcast="false",
max_unix_fds="N", min_unix_fds="N" (for some integer N).
See the release notes for 1.11.18.
• dbus_try_get_local_machine_id() is like
dbus_get_local_machine_id(), but returns a DBusError.
• New APIs around DBusMessageIter to simplify cleanup.
See the release notes for 1.11.16.
• The message bus daemon now implements the standard Introspectable,
Peer and Properties interfaces. See the release notes for
dbus 1.11.14 and spec version 0.31.
• DTDs for introspection XML and bus configuration are installed.
• dbus can be compiled to be relocatable, making it more suitable for
binary bundling with other software. On Windows, this is on by
default.
• [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
never uses Linux abstract sockets, which is advantageous for
containers. On non-Linux it is equivalent to unix:tmpdir=….
See the release notes for dbus 1.11.14 and spec version 0.31.
• [Unix] New option "dbus-launch --exit-with-x11".
• [Unix] Session managers can create transient .service files in
$XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
• [Unix] A sysusers.d snippet can create the messagebus user on-demand.
Miscellaneous behaviour changes:
• [Unix] The session bus now logs to syslog if it was started by
dbus-launch.
• [Unix] Internal warnings are logged to syslog if configured.
• [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
or to stderr.
Changes since 1.11.22 release candidate
---------------------------------------
Standard stable-branch changes:
• Disable warnings about use of deprecated functions (Simon McVittie)
Fixes:
• Don't distribute files generated by ./configure in the source tarball
(fd.o #103420, Simon McVittie)
Internal changes:
• Remove some unused files from the git repository
(fd.o #103420, Simon McVittie)
D-Bus 1.11.22 (2017-10-23)
==========================
The “fire surface” release.
This is the first release-candidate for the 1.12.0 stable release.
Build-time configuration changes:
• When building for Windows with Autotools, setting the WINDRES variable
no longer works to select a non-standard resource compiler. Use
libtool's standard RC variable instead, for example
"./configure RC=i686-w64-mingw32-windres"
Dependencies:
• Builds done using CMake now require CMake 3.0.2.
Enhancements:
• When building for Windows, improve quality of metadata in
libdbus-1-3.dll (fd.o #103015, Ralf Habacker)
Fixes:
• Fix a typo "uint 16" in dbus-send(1) man page
(fd.o #103075, David King)
• When building for Windows, libdbus-1-3.dll always includes version
information. Previously, this was missing if using CMake and any
non-MSVC compiler. (fd.o #103015, Ralf Habacker)
• Fix the build with MSVC, which regressed with the #102558 fix in
1.11.20. (fd.o #102558, Ralf Habacker)
Internal changes:
• Simplify Windows resource embedding
(fd.o #103015, Simon McVittie)
D-Bus 1.11.20 (2017-10-03)
==
The “wraith stun” release.
Build-time configuration changes:
• The --enable-abstract-sockets and --disable-abstract-sockets options
no longer exist. Support for Linux's abstract AF_UNIX sockets is now
unconditionally enabled on Linux and disabled everywhere else.
(fd.o #34905, Simon McVittie)
Enhancements:
• Make slower tests less likely to time out, and improve diagnostics if
tests do time out (fd.o #103009, Simon McVittie)
• On Windows, don't compile an unused stub implementation of
_dbus_set_signal_handler() (fd.o #103010, Simon McVittie)
Fixes:
• Be more careful to save and restore errno in POSIX async signal
handlers (fd.o #103010, Simon McVittie)
• On Windows, embed a manifest in dbus-update-activation-environment.exe
so that the heuristics used for UAC do not assume it needs elevated
privileges due to its name containing "update"
(fd.o #102558, Ralf Habacker)
• On Windows with Automake, embed version information in libdbus-1,
as was meant to happen in all versions since 2009
(fd.o #103015, Simon McVittie)
D-Bus 1.11.18 (2017-09-25)
==
The “vampire conquistador” release.
Build-time configuration changes:
• By default, dbus-daemon on Unix no longer checks for flag files
/var/run/console/${username} created by the obsolete pam_console and
pam_foreground PAM modules when deciding whether ${username} is
currently at the console. The old default behaviour can be restored
by specifying --with-console-auth-dir=/var/run/console in the
recommended Autotools build system, or
-DDBUS_CONSOLE_AUTH_DIR=/var/run/console in CMake. This feature is
now deprecated, and will be removed in dbus 1.13 unless feedback via
fd.o #101629 indicates that this would be problematic.
(fd.o #101629, Simon McVittie)
• LSB-style init scripts for Red Hat and Slackware, and a non-LSB init
script for Cygwin, are no longer provided in the upstream dbus
source. We recommend that distributors who support non-systemd service
management should maintain their own init scripts or other service
manager integration as part of their downstream packaging, similar to
the way Debian distributes a Debian-specific LSB init script for dbus.
The systemd unit continues to be maintained as part of the upstream