mirror of
https://git.FreeBSD.org/ports.git
synced 2025-02-08 12:01:56 +00:00
9e2d3bcf0c
From upstreams changelog [1]: dbus 1.12.20 (2020-07-02) ========================= The “temporary nemesis” release. Maybe security fixes: • On Unix, avoid a use-after-free if two usernames have the same numeric uid. In older versions this could lead to a crash (denial of service) or other undefined behaviour, possibly including incorrect authorization decisions if <policy group=...> is used. Like Unix filesystems, D-Bus' model of identity cannot distinguish between users of different names with the same numeric uid, so this configuration is not advisable on systems where D-Bus will be used. Thanks to Daniel Onaca. (dbus#305, dbus!166; Simon McVittie) Other fixes: • On Solaris and its derivatives, if a cmsg header is truncated, ensure that we do not overrun the buffer used for fd-passing, even if the kernel tells us to. (dbus#304, dbus!165; Andy Fiddaman) [1] https://gitlab.freedesktop.org/dbus/dbus/blob/dbus-1.12/NEWS PR: 247730 Exp-run by: antoine MFH: 2020Q3
4 lines
156 B
Plaintext
4 lines
156 B
Plaintext
TIMESTAMP = 1593757580
|
|
SHA256 (dbus-1.12.20.tar.gz) = f77620140ecb4cdc67f37fb444f8a6bea70b5b6461f12f1cbe2cec60fa7de5fe
|
|
SIZE (dbus-1.12.20.tar.gz) = 2095511
|