Hello community, here is the log from the commit of package dbus-1 for openSUSE:11.3 checked in at Sat Aug 6 00:27:56 CEST 2011. -------- --- old-versions/11.3/UPDATES/all/dbus-1/dbus-1-x11.changes 2011-03-30 17:48:41.000000000 +0200 +++ 11.3/dbus-1/dbus-1-x11.changes 2011-08-05 15:47:09.000000000 +0200 @@ -1,0 +2,8 @@ +Fri Aug 5 15:42:25 CEST 2011 - thoenig@suse.de + +- add patch: dbus-1.2.24-byteorder.patch + - Byte-swap foreign-endian messages correctly, preventing a + long-standing local DoS if foreign-endian messages are relayed + through the dbus-daemon (bnc#699712) + +------------------------------------------------------------------- dbus-1.changes: same change calling whatdependson for 11.3-i586 New: ---- dbus-1.2.24-byteorder.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dbus-1-x11.spec ++++++ --- /var/tmp/diff_new_pack.nX1pGo/_old 2011-08-06 00:27:38.000000000 +0200 +++ /var/tmp/diff_new_pack.nX1pGo/_new 2011-08-06 00:27:38.000000000 +0200 @@ -29,7 +29,7 @@ BuildRequires: doxygen libexpat-devel libzio pkgconfig BuildRequires: audit-devel Version: 1.2.24 -Release: 2.<RELEASE2> +Release: 2.<RELEASE3> AutoReqProv: on # bug437293 %ifarch ppc64 @@ -43,6 +43,7 @@ Source4: baselibs.conf Patch0: dbus-log-deny.patch Patch1: dbus-stackoverflow.patch +Patch2: dbus-1.2.24-byteorder.patch %if 0%{?suse_version} > 1100 %bcond_without selinux %else @@ -65,6 +66,7 @@ %setup -n dbus-%{version} -q %patch0 -p1 %patch1 -p1 +%patch2 -p1 %build autoreconf -fi ++++++ dbus-1.spec ++++++ --- /var/tmp/diff_new_pack.nX1pGo/_old 2011-08-06 00:27:38.000000000 +0200 +++ /var/tmp/diff_new_pack.nX1pGo/_new 2011-08-06 00:27:38.000000000 +0200 @@ -27,7 +27,7 @@ BuildRequires: doxygen libexpat-devel libzio pkgconfig BuildRequires: audit-devel Version: 1.2.24 -Release: 2.<RELEASE2> +Release: 2.<RELEASE5> AutoReqProv: on # bug437293 %ifarch ppc64 @@ -41,6 +41,7 @@ Source4: baselibs.conf Patch0: dbus-log-deny.patch Patch1: dbus-stackoverflow.patch +Patch2: dbus-1.2.24-byteorder.patch %if 0%{?suse_version} > 1100 %bcond_without selinux %else @@ -99,6 +100,7 @@ %setup -n dbus-%{version} -q %patch0 -p1 %patch1 -p1 +%patch2 -p1 %build autoreconf -fi ++++++ dbus-1.2.24-byteorder.patch ++++++ Index: dbus-1.2.24/dbus/dbus-marshal-header.c =================================================================== --- dbus-1.2.24.orig/dbus/dbus-marshal-header.c +++ dbus-1.2.24/dbus/dbus-marshal-header.c @@ -1462,14 +1462,20 @@ void _dbus_header_byteswap (DBusHeader *header, int new_order) { + unsigned char byte_order; + if (header->byte_order == new_order) return; + byte_order = _dbus_string_get_byte (&header->data, BYTE_ORDER_OFFSET); + _dbus_assert (header->byte_order == byte_order); + _dbus_marshal_byteswap (&_dbus_header_signature_str, 0, header->byte_order, new_order, &header->data, 0); + _dbus_string_set_byte (&header->data, BYTE_ORDER_OFFSET, new_order); header->byte_order = new_order; } ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org