Hello community, here is the log from the commit of package dbus-1 for openSUSE:Factory checked in at Wed Jan 5 15:49:02 CET 2011. -------- --- dbus-1/dbus-1.changes 2010-11-08 15:55:23.000000000 +0100 +++ /mounts/work_src_done/STABLE/dbus-1/dbus-1.changes 2011-01-02 14:18:54.000000000 +0100 @@ -1,0 +2,13 @@ +Sun Jan 2 12:54:14 UTC 2011 - javier@opensuse.org + +- Update to 1.4.1 + + Fix for CVE-2010-4352: sending messages with excessively-nested + variants can crash the bus. The existing restriction to 64-levels + of nesting previously only applied to the static type signature; + now it also applies to dynamic nesting using variants. Thanks to + Rémi Denis-Courmont for discoving this issue. + + Various bug fixes. + + For details, see + http://lists.freedesktop.org/archives/dbus/2010-December/013861.html + +------------------------------------------------------------------- dbus-1-x11.changes: same change calling whatdependson for head-i586 Old: ---- dbus-1.4.0.tar.bz2 New: ---- dbus-1.4.1.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dbus-1.spec ++++++ --- /var/tmp/diff_new_pack.s9IALS/_old 2011-01-05 15:40:07.000000000 +0100 +++ /var/tmp/diff_new_pack.s9IALS/_new 2011-01-05 15:40:07.000000000 +0100 @@ -1,7 +1,7 @@ # -# spec file for package dbus-1 (Version 1.4.0) +# spec file for package dbus-1 (Version 1.4.1) # -# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -26,8 +26,8 @@ # COMMON1-BEGIN BuildRequires: doxygen libexpat-devel libzio pkgconfig BuildRequires: audit-devel -Version: 1.4.0 -Release: 4 +Version: 1.4.1 +Release: 1 AutoReqProv: on # bug437293 %ifarch ppc64 dbus-1-x11.spec: same change ++++++ dbus-1.4.0.tar.bz2 -> dbus-1.4.1.tar.bz2 ++++++ ++++ 42450 lines of diff (skipped) ++++++ dbus-1-x11.spec.in ++++++ --- /var/tmp/diff_new_pack.s9IALS/_old 2011-01-05 15:40:08.000000000 +0100 +++ /var/tmp/diff_new_pack.s9IALS/_new 2011-01-05 15:40:08.000000000 +0100 @@ -1,7 +1,7 @@ # -# spec file for package dbus-1-x11 (Version 1.2.16) +# spec file for package dbus-1-x11 (Version 1.4.1) # -# Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org