"Fossies" - the Fresh Open Source Software Archive

Member "dbus-1.12.20/NEWS" (2 Jul 2020, 124765 Bytes) of package /linux/misc/dbus-1.12.20.tar.gz:


As a special service "Fossies" has tried to format the requested text file into HTML format (style: standard) with prefixed line numbers. Alternatively you can here view or download the uninterpreted source code file. See also the latest Fossies "Diffs" side-by-side code changes report for "NEWS": 1.12.18_vs_1.12.20.

    1 dbus 1.12.20 (2020-07-02)
    2 =========================
    3 
    4 The “temporary nemesis” release.
    5 
    6 Maybe security fixes:
    7 
    8 • On Unix, avoid a use-after-free if two usernames have the same
    9   numeric uid. In older versions this could lead to a crash (denial of
   10   service) or other undefined behaviour, possibly including incorrect
   11   authorization decisions if <policy group=...> is used.
   12   Like Unix filesystems, D-Bus' model of identity cannot distinguish
   13   between users of different names with the same numeric uid, so this
   14   configuration is not advisable on systems where D-Bus will be used.
   15   Thanks to Daniel Onaca.
   16   (dbus#305, dbus!166; Simon McVittie)
   17 
   18 Other fixes:
   19 
   20 • On Solaris and its derivatives, if a cmsg header is truncated, ensure
   21   that we do not overrun the buffer used for fd-passing, even if the
   22   kernel tells us to.
   23   (dbus#304, dbus!165; Andy Fiddaman)
   24 
   25 dbus 1.12.18 (2020-06-02)
   26 =========================
   27 
   28 The “telepathic vines” release.
   29 
   30 Denial of service fixes:
   31 
   32 • CVE-2020-12049: If a message contains more file descriptors than can
   33   be sent, close those that did get through before reporting error.
   34   Previously, a local attacker could cause the system dbus-daemon (or
   35   another system service with its own DBusServer) to run out of file
   36   descriptors, by repeatedly connecting to the server and sending fds that
   37   would get leaked.
   38   Thanks to Kevin Backhouse of GitHub Security Lab.
   39   (dbus#294, GHSL-2020-057; Simon McVittie)
   40 
   41 Other fixes:
   42 
   43 • Fix a crash when the dbus-daemon is terminated while one or more
   44   monitors are active (dbus#291, dbus!140; Simon McVittie)
   45 
   46 • The dbus-send(1) man page now documents --bus and --peer instead of
   47   the old --address synonym for --peer, which has been deprecated since
   48   the introduction of --bus and --peer in 1.7.6
   49   (fd.o #48816, dbus!115; Chris Morin)
   50 
   51 • Fix a wrong environment variable name in dbus-daemon(1)
   52   (dbus#275, dbus!122; Mubin, Philip Withnall)
   53 
   54 • Fix formatting of dbus_message_append_args example
   55   (dbus!126, Felipe Franciosi)
   56 
   57 • Avoid a test failure on Linux when built in a container as uid 0, but
   58   without the necessary privileges to increase resource limits
   59   (dbus!58, Debian #908092; Simon McVittie)
   60 
   61 • When building with CMake, cope with libX11 in a non-standard location
   62   (dbus!129, Tuomo Rinne)
   63 
   64 dbus 1.12.16 (2019-06-11)
   65 =========================
   66 
   67 The “tree cat” release.
   68 
   69 Security fixes:
   70 
   71 • CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1
   72   authentication for identities that differ from the user running the
   73   DBusServer. Previously, a local attacker could manipulate symbolic
   74   links in their own home directory to bypass authentication and connect
   75   to a DBusServer with elevated privileges. The standard system and
   76   session dbus-daemons in their default configuration were immune to this
   77   attack because they did not allow DBUS_COOKIE_SHA1, but third-party
   78   users of DBusServer such as Upstart could be vulnerable.
   79   Thanks to Joe Vennix of Apple Information Security.
   80   (dbus#269, Simon McVittie)
   81 
   82 dbus 1.12.14 (2019-05-17)
   83 =========================
   84 
   85 The “reclaimed floorboards” release.
   86 
   87 Enhancements:
   88 
   89 • Raise soft fd limit to match hard limit, even if unprivileged.
   90   This makes session buses with many clients, or with clients that make
   91   heavy use of fd-passing, less likely to suffer from fd exhaustion.
   92   (dbus!103, Simon McVittie)
   93 
   94 Fixes:
   95 
   96 • If a privileged dbus-daemon has a hard fd limit greater than 64K, don't
   97   reduce it to 64K, ensuring that we can put back the original fd limits
   98   when carrying out traditional (non-systemd) activation. This fixes a
   99   regression with systemd >= 240 in which system services inherited
  100   dbus-daemon's hard and soft limit of 64K fds, instead of the intended
  101   soft limit of 1K and hard limit of 512K or 1M.
  102   (dbus!103, Debian#928877; Simon McVittie)
  103 
  104 • Fix build failures caused by an AX_CODE_COVERAGE API change in newer
  105   autoconf-archive versions (dbus#249, dbus!88; Simon McVittie)
  106 
  107 • Fix build failures with newer autoconf-archive versions that include
  108   AX_-prefixed shell variable names (dbus#249, dbus!86; Simon McVittie)
  109 
  110 • Parse section/group names in .service files according to the syntax
  111   from the Desktop Entry Specification, rejecting control characters
  112   and non-ASCII in section/group names (dbus#208, David King)
  113 
  114 • Fix various -Wlogical-op issues that cause build failure with newer
  115   gcc versions (dbus#225, dbus!109; David King)
  116 
  117 • Don't assume we can set permissions on a directory, for the benefit of
  118   MSYS and Cygwin builds (dbus#216, dbus!110; Simon McVittie)
  119 
  120 • Don't overwrite PKG_CONFIG_PATH and related environment variables when
  121   the pkg-config-based version of DBus1Config is used in a CMake project
  122   (dbus#267, dbus!96; Clemens Lang)
  123 
  124 dbus 1.12.12 (2018-12-04)
  125 =========================
  126 
  127 The “draconic disciple” release.
  128 
  129 dbus version control is now hosted on freedesktop.org's Gitlab
  130 installation, and bug reports and feature requests have switched from
  131 Bugzilla bugs (indicated by "fd.o #nnn") to Gitlab issues ("dbus#nnn")
  132 and merge requests ("dbus!nnn").
  133 
  134 Enhancements:
  135 
  136 • Reference the freedesktop.org Code of Conduct (Simon McVittie)
  137 
  138 Fixes:
  139 
  140 • Stop the dbus-daemon leaking memory (an error message) if delivering
  141   the message that triggered auto-activation is forbidden. This is
  142   technically a denial of service because the dbus-daemon will
  143   run out of memory eventually, but it's a very slow and noisy one,
  144   because all the rejected messages are also very likely to have
  145   been logged to the system log, and its scope is typically limited by
  146   the finite number of activatable services available.
  147   (dbus#234, Simon McVittie)
  148 
  149 • Remove __attribute__((__malloc__)) attribute on dbus_realloc(),
  150   which does not meet the criteria for that attribute in gcc 4.7+,
  151   potentially leading to miscompilation (fd.o #107741, Simon McVittie)
  152 
  153 • Fix some small O(1) memory leaks (fd.o #107320, Simon McVittie)
  154 
  155 • Fix printf formats for pointer-sized integers on 64-bit Windows
  156   (fd.o #105662, Ralf Habacker)
  157 
  158 • Always use select()-based poll() emulation on Darwin-based OSs
  159   (macOS, etc.) and on Interix, similar to what libcurl does
  160   (dbus#232, dbus!19; Simon McVittie)
  161 
  162 • Extend a test timeout to avoid spurious failures in CI
  163   (dbus!26, Simon McVittie)
  164 
  165 Tests and CI:
  166 
  167 • Add Travis-CI builds for 64-bit Windows using mingw-w64
  168   (fd.o #105662, Ralf Habacker)
  169 
  170 • Add Gitlab-CI integration (fd.o #108177, Simon McVittie)
  171 
  172 dbus 1.12.10 (2018-08-02)
  173 =========================
  174 
  175 The “beam deflection” release.
  176 
  177 Fixes:
  178 
  179 • Prevent reading up to 3 bytes beyond the end of a truncated message.
  180   This could in principle be an information leak or denial of service
  181   on the system bus, but is not believed to be exploitable to crash
  182   the system bus or leak interesting information in practice.
  183   (fd.o #107332, Simon McVittie)
  184 
  185 • Fix build with gcc 8 -Werror=cast-function-type
  186   (fd.o #107349, Simon McVittie)
  187 
  188 • Fix warning from gcc 8 about suspicious use of strncpy() when
  189   populating struct sockaddr_un (fd.o #107350, Simon McVittie)
  190 
  191 • Fix a minor memory leak when a DBusServer listens on a new address
  192   (fd.o #107194, Simon McVittie)
  193 
  194 • Fix an invalid NULL argument to rmdir() if a nonce-tcp DBusServer
  195   runs out of memory (fd.o #107194, Simon McVittie)
  196 
  197 • Don't use misleading errno-derived error names if getaddrinfo() or
  198   getnameinfo() fails with a code other than EAI_SYSTEM
  199   (fd.o #106395, Simon McVittie)
  200 
  201 • Skip tests that require working TCP if we are in a container environment
  202   where 127.0.0.1 cannot be resolved (fd.o #106812, Simon McVittie)
  203 
  204 dbus 1.12.8 (2018-04-30)
  205 ========================
  206 
  207 The “golden super-velociraptor” release.
  208 
  209 Enhancements:
  210 
  211 • The Devhelp documentation index is now in version 2 format
  212   (fd.o #106186, Simon McVittie)
  213 
  214 • Give the dbus-daemon man page some scarier warnings about
  215   <allow_anonymous/> and non-local TCP, which are insecure and should
  216   not be used, particularly for the standard system and session buses
  217   (fd.o #106004, Simon McVittie)
  218 
  219 Fixes:
  220 
  221 • Fix installation of Ducktype documentation with newer yelp-build
  222   versions (fd.o #106171, Simon McVittie)
  223 
  224 dbus 1.12.6 (2018-03-01)
  225 ========================
  226 
  227 The “just the one swan, actually” release.
  228 
  229 Fixes:
  230 
  231 • Increase system dbus-daemon's RLIMIT_NOFILE rlimit before it drops
  232   privileges, because it won't have permission afterwards. This fixes a
  233   regression in dbus 1.10.18 and 1.11.0 which made the standard system bus
  234   more susceptible to deliberate or accidental denial of service.
  235   (fd.o #105165, David King)
  236 
  237 dbus 1.12.4 (2018-02-08)
  238 ========================
  239 
  240 The “Stria Campania 115” release.
  241 
  242 Fixes:
  243 
  244 • When iterating the DBusConnection while blocking on a pending call,
  245   don't wait for I/O if that pending call already has a result; and make
  246   sure that whether it has a result is propagated in a thread-safe way.
  247   This prevents certain multi-threaded calling patterns from blocking
  248   until their timeout even when they should have succeeded sooner.
  249   (fd.o #102839; Manish Narang, Michael Searle)
  250 
  251 • Report the correct error if OOM is reached while trying to listen
  252   on a TCP socket (fd.o #89104, Simon McVittie)
  253 
  254 • Fix assertion failures in recovery from OOM while setting up a
  255   DBusServer (fd.o #89104, Simon McVittie)
  256 
  257 • Add a missing space to a warning message (fd.o #103729, Thomas Zajic)
  258 
  259 • Expand ${bindir} correctly when pkg-config is asked for dbus_daemondir
  260   (fd.o #104265, Benedikt Heine)
  261 
  262 • On Linux systems with systemd < 237, if ${localstatedir}/dbus doesn't
  263   exist, create it before trying to create ${localstatedir}/dbus/machine-id
  264   (fd.o #104577, Chris Lesiak)
  265 
  266 • Fix escaping in dbus-api-design document (fd.o #104925, Philip Withnall)
  267 
  268 dbus 1.12.2 (2017-11-13)
  269 ========================
  270 
  271 The “spider pumpkin” release.
  272 
  273 Enhancements:
  274 
  275 • Log a warning if a new connection cannot be accepted due to an
  276   out-of-memory condition or failure to identify its AppArmor or
  277   SELinux context (fd.o #103592, Simon McVittie)
  278 
  279 Fixes:
  280 
  281 • Make use of $(MKDIR_P) compatible with install-sh, fixing build when a
  282   GNU-compatible `mkdir -p` is not available (fd.o #103521, ilovezfs)
  283 
  284 • When building for Windows with Autotools, avoid `echo -e`, fixing
  285   cross-compilation on non-GNU platforms like macOS
  286   (fd.o #103493, Tony Theodore)
  287 
  288 • Fix crashes in the server side of the nonce-tcp: transport under
  289   various error conditions. This transport should normally only be used
  290   on Windows, where AF_UNIX sockets are unavailable; the unix: transport
  291   is the only one recommended for production use on Unix platforms.
  292   (fd.o #103597, Simon McVittie)
  293 
  294 Internal changes:
  295 
  296 • Improve test coverage on Travis-CI (Simon McVittie)
  297 
  298 dbus 1.12.0 (2017-10-30)
  299 ========================
  300 
  301 The “gingerbread skull” release.
  302 
  303 1.12.x is a new stable branch, recommended for use in OS
  304 distributions.
  305 
  306 Summary of major changes between 1.10.x and 1.12.0
  307 --------------------------------------------------
  308 
  309 Dependencies:
  310 
  311 • Expat >= 2.1.0 is required.
  312 • GLib >= 2.40 is required if full test coverage is enabled.
  313 • [Linux] libselinux >= 2.0.86 is required if SELinux support is
  314   enabled.
  315 • [Unix] dbus now requires an <inttypes.h> that defines C99 constants
  316   such as PRId64 and PRIu64, except when building for Windows.
  317 • [Autotools] Building from git (but not from tarballs) with Autotools
  318   now requires macros from the GNU Autoconf Archive.
  319 • [CMake] Builds done using CMake now require CMake 3.0.2.
  320 
  321 Build-time configuration changes:
  322 
  323 • Expat is now found using pkg-config. See the release notes for
  324   1.11.14.
  325 • The --disable-compiler-optimisations and --enable-compiler-coverage
  326   options no longer exist.  See the release notes for 1.11.4 and 1.11.8.
  327 • [Unix] The --enable-abstract-sockets and --disable-abstract-sockets
  328   options no longer exist. See the release notes for 1.11.20.
  329 • [Unix] Flag files in /var/run/console/${username} are no longer
  330   checked for at_console by default. See the release notes for 1.11.18.
  331 • [Unix, Cygwin] Init scripts are no longer provided by upstream dbus,
  332   and packagers will now need to add these downstream (most already do).
  333   See the release notes for 1.11.18.
  334 • [Unix] The process ID file no longer has a different default location
  335   on Red Hat derivatives. See the release notes for 1.11.18.
  336 • [Unix] ${runstatedir} is now independent of ${localstatedir} with
  337   recent Autotools versions. See the release notes for 1.11.16.
  338 • [Windows] The WINDRES variable is no longer used. See the release
  339   notes for 1.11.22.
  340 
  341 Deprecations:
  342 
  343 • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  344   See the release notes for spec version 0.31 (in dbus 1.11.14).
  345 • [Unix] Flag files in /var/run/console/${username} are deprecated.
  346   See the release notes for 1.11.18.
  347 
  348 New APIs:
  349 
  350 • <allow> and <deny> rules in dbus-daemon configuration can now
  351   include send_broadcast="true", send_broadcast="false",
  352   max_unix_fds="N", min_unix_fds="N" (for some integer N).
  353   See the release notes for 1.11.18.
  354 • dbus_try_get_local_machine_id() is like
  355   dbus_get_local_machine_id(), but returns a DBusError.
  356 • New APIs around DBusMessageIter to simplify cleanup.
  357   See the release notes for 1.11.16.
  358 • The message bus daemon now implements the standard Introspectable,
  359   Peer and Properties interfaces. See the release notes for
  360   dbus 1.11.14 and spec version 0.31.
  361 • DTDs for introspection XML and bus configuration are installed.
  362 • dbus can be compiled to be relocatable, making it more suitable for
  363   binary bundling with other software. On Windows, this is on by
  364   default.
  365 • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  366   never uses Linux abstract sockets, which is advantageous for
  367   containers. On non-Linux it is equivalent to unix:tmpdir=….
  368   See the release notes for dbus 1.11.14 and spec version 0.31.
  369 • [Unix] New option "dbus-launch --exit-with-x11".
  370 • [Unix] Session managers can create transient .service files in
  371   $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  372 • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  373 
  374 Miscellaneous behaviour changes:
  375 
  376 • [Unix] The session bus now logs to syslog if it was started by
  377   dbus-launch.
  378 • [Unix] Internal warnings are logged to syslog if configured.
  379 • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  380   or to stderr.
  381 
  382 Changes since 1.11.22 release candidate
  383 ---------------------------------------
  384 
  385 Standard stable-branch changes:
  386 
  387 • Disable warnings about use of deprecated functions (Simon McVittie)
  388 
  389 Fixes:
  390 
  391 • Don't distribute files generated by ./configure in the source tarball
  392   (fd.o #103420, Simon McVittie)
  393 
  394 Internal changes:
  395 
  396 • Remove some unused files from the git repository
  397   (fd.o #103420, Simon McVittie)
  398 
  399 D-Bus 1.11.22 (2017-10-23)
  400 ==========================
  401 
  402 The “fire surface” release.
  403 
  404 This is the first release-candidate for the 1.12.0 stable release.
  405 
  406 Build-time configuration changes:
  407 
  408 • When building for Windows with Autotools, setting the WINDRES variable
  409   no longer works to select a non-standard resource compiler. Use
  410   libtool's standard RC variable instead, for example
  411   "./configure RC=i686-w64-mingw32-windres"
  412 
  413 Dependencies:
  414 
  415 • Builds done using CMake now require CMake 3.0.2.
  416 
  417 Enhancements:
  418 
  419 • When building for Windows, improve quality of metadata in
  420   libdbus-1-3.dll (fd.o #103015, Ralf Habacker)
  421 
  422 Fixes:
  423 
  424 • Fix a typo "uint 16" in dbus-send(1) man page
  425   (fd.o #103075, David King)
  426 
  427 • When building for Windows, libdbus-1-3.dll always includes version
  428   information. Previously, this was missing if using CMake and any
  429   non-MSVC compiler. (fd.o #103015, Ralf Habacker)
  430 
  431 • Fix the build with MSVC, which regressed with the #102558 fix in
  432   1.11.20. (fd.o #102558, Ralf Habacker)
  433 
  434 Internal changes:
  435 
  436 • Simplify Windows resource embedding
  437   (fd.o #103015, Simon McVittie)
  438 
  439 D-Bus 1.11.20 (2017-10-03)
  440 ==
  441 
  442 The “wraith stun” release.
  443 
  444 Build-time configuration changes:
  445 
  446 • The --enable-abstract-sockets and --disable-abstract-sockets options
  447   no longer exist. Support for Linux's abstract AF_UNIX sockets is now
  448   unconditionally enabled on Linux and disabled everywhere else.
  449   (fd.o #34905, Simon McVittie)
  450 
  451 Enhancements:
  452 
  453 • Make slower tests less likely to time out, and improve diagnostics if
  454   tests do time out (fd.o #103009, Simon McVittie)
  455 
  456 • On Windows, don't compile an unused stub implementation of
  457   _dbus_set_signal_handler() (fd.o #103010, Simon McVittie)
  458 
  459 Fixes:
  460 
  461 • Be more careful to save and restore errno in POSIX async signal
  462   handlers (fd.o #103010, Simon McVittie)
  463 
  464 • On Windows, embed a manifest in dbus-update-activation-environment.exe
  465   so that the heuristics used for UAC do not assume it needs elevated
  466   privileges due to its name containing "update"
  467   (fd.o #102558, Ralf Habacker)
  468 
  469 • On Windows with Automake, embed version information in libdbus-1,
  470   as was meant to happen in all versions since 2009
  471   (fd.o #103015, Simon McVittie)
  472 
  473 D-Bus 1.11.18 (2017-09-25)
  474 ==
  475 
  476 The “vampire conquistador” release.
  477 
  478 Build-time configuration changes:
  479 
  480 • By default, dbus-daemon on Unix no longer checks for flag files
  481   /var/run/console/${username} created by the obsolete pam_console and
  482   pam_foreground PAM modules when deciding whether ${username} is
  483   currently at the console. The old default behaviour can be restored
  484   by specifying --with-console-auth-dir=/var/run/console in the
  485   recommended Autotools build system, or
  486   -DDBUS_CONSOLE_AUTH_DIR=/var/run/console in CMake. This feature is
  487   now deprecated, and will be removed in dbus 1.13 unless feedback via
  488   fd.o #101629 indicates that this would be problematic.
  489   (fd.o #101629, Simon McVittie)
  490 
  491 • LSB-style init scripts for Red Hat and Slackware, and a non-LSB init
  492   script for Cygwin, are no longer provided in the upstream dbus
  493   source. We recommend that distributors who support non-systemd service
  494   management should maintain their own init scripts or other service
  495   manager integration as part of their downstream packaging, similar to
  496   the way Debian distributes a Debian-specific LSB init script for dbus.
  497 
  498   The systemd unit continues to be maintained as part of the upstream
  499   dbus source, because it receives regular testing and maintenance.
  500 
  501   (fd.o #101706, Simon McVittie)
  502 
  503 • The process ID file created by the system bus is no longer influenced
  504   by the --with-init-scripts=redhat configure option or the presence of
  505   /etc/redhat-release at build time. If your OS's init script or other
  506   service management relies on the Red Hat-style pid file, it can be
  507   restored by specifying --with-system-pid-file=/run/messagebus.pid at
  508   configure time or using the <pidfile> directive in bus configuration.
  509 
  510   Note that the upstream-supplied systemd unit runs dbus-daemon with
  511   the --nopidfile option, so it does not normally write a pid file,
  512   regardless of whether the OS is Red-Hat-derived or not.
  513 
  514   (fd.o #101706, Simon McVittie)
  515 
  516 Enhancements:
  517 
  518 • <allow> and <deny> rules in dbus-daemon configuration can now
  519   include send_broadcast="true" or send_broadcast="false", which make
  520   the rule only match broadcast signals, or only match messages that
  521   are not broadcast signals, respectively.
  522   (fd.o #29853, Simon McVittie)
  523 
  524 • <allow> and <deny> rules can now be configured to apply only to
  525   messages with or without Unix file descriptors attached. This would
  526   typically be used in rules like these:
  527   <allow send_destination="..." max_unix_fds="0"/>
  528   <deny send_destination="..." min_unix_fds="1"/>
  529   <deny receive_sender="..." min_unix_fds="1"/>
  530   but can also be used to set a nonzero upper limit on the number of
  531   file descriptors:
  532   <allow send_destination="..." max_unix_fds="4"/>
  533   (fd.o #101848, Simon McVittie)
  534 
  535 • On Unix platforms, the DBUS_COOKIE_SHA1 authentication mechanism
  536   now respects the HOME environment variable on the client side, and
  537   on the server side when the uid attempting to connect is the same
  538   as the uid of the server. This allows the automated tests to pass in
  539   environments where the user's "official" home directory in /etc/passwd
  540   is nonexistent, such as Debian autobuilders.
  541   (fd.o #101960, Simon McVittie)
  542 
  543 Fixes:
  544 
  545 • When parsing dbus-daemon configuration, tell Expat not to use
  546   cryptographic-quality entropy as a salt for its hash tables: we trust
  547   the configuration files, so we are not concerned about algorithmic
  548   complexity attacks via hash table collisions. This prevents
  549   dbus-daemon --system from holding up the boot process (and causing
  550   early-boot system services like systemd, logind, networkd to time
  551   out) on entropy-starved embedded systems.
  552   (fd.o #101858, Simon McVittie)
  553 
  554 • Avoid a -Werror=declaration-after-statement build failure on Solaris
  555   (fd.o #102145, Alan Coopersmith)
  556 
  557 • On Unix platform, drop DBUS_SYSTEM_LOG_INFO messages from LOG_NOTICE
  558   to LOG_INFO, matching how we use this log level in practice
  559   (fd.o #102686, Simon McVittie)
  560 
  561 D-Bus 1.11.16 (2017-07-27)
  562 ==
  563 
  564 The “south facing garden” release.
  565 
  566 Build-time configuration changes:
  567 
  568 • The Autotools build system now supports varying ${runstatedir}
  569   independently of ${localstatedir}, if using an Autoconf version
  570   that has that feature; version 2.70 will eventually have this, but
  571   many Linux distributions add it to version 2.69 as a patch.
  572   A typical use is to set prefix=/usr, sysconfdir=/etc, localstatedir=/var
  573   and runstatedir=/run. (fd.o #101569, Simon McVittie)
  574 
  575 Enhancements:
  576 
  577 • New APIs DBUS_MESSAGE_ITER_INIT_CLOSED, dbus_message_iter_init_closed()
  578   and dbus_message_iter_abandon_container_if_open() simplify the
  579   single-exit-point ("goto out") style of resource cleanup. The API
  580   documentation around DBusMessageIter and containers has also been
  581   clarified. (fd.o #101568, Simon McVittie)
  582 
  583 Fixes:
  584 
  585 • Fix the implementation of re-enabling a timeout (again) so that its
  586   countdown is always restarted as intended. (fd.o #95619,
  587   Michal Koutný)
  588 
  589 • Make the dbus-daemon's Properties interface, as introduced in 1.11.14,
  590   available to all users on the system bus (fd.o #101700, Simon McVittie)
  591 
  592 • dbus_message_iter_append_basic() no longer leaks memory if it fails to
  593   append a file descriptor to a message. (fd.o #101568, Simon McVittie)
  594 
  595 • dbus_message_iter_open_container() no longer leaks memory if it runs out
  596   of memory. (fd.o #101568, Simon McVittie)
  597 
  598 • dbus_message_append_args_valist() no longer leaks memory if given an
  599   unsupported type. This situation is still considered to be a programming
  600   error which needs to be corrected by the user of libdbus.
  601   (fd.o #101568, Simon McVittie)
  602 
  603 • dbus_message_iter_append_basic() and dbus_message_iter_open_container()
  604   will no longer report that their arguments were invalid if they run out
  605   of memory at exactly the wrong time. (fd.o #101568, Simon McVittie)
  606 
  607 • Ensure that tests fail if they would otherwise have tried to connect to
  608   the real session bus (fd.o #101698, Simon McVittie)
  609 
  610 • Make build-time tests cope with finding Python 3, but not Python 2
  611   (fd.o #101716, Simon McVittie)
  612 
  613 Internal changes relevant to dbus developers:
  614 
  615 • DBusVariant is a new mechanism to copy single values from a message into
  616   a buffer without copying the entire message (fd.o #101568, Simon McVittie)
  617 
  618 • DBUS_SYSTEM_LOG_FATAL has been replaced by DBUS_SYSTEM_LOG_ERROR.
  619   Logging an ERROR message does not make the process exit; the caller
  620   is responsible for calling abort() or exit(), whichever is more appropriate.
  621   (fd.o #101568, Simon McVittie)
  622 
  623 • Better test coverage (fd.o #101568, Simon McVittie)
  624 
  625 D-Bus 1.11.14 (2017-06-29)
  626 ==
  627 
  628 The “irrational fear of bees” release.
  629 
  630 Dependencies:
  631 
  632 • Expat >= 2.1.0 is always required
  633 • libselinux >= 2.0.86 is required if SELinux support is enabled
  634 • GLib >= 2.40 is required if full test coverage is enabled
  635 
  636 Build-time configuration changes:
  637 
  638 • We now use pkg-config to find libexpat in Autotools builds. This requires
  639   Expat 2.1.0 (March 2012) or later. In particular, this should remove the
  640   need to configure with LDFLAGS=-L/usr/local/lib on OpenBSD, which can
  641   itself cause compilation failures.
  642 
  643   As with all pkg-config-based configure checks, you can use
  644   PKG_CONFIG_PATH=/whatever/lib/pkgconfig to find expat.pc in a
  645   non-standard prefix, or EXPAT_CFLAGS="-I/whatever/include" and
  646   EXPAT_LIBS="-L/whatever/lib -lexpat" to avoid needing a .pc file
  647   at all.
  648 
  649   (fd.o #69801, Simon McVittie)
  650 
  651 • Similarly, we now use pkg-config to find libselinux. Version 2.0.86
  652   is required due to the removal of explicit refcounting for SIDs.
  653   (fd.o #100912, Laurent Bigonville)
  654 
  655 Behaviour changes:
  656 
  657 • Previously, /etc/machine-id could be copied to /var/lib/dbus/machine-id
  658   as a side-effect of a sufficiently privileged process merely reading the
  659   machine ID. It is no longer copied as a side-effect of reading.
  660   Running dbus-uuidgen --ensure, which should be done after installing dbus,
  661   continues to copy /etc/machine-id to /var/lib/dbus/machine-id if the
  662   former exists and the latter does not.
  663   (fd.o #101257, Simon McVittie)
  664 
  665 • The undocumented Verbose interface, and the GetAllMatchRules method on
  666   the undocumented Stats interface, must now be used via the object path
  667   /org/freedesktop/DBus. Previously, they existed on all object paths.
  668   (fd.o #101257, Simon McVittie)
  669 
  670 • AddMatch() with a match rule containing eavesdrop='true' will now fail
  671   unless called by either the same user as the dbus-daemon, or Unix uid 0
  672   (root), matching the restrictions applied to the newer BecomeMonitor()
  673   method. On the session bus this has no practical effect. On the system
  674   bus this will prevent certain configurations that already did not
  675   work well in practice. (fd.o #101567, Simon McVittie)
  676 
  677 Enhancements:
  678 
  679 • D-Bus Specification version 0.31
  680   · Don't require implementation-specific search paths to be lowest
  681     priority
  682   · Correct regex syntax for optionally-escaped bytes in addresses so it
  683     includes hyphen-minus, forward slash and underscore as intended
  684   · Describe all message bus methods in the same section
  685   · Clarify the correct object path for method calls to the message bus
  686     (/org/freedesktop/DBus, DBUS_PATH_DBUS in the reference implementation)
  687   · Document that the message bus implements Introspectable, Peer and
  688     Properties
  689   · Add new Features and Interfaces properties for message bus
  690     feature-discovery
  691   · Add unix:dir=..., which resembles unix:tmpdir=... but never uses
  692     abstract sockets
  693   · Don't require eavesdrop='true' to be accepted from connections not
  694     sufficiently privileged to use it successfully
  695   · Formally deprecate eavesdropping in favour of BecomeMonitor
  696   (fd.o #99825, #100686, #100795, #101256, #101257, #101567;
  697   Simon McVittie, Tom Gundersen)
  698 
  699 • Implement the Properties and Peer interfaces in dbus-daemon
  700   (fd.o #101257, Simon McVittie)
  701 
  702 • New function dbus_try_get_local_machine_id() is like
  703   dbus_get_local_machine_id(), but returning a DBusError. Other code
  704   that needs the machine ID will now report a recoverable error (instead
  705   of logging to stderr and aborting) if no machine ID is available.
  706   Generating a machine ID is still considered to be a required part of
  707   installing dbus correctly. (fd.o #13194, Simon McVittie)
  708 
  709 • Implement GetConnectionSELinuxSecurityContext("org.freedesktop.DBus")
  710   (fd.o #101315, Laurent Bigonville)
  711 
  712 • Avoid deprecated API calls when using SELinux
  713   (fd.o #100912, Laurent Bigonville)
  714 
  715 • Switch a test from the deprecated g_test_trap_fork() to
  716   g_test_trap_subprocess(), for Windows support and better robustness
  717   on Unix (fd.o #101362, Simon McVittie)
  718 
  719 • On systemd systems, if ${localstatedir}/dbus/machine-id doesn't exist,
  720   instruct systemd-tmpfiles to make it a symbolic link to /etc/machine-id.
  721   This prevents the two files from going out of sync on stateless or live
  722   images without needing to run dbus-uuidgen, and supports older D-Bus
  723   implementations that do not necessarily read /etc/machine-id themselves.
  724   (fd.o #101570, Simon McVittie)
  725 
  726 • Implement unix:dir=..., which resembles unix:tmpdir=... but never uses
  727   abstract sockets. This is preferable when used with Linux containers.
  728   (fd.o #101567, Simon McVittie)
  729 
  730 Fixes:
  731 
  732 • Fix a reference leak when blocking on a pending call on a connection
  733   that has been disconnected (fd.o #101481, Shin-ichi MORITA)
  734 
  735 • Don't put timestamps in the Doxygen-generated documentation,
  736   or hard-code the build directory into builds with embedded tests,
  737   for reproducible builds (fd.o #100692, Simon McVittie)
  738 
  739 • Fix some integration test issues (fd.o #100686, Simon McVittie)
  740 
  741 • Fix memory leaks in the tests (fd.o #101257, Simon McVittie)
  742 
  743 • If we somehow get an autolaunch address with multiple semicolon-separated
  744   components, and they don't work, don't invalidly "pile up" errors
  745   (fd.o #101257, Simon McVittie)
  746 
  747 Documentation:
  748 
  749 • Update git URIs in HACKING document to sync up with cgit.freedesktop.org
  750   (fd.o #100715, Simon McVittie)
  751 
  752 D-Bus 1.11.12 (2017-04-07)
  753 ==
  754 
  755 The “it's something humans do” release.
  756 
  757 Enhancements:
  758 
  759 • The session dbus-daemon now supports transient .service files
  760   in $XDG_RUNTIME_DIR/dbus-1/services. Unlike the other standard
  761   service directories, this directory is not monitored with inotify
  762   or similar, and the service files must be named exactly
  763   ${bus_name}.service. (fd.o #99825, Simon McVittie)
  764 
  765 • dbus can be configured with --enable-relocation when building with
  766   Autotools, or with -DDBUS_RELOCATABLE=ON when building with cmake,
  767   to make the pkg-config metadata relocatable. This is useful for
  768   non-standard prefixes, and in particular for Windows installations.
  769   However, it is not recommended for system-wide installations into
  770   /usr, because it interferes with pkg-config's ability to filter out
  771   compiler default linker directories.
  772 
  773   With Autotools, the default is --enable-relocation when building
  774   for Windows or --disable-relocation otherwise. With CMake, the default
  775   is -DDBUS_RELOCATABLE=ON.
  776 
  777   (fd.o #99721; Ralf Habacker, Simon McVittie)
  778 
  779 • Users of CMake ≥ 2.6 can now link to libdbus without providing their
  780   own FindDBus.cmake macros, whether dbus was compiled with Autotools
  781   or with CMake. See the end of README.cmake for more information.
  782   (fd.o #99721; Ralf Habacker, Simon McVittie)
  783 
  784 Fixes:
  785 
  786 • Always read service file directories in the intended order
  787   (fd.o #99825, Simon McVittie)
  788 
  789 • When tests are skipped, don't try to kill nonexistent process 0
  790   (fd.o #99825, Simon McVittie)
  791 
  792 • Avoid valgrind false positives (fd.o #88808, Philip Withnall)
  793 
  794 • Fix a harmless read overflow and some memory leaks in a unit test
  795   (fd.o #100568, Philip Withnall)
  796 
  797 • Fix some typos in test code
  798   (fd.o #99999, Coverity #141876, #141877; Philip Withnall)
  799 
  800 • Clarify the roles of /etc/dbus-1/s*.d and /usr/share/dbus-1/s*.d
  801   in documentation (fd.o #99901, Philip Withnall)
  802 
  803 • Fix and enable compiler warnings related to -Wswitch
  804   (fd.o #98191; Thomas Zimmermann, Simon McVittie)
  805 
  806 • Fix writing off the end of a fd_set when testing with valgrind
  807   (fd.o #99839, Philip Withnall)
  808 
  809 D-Bus 1.11.10 (2017-02-16)
  810 ==
  811 
  812 The “purple hair gives you telekinesis?” release.
  813 
  814 Dependencies:
  815 
  816 • AppArmor support requires at least libapparmor 2.8.95, reduced
  817   from 2.10 in previous versions. One test requires 2.10 and is
  818   skipped if building with an older version.
  819 
  820 Enhancements:
  821 
  822 • Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
  823   stable and Debian testing in addition to the older Ubuntu that is
  824   the default (fd.o #98889, Simon McVittie)
  825 
  826 • Avoid some deprecated CMake functions (fd.o #99586, Ralf Habacker)
  827 
  828 • Silence many -Wswitch-enum and -Wswitch-default warnings
  829   (fd.o #98191; Thomas Zimmermann, Simon McVittie)
  830 
  831 • Install a sysusers.d snippet so `dbus-daemon --system` can be used
  832   with an unpopulated /etc (fd.o #99162, Lennart Poettering)
  833 
  834 • Install pkg-config metadata on Unix even if building with CMake
  835   (fd.o #99752, Ralf Habacker)
  836 
  837 • Exclude auth mechanisms from REJECTED message if they are supported
  838   in the code but but configured to be disallowed (fd.o #99621,
  839   Ralf Habacker)
  840 
  841 Fixes:
  842 
  843 • Prevent symlink attacks in the nonce-tcp transport on Unix that could
  844   allow an attacker to overwrite a file named "nonce", in a directory
  845   that the user running dbus-daemon can write, with a random value
  846   known only to the user running dbus-daemon. This is unlikely to be
  847   exploitable in practice, particularly since the nonce-tcp transport
  848   is really only useful on Windows.
  849 
  850   On Unix systems we strongly recommend using only the unix: and systemd:
  851   transports, together with EXTERNAL authentication. These are the only
  852   transports and authentication mechanisms enabled by default.
  853 
  854   (fd.o #99828, Simon McVittie)
  855 
  856 • Avoid symlink attacks in the "embedded tests", which are not enabled
  857   by default and should never be enabled in production builds of dbus.
  858   (fd.o #99828, Simon McVittie)
  859 
  860 • Fix the implementation of re-enabling a timeout so that its
  861   countdown is restarted as intended, instead of continually
  862   decreasing. (fd.o #95619; Michal Koutný, Simon McVittie)
  863 
  864 • When receiving a message with file descriptors, do not start reading
  865   the beginning of the next message, so that only one such message
  866   is processed at a time. In conjunction with the fix for #95619
  867   this means that processes sending many file descriptors, such as
  868   systemd-logind on a system that receives very rapid ssh connections,
  869   are not treated as abusive and kicked off the bus. Revert the previous
  870   workaround that special-cased uid 0.
  871   (fd.o #95263, LP#1591411; Simon McVittie)
  872 
  873 • Do not require TMPDIR, TEMP or TMP to be set when cross-compiling
  874   for Windows with CMake (fd.o #99586, Ralf Habacker)
  875 
  876 • Do not set Unix-specific variables when targeting Windows
  877   (fd.o #99586, Ralf Habacker)
  878 
  879 • Install Unix executables to ${CMAKE_INSTALL_PREFIX}/bin as intended,
  880   not ${CMAKE_INSTALL_PREFIX}/lib (fd.o #99752, Ralf Habacker)
  881 
  882 • Use relative install locations in CMake on Unix to respect DESTDIR,
  883   and use GNU-style install layout (fd.o #99721, #99752; Ralf Habacker)
  884 
  885 • Install dbus-arch-deps.h correctly when using CMake
  886   (fd.o #99586, #99721; Ralf Habacker)
  887 
  888 • Improve argument validation for `dbus-test-tool spam`
  889   (ffd.o #99693, Coverity #54759; Philip Withnall)
  890 
  891 • Don't shift by a negative integer if a hash table becomes monstrously
  892   large (fd.o #99641, Coverity #54682; Philip Withnall)
  893 
  894 • Don't leak LSM label if dbus-daemon runs out of memory when dealing with
  895   a new connection (fd.o #99612, Coverity #141058; Philip Withnall)
  896 
  897 • Remove an unnecessary NULL check
  898   (fd.o #99642, Coverity #141062; Philip Withnall)
  899 
  900 • Improve error handling in unit tests and dbus-send
  901   (fd.o #99643, #99694, #99712, #99722, #99723, #99724, #99758,
  902   #99759, #99793, Coverity #54688, #54692, #54693, #54697, #54701,
  903   #54710, #54711, #54714, #54715, #54718, #54721, #54724, #54726,
  904   #54730, #54740, #54822, #54823, #54824, #54825; Philip Withnall)
  905 
  906 • Do not print verbose messages' timestamps to stderr if the actual message
  907   has been redirected to the Windows debug port (fd.o #99749, Ralf Habacker)
  908 
  909 D-Bus 1.11.8 (2016-11-28)
  910 ==
  911 
  912 The “panics in the face of breakfast foods” release.
  913 
  914 Build-time configuration:
  915 
  916 • The new --enable-debug configure option provides an easy way to
  917   enable debug symbols, disable optimization and/or enable profiling.
  918 
  919 • The --enable-compile-warnings configure option can be used to control
  920   compiler warnings.
  921 
  922 • The --disable-compiler-optimisations configure option is no longer
  923   supported. Use --enable-debug=yes or CFLAGS=-O0 instead.
  924 
  925 Enhancements:
  926 
  927 • D-Bus Specification version 0.30
  928   · Define the jargon term "activation" more clearly
  929   · Define the jargon term "auto-starting", which is one form of activation
  930   · Document the optional SystemdService key in service files
  931   · Use versioned interface and bus names in most examples
  932   · Clarify intended behaviour of Properties.GetAll
  933   (fd.o #36190, fd.o #98671; Philip Withnall, Simon McVittie)
  934 
  935 • Fix and enable a lot of compiler warnings to improve future code
  936   quality. This might incidentally also fix some environment variable
  937   accesses on OS X.
  938   · In particular, printf-style functions in the libdbus API are now annotated
  939     with __attribute__((__format__(__printf__, *, *))) when compiling with
  940     gcc or clang. This might make printf bugs in other software visible
  941     at compile time.
  942   (fd.o #97357, fd.o #98192, fd.o #98195, fd.o #98658;
  943   Thomas Zimmermann, Simon McVittie)
  944 
  945 • When running with AppArmor mediation (for example using Ubuntu's patched
  946   Linux kernel), clients can no longer auto-start services unless they would
  947   have been able to send the auto-starting message to the service after it
  948   starts. StartServiceByName() is unaffected, and continues to be allowed by
  949   default in AppArmor's <abstractions/dbus-strict> and
  950   <abstractions/dbus-session-strict>. (fd.o #98666, Simon McVittie)
  951 
  952 Fixes:
  953 
  954 • Work around an undesired effect of the fix for CVE-2014-3637
  955   (fd.o #80559), in which processes that frequently send fds, such as
  956   logind during a flood of new PAM sessions, can get disconnected for
  957   continuously having at least one fd "in flight" for too long;
  958   dbus-daemon interprets that as a potential denial of service attack.
  959   The workaround is to disable that check for uid 0 process such as
  960   logind, with a message in the system log. The bug remains open while
  961   we look for a more general solution.
  962   (fd.o #95263, LP#1591411; Simon McVittie)
  963 
  964 • Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
  965   was disabled at compile time. That test is not expected to work
  966   in that configuration. (fd.o #98665, Simon McVittie)
  967 
  968 D-Bus 1.11.6 (2016-10-10)
  969 ==
  970 
  971 The “darkly whimsical” release.
  972 
  973 Security fixes:
  974 
  975 • Do not treat ActivationFailure message received from root-owned systemd
  976   name as a format string. In principle this is a security vulnerability,
  977   but we do not believe it is exploitable in practice, because only
  978   privileged processes can own the org.freedesktop.systemd1 bus name, and
  979   systemd does not appear to send activation failures that contain "%".
  980 
  981   Please note that this probably *was* exploitable in dbus versions
  982   older than 1.6.30, 1.8.16 and 1.9.10 due to a missing check which at
  983   the time was only thought to be a denial of service vulnerability
  984   (CVE-2015-0245). If you are still running one of those versions,
  985   patch or upgrade immediately.
  986 
  987   (fd.o #98157, Simon McVittie)
  988 
  989 Enhancements:
  990 
  991 • D-Bus Specification version 0.29
  992   · Recommend not using '/' for object paths (fd.o #37095, Philip Withnall)
  993   · Allow <annotation> in <arg> elements (fd.o #86162, Philip Withnall)
  994 
  995 • Log to syslog when we exceed various anti-DoS limits, and add test
  996   coverage for them (fd.o #86442, Simon McVittie)
  997 
  998 • Improve syslog handling so that _dbus_warn() and similar warnings
  999   go to syslog, add dbus-daemon --syslog|--nosyslog|--syslog-only options,
 1000   and log to syslog (instead of /dev/null) when dbus-daemon is started by
 1001   dbus-launch. (fd.o #97009, Simon McVittie)
 1002 
 1003 • Install introspect.dtd and busconfig.dtd to ${datadir}/xml/dbus-1
 1004   (fd.o #89011, Philip Withnall)
 1005 
 1006 • When logging messages about service activation, mention which peer
 1007   requested the activation (fd.o #68212, Philip Withnall)
 1008 
 1009 • On Linux, mention the LSM label (if available) whenever we print
 1010   debug information about a peer (fd.o #68212, Philip Withnall)
 1011 
 1012 Other fixes:
 1013 
 1014 • Harden dbus-daemon against malicious or incorrect ActivationFailure
 1015   messages by rejecting them if they do not come from a privileged
 1016   process, or if systemd activation is not enabled
 1017   (fd.o #98157, Simon McVittie)
 1018 
 1019 • Avoid undefined behaviour when setting reply serial number without going
 1020   via union DBusBasicValue (fd.o #98035, Marc Mutz)
 1021 
 1022 • Fix CMake build for Unix platforms that do not have -lrt, such as Android,
 1023   or that do need -lsocket, such as QNX (fd.o #94096, Ralf Habacker)
 1024 
 1025 • autogen.sh: fail cleanly if autoconf fails (Simon McVittie)
 1026 
 1027 D-Bus 1.11.4 (2016-08-15)
 1028 ==
 1029 
 1030 The “copper pickaxe” release.
 1031 
 1032 Dependencies:
 1033 
 1034 • Building from git (but not from tarballs) now requires
 1035   macros from the GNU Autoconf Archive, for example the autoconf-archive
 1036   package in Debian or Fedora derivatives.
 1037 
 1038 Build-time configuration:
 1039 
 1040 • The option to enable coverage instrumentation has changed from
 1041   --enable-compiler-coverage to --enable-code-coverage.
 1042 
 1043 Enhancements:
 1044 
 1045 • D-Bus Specification version 0.28
 1046   · Clarify some details of serialization (fd.o #93382, Philip Withnall)
 1047 
 1048 • Increase listen() backlog of AF_UNIX sockets to the maximum possible,
 1049   minimizing failed connections under heavy load
 1050   (fd.o #95264, Lennart Poettering)
 1051 
 1052 • Add a new dbus-launch --exit-with-x11 option (fd.o #39197, Simon McVittie)
 1053 
 1054 • Use the same regression tests for subprocess starting on Unix and Windows
 1055   (fd.o #95191, Ralf Habacker)
 1056 
 1057 • Print timestamps and thread IDs in verbose messages
 1058   (fd.o #95191, Ralf Habacker)
 1059 
 1060 • On Unix, unify the various places that reopen stdin, stdout and/or stderr
 1061   pointing to /dev/null (fd.o #97008, Simon McVittie)
 1062 
 1063 • Use AX_CODE_COVERAGE instead of our own COMPILER_COVERAGE
 1064   (fd.o #88922, Thomas Zimmermann)
 1065 
 1066 Fixes:
 1067 
 1068 • On Windows, fix a memory leak in replacing the installation prefix
 1069   (fd.o #95191, Ralf Habacker)
 1070 
 1071 • On Linux, when dbus-daemon is run with reduced susceptibility to the
 1072   OOM killer (typically via systemd), do not let child processes inherit
 1073   that setting (fd.o #32851; Kimmo Hämäläinen, WaLyong Cho)
 1074 
 1075 • On Unix, make dbus-launch and dbus-daemon --fork work as intended
 1076   even if a parent process incorrectly starts them with stdin, stdout
 1077   and/or stderr closed (fd.o #97008, Simon McVittie)
 1078 
 1079 • Output valid shell syntax in ~/.dbus/session-bus/ if the bus address
 1080   contains a semicolon (fd.o #94746, Thiago Macieira)
 1081 
 1082 • Fix memory leaks and thread safety in subprocess starting on Windows
 1083   (fd.o #95191, Ralf Habacker)
 1084 
 1085 • Stop test-dbus-daemon incorrectly failing on platforms that cannot
 1086   discover the process ID of clients (fd.o #96653, Руслан Ижбулатов)
 1087 
 1088 • In tests that exercise correct handling of crashing D-Bus services,
 1089   suppress Windows crash handler (fd.o #95155; Yiyang Fei, Ralf Habacker)
 1090 
 1091 • Explicitly check for stdint.h (Ioan-Adrian Ratiu)
 1092 
 1093 • In tests, add an invalid DBusAuthState to avoid undefined behaviour
 1094   in some test cases (fd.o #93909, Nick Lewycky)
 1095 
 1096 • Add assertions to reassure a static analysis tool
 1097   (fd.o #93210, Deepika Aggarwal)
 1098 
 1099 • Be explicit about enum comparison when loading XML
 1100   (fd.o #93205, Deepika Aggarwal)
 1101 
 1102 • update-activation-environment: produce better diagnostics on error
 1103   (fd.o #96653, Simon McVittie)
 1104 
 1105 • Avoid various compiler warnings with gcc 6
 1106   (fd.o #97282; Thomas Zimmermann, Simon McVittie)
 1107 
 1108 • On Unix when configured to use the system log, report as "dbus-daemon",
 1109   not as "dbus" (fd.o #97009, Simon McVittie)
 1110 
 1111 • During unit tests, reduce the amount we write to the system log
 1112   (fd.o #97009, Simon McVittie)
 1113 
 1114 D-Bus 1.11.2 (2016-03-07)
 1115 ==
 1116 
 1117 The “pneumatic drill vs. Iron Maiden” release.
 1118 
 1119 Fixes:
 1120 
 1121 • Enable "large file support" on systems where it exists: dbus-daemon
 1122   is not expected to open large files, but it might need to stat files
 1123   that happen to have large inode numbers (fd.o #93545, Hongxu Jia)
 1124 
 1125 • Eliminate padding inside DBusMessageIter on 64-bit platforms,
 1126   which might result in a pedantic C compiler not copying the entire contents
 1127   of a DBusMessageIter; statically assert that this is not an ABI change
 1128   in practice (fd.o #94136, Simon McVittie)
 1129 
 1130 • Document dbus-test-tool echo --sleep-ms=N instead of incorrect --sleep=N
 1131   (fd.o #94244, Dmitri Iouchtchenko)
 1132 
 1133 • Correctly report test failures in C tests from run-test.sh
 1134   (fd.o #93379; amit tewari, Simon McVittie)
 1135 
 1136 • When tests are enabled, run all the marshal-validate tests, not just
 1137   the even-numbered ones (fd.o #93908, Nick Lewycky)
 1138 
 1139 • Correct the expected error from one marshal-validate test, which was
 1140   previously not run due to the above bug (fd.o #93908, Simon McVittie)
 1141 
 1142 • Fix compilation under CMake when embedded tests are disabled
 1143   (fd.o #94094, eric.hyer)
 1144 
 1145 Internal changes:
 1146 
 1147 • Fix all -Wpointer-sign (signed/unsigned mismatch) warnings, and enable the
 1148   warning (fd.o #93069; Ralf Habacker, Simon McVittie)
 1149 
 1150 • When building with CMake, use the same gcc/clang warnings as under Autotools,
 1151   or MSVC warnings that are broadly similar (fd.o #93069, Ralf Habacker)
 1152 
 1153 • test/name-test: make C tests produce TAP output and run them directly, not
 1154   via run-test.sh (fd.o #92899, Simon McVittie)
 1155 
 1156 • Under CMake when cross-compiling for Windows on Unix, run the tests
 1157   under Wine even if binfmt_misc support is not available
 1158   (fd.o #88966, Ralf Habacker)
 1159 
 1160 • The DBUS_USE_TEST_BINARY environment variable is no longer used by builds with
 1161   embedded tests; DBUS_TEST_DBUS_LAUNCH replaces it (fd.o #92899, Simon McVittie)
 1162 
 1163 • Factor out some functions that will be needed in future for a Windows
 1164   implementation of dbus-run-session (fd.o #92899, Ralf Habacker)
 1165 
 1166 D-Bus 1.11.0 (2015-12-02)
 1167 ==
 1168 
 1169 The “peppermint deer” release.
 1170 
 1171 Dependencies:
 1172 
 1173 • On non-Windows platforms, dbus now requires an <inttypes.h> that defines
 1174   C99 constants such as PRId64 and PRIu64.
 1175 
 1176 Enhancements:
 1177 
 1178 • D-Bus Specification version 0.27
 1179   · Specify that services should not reply if NO_REPLY_EXPECTED was used
 1180     (fd.o #75749, Lars Uebernickel)
 1181 
 1182 • Add a script to do continuous-integration builds, and metadata to run it
 1183   on travis-ci.org. To use this, clone the dbus git repository on GitHub
 1184   and set it up with travis-ci.org; the only special setting needed is
 1185   "only build branches with a .travis.yml". (fd.o #93194, Simon McVittie)
 1186 
 1187 • If dbus-daemon is run with --systemd-activation, do not require
 1188   org.freedesktop.systemd1.service to exist (fd.o #93194, Simon McVittie)
 1189 
 1190 Fixes:
 1191 
 1192 • Re-order dbus-daemon startup so that on SELinux systems, the thread
 1193   that reads AVC notifications retains the ability to write to the
 1194   audit log (fd.o #92832, Laurent Bigonville)
 1195 
 1196 • Print 64-bit integers on non-GNU Unix platforms (fd.o #92043, Natanael Copa)
 1197 
 1198 • When using the Monitoring interface, match messages' destinations
 1199   (fd.o #92074, Simon McVittie)
 1200 
 1201 • On Linux with systemd, stop installing a reference to the obsolete
 1202   dbus.target, and enable dbus.socket statically (fd.o #78412, #92402;
 1203   Simon McVittie)
 1204 
 1205 • On Windows, when including configuration files with <include> or
 1206   <includedir>, apply the same relocation as for the Exec paths
 1207   in .service files (fd.o #92028, Simon McVittie)
 1208 
 1209 • Add support for backtraces on Windows (fd.o #92721, Ralf Habacker)
 1210 
 1211 • Fix many -Wpointer-sign warnings (fd.o #93069, Ralf Habacker)
 1212 
 1213 D-Bus 1.10.6 (2015-12-01)
 1214 ==
 1215 
 1216 The “marzipan beetles” release.
 1217 
 1218 Fixes:
 1219 
 1220 • On Unix when running tests as root, don't assert that root and
 1221   the dbus-daemon user can still call UpdateActivationEnvironment;
 1222   assert that those privileged users can call BecomeMonitor instead
 1223   (fd.o #93036, Simon McVittie)
 1224 
 1225 • On Windows, fix a memory leak in the autolaunch transport (fd.o #92899,
 1226   Simon McVittie)
 1227 
 1228 • On Windows Autotools builds, don't run tests that rely on
 1229   dbus-run-session and other Unix-specifics (fd.o #92899, Simon McVittie)
 1230 
 1231 D-Bus 1.10.4 (2015-11-17)
 1232 ==
 1233 
 1234 The “Frostburn Canyon” release.
 1235 
 1236 Enhancements:
 1237 
 1238 • GetConnectionCredentials, GetConnectionUnixUser and
 1239   GetConnectionUnixProcessID with argument "org.freedesktop.DBus"
 1240   will now return details of the dbus-daemon itself. This is required
 1241   to be able to call SetEnvironment on systemd.
 1242   (fd.o #92857, Jan Alexander Steffens)
 1243 
 1244 Fixes:
 1245 
 1246 • Make UpdateActivationEnvironment always fail with AccessDenied on the
 1247   system bus. Previously, it was possible to configure it so root could
 1248   call it, but the environment variables were not actually used,
 1249   because the launch helper would discard them.
 1250   (fd.o #92857, Jan Alexander Steffens)
 1251 
 1252 • On Unix with --systemd-activation on a user bus, make
 1253   UpdateActivationEnvironment pass on its arguments to systemd's
 1254   SetEnvironment method, solving inconsistency between the environments
 1255   used for traditional activation and systemd user-service activation.
 1256   (fd.o #92857, Jan Alexander Steffens)
 1257 
 1258 • On Windows, don't crash if <syslog/> or --syslog is used
 1259   (fd.o #92538, Ralf Habacker)
 1260 
 1261 • On Windows, fix a memory leak when setting a DBusError from a Windows
 1262   error (fd.o #92721, Ralf Habacker)
 1263 
 1264 • On Windows, don't go into infinite recursion if we abort the process
 1265   with backtraces enabled (fd.o #92721, Ralf Habacker)
 1266 
 1267 • Fix various failing tests, variously on Windows and cross-platform:
 1268   · don't test system.conf features (users, groups) that only make sense
 1269     on the system bus, which is not supported on Windows
 1270   · don't call _dbus_warn() when we skip a test, since it is fatal
 1271   · fix computation of expected <standard_session_servicedirs/>
 1272   · when running TAP tests, translate newlines to Unix format, fixing
 1273     cross-compiled tests under Wine on Linux
 1274   · don't stress-test refcounting under Wine, where it's really slow
 1275   · stop assuming that a message looped-back to the test will be received
 1276     immediately
 1277   · skip some system bus tests on Windows since they make no sense there
 1278   (fd.o #92538, fd.o #92721; Ralf Habacker, Simon McVittie)
 1279 
 1280 D-Bus 1.10.2 (2015-10-26)
 1281 ==
 1282 
 1283 The “worst pies in London” release.
 1284 
 1285 Fixes:
 1286 
 1287 • Correct error handling for activation: if there are multiple attempts
 1288   to activate the same service and it fails immediately, the first attempt
 1289   would get the correct reply, but the rest would time out. We now send
 1290   the same error reply to each attempt. (fd.o #92200, Simon McVittie)
 1291 
 1292 • If BecomeMonitor is called with a syntactically invalid match rule,
 1293   don't crash with an assertion failure, fixing a regression in 1.9.10.
 1294   This was not exploitable as a denial of service, because the check
 1295   for a privileged user is done first. (fd.o #92298, Simon McVittie)
 1296 
 1297 • On Linux with --enable-user-session, add the bus address to the
 1298   environment of systemd services for better backwards compatibility
 1299   (fd.o #92612, Jan Alexander Steffens)
 1300 
 1301 • On Windows, fix the logic for replacing the installation prefix
 1302   in service files' Exec lines (fd.o #83539; Milan Crha, Simon McVittie)
 1303 
 1304 • On Windows, if installed in the conventional layout with ${prefix}/etc
 1305   and ${prefix}/share, use relative paths between bus configuration files
 1306   to allow the tree to be relocated (fd.o #92028, Simon McVittie)
 1307 
 1308 • Make more of the regression tests pass in Windows builds (fd.o #92538,
 1309   Simon McVittie)
 1310 
 1311 D-Bus 1.10.0 (2015-08-25)
 1312 ==
 1313 
 1314 The “0x20” release.
 1315 
 1316 This is a new stable branch, recommended for use in OS distributions.
 1317 
 1318 Fixes since 1.9.20:
 1319 
 1320 • distribute test/tap-test.sh.in, even if the tarball was built without
 1321   tests enabled (fd.o #91684, Simon McVittie)
 1322 • work around a fd leak in libcap-ng < 0.7.7 (fd.o #91684, Simon McVittie)
 1323 
 1324 Summary of major changes since 1.8.0:
 1325 
 1326 • The basic setup for the well-known system and session buses is
 1327   now done in read-only files in ${datadir} (normally /usr/share).
 1328   See the NEWS entry for 1.9.18 for details.
 1329 
 1330 • AppArmor integration has been merged, with features similar to the
 1331   pre-existing SELinux integration. It is mostly compatible with the
 1332   patches previously shipped by Ubuntu, with one significant change:
 1333   Ubuntu's GetConnectionAppArmorSecurityContext method has been superseded
 1334   by GetConnectionCredentials and was not included.
 1335 
 1336 • The --enable-user-session configure option can be enabled
 1337   by OS integrators intending to use systemd to provide a session bus
 1338   per user (in effect, treating all concurrent graphical and non-graphical
 1339   login sessions as one large session).
 1340 
 1341 • The new listenable address mode "unix:runtime=yes" listens on
 1342   $XDG_RUNTIME_DIR/bus, the same AF_UNIX socket used by the systemd
 1343   user session. libdbus and "dbus-launch --autolaunch" will connect to
 1344   this address by default. GLib ≥ 2.45.3 and sd-bus ≥ 209 have a
 1345   matching default.
 1346 
 1347 • All executables are now dynamically linked to libdbus-1.
 1348   Previously, some executables, most notably dbus-daemon, were statically
 1349   linked to a specially-compiled variant of libdbus. This results in
 1350   various private functions in the _dbus namespace being exposed by the
 1351   shared library. These are not API, and must not be used outside
 1352   the dbus source tree.
 1353 
 1354 • On platforms with ELF symbol versioning, all public symbols
 1355   are versioned LIBDBUS_1_3.
 1356 
 1357 New bus APIs:
 1358 
 1359 • org.freedesktop.DBus.GetConnectionCredentials returns
 1360   LinuxSecurityLabel where supported
 1361 • org.freedesktop.DBus.Monitoring interface (privileged)
 1362   · BecomeMonitor method supersedes match rules with eavesdrop=true,
 1363     which are now deprecated
 1364 • org.freedesktop.DBus.Stats interface (semi-privileged)
 1365   · now enabled by default
 1366   · new GetAllMatchRules method
 1367 • org.freedesktop.DBus.Verbose interface (not normally compiled)
 1368   · toggles the effect of DBUS_VERBOSE
 1369 
 1370 New executables:
 1371 
 1372 • dbus-test-tool
 1373 • dbus-update-activation-environment
 1374 
 1375 New optional dependencies:
 1376 
 1377 • The systemd: pseudo-transport requires libsystemd or libsd-daemon
 1378 • Complete documentation requires Ducktype and yelp-tools
 1379 • Full test coverage requires GLib 2.36 and PyGI
 1380 • AppArmor integration requires libapparmor and optionally libaudit
 1381 
 1382 Dependencies removed:
 1383 
 1384 • dbus-glib
 1385 
 1386 D-Bus 1.9.20 (2015-08-06)
 1387 ==
 1388 
 1389 The “Remember Tomorrow” release.
 1390 
 1391 This is a release-candidate for D-Bus 1.10.0. OS distribution vendors
 1392 should test it.
 1393 
 1394 Fixes:
 1395 
 1396 • Don't second-guess what the ABI of poll() is, allowing it to be used
 1397   on Integrity RTOS and other unusual platforms (fd.o #90314;
 1398   Rolland Dudemaine, Simon McVittie)
 1399 
 1400 • Don't duplicate audit subsystem integration if AppArmor and SELinux are
 1401   both enabled (fd.o #89225, Simon McVittie)
 1402 
 1403 • Log audit events for AppArmor/SELinux policy violations whenever
 1404   we have CAP_AUDIT_WRITE, even if not the system bus
 1405   (fd.o #83856, Laurent Bigonville)
 1406 
 1407 D-Bus 1.9.18 (2015-07-21)
 1408 ==
 1409 
 1410 The “Pirate Elite” release.
 1411 
 1412 Configuration changes:
 1413 
 1414 • The basic setup for the well-known system and session buses is now done
 1415   in read-only files in ${datadir}, moving a step closer to systems
 1416   that can operate with an empty /etc directory. In increasing order
 1417   of precedence:
 1418 
 1419   · ${datadir}/dbus-1/s*.conf now perform the basic setup such as setting
 1420     the default message policies.
 1421   · ${sysconfdir}/dbus-1/s*.conf are now optional. By default
 1422     dbus still installs a trivial version of each, for documentation
 1423     purposes; putting configuration directives in these files is deprecated.
 1424   · ${datadir}/dbus-1/s*.d/ are now available for third-party software
 1425     to install "drop-in" configuration snippets (any packages
 1426     using those directories should explicitly depend on at least this
 1427     version of dbus).
 1428   · ${sysconfdir}/dbus-1/s*.d/ are also still available for sysadmins
 1429     or third-party software to install "drop-in" configuration snippets
 1430   · ${sysconfdir}/dbus-1/s*-local.conf are still available for sysadmins'
 1431     overrides
 1432 
 1433   ${datadir} is normally /usr/share, ${sysconfdir} is normally /etc,
 1434   and "s*" refers to either system or session as appropriate.
 1435 
 1436   (fd.o #89280, Dimitri John Ledkov)
 1437 
 1438 Fixes:
 1439 
 1440 • Fix a memory leak when GetConnectionCredentials() succeeds
 1441   (fd.o #91008, Jacek Bukarewicz)
 1442 
 1443 • Ensure that dbus-monitor does not reply to messages intended for others,
 1444   resulting in its own disconnection (fd.o #90952, Simon McVittie)
 1445 
 1446 D-Bus 1.9.16 (2015-05-14)
 1447 ==
 1448 
 1449 The “titanium barns” release.
 1450 
 1451 Dependencies:
 1452 
 1453 • Automake 1.13 is now required when compiling from git or modifying
 1454   the build system.
 1455 
 1456 Security hardening:
 1457 
 1458 • On Unix platforms, change the default configuration for the session bus
 1459   to only allow EXTERNAL authentication (secure kernel-mediated
 1460   credentials-passing), as was already done for the system bus.
 1461 
 1462   This avoids falling back to DBUS_COOKIE_SHA1, which relies on strongly
 1463   unpredictable pseudo-random numbers.
 1464 
 1465   If you are using D-Bus over the (unencrypted!) tcp: or nonce-tcp: transport,
 1466   in conjunction with DBUS_COOKIE_SHA1 and a shared home directory using
 1467   NFS or similar, you will need to reconfigure the session bus to accept
 1468   DBUS_COOKIE_SHA1 by commenting out the <auth> element. This configuration
 1469   is not recommended.
 1470 
 1471   (fd.o #90414, Simon McVittie)
 1472 
 1473 • When asked for random numbers for DBUS_COOKIE_SHA1, the nonce-tcp:
 1474   transport, UUIDs or any other reason, fail if we cannot obtain entropy
 1475   (from /dev/urandom or CryptGenRandom()) or an out-of-memory condition
 1476   occurs, instead of silently falling back to low-entropy pseudorandom
 1477   numbers from rand(). (fd.o #90414; Simon McVittie, Ralf Habacker)
 1478 
 1479 Enhancements:
 1480 
 1481 • Add dbus_message_iter_get_element_count()
 1482   (fd.o #30350; Christian Dywan, Simon McVittie)
 1483 
 1484 • Introduce new internal DBusSocket and DBusPollable types so we can
 1485   stop treating the Windows SOCKET type as if it was int. DBusSocket
 1486   is specifically a socket, cross-platform. DBusPollable is whatever
 1487   _dbus_poll() can act on, i.e. a fd on Unix or a SOCKET on Windows.
 1488   (fd.o #89444; Ralf Habacker, Simon McVittie)
 1489 
 1490 • All regression tests now output TAP <https://testanything.org/>
 1491   (fd.o #89846, Simon McVittie)
 1492 
 1493 • Internal APIs consistently use signed values for timestamps
 1494   (fd.o #18494, Peter McCurdy)
 1495 
 1496 • Improve diagnostics when UpdateActivationEnvironment calls are rejected
 1497   (fd.o #88812, Simon McVittie)
 1498 
 1499 • Clean up a lot of compiler warnings
 1500   (fd.o #17289, fd.o #89284; Ralf Habacker, Simon McVittie)
 1501 
 1502 Fixes:
 1503 
 1504 • Add locking to DBusCounter's reference count and notify function
 1505   (fd.o #89297, Adrian Szyndela)
 1506 
 1507 • Ensure that DBusTransport's reference count is protected by the
 1508   corresponding DBusConnection's lock (fd.o #90312, Adrian Szyndela)
 1509 
 1510 • Correctly release DBusServer mutex before early-return if we run out
 1511   of memory while copying authentication mechanisms (fd.o #90021,
 1512   Ralf Habacker)
 1513 
 1514 • Make dbus-test-tool and dbus-update-activation-environment portable
 1515   to Windows (fd.o #90089, Ralf Habacker)
 1516 
 1517 • Correctly initialize all fields of DBusTypeReader (fd.o #90021;
 1518   Ralf Habacker, Simon McVittie)
 1519 
 1520 • Fix some missing \n in verbose (debug log) messages (fd.o #90004,
 1521   Ralf Habacker)
 1522 
 1523 • Clean up some memory and fd leaks in test code and tools
 1524   (fd.o #90021, Ralf Habacker)
 1525 
 1526 • Fix a NULL dereference if the dbus-daemon cannot read a configuration
 1527   directory for a reason that is not ENOENT (fd.o #90021, Ralf Habacker)
 1528 
 1529 • CMake generates a versioned shared library even if the revision is 0,
 1530   as it usually is on the development branch. (fd.o #89450, Ralf Habacker)
 1531 
 1532 D-Bus 1.9.14 (2015-03-02)
 1533 ==
 1534 
 1535 The “don't stand in the poison cloud” release.
 1536 
 1537 Dependencies:
 1538 
 1539 • dbus-daemon and dbus-daemon-launch-helper now require libdbus. They
 1540   were previously linked to a static version of libdbus.
 1541 
 1542 • The tests no longer require dbus-glib in order to exercise the libdbus
 1543   shared library; they are always linked to libdbus now.
 1544 
 1545 Build-time configuration:
 1546 
 1547 • The new --enable-user-session option, off by default, can be enabled
 1548   by OS integrators intending to use systemd to provide a session bus
 1549   per user (in effect, treating all concurrent graphical and non-graphical
 1550   login sessions as one large session)
 1551 
 1552 Enhancements:
 1553 
 1554 • All executables are now linked dynamically to libdbus.
 1555   (fd.o #83115; Bertrand SIMONNET, Simon McVittie, Ralf Habacker)
 1556 
 1557 • On platforms that support them (GNU libc and possibly others),
 1558   libdbus now has versioned symbols for its public API.
 1559   All public symbols (visible in the header files) are currently
 1560   versioned as LIBDBUS_1_3; private symbols starting with _dbus or
 1561   dbus_internal have a version that changes with each release, and
 1562   must not be used by applications. (also fd.o #83115)
 1563 
 1564 • New listenable address mode "unix:runtime=yes" which listens on
 1565   a real filesystem (non-abstract) socket $XDG_RUNTIME_DIR/bus
 1566   (fd.o #61303; Colin Walters, Alexander Larsson, Simon McVittie)
 1567 
 1568 • Add optional systemd units for a per-user bus listening on
 1569   $XDG_RUNTIME_DIR/bus (fd.o #61301; Simon McVittie, Colin Walters)
 1570 
 1571 • On Unix platforms, both libdbus and "dbus-launch --autolaunch"
 1572   default to connecting to $XDG_RUNTIME_DIR/bus if it is a socket
 1573   (also fd.o #61301)
 1574 
 1575 • New dbus-update-activation-environment tool uploads environment
 1576   variables to "dbus-daemon --session" and optionally "systemd --user",
 1577   primarily as a way to keep the per-user bus compatible with
 1578   distributions' existing X11 login scripts (also fd.o #61301)
 1579 
 1580 • <includedir/> elements in dbus-daemon configuration are now silently
 1581   ignored if the directory does not exist. (fd.o #89280, Dimitri John Ledkov)
 1582 
 1583 • Add microsecond-resolution timestamps to the default output of
 1584   dbus-monitor and dbus-send (fd.o #88896; Ralf Habacker, Simon McVittie)
 1585 
 1586 Fixes:
 1587 
 1588 • Fix a race condition in the 'monitor' test introduced in 1.9.10
 1589   (fd.o #89222, Simon McVittie)
 1590 
 1591 D-Bus 1.9.12 (2015-02-19)
 1592 ==
 1593 
 1594 The “monster lasagna” release.
 1595 
 1596 Dependencies:
 1597 
 1598 • Ducktype and yelp-tools are now required to build complete documentation
 1599   (they are optional for normal builds).
 1600 
 1601 Enhancements:
 1602 
 1603 • D-Bus Specification version 0.26
 1604   · GetConnectionCredentials can return LinuxSecurityLabel or WindowsSID
 1605   · document the BecomeMonitor method
 1606 
 1607 • On Linux, add LinuxSecurityLabel to GetConnectionCredentials
 1608   (fd.o #89041; Tyler Hicks, Simon McVittie)
 1609 
 1610 • On Linux, add support for AppArmor mediation of message sending and
 1611   receiving and name ownership (paralleling existing SELinux mediation
 1612   support), and eavesdropping (a new check, currently AppArmor-specific)
 1613   (fd.o #75113; John Johansen, Tyler Hicks, Simon McVittie)
 1614 
 1615 • In dbus-send and dbus-monitor, pretty-print \0-terminated bytestrings
 1616   that have printable ASCII contents; we previously only did this for
 1617   unterminated bytestrings (fd.o #89109, Simon McVittie)
 1618 
 1619 • Add a guide to designing good D-Bus APIs (fd.o #88994, Philip Withnall)
 1620 
 1621 • On Windows, add WindowsSID to GetConnectionCredentials
 1622   (fd.o #54445, Ralf Habacker)
 1623 
 1624 • Improve clarity of dbus-monitor --profile output and add more columns
 1625   (fd.o #89165, Ralf Habacker)
 1626 
 1627 • Add a man page for dbus-test-tool, and build it under CMake as well
 1628   as Autotools (fd.o#89086, Simon McVittie)
 1629 
 1630 • If dbus-daemon was compiled with --enable-verbose, add a D-Bus API
 1631   to control it at runtime, overriding the DBUS_VERBOSE environment variable
 1632   (fd.o #88896, Ralf Habacker)
 1633 
 1634 Fixes:
 1635 
 1636 • Reduce the number of file descriptors used in the fd-passing test,
 1637   avoiding failure under the default Linux fd limit, and automatically
 1638   skip it if the rlimit is too small (fd.o #88998, Simon McVittie)
 1639 
 1640 D-Bus 1.9.10 (2015-02-09)
 1641 ==
 1642 
 1643 The “sad cyborgs” release.
 1644 
 1645 Security fixes merged from 1.8.16:
 1646 
 1647 • Do not allow non-uid-0 processes to send forged ActivationFailure
 1648   messages. On Linux systems with systemd activation, this would
 1649   allow a local denial of service: unprivileged processes could
 1650   flood the bus with these forged messages, winning the race with
 1651   the actual service activation and causing an error reply
 1652   to be sent back when service auto-activation was requested.
 1653   This does not prevent the real service from being started,
 1654   so the attack only works while the real service is not running.
 1655   (CVE-2015-0245, fd.o #88811; Simon McVittie)
 1656 
 1657 Enhancements:
 1658 
 1659 • The new Monitoring interface in the dbus-daemon lets dbus-monitor and
 1660   similar tools receive messages without altering the security properties
 1661   of the system bus, by calling the new BecomeMonitor method on a
 1662   private connection. This bypasses the normal <allow> and <deny> rules
 1663   entirely, so to preserve normal message-privacy assumptions, only root
 1664   is allowed to do this on the system bus. Restricted environments,
 1665   such as Linux with LSMs, should lock down access to the Monitoring
 1666   interface. (fd.o #46787, Simon McVittie)
 1667 
 1668 • dbus-monitor uses BecomeMonitor to capture more traffic, if the
 1669   dbus-daemon supports it and access permissions allow it.
 1670   It still supports the previous approach ("eavesdropping" match rules)
 1671   for compatibility with older bus daemons. (fd.o #46787, Simon)
 1672 
 1673 • dbus-monitor can now log the message stream as binary data for later
 1674   analysis, with either no extra framing beyond the normal D-Bus headers,
 1675   or libpcap-compatible framing treating each D-Bus message
 1676   as a captured packet. (fd.o #46787, Simon)
 1677 
 1678 Other fixes:
 1679 
 1680 • Fix some CMake build regressions (fd.o #88964, Ralf Habacker)
 1681 
 1682 • On Unix, forcibly terminate regression tests after 60 seconds to
 1683   prevent them from blocking continuous integration frameworks
 1684   (fd.o #46787, Simon)
 1685 
 1686 D-Bus 1.9.8 (2015-02-03)
 1687 ==
 1688 
 1689 The “all the types of precipitation” release.
 1690 
 1691 Dependencies:
 1692 
 1693 • full test coverage now requires GLib 2.36
 1694 • full test coverage now requires PyGI (PyGObject 3,
 1695   "import gi.repository.GObject") instead of the
 1696   obsolete PyGObject 2 ("import gobject")
 1697 
 1698 Enhancements:
 1699 
 1700 • add GLib-style "installed tests" (fd.o #88810, Simon McVittie)
 1701 
 1702 • better regression test coverage, including systemd activation
 1703   (fd.o #57952, #88810; Simon McVittie)
 1704 
 1705 Fixes:
 1706 
 1707 • fatal errors correctly make the dbus-daemon exit even if <syslog/> is
 1708   turned off (fd.o #88808, Simon McVittie)
 1709 
 1710 • TCP sockets on Windows no longer fail to listen approximately 1 time
 1711   in 256, caused by a logic error that should have always made it fail but
 1712   was mitigated by incorrect endianness for the port number
 1713   (fd.o #87999, Ralf Habacker)
 1714 
 1715 • fix some Windows build failures (fd.o #88009, #88010; Ralf Habacker)
 1716 
 1717 • on Windows, allow up to 8K connections to the dbus-daemon instead of the
 1718   previous 64, completing a previous fix which only worked under
 1719   Autotools (fd.o #71297, Ralf Habacker)
 1720 
 1721 • on Windows, if the IP family is unspecified only use IPv4,
 1722   to mitigate IPv6 not working correctly (fd.o #87999, Ralf Habacker)
 1723 
 1724 • fix some unlikely memory leaks on OOM (fd.o #88087, Simon McVittie)
 1725 
 1726 • lcov code coverage analysis works again (fd.o #88808, Simon McVittie)
 1727 
 1728 • fix an unused function error with --disable-embedded-tests (fd.o #87837,
 1729   Thiago Macieira)
 1730 
 1731 D-Bus 1.9.6 (2015-01-05)
 1732 ==
 1733 
 1734 The “I do have a bread knife” release.
 1735 
 1736 Security hardening:
 1737 
 1738 • Do not allow calls to UpdateActivationEnvironment from uids other than
 1739   the uid of the dbus-daemon. If a system service installs unsafe
 1740   security policy rules that allow arbitrary method calls
 1741   (such as CVE-2014-8148) then this prevents memory consumption and
 1742   possible privilege escalation via UpdateActivationEnvironment.
 1743 
 1744   We believe that in practice, privilege escalation here is avoided
 1745   by dbus-daemon-launch-helper sanitizing its environment; but
 1746   it seems better to be safe.
 1747 
 1748 • Do not allow calls to UpdateActivationEnvironment or the Stats interface
 1749   on object paths other than /org/freedesktop/DBus. Some system services
 1750   install unsafe security policy rules that allow arbitrary method calls
 1751   to any destination, method and interface with a specified object path;
 1752   while less bad than allowing arbitrary method calls, these security
 1753   policies are still harmful, since dbus-daemon normally offers the
 1754   same API on all object paths and other system services might behave
 1755   similarly.
 1756 
 1757 Other fixes:
 1758 
 1759 • Add missing initialization so GetExtendedTcpTable doesn't crash on
 1760   Windows Vista SP0 (fd.o #77008, Илья А. Ткаченко)
 1761 
 1762 D-Bus 1.9.4 (2014-11-24)
 1763 ==
 1764 
 1765 The “extra-sturdy caramel” release.
 1766 
 1767 Fixes:
 1768 
 1769 • Partially revert the CVE-2014-3639 patch by increasing the default
 1770   authentication timeout on the system bus from 5 seconds back to 30
 1771   seconds, since this has been reported to cause boot regressions for
 1772   some users, mostly with parallel boot (systemd) on slower hardware.
 1773 
 1774   On fast systems where local users are considered particularly hostile,
 1775   administrators can return to the 5 second timeout (or any other value
 1776   in milliseconds) by saving this as /etc/dbus-1/system-local.conf:
 1777 
 1778   <busconfig>
 1779     <limit name="auth_timeout">5000</limit>
 1780   </busconfig>
 1781 
 1782   (fd.o #86431, Simon McVittie)
 1783 
 1784 • Add a message in syslog/the Journal when the auth_timeout is exceeded
 1785   (fd.o #86431, Simon McVittie)
 1786 
 1787 • Send back an AccessDenied error if the addressed recipient is not allowed
 1788   to receive a message (and in builds with assertions enabled, don't
 1789   assert under the same conditions). (fd.o #86194, Jacek Bukarewicz)
 1790 
 1791 D-Bus 1.9.2 (2014-11-10)
 1792 ==
 1793 
 1794 The “structurally unsound flapjack” release.
 1795 
 1796 Security fixes:
 1797 
 1798 • Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
 1799   so that CVE-2014-3636 part A cannot exhaust the system bus'
 1800   file descriptors, completing the incomplete fix in 1.8.8.
 1801   (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)
 1802 
 1803 Enhancements:
 1804 
 1805 • D-Bus Specification version 0.25
 1806   · new value 'const' for EmitsChangedSignal annotation
 1807     (fd.o #72958, Lennart Poettering)
 1808   · new ALLOW_INTERACTIVE_AUTHORIZATION flag, for PolicyKit and similar
 1809     (fd.o #83449; Lennart Poettering, Simon McVittie)
 1810   · annotate table of types with reserved/basic/container, and for
 1811     basic types, fixed/string-like
 1812   · clarify arbitrary limits by quoting them in mebibytes
 1813 
 1814 • New API: add accessors for the ALLOW_INTERACTIVE_AUTHORIZATION flag
 1815   (fd.o #83449, Simon McVittie)
 1816 
 1817 • Add dbus-test-tool, a D-Bus swiss army knife with multiple subcommands,
 1818   useful for debugging and performance testing:
 1819   · dbus-test-tool spam: send repeated messages
 1820   · dbus-test-tool echo: send an empty reply for all method calls
 1821   · dbus-test-tool black-hole: do not reply to method calls
 1822   (fd.o #34140; Alban Crequy, Simon McVittie, Will Thompson)
 1823 
 1824 • Add support for process ID in credentials-passing on NetBSD
 1825   (fd.o #69702, Patrick Welche)
 1826 
 1827 • Add an example script to find potentially undesired match rules
 1828   (fd.o #84598, Alban Crequy)
 1829 
 1830 • Document the central assumption that makes our use of credentials-passing
 1831   secure (fd.o #83499, Simon McVittie)
 1832 
 1833 • Replace the dbus-glib section of the tutorial with a GDBus recommendation,
 1834   and add some links to GDBus and QtDBus documentation (fd.o #25140,
 1835   Simon McVittie)
 1836 
 1837 Fixes:
 1838 
 1839 • Use a less confusing NoReply message when disconnected with a reply pending
 1840   (fd.o #76112, Simon McVittie)
 1841 
 1842 • Make the .pc file relocatable by letting pkg-config do all variable
 1843   expansion itself (fd.o #75858, Руслан Ижбулатов)
 1844 
 1845 • Fix a build failure on platforms with kqueue, which regressed in 1.9.0
 1846   (fd.o #85563, Patrick Welche)
 1847 
 1848 • Consistently save errno after socket calls (fd.o #83625, Simon McVittie)
 1849 
 1850 • In dbus-spawn, when the grandchild process exits due to a failed exec(),
 1851   do not lose the exec() errno (fd.o #24821, Simon McVittie)
 1852 
 1853 • Do not fail the tests if a parent process has leaked non-close-on-exec
 1854   file descriptors to us (fd.o #73689, fd.o #83899; Simon McVittie)
 1855 
 1856 • Do not fail the tests on Unix platforms with incomplete
 1857   credentials-passing support, but do fail if we can't pass credentials
 1858   on a platform where it is known to work: Linux, FreeBSD, OpenBSD, NetBSD
 1859   (fd.o #69702, Simon McVittie)
 1860 
 1861 • Detect accept4, dirfd, inotify_init1, pipe2, and Unix fd passing
 1862   when building with cmake, and expand test coverage there
 1863   (fd.o #73689; Ralf Habacker, Simon McVittie)
 1864 
 1865 D-Bus 1.9.0 (2014-10-01)
 1866 ==
 1867 
 1868 The “tiered cheeses” release.
 1869 
 1870 Requirements:
 1871 
 1872 • Support for the systemd: (LISTEN_FDS) pseudo-transport on Linux now
 1873   requires either the libsystemd or libsd-daemon shared library, dropping the
 1874   embedded convenience copy of sd-daemon (fd.o #71818, Simon)
 1875 
 1876 Build-time configuration changes:
 1877 
 1878 • The Stats interface is now enabled by default, and locked-down to
 1879   root-only on the system bus. Configure with --disable-stats
 1880   to disable it altogether on memory- or disk-constrained systems,
 1881   or see ${docdir}/examples/ to open it up to non-root users on the
 1882   system bus or restrict access on the session bus.
 1883   (fd.o #80759; Simon McVittie, Alban Crequy)
 1884 
 1885 • The CMake build system now builds the same shared library name as Autotools
 1886   on at least Linux and Windows:
 1887   - on Linux (and perhaps other Unix platforms), it previously built
 1888     libdbus-1.so, but now builds libdbus-1.so.3.* with development
 1889     symlink libdbus-1.so and SONAME/symlink libdbus-1.so.3
 1890   - on Windows, it previously built either libdbus-1.dll (release) or
 1891     libdbus-1d.dll (debug), but now builds libdbus-1-3.dll, copied to
 1892     libdbus-1.dll for compatibility with older applications.
 1893   (fd.o #74117, Ralf Habacker)
 1894 
 1895 Enhancements:
 1896 
 1897 • D-Bus Specification version 0.24
 1898   · document how to quote match rules (fd.o #24307, Simon McVittie)
 1899   · explicitly say that most message types never expect a reply
 1900     regardles of whether they have NO_REPLY_EXPECTED
 1901     (fd.o #75749, Simon McVittie)
 1902 
 1903 • on Unix platforms, disable Nagle's algorithm on TCP connections to improve
 1904   initial latency (fd.o #75544, Matt Hoosier)
 1905 
 1906 • use backtrace() if it is in -lexecinfo instead of libc, as on NetBSD
 1907   (fd.o #69702, Patrick Welche)
 1908 
 1909 • in dbus-monitor, print more information about file descriptors
 1910   (fd.o #80603, Alban Crequy)
 1911 
 1912 • do not install system bus configuration if built for Windows
 1913   (fd.o #83583; Ralf Habacker, Simon McVittie)
 1914 
 1915 • Add GetAllMatchRules to the Stats interface (fd.o #24307, Alban Crequy)
 1916 
 1917 • Add a regression test for file descriptor passing (fd.o #83622,
 1918   Simon McVittie)
 1919 
 1920 Fixes:
 1921 
 1922 • fix an incorrect error message if a Unix socket path is too long
 1923   (fd.o #73887, Antoine Jacoutot)
 1924 
 1925 • in an MSYS/Cygwin environment, pass Unix-style filenames to xmlto,
 1926   fixing documentation generation (fd.o #75860, Руслан Ижбулатов)
 1927 
 1928 • in Unix with X11, avoid giving dbus-launch a misleading argv[0]
 1929   in ps(1) (fd.o #69716, Chengwei Yang)
 1930 
 1931 • avoid calling poll() with timeout < -1, which is considered invalid
 1932   on FreeBSD and NetBSD (fd.o #78480, Jaap Boender)
 1933 
 1934 • be portable to BSD-derived platforms where O_CLOEXEC is unavailable in libc
 1935   (like Mac OS X 10.6), or available in libc but unsupported by the kernel
 1936   (fd.o #77032; rmvsxop, OBATA Akio, Patrick Welche)
 1937 
 1938 • Fix include path for test/internal/*.c with cmake (Ralf Habacker)
 1939 
 1940 • Documentation improvements
 1941   (fd.o #80795, #84313; Thomas Haller, Sebastian Rasmussen)
 1942 
 1943 • in dbus-monitor, do not leak file descriptors that we have monitored
 1944   (fd.o #80603, Alban Crequy)
 1945 
 1946 • Set the close-on-exec flag for the inotify file descriptor, even
 1947   if built with CMake or older libc (fd.o #73689, Simon McVittie)
 1948 
 1949 • Remove some LGPL code from the Windows dbus-daemon
 1950   (fd.o #57272, Ralf Habacker)
 1951 
 1952 D-Bus 1.8.8 (2014-09-16)
 1953 ==
 1954 
 1955 The "smashy smashy egg man" release.
 1956 
 1957 Security fixes:
 1958 
 1959 • Do not accept an extra fd in the padding of a cmsg message, which
 1960   could lead to a 4-byte heap buffer overrun.
 1961   (CVE-2014-3635, fd.o #83622; Simon McVittie)
 1962 
 1963 • Reduce default for maximum Unix file descriptors passed per message
 1964   from 1024 to 16, preventing a uid with the default maximum number of
 1965   connections from exhausting the system bus' file descriptors under
 1966   Linux's default rlimit. Distributors or system administrators with a
 1967   more restrictive fd limit may wish to reduce these limits further.
 1968 
 1969   Additionally, on Linux this prevents a second denial of service
 1970   in which the dbus-daemon can be made to exceed the maximum number
 1971   of fds per sendmsg() and disconnect the process that would have
 1972   received them.
 1973   (CVE-2014-3636, fd.o #82820; Alban Crequy)
 1974 
 1975 • Disconnect connections that still have a fd pending unmarshalling after
 1976   a new configurable limit, pending_fd_timeout (defaulting to 150 seconds),
 1977   removing the possibility of creating an abusive connection that cannot be
 1978   disconnected by setting up a circular reference to a connection's
 1979   file descriptor.
 1980   (CVE-2014-3637, fd.o #80559; Alban Crequy)
 1981 
 1982 • Reduce default for maximum pending replies per connection from 8192 to 128,
 1983   mitigating an algorithmic complexity denial-of-service attack
 1984   (CVE-2014-3638, fd.o #81053; Alban Crequy)
 1985 
 1986 • Reduce default for authentication timeout on the system bus from
 1987   30 seconds to 5 seconds, avoiding denial of service by using up
 1988   all unauthenticated connection slots; and when all unauthenticated
 1989   connection slots are used up, make new connection attempts block
 1990   instead of disconnecting them.
 1991   (CVE-2014-3639, fd.o #80919; Alban Crequy)
 1992 
 1993 Other fixes:
 1994 
 1995 • Check for libsystemd from systemd >= 209, falling back to
 1996   the older separate libraries if not found (Umut Tezduyar Lindskog,
 1997   Simon McVittie)
 1998 
 1999 • On Linux, use prctl() to disable core dumps from a test executable
 2000   that deliberately raises SIGSEGV to test dbus-daemon's handling
 2001   of that condition (fd.o #83772, Simon McVittie)
 2002 
 2003 • Fix compilation with --enable-stats (fd.o #81043, Gentoo #507232;
 2004   Alban Crequy)
 2005 
 2006 • Improve documentation for running tests on Windows (fd.o #41252,
 2007   Ralf Habacker)
 2008 
 2009 D-Bus 1.8.6 (2014-06-02)
 2010 ==
 2011 
 2012 Security fixes:
 2013 
 2014 • On Linux ≥ 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS, silently drop
 2015   the message. This prevents an attack in which a malicious client can
 2016   make dbus-daemon disconnect a system service, which is a local
 2017   denial of service.
 2018   (fd.o #80163, CVE-2014-3532; Alban Crequy)
 2019 
 2020 • Track remaining Unix file descriptors correctly when more than one
 2021   message in quick succession contains fds. This prevents another attack
 2022   in which a malicious client can make dbus-daemon disconnect a system
 2023   service.
 2024   (fd.o #79694, fd.o #80469, CVE-2014-3533; Alejandro Martínez Suárez,
 2025   Simon McVittie, Alban Crequy)
 2026 
 2027 Other fixes:
 2028 
 2029 • When dbus-launch --exit-with-session starts a dbus-daemon but then cannot
 2030   attach to a session, kill the dbus-daemon as intended
 2031   (fd.o #74698, Роман Донченко)
 2032 
 2033 D-Bus 1.8.4 (2014-06-10)
 2034 ==
 2035 
 2036 Security fix:
 2037 
 2038 • Alban Crequy at Collabora Ltd. discovered and fixed a denial-of-service
 2039   flaw in dbus-daemon, part of the reference implementation of D-Bus.
 2040   Additionally, in highly unusual environments the same flaw could lead to
 2041   a side channel between processes that should not be able to communicate.
 2042   (CVE-2014-3477, fd.o #78979)
 2043 
 2044 D-Bus 1.8.2 (2014-04-30)
 2045 ==
 2046 
 2047 The “nobody wants red” release.
 2048 
 2049 Enhancements:
 2050 
 2051 • in the CMake build system, add some hints for Linux users cross-compiling
 2052   Windows D-Bus binaries to be able to run tests under Wine
 2053   (fd.o #41252, Ralf Habacker)
 2054 
 2055 • add Documentation key to dbus.service (fd.o #77447, Cameron Norman)
 2056 
 2057 Fixes:
 2058 
 2059 • in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
 2060   to /var/lib/dbus/machine-id instead of generating an entirely new ID
 2061   (fd.o #77941, Simon McVittie)
 2062 
 2063 • if dbus-launch receives an X error very quickly, do not kill
 2064   unrelated processes (fd.o #74698, Роман Донченко)
 2065 
 2066 • on Windows, allow up to 8K connections to the dbus-daemon, instead of the
 2067   previous 64 (fd.o #71297; Cristian Onet, Ralf Habacker)
 2068 
 2069 • cope with \r\n newlines in regression tests, since on Windows,
 2070   dbus-daemon.exe uses text mode (fd.o #75863, Руслан Ижбулатов)
 2071 
 2072 D-Bus 1.8.0 (2014-01-20)
 2073 ==
 2074 
 2075 The “Wolverine distrusts my printer” release.
 2076 
 2077 This starts a new stable branch. The 1.6.x branch is now considered to be
 2078 outdated, and will only receive fixes for serious bugs such as security
 2079 flaws. The 1.4.x and 1.2.x branches no longer have upstream support and
 2080 are unlikely to get any more releases, but if distributors still need to
 2081 support them, please share security patches via upstream.
 2082 
 2083 Summary of changes since 1.6.x:
 2084 
 2085 • libdbus always behaves as if dbus_threads_init_default() had been called
 2086   (thread-safety by default)
 2087 • new dbus-run-session tool, replacing certain misuses of dbus-launch
 2088 • dbus-monitor can talk to outdated versions of dbus-daemon again
 2089 • new org.freedesktop.DBus.GetConnectionCredentials method
 2090 • GetConnectionUnixProcessID also works correctly on Windows, returning
 2091   the Windows process ID
 2092 • GetConnectionWindowsSID returns the correct SID on Windows
 2093 • expat is required, libxml2 can no longer be used as a substitute
 2094 • the userDB cache is required, and cannot be disabled
 2095 • a 64-bit integer type (either int, long, long long or _int64) is required
 2096 • better systemd-journald integration on Linux
 2097 • fixed long-standing fd and array leaks when failing to parse a message
 2098 • fixed referenced-but-never-freed parent nodes (effectively memory leaks)
 2099   when using certain object-path allocation patterns, notably in Avahi
 2100 • better defaults for Windows support
 2101 • better CMake support
 2102 • better portability to mingw32, FreeBSD, NetBSD, QNX and Hurd
 2103 • the source language for the man pages is now Docbook XML
 2104 
 2105 Enhancements since 1.7.10:
 2106 
 2107 • Enhance the CMake build system to check for GLib and compile/run
 2108   a subset of the regression tests (fd.o #41252, #73495; Ralf Habacker)
 2109 
 2110 Fixes since 1.7.10:
 2111 
 2112 • don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fd.o #72840,
 2113   Ralf Habacker)
 2114 
 2115 • fix compilation of systemd journal support on older systemd versions where
 2116   sd-journal.h doesn't include syslog.h (fd.o #73455, Ralf Habacker)
 2117 
 2118 • fix compilation on older MSVC versions by including stdlib.h
 2119   (fd.o #73455, Ralf Habacker)
 2120 
 2121 • Allow <allow_anonymous/> to appear in an included configuration file
 2122   (fd.o #73475, Matt Hoosier)
 2123 
 2124 Test behaviour changes since 1.7.10:
 2125 
 2126 • If the tests crash with an assertion failure, they no longer default to
 2127   blocking for a debugger to be attached. Set DBUS_BLOCK_ON_ABORT in the
 2128   environment if you want the old behaviour.
 2129 
 2130 • To improve debuggability, the dbus-daemon and dbus-daemon-eavesdrop tests
 2131   can be run with an external dbus-daemon by setting
 2132   DBUS_TEST_DAEMON_ADDRESS in the environment. Test-cases that require
 2133   an unusually-configured dbus-daemon are skipped.
 2134 
 2135 D-Bus 1.7.10 (2014-01-06)
 2136 ==
 2137 
 2138 The “weighted companion cube” release.
 2139 
 2140 This is a release candidate for D-Bus 1.8.
 2141 
 2142 D-Bus Specification 0.23:
 2143 
 2144 • don't require messages with no INTERFACE to be dispatched
 2145   (fd.o #68597, Simon McVittie)
 2146 
 2147 • document "tcp:bind=..." and "nonce-tcp:bind=..." (fd.o #72301,
 2148   Chengwei Yang)
 2149 
 2150 • define "listenable" and "connectable" addresses, and discuss
 2151   the difference (fd.o #61303, Simon McVittie)
 2152 
 2153 Enhancements:
 2154 
 2155 • support printing Unix file descriptors in dbus-send, dbus-monitor
 2156   (fd.o #70592, Robert Ancell)
 2157 
 2158 • don't install systemd units if --disable-systemd is given
 2159   (fd.o #71818, Chengwei Yang)
 2160 
 2161 Fixes:
 2162 
 2163 • don't leak memory on out-of-memory while listing activatable or
 2164   active services (fd.o #71526, Radoslaw Pajak)
 2165 
 2166 • fix undefined behaviour in a regression test (fd.o #69924, DreamNik)
 2167 
 2168 • escape Unix socket addresses correctly (fd.o #46013, Chengwei Yang)
 2169 
 2170 • on SELinux systems, don't assume that SECCLASS_DBUS, DBUS__ACQUIRE_SVC
 2171   and DBUS__SEND_MSG are numerically equal to their values in the
 2172   reference policy (fd.o #88719, osmond sun)
 2173 
 2174 • define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW < 4 headers
 2175   (fd.o #71366, Matt Fischer)
 2176 
 2177 • define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h and
 2178   winsock2.h (fd.o #71405, Matt Fischer)
 2179 
 2180 • do not return failure from _dbus_read_nonce() with no error set,
 2181   preventing a potential crash (fd.o #72298, Chengwei Yang)
 2182 
 2183 • on BSD systems, avoid some O(1)-per-process memory and fd leaks in kqueue,
 2184   preventing test failures (fd.o #69332, fd.o #72213; Chengwei Yang)
 2185 
 2186 • fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix sockets,
 2187   which doesn't do anything anyway on at least Linux and FreeBSD
 2188   (fd.o #69492, Simon McVittie)
 2189 
 2190 • fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL from
 2191   sendmsg() with SCM_CREDS (retrying with plain send()), and looking
 2192   for credentials more correctly (fd.o #69492, Simon McVittie)
 2193 
 2194 • ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
 2195   getting mixed up in XDG/systemd "user sessions" (fd.o #61301,
 2196   Simon McVittie)
 2197 
 2198 • refresh cached policy rules for existing connections when bus
 2199   configuration changes (fd.o #39463, Chengwei Yang)
 2200 
 2201 D-Bus 1.7.8 (2013-11-01)
 2202 ==
 2203 
 2204 The “extreme hills” release.
 2205 
 2206 Dependencies:
 2207 
 2208 • If systemd support is enabled, libsystemd-journal is now required.
 2209 
 2210 Enhancements:
 2211 
 2212 • When activating a non-systemd service under systemd, annotate its
 2213   stdout/stderr with its bus name in the Journal. Known limitation:
 2214   because the socket is opened before forking, the process will still be
 2215   logged as if it had dbus-daemon's process ID and user ID.
 2216   (fd.o #68559, Chengwei Yang)
 2217 
 2218 • Document more configuration elements in dbus-daemon(1)
 2219   (fd.o #69125, Chengwei Yang)
 2220 
 2221 Fixes:
 2222 
 2223 • Don't leak string arrays or fds if dbus_message_iter_get_args_valist()
 2224   unpacks them and then encounters an error (fd.o #21259, Chengwei Yang)
 2225 
 2226 • If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
 2227   disallowed method calls to the audit log, fixing a regression in 1.7.6
 2228   (fd.o #49062, Colin Walters)
 2229 
 2230 • path_namespace='/' in match rules incorrectly matched nothing; it
 2231   now matches everything. (fd.o #70799, Simon McVittie)
 2232 
 2233 D-Bus 1.7.6 (2013-10-09)
 2234 ==
 2235 
 2236 The “CSI Shrewsbury” release.
 2237 
 2238 Build-time configuration changes:
 2239 
 2240 • Directory change notification via dnotify on Linux is no longer
 2241   supported; it hadn't compiled successfully since 2010 in any case.
 2242   If you don't have inotify (Linux) or kqueue (*BSD), you will need
 2243   to send SIGHUP to the dbus-daemon when its configuration changes.
 2244   (fd.o #33001, Chengwei Yang)
 2245 
 2246 • Compiling with --disable-userdb-cache is no longer supported;
 2247   it didn't work since at least 2008, and would lead to an extremely
 2248   slow dbus-daemon even it worked. (fd.o #15589, #17133, #66947;
 2249   Chengwei Yang)
 2250 
 2251 • The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
 2252   assertions. It has been renamed to DBUS_DISABLE_ASSERT to be consistent
 2253   with the Autotools build system. (fd.o #66142, Chengwei Yang)
 2254 
 2255 • --with-valgrind=auto enables Valgrind instrumentation if and only if
 2256   valgrind headers are available. The default is still --with-valgrind=no.
 2257   (fd.o #56925, Simon McVittie)
 2258 
 2259 Dependencies:
 2260 
 2261 • Platforms with no 64-bit integer type are no longer supported.
 2262   (fd.o #65429, Simon McVittie)
 2263 
 2264 • GNU make is now (documented to be) required. (fd.o #48277, Simon McVittie)
 2265 
 2266 • Full test coverage no longer requires dbus-glib, although the tests do not
 2267   exercise the shared library (only a static copy) if dbus-glib is missing.
 2268   (fd.o #68852, Simon McVittie)
 2269 
 2270 Enhancements:
 2271 
 2272 • D-Bus Specification 0.22
 2273   · Document GetAdtAuditSessionData() and
 2274     GetConnectionSELinuxSecurityContext() (fd.o #54445, Simon)
 2275   · Fix example .service file (fd.o #66481, Chengwei Yang)
 2276   · Don't claim D-Bus is "low-latency" (lower than what?), just
 2277     give factual statements about it supporting async use
 2278     (fd.o #65141, Justin Lee)
 2279   · Document the contents of .service files, and the fact that
 2280     system services' filenames are constrained
 2281     (fd.o #66608; Simon McVittie, Chengwei Yang)
 2282 
 2283 • Be thread-safe by default on all platforms, even if
 2284   dbus_threads_init_default() has not been called. For compatibility with
 2285   older libdbus, library users should continue to call
 2286   dbus_threads_init_default(): it is harmless to do so.
 2287   (fd.o #54972, Simon McVittie)
 2288 
 2289 • Add GetConnectionCredentials() method (fd.o #54445, Simon)
 2290 
 2291 • New API: dbus_setenv(), a simple wrapper around setenv().
 2292   Note that this is not thread-safe. (fd.o #39196, Simon)
 2293 
 2294 • Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer connection,
 2295   like --address=ADDRESS in previous versions) and dbus-send --bus=ADDRESS
 2296   (connect to a given bus, like dbus-monitor --address=ADDRESS).
 2297   dbus-send --address still exists for backwards compatibility,
 2298   but is no longer documented. (fd.o #48816, Andrey Mazo)
 2299 
 2300 • Windows-specific:
 2301   · "dbus-daemon --nofork" is allowed on Windows again. (fd.o #68852,
 2302     Simon McVittie)
 2303 
 2304 Fixes:
 2305 
 2306 • Avoid an infinite busy-loop if a signal interrupts waitpid()
 2307   (fd.o #68945, Simon McVittie)
 2308 
 2309 • Clean up memory for parent nodes when objects are unexported
 2310   (fd.o #60176, Thomas Fitzsimmons)
 2311 
 2312 • Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
 2313   documented. Previously, it assumed its second parameter was TRUE.
 2314   (fd.o #69165, Chengwei Yang)
 2315 
 2316 • Escape addresses containing non-ASCII characters correctly
 2317   (fd.o #53499, Chengwei Yang)
 2318 
 2319 • Document <servicedir> search order correctly (fd.o #66994, Chengwei Yang)
 2320 
 2321 • Don't crash on "dbus-send --session / x.y.z" which regressed in 1.7.4.
 2322   (fd.o #65923, Chengwei Yang)
 2323 
 2324 • If malloc() returns NULL in _dbus_string_init() or similar, don't free
 2325   an invalid pointer if the string is later freed (fd.o #65959, Chengwei Yang)
 2326 
 2327 • If malloc() returns NULL in dbus_set_error(), don't va_end() a va_list
 2328   that was never va_start()ed (fd.o #66300, Chengwei Yang)
 2329 
 2330 • fix build failure with --enable-stats (fd.o #66004, Chengwei Yang)
 2331 
 2332 • fix a regression test on platforms with strict alignment (fd.o #67279,
 2333   Colin Walters)
 2334 
 2335 • Avoid calling function parameters "interface" since certain Windows headers
 2336   have a namespace-polluting macro of that name (fd.o #66493, Ivan Romanov)
 2337 
 2338 • Assorted Doxygen fixes (fd.o #65755, Chengwei Yang)
 2339 
 2340 • Various thread-safety improvements to static variables (fd.o #68610,
 2341   Simon McVittie)
 2342 
 2343 • Make "make -j check" work (fd.o #68852, Simon McVittie)
 2344 
 2345 • Fix a NULL pointer dereference on an unlikely error path
 2346   (fd.o #69327, Sviatoslav Chagaev)
 2347 
 2348 • Improve valgrind memory pool tracking (fd.o #69326,
 2349   Sviatoslav Chagaev)
 2350 
 2351 • Don't over-allocate memory in dbus-monitor (fd.o #69329,
 2352   Sviatoslav Chagaev)
 2353 
 2354 • dbus-monitor can monitor dbus-daemon < 1.5.6 again
 2355   (fd.o #66107, Chengwei Yang)
 2356 
 2357 • Unix-specific:
 2358   · If accept4() fails with EINVAL, as it can on older Linux kernels
 2359     with newer glibc, try accept() instead of going into a busy-loop.
 2360     (fd.o #69026, Chengwei Yang)
 2361   · If socket() or socketpair() fails with EINVAL or EPROTOTYPE,
 2362     for instance on Hurd or older Linux with a new glibc, try without
 2363     SOCK_CLOEXEC. (fd.o #69073; Pino Toscano, Chengwei Yang)
 2364   · Fix a file descriptor leak on an error code path.
 2365     (fd.o #69182, Sviatoslav Chagaev)
 2366   · dbus-run-session: clear some unwanted environment variables
 2367     (fd.o #39196, Simon)
 2368   · dbus-run-session: compile on FreeBSD (fd.o #66197, Chengwei Yang)
 2369   · Don't fail the autolaunch test if there is no DISPLAY (fd.o #40352, Simon)
 2370   · Use dbus-launch from the builddir for testing, not the installed copy
 2371     (fd.o #37849, Chengwei Yang)
 2372   · Fix compilation if writev() is unavailable (fd.o #69409,
 2373     Vasiliy Balyasnyy)
 2374   · Remove broken support for LOCAL_CREDS credentials passing, and
 2375     document where each credential-passing scheme is used (fd.o #60340,
 2376     Simon McVittie)
 2377   · Make autogen.sh work on *BSD by not assuming GNU coreutils functionality
 2378     (fd.o #35881, #69787; Chengwei Yang)
 2379   · dbus-monitor: be portable to NetBSD (fd.o #69842, Chengwei Yang)
 2380   · dbus-launch: stop using non-portable asprintf (fd.o #37849, Simon)
 2381   · Improve error reporting from the setuid activation helper (fd.o #66728,
 2382     Chengwei Yang)
 2383 
 2384 • Windows-specific:
 2385   · Remove unavailable command-line options from 'dbus-daemon --help'
 2386     (fd.o #42441, Ralf Habacker)
 2387   · Add support for looking up local TCPv4 clients' credentials on
 2388     Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
 2389     function (fd.o #66060, Ralf Habacker)
 2390   · Fix insufficient dependency-tracking (fd.o #68505, Simon McVittie)
 2391   · Don't include wspiapi.h, fixing a compiler warning (fd.o #68852,
 2392     Simon McVittie)
 2393 
 2394 • Internal changes:
 2395   · add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
 2396     conditionals (fd.o #66142, Chengwei Yang)
 2397   · improve verbose-mode output (fd.o #63047, Colin Walters)
 2398   · consolidate Autotools and CMake build (fd.o #64875, Ralf Habacker)
 2399   · fix various unused variables, unusual build configurations
 2400     etc. (fd.o #65712, #65990, #66005, #66257, #69165, #69410, #70218;
 2401     Chengwei Yang, Vasiliy Balyasnyy)
 2402 
 2403 D-Bus 1.7.4 (2013-06-13)
 2404 ==
 2405 
 2406 The “but is your thread-safety thread-safe?” release.
 2407 
 2408 Security fixes:
 2409 
 2410 • CVE-2013-2168: Fix misuse of va_list that could be used as a denial
 2411   of service for system services. Vulnerability reported by Alexandru Cornea.
 2412   (Simon)
 2413 
 2414 Dependencies:
 2415 
 2416 • The Windows version of libdbus now contains a C++ source file, used
 2417   to provide global initialization when the library is loaded.
 2418   gcc (mingw*) users should ensure that g++ is also installed.
 2419 
 2420 • The libxml2-based configuration reader (which hasn't worked for 2.5 years,
 2421   and was never the recommended option) has been removed. Expat is now a
 2422   hard dependency.
 2423 
 2424 Enhancements:
 2425 
 2426 • It should now be safe to call dbus_threads_init_default() from any thread,
 2427   at any time. Authors of loadable modules and plugins that use libdbus
 2428   should consider doing so during initialization.
 2429   (fd.o #54972, Simon McVittie)
 2430 
 2431 • Improve dbus-send documentation and command-line parsing (fd.o #65424,
 2432   Chengwei Yang)
 2433 
 2434 Unix-specific:
 2435   · dbus-run-session: experimental new tool to start a temporary D-Bus
 2436     session, e.g. for regression tests or a text console, replacing
 2437     certain uses of dbus-launch which weren't really correct
 2438     (fd.o #39196, Simon)
 2439 
 2440 Other fixes:
 2441 
 2442 • In dbus-daemon, don't crash if a .service file starts with key=value
 2443   (fd.o #60853, Chengwei Yang)
 2444 
 2445 • Unix-specific:
 2446   · Fix a crash similar to CVE-2013-2168 the first time we try to use syslog
 2447     on a platform not defining LOG_PERROR, such as Solaris or QNX.
 2448     This regressed in 1.7.0. (Simon)
 2449   · Fix an assertion failure if we try to activate systemd services before
 2450     systemd connects to the bus (fd.o #50199, Chengwei Yang)
 2451   · Avoid compiler warnings for ignoring the return from write()
 2452     (Chengwei Yang)
 2453 
 2454 • Windows-specific:
 2455   · Under cmake, install runtime libraries (DLLs) into bin/ instead of lib/
 2456     so that Windows finds them (fd.o #59733, Ralf Habacker)
 2457 
 2458 D-Bus 1.7.2 (2013-04-25)
 2459 ==
 2460 
 2461 The “only partially opaque” release.
 2462 
 2463 Configuration changes:
 2464 
 2465 • On non-QNX Unix platforms, the default limit on fds per message in the
 2466   session bus configuration has reduced from 4096 to 1024. The default
 2467   limit used on the system bus was already 1024. On QNX, both limits are
 2468   reduced further, to 128.
 2469 
 2470 Enhancements:
 2471 
 2472 • D-Bus Specification 0.21
 2473   · Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
 2474     U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fd.o #63072,
 2475     Simon McVittie)
 2476 
 2477 Fixes:
 2478 
 2479 • Diagnose incorrect use of dbus_connection_get_data() with negative slot
 2480   (i.e. before allocating the slot) rather than returning junk
 2481   (fd.o #63127, Dan Williams)
 2482 
 2483 • Fix a cmake build regression since 1.7.0 (fd.o #63682; Ralf Habacker,
 2484   Simon McVittie)
 2485 
 2486 • Unix-specific:
 2487   · On Linux, link successfully with glibc 2.17 (fd.o #63166, Simon McVittie)
 2488   · Under systemd, log to syslog only, not stderr, avoiding duplication
 2489     (fd.o #61399, #39987; Colin Walters, Dagobert Michelsen)
 2490   · Under systemd, remove unnecessary dependency on syslog.socket
 2491     (fd.o #63531, Cristian Rodríguez)
 2492   · Include alloca.h for alloca() if available, fixing compilation on
 2493     Solaris 10 (fd.o #63071, Dagobert Michelsen)
 2494   · Allow use of systemd-logind without the rest of systemd
 2495     (fd.o #62585, Martin Pitt)
 2496   · When built with CMake, link to librt and use the right path for
 2497     meinproc's XSLT stylesheets (fd.o #61637, Ralf Habacker)
 2498   · Reduce the default limit on number of fds per message to 128 under
 2499     QNX, working around an arbitrary OS limit (fd.o #61176, Matt Fischer)
 2500 
 2501 • Windows-specific:
 2502   · Do not claim that all bus clients have the dbus-daemon's credentials;
 2503     pick up local TCPv4 clients' credentials (process ID and security
 2504     identifier, i.e. user) using GetExtendedTcpTable() (fd.o #61787,
 2505     Ralf Habacker)
 2506 
 2507 D-Bus 1.7.0 (2013-02-22)
 2508 ==
 2509 
 2510 The "Disingenuous Assertions" release.
 2511 
 2512 This is a new development release, starting the 1.7.x branch. D-Bus 1.6
 2513 remains the recommended version for long-term-supported distributions
 2514 or the upcoming GNOME 3.8 release.
 2515 
 2516 Build-time configuration changes:
 2517 
 2518 • The --with-dbus-session-bus-default-address configure option is no longer
 2519   supported. Use the new --with-dbus-session-bus-connect-address and
 2520   --with-dbus-session-bus-listen-address options instead. On Windows, you
 2521   usually want them to have the same argument; on Unix, the defaults are
 2522   usually correct.
 2523 
 2524 • Similarly, the DBUS_SESSION_BUS_DEFAULT_ADDRESS CMake variable is no longer
 2525   supported; use the new DBUS_SESSION_BUS_LISTEN_ADDRESS and
 2526   DBUS_SESSION_BUS_CONNECT_ADDRESS variables instead.
 2527 
 2528 • cmake/cross-compile.sh has been removed. Instead, please use a
 2529   cross-toolchain file (-DCMAKE_TOOLCHAIN_FILE) as documented at
 2530   <http://www.vtk.org/Wiki/CMake_Cross_Compiling>; or use Autotools
 2531   as documented in "info automake Cross-Compilation", and set
 2532   PKG_CONFIG_PATH appropriately.
 2533 
 2534 Requirements:
 2535 
 2536 • Man pages now require xmlto (or either xmlto or meinproc, if using CMake).
 2537 • man2html is no longer used.
 2538 
 2539 Enhancements:
 2540 
 2541 • D-Bus Specification 0.20
 2542   · actually say that /org/freedesktop/DBus is the object that
 2543     implements o.fd.DBus (fd.o #51865, Colin Walters)
 2544   · various reorganisation for better clarity (fd.o #38252, Simon McVittie)
 2545   · stop claiming that all basic types work just like INT32 (strings don't!)
 2546 
 2547 • The "source code" for the man pages is now Docbook XML, eliminating
 2548   the outdated duplicate copies used when building with CMake.
 2549   (fd.o #59805; Ralf Habacker, Simon McVittie)
 2550 
 2551 Fixes:
 2552 
 2553 • In the activation helper, when compiled for tests, do not reset the system
 2554   bus address, fixing the regression tests. (fd.o #52202, Simon)
 2555 
 2556 • Fix building with Valgrind 3.8, at the cost of causing harmless warnings
 2557   with Valgrind 3.6 on some compilers (fd.o #55932, Arun Raghavan)
 2558 
 2559 • Merge <servicehelper> from system-local.conf if necessary (fd.o #51560,
 2560   Krzysztof Konopko)
 2561 
 2562 • Under CMake, prefer xmlto over meinproc (fd.o #59733, Ralf Habacker)
 2563 
 2564 • Stop duplicating CMake's own logic to find libexpat
 2565   (fd.o #59733, Ralf Habacker)
 2566 
 2567 • Don't assume CMake host and build system are the same (fd.o #59733,
 2568   Ralf Habacker)
 2569 
 2570 • Avoid deprecation warnings for GLib 2.35 (fd.o #59971, Simon McVittie)
 2571 
 2572 • Unix-specific:
 2573   · Check for functions in libpthread correctly, fixing compilation on
 2574     (at least) OpenBSD (fd.o #47239, Simon)
 2575   · Don't leak temporary fds pointing to /dev/null (fd.o #56927,
 2576     Michel HERMIER)
 2577   · Update sd-daemon.[ch] from systemd (fd.o #60681)
 2578   · Add partial support for QNX (fd.o #60339, fd.o #61176; Matt Fischer)
 2579 
 2580 • Windows-specific:
 2581   · The default session bus listening and connecting address is now
 2582     "autolaunch:", which makes D-Bus on Windows interoperate with itself
 2583     and GDBus "out of the box". Use the configure options and cmake variables
 2584     described above if you require a different autolaunch scope.
 2585     (fd.o #38201, Simon McVittie)
 2586   · Avoid a CMake warning under Cygwin (fd.o #59401, Ralf Habacker)
 2587 
 2588 • Create session.d, system.d directories under CMake (fd.o #41319,
 2589   Ralf Habacker)
 2590 
 2591 D-Bus 1.6.8 (2012-09-28)
 2592 ==
 2593 
 2594 The "Fix one thing, break another" release.
 2595 
 2596 • Follow up to CVE-2012-3524: The additional hardening
 2597   work to use __secure_getenv() as a followup to bug #52202
 2598   broke certain configurations of gnome-keyring.  Given
 2599   the difficulty of making this work without extensive
 2600   changes to gnome-keyring, use of __secure_getenv() is
 2601   deferred.
 2602 
 2603 D-Bus 1.6.6 (2012-09-28)
 2604 ==
 2605 
 2606 The "Clear the environment in your setuid binaries, please" release.
 2607 
 2608 • CVE-2012-3524: Don't access environment variables (fd.o #52202)
 2609   Thanks to work and input from Colin Walters, Simon McVittie,
 2610   Geoffrey Thomas, and others.
 2611 • Unix-specific:
 2612   · Fix compilation on Solaris (fd.o #53286, Jonathan Perkin)
 2613   · Work around interdependent headers on OpenBSD by including sys/types.h
 2614     before each use of sys/socket.h (fd.o #54418, Brad Smith)
 2615 
 2616 D-Bus 1.6.4 (2012-07-18)
 2617 ==
 2618 
 2619 • Detect that users are "at the console" correctly when configured with
 2620   a non-default path such as --enable-console-auth-dir=/run/console
 2621   (fd.o #51521, Dave Reisner)
 2622 
 2623 • Remove an incorrect assertion from DBusTransport (fd.o #51657,
 2624   Simon McVittie)
 2625 
 2626 • Make --enable-developer default to "no" (regression in 1.6.2;
 2627   fd.o #51657, Simon McVittie)
 2628 
 2629 • Windows-specific:
 2630   · Launch dbus-daemon correctly if its path contains a space
 2631     (fd.o #49450, Wolfgang Baron)
 2632 
 2633 D-Bus 1.6.2 (2012-06-27)
 2634 ==
 2635 
 2636 The "Ice Cabbage" release.
 2637 
 2638 • Change how we create /var/lib/dbus so it works under Automake >= 1.11.4
 2639   (fd.o #51406, Simon McVittie)
 2640 
 2641 • Don't return from dbus_pending_call_set_notify with a lock held on OOM
 2642   (fd.o #51032, Simon McVittie)
 2643 
 2644 • Disconnect "developer mode" (assertions, verbose mode etc.) from
 2645   Automake maintainer mode. D-Bus developers should now configure with
 2646   --enable-developer. Automake maintainer mode is now on by default;
 2647   distributions can disable it with --disable-maintainer-mode.
 2648   (fd.o #34671, Simon McVittie)
 2649 
 2650 • Automatically define DBUS_STATIC_BUILD in static-only Autotools builds,
 2651   fixing linking when targeting Windows (fd.o #33973; william, Simon McVittie)
 2652 
 2653 • Unix-specific:
 2654   · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
 2655 
 2656 D-Bus 1.6.0 (2012-06-05)
 2657 ==
 2658 
 2659 The “soul of this machine has improved” release.
 2660 
 2661 This version starts a new stable branch of D-Bus: only bug fixes will
 2662 be accepted into 1.6.x. Other changes will now go to the 1.7.x branch.
 2663 
 2664 Summary of changes since 1.4.x:
 2665 
 2666 • New requirements
 2667   · PTHREAD_MUTEX_RECURSIVE on Unix
 2668   · compiler support for 64-bit integers (int64_t or equivalent)
 2669 
 2670 • D-Bus Specification v0.19
 2671 
 2672 • New dbus-daemon features
 2673   · <allow own_prefix="com.example.Service"/> rules allow the service to
 2674     own names like com.example.Service.Instance3
 2675   · optional systemd integration when checking at_console policies
 2676   · --nopidfile option, mainly for use by systemd
 2677   · path_namespace and arg0namespace may appear in match rules
 2678   · eavesdropping is disabled unless the match rule contains eavesdrop=true
 2679 
 2680 • New public API
 2681   · functions to validate various string types (dbus_validate_path() etc.)
 2682   · dbus_type_is_valid()
 2683   · DBusBasicValue, a union of every basic type
 2684 
 2685 • Bug fixes
 2686   · removed an unsafe reimplementation of recursive mutexes
 2687   · dbus-daemon no longer busy-loops if it has far too many file descriptors
 2688   · dbus-daemon.exe --print-address works on Windows
 2689   · all the other bug fixes from 1.4.20
 2690 
 2691 • Other major implementation changes
 2692   · on Linux, dbus-daemon uses epoll if supported, for better scalability
 2693   · dbus_threads_init() ignores its argument and behaves like
 2694     dbus_threads_init_default() instead
 2695   · removed the per-connection link cache, improving dbus-daemon performance
 2696 
 2697 • Developer features
 2698   · optional Valgrind instrumentation (--with-valgrind)
 2699   · optional Stats interface on the dbus-daemon (--enable-stats)
 2700   · optionally abort whenever malloc() fails (--enable-embedded-tests
 2701     and export DBUS_MALLOC_CANNOT_FAIL=1)
 2702 
 2703 Changes since 1.5.12:
 2704 
 2705 • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
 2706   spec-compliance (fd.o #48580, David Zeuthen)
 2707 
 2708 • Don't use install(1) within the source/build trees, fixing the build as
 2709   non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
 2710 
 2711 • Add missing commas in some tcp and nonce-tcp addresses, and remove
 2712   an unused duplicate copy of the nonce-tcp transport in Windows builds
 2713   (fd.o #45896, Simon McVittie)
 2714 
 2715 D-Bus 1.5.12 (2012-03-27)
 2716 ==
 2717 
 2718 The “Big Book of Science” release.
 2719 
 2720 • Add public API to validate various string types:
 2721   dbus_validate_path(), dbus_validate_interface(), dbus_validate_member(),
 2722   dbus_validate_error_name(), dbus_validate_bus_name(), dbus_validate_utf8()
 2723   (fd.o #39549, Simon McVittie)
 2724 
 2725 • Turn DBusBasicValue into public API so bindings don't need to invent their
 2726   own "union of everything" type (fd.o #11191, Simon McVittie)
 2727 
 2728 • Enumerate data files included in the build rather than using find(1)
 2729   (fd.o #33840, Simon McVittie)
 2730 
 2731 • Add support for policy rules like <allow own_prefix="com.example.Service"/>
 2732   in dbus-daemon (fd.o #46273, Alban Crequy)
 2733 
 2734 • Windows-specific:
 2735   · make dbus-daemon.exe --print-address (and --print-pid) work again
 2736     on Win32, but not on WinCE (fd.o #46049, Simon McVittie)
 2737   · fix duplicate case value when compiling against mingw-w64
 2738     (fd.o #47321, Andoni Morales Alastruey)
 2739 
 2740 D-Bus 1.5.10 (2012-02-21)
 2741 ==
 2742 
 2743 The "fire in Delerium" release.
 2744 
 2745 On Unix platforms, PTHREAD_MUTEX_RECURSIVE (as specified in POSIX 2008 Base
 2746 and SUSv2) is now required.
 2747 
 2748 • D-Bus Specification 0.19:
 2749   · Formally define unique connection names and well-known bus names,
 2750     and document best practices for interface, bus, member and error names,
 2751     and object paths (fd.o #37095, Simon McVittie)
 2752   · Document the search path for session and system services on Unix, and
 2753     where they should be installed by build systems (fd.o #21620, fd.o #35306;
 2754     Simon McVittie)
 2755   · Document the systemd transport (fd.o #35232, Lennart Poettering)
 2756 
 2757 • Make dbus_threads_init() use the same built-in threading implementation
 2758   as dbus_threads_init_default(); the user-specified primitives that it
 2759   takes as a parameter are now ignored (fd.o #43744, Simon McVittie)
 2760 
 2761 • Allow all configured auth mechanisms, not just one (fd.o #45106,
 2762   Pavel Strashkin)
 2763 
 2764 • Improve cmake build system (Ralf Habacker):
 2765   · simplify XML parser dependencies (fd.o #41027)
 2766   · generate build timestamp (fd.o #41029)
 2767   · only create batch files on Windows
 2768   · fix option and cache syntax
 2769   · add help-options target
 2770   · share dbus-arch-deps.h.in with autotools rather than having our
 2771     own version (fd.o #41033)
 2772 
 2773 • Build tests successfully with older GLib, as found in e.g. Debian 6
 2774   (fd.o #41219, Simon McVittie)
 2775 
 2776 • Avoid use of deprecated GThread API (fd.o #44413, Martin Pitt)
 2777 
 2778 • Build documentation correctly if man2html doesn't support filenames on
 2779   its command-line (fd.o #43875, Jack Nagel)
 2780 
 2781 • Improve test coverage. To get even more coverage, run the tests with
 2782   DBUS_TEST_SLOW=1 (fd.o #38285, #42811; Simon McVittie)
 2783 
 2784 • Reduce the size of the shared library by moving functionality only used
 2785   by dbus-daemon, tests etc. into their internal library and deleting
 2786   unused code (fd.o #34976, #39759; Simon McVittie)
 2787 
 2788 • Add dbus-daemon --nopidfile option, overriding the configuration, for
 2789   setups where the default configuration must include <pidfile/> to avoid
 2790   breaking traditional init, but the pid file is in fact unnecessary; use
 2791   it under systemd to improve startup time a bit (fd.o #45520,
 2792   Lennart Poettering)
 2793 
 2794 • Optionally (if configured --with-valgrind) add instrumentation to debug
 2795   libdbus and associated tools more meaningfully under Valgrind
 2796   (fd.o #37286, Simon McVittie)
 2797 
 2798 • Improve the dbus-send(1) man page (fd.o #14005, Simon McVittie)
 2799 
 2800 • Make dbus-protocol.h compatible with C++11 (fd.o #46147, Marc Mutz)
 2801 
 2802 • If tests are enabled and DBUS_MALLOC_CANNOT_FAIL is set in the environment,
 2803   abort on failure to malloc() (like GLib does), to turn runaway memory leaks
 2804   into a debuggable core-dump if a resource limit is applied (fd.o #41048,
 2805   Simon McVittie)
 2806 
 2807 • Don't crash if realloc() returns NULL in a debug build (fd.o #41048,
 2808   Simon McVittie)
 2809 
 2810 • Unix-specific:
 2811   · Replace our broken reimplementation of recursive mutexes, which has
 2812     been broken since 2006, with an ordinary pthreads recursive mutex
 2813     (fd.o #43744; Sigmund Augdal, Simon McVittie)
 2814   · Use epoll(7) for a more efficient main loop in Linux; equivalent patches
 2815     welcomed for other OSs' equivalents like kqueue, /dev/poll, or Solaris
 2816     event ports (fd.o #33337; Simon McVittie, Ralf Habacker)
 2817   · When running under systemd, use it instead of ConsoleKit to check
 2818     whether to apply at_console policies (fd.o #39609, Lennart Poettering)
 2819   · Avoid a highly unlikely fd leak (fd.o #29881, Simon McVittie)
 2820   · Don't close invalid fd -1 if getaddrinfo fails (fd.o #37258, eXeC001er)
 2821   · Don't touch ~/.dbus and ~/.dbus-keyrings when running 'make installcheck'
 2822     (fd.o #41218, Simon McVittie)
 2823   · Stop pretending we respect XDG_DATA_DIRS for system services: the launch
 2824     helper doesn't obey environment variables to avoid privilege escalation
 2825     attacks, so make the system bus follow the same rules
 2826     (fd.o #21620, Simon McVittie)
 2827 
 2828 • Windows-specific:
 2829   · Find the dbus-daemon executable next to the shared library (fd.o #41558;
 2830     Jesper Dam, Ralf Habacker)
 2831   · Remove the faulty implementation of _dbus_condvar_wake_all (fd.o #44609,
 2832     Simon McVittie)
 2833 
 2834 D-Bus 1.5.8 (2011-09-21)
 2835 ==
 2836 
 2837 The "cross-metering" release.
 2838 
 2839 In addition to dead code removal and refactoring, this release contains all
 2840 of the bugfixes from 1.4.16.
 2841 
 2842 • Clean up dead code, and make more warnings fatal in development builds
 2843   (fd.o #39231, fd.o #41012; Simon McVittie)
 2844 
 2845 • If full test coverage is requested via --enable-tests, strictly require
 2846   Python, pygobject and dbus-python, which are required by some tests; if not,
 2847   and Python is missing, skip those tests rather than failing
 2848   (fd.o #37847, Simon McVittie)
 2849 
 2850 • When using cmake, provide the same version-info API in the installed headers
 2851   as for autotools (DBUS_VERSION, etc.) (fd.o #40905, Ralf Habacker)
 2852 
 2853 • Add a regression test for fd.o #38005 (fd.o #39836, Simon McVittie)
 2854 
 2855 • Make "NOCONFIGURE=1 ./autogen.sh" not run configure (Colin Walters)
 2856 
 2857 • Add _DBUS_STATIC_ASSERT and use it to check invariants (fd.o #39636,
 2858   Simon McVittie)
 2859 
 2860 • Fix duplicates in authors list (Ralf Habacker)
 2861 
 2862 • Fix broken links from dbus-tutorial.html if $(htmldir) != $(docdir)
 2863   (fd.o #39879, Chris Mayo)
 2864 
 2865 • Fix a small memory leak, and a failure to report errors, when updating
 2866   a service file entry for activation (fd.o #39230, Simon McVittie)
 2867 
 2868 • Unix-specific:
 2869   · Clean up (non-abstract) Unix sockets on bus daemon exit (fd.o #38656;
 2870     Brian Cameron, Simon McVittie)
 2871   · On systems that use libcap-ng but not systemd, drop supplemental groups
 2872     when switching to the daemon user (Red Hat #726953, Steve Grubb)
 2873   · Make the cmake build work again on GNU platforms (fd.o #29228,
 2874     Simon McVittie)
 2875   · Fix compilation on non-C99 systems that have inttypes.h but not stdint.h,
 2876     like Solaris (fd.o #40313, Dagobert Michelsen)
 2877   · Define CMSG_ALIGN, CMSG_LEN, CMSG_SPACE on Solaris < 10
 2878     (fd.o #40235, Simon McVittie)
 2879   · Cope with Unixes that don't have LOG_PERROR, like Solaris 10
 2880     (fd.o #39987, Simon McVittie)
 2881   · Cope with platforms whose vsnprintf violates both POSIX and C99, like
 2882     Tru64, IRIX and HP-UX (fd.o #11668, Simon McVittie)
 2883 
 2884 • Windows-specific:
 2885   · Fix compilation on MSVC, which doesn't understand "inline" with its
 2886     C99 meaning (fd.o #40000; Ralf Habacker, Simon McVittie)
 2887   · Fix misuse of GPid in test/dbus-daemon.c (fd.o #40003, Simon McVittie)
 2888   · Fix cross-compilation to Windows with Automake (fd.o #40003, Simon McVittie)
 2889 
 2890 D-Bus 1.5.6 (2011-07-29)
 2891 ==
 2892 
 2893 The "weird, gravy-like aftertaste" release.
 2894 
 2895 In addition to new features and refactoring, this release contains all of the
 2896 bugfixes from 1.4.14.
 2897 
 2898 Potentially incompatible (Bustle and similar debugging tools will need
 2899 changes to work as intended):
 2900 
 2901 • Do not allow match rules to "eavesdrop" (receive messages intended for a
 2902   different recipient) by mistake: eavesdroppers must now opt-in to this
 2903   behaviour by putting "eavesdrop='true'" in the match rule, which will
 2904   not have any practical effect on buses where eavesdropping is not allowed
 2905   (fd.o #37890, Cosimo Alfarano)
 2906 
 2907 Other changes:
 2908 
 2909 • D-Bus Specification version 0.18 (fd.o #37890, fd.o #39450, fd.o #38252;
 2910   Cosimo Alfarano, Simon McVittie)
 2911   · add the "eavesdrop" keyword to match rules
 2912   · define eavesdropping, unicast messages and broadcast messages
 2913   · stop claiming that match rules are needed to match unicast messages to you
 2914   · promote the type system to be a top-level section
 2915 
 2916 • Use DBUS_ERROR_OBJECT_PATH_IN_USE if dbus_connection_try_register_object_path
 2917   or dbus_connection_try_register_fallback fails, not ...ADDRESS_IN_USE,
 2918   and simplify object-path registration (fd.o #38874, Jiří Klimeš)
 2919 
 2920 • Consistently use atomic operations on everything that is ever manipulated
 2921   via atomic ops, as was done for changes to DBusConnection's refcount in
 2922   1.4.12 (fd.o #38005, Simon McVittie)
 2923 
 2924 • Fix a file descriptor leak when connecting to a TCP socket (fd.o #37258,
 2925   Simon McVittie)
 2926 
 2927 • Make "make check" in a clean tree work, by not running tests until
 2928   test data has been set up (fd.o #34405, Simon McVittie)
 2929 
 2930 • The dbus-daemon no longer busy-loops if it has a very large number of file
 2931   descriptors (fd.o #23194, Simon McVittie)
 2932 
 2933 • Refactor message flow through dispatching to avoid locking violations if
 2934   the bus daemon's message limit is hit; remove the per-connection link cache,
 2935   which was meant to improve performance, but now reduces it (fd.o #34393,
 2936   Simon McVittie)
 2937 
 2938 • Some cmake fixes (Ralf Habacker)
 2939 
 2940 • Remove dead code, mainly from DBusString (fd.o #38570, fd.o #39610;
 2941   Simon McVittie, Lennart Poettering)
 2942 
 2943 • Stop storing two extra byte order indicators in each D-Bus message
 2944   (fd.o #38287, Simon McVittie)
 2945 
 2946 • Add an optional Stats interface which can be used to get statistics from
 2947   a running dbus-daemon if enabled at configure time with --enable-stats
 2948   (fd.o #34040, Simon McVittie)
 2949 
 2950 • Fix various typos (fd.o #27227, fd.o #38284; Sascha Silbe, Simon McVittie)
 2951 
 2952 • Documentation (fd.o #36156, Simon McVittie):
 2953   · let xsltproc be overridden as usual: ./configure XSLTPROC=myxsltproc
 2954   · install more documentation automatically, including man2html output
 2955   · put dbus.devhelp in the right place (it must go in ${htmldir})
 2956 
 2957 • Unix-specific:
 2958   · look for system services in /lib/dbus-1/system-services in addition to all
 2959     the other well-known locations; note that this should always be /lib,
 2960     even on platforms where shared libraries on the root FS would go in /lib64,
 2961     /lib/x86_64-linux-gnu or similar (fd.o #35229, Lennart Poettering)
 2962   · opt-in to fd passing on Solaris (fd.o #33465, Simon McVittie)
 2963 
 2964 • Windows-specific (Ralf Habacker):
 2965   · fix use of a mutex for autolaunch server detection
 2966   · don't crash on malloc failure in _dbus_printf_string_upper_bound
 2967 
 2968 D-Bus 1.5.4 (2011-06-10)
 2969 ==
 2970 
 2971 Security (local denial of service):
 2972 
 2973 • Byte-swap foreign-endian messages correctly, preventing a long-standing
 2974   local DoS if foreign-endian messages are relayed through the dbus-daemon
 2975   (backporters: this is git commit c3223ba6c401ba81df1305851312a47c485e6cd7)
 2976   (CVE-2011-2200, fd.o #38120, Debian #629938; Simon McVittie)
 2977 
 2978 New things:
 2979 
 2980 • The constant to use for an infinite timeout now has a name,
 2981   DBUS_TIMEOUT_INFINITE. It is numerically equivalent to 0x7fffffff (INT32_MAX)
 2982   which can be used for source compatibility with older versions of libdbus.
 2983 
 2984 • If GLib and DBus-GLib are already installed, more tests will be built,
 2985   providing better coverage. The new tests can also be installed via
 2986       ./configure --enable-installed-tests
 2987   for system integration testing, if required. (fd.o #34570, Simon McVittie)
 2988 
 2989 Changes:
 2990 
 2991 • Consistently use atomic operations for the DBusConnection's refcount,
 2992   fixing potential threading problems (fd.o #38005, Simon McVittie)
 2993 
 2994 • Don't use -Wl,--gc-sections by default: in practice the size decrease is
 2995   small (300KiB on x86-64) and it frequently doesn't work in unusual
 2996   toolchains. To optimize for minimum installed size, you should benchmark
 2997   various possibilities for CFLAGS and LDFLAGS, and set the best flags for
 2998   your particular toolchain at configure time. (fd.o #33466, Simon McVittie)
 2999 
 3000 • Use #!/bin/sh for run-with-tmp-session-bus.sh, making it work on *BSD
 3001   (fd.o #35880, Timothy Redaelli)
 3002 
 3003 • Use ln -fs to set up dbus for systemd, which should fix reinstallation
 3004   when not using a DESTDIR (fd.o #37870, Simon McVittie)
 3005 
 3006 • Windows-specific changes:
 3007   · don't try to build dbus-daemon-launch-helper (fd.o #37838, Mark Brand)
 3008 
 3009 D-Bus 1.5.2 (2011-06-01)
 3010 ==
 3011 
 3012 The "Boar Hunter" release.
 3013 
 3014 Notes for distributors:
 3015 
 3016   This version of D-Bus no longer uses -fPIE by default. Distributions wishing
 3017   to harden the dbus-daemon and dbus-launch-helper can re-enable this if their
 3018   toolchain supports it reliably, via something like:
 3019 
 3020     ./configure CFLAGS=-fPIE LDFLAGS="-pie -Wl,-z,relro"
 3021 
 3022   or by using distribution-specific wrappers such as Debian's hardening-wrapper.
 3023 
 3024 Changes:
 3025 
 3026   • D-Bus Specification v0.17
 3027     · Reserve the extra characters used in signatures by GVariant
 3028       (fd.o #34529, Simon McVittie)
 3029     · Define the ObjectManager interface (fd.o #34869, David Zeuthen)
 3030   • Don't force -fPIE: distributions and libtool know better than we do whether
 3031     it's desirable (fd.o #16621, fd.o #27215; Simon McVittie)
 3032   • Allow --disable-gc-sections, in case your toolchain offers the
 3033     -ffunction-sections, -fdata-sections and -Wl,--gc-sections options
 3034     but they're broken, as seen on Solaris (fd.o #33466, Simon McVittie)
 3035   • Install dbus-daemon and dbus-daemon-launch-helper in a more normal way
 3036     (fd.o #14512; Simon McVittie, loosely based on a patch from Luca Barbato)
 3037   • Ensure that maintainers upload documentation with the right permissions
 3038     (fd.o #36130, Simon McVittie)
 3039   • Don't force users of libdbus to be linked against -lpthread, -lrt
 3040     (fd.o #32827, Simon McVittie)
 3041   • Log system-bus activation information to syslog (fd.o #35705,
 3042     Colin Walters)
 3043   • Log messages dropped due to quotas to syslog (fd.o #35358,
 3044     Simon McVittie)
 3045   • Make the nonce-tcp transport work on Unix (fd.o #34569, Simon McVittie)
 3046   • On Unix, if /var/lib/dbus/machine-id cannot be read, try /etc/machine-id
 3047     (fd.o #35228, Lennart Poettering)
 3048   • In the regression tests, don't report fds as "leaked" if they were open
 3049     on startup (fd.o #35173, Simon McVittie)
 3050   • Make dbus-monitor bail out if asked to monitor more than one bus,
 3051     rather than silently using the last one (fd.o #26548, Will Thompson)
 3052   • Clarify documentation (fd.o #35182, Simon McVittie)
 3053   • Clean up minor dead code and some incorrect error handling
 3054     (fd.o #33128, fd.o #29881; Simon McVittie)
 3055   • Check that compiler options are supported before using them (fd.o #19681,
 3056     Simon McVittie)
 3057   • Windows:
 3058     • Remove obsolete workaround for winioctl.h (fd.o #35083, Ralf Habacker)
 3059 
 3060 D-Bus 1.5.0 (2011-04-11)
 3061 ==
 3062 
 3063 The "you never know when you need to tow something from your giant
 3064 flying shark" release.
 3065 
 3066   • D-Bus Specification v0.16
 3067     · Add support for path_namespace and arg0namespace in match rules
 3068       (fd.o #24317, #34870; Will Thompson, David Zeuthen, Simon McVittie)
 3069     · Make argNpath support object paths, not just object-path-like strings,
 3070       and document it better (fd.o #31818, Will Thompson)
 3071   • Let the bus daemon implement more than one interface (fd.o #33757,
 3072     Simon McVittie)
 3073   • Optimize _dbus_string_replace_len to reduce waste (fd.o #21261,
 3074     Roberto Guido)
 3075   • Require user intervention to compile with missing 64-bit support
 3076     (fd.o #35114, Simon McVittie)
 3077   • Add dbus_type_is_valid as public API (fd.o #20496, Simon McVittie)
 3078   • Raise UnknownObject instead of UnknownMethod for calls to methods on
 3079     paths that are not part of the object tree, and UnknownInterface for calls
 3080     to unknown interfaces in the bus daemon (fd.o #34527, Lennart Poettering)
 3081 
 3082 D-Bus 1.4.8 (2011-04-08)
 3083 ==
 3084 
 3085 The "It's like the beginning of a lobster" release.
 3086 
 3087   • Rename configure.in to configure.ac, and update it to modern conventions
 3088     (fd.o #32245; Javier Jardón, Simon McVittie)
 3089   • Correctly give XDG_DATA_HOME priority over XDG_DATA_DIRS (fd.o #34496,
 3090     Anders Kaseorg)
 3091   • Prevent X11 autolaunching if $DISPLAY is unset or empty, and add
 3092     --disable-x11-autolaunch configure option to prevent it altogether
 3093     in embedded environments (fd.o #19997, NB#219964; Simon McVittie)
 3094   • Install the documentation, and an index for Devhelp (fd.o #13495,
 3095     Debian #454142; Simon McVittie, Matthias Clasen)
 3096   • If checks are not disabled, check validity of string-like types and
 3097     booleans when sending them (fd.o #16338, NB#223152; Simon McVittie)
 3098   • Add UnknownObject, UnknownInterface, UnknownProperty and PropertyReadOnly
 3099     errors to dbus-shared.h (fd.o #34527, Lennart Poettering)
 3100   • Break up a huge conditional in config-parser so gcov can produce coverage
 3101     data (fd.o #10887, Simon McVittie)
 3102   • List which parts of the Desktop Entry specification are applicable to
 3103     .service files (fd.o #19159, Sven Herzberg)
 3104   • Don't suppress service activation if two services have the same Exec=
 3105     (fd.o #35750, Colin Walters)
 3106   • Windows:
 3107     · Avoid the name ELEMENT_TYPE due to namespace-pollution from winioctl.h
 3108       (Andre Heinecke)
 3109     · Include _dbus_path_is_absolute in libdbus on Windows, fixing compilation
 3110       (fd.o #32805, Mark Brand)
 3111 
 3112 D-Bus 1.4.6 (2010-02-17)
 3113 ==
 3114 
 3115 The "1, 2, miss a few, 99, 100" release.
 3116 
 3117   • Remove unfinished changes intended to support GTest-based tests,
 3118     which were mistakenly included in 1.4.4
 3119 
 3120 D-Bus 1.4.4 (2010-02-17)
 3121 ==
 3122 
 3123   • Switch back to using even micro versions for stable releases; 1.4.1
 3124     should have been called 1.4.2, so skip that version number
 3125   • Don't leave bad file descriptors being watched when spawning processes,
 3126     which could result in a busy-loop (fd.o #32992, NB#200248; possibly
 3127     also LP#656134, LP#680444, LP#713157)
 3128   • Check for MSG_NOSIGNAL correctly
 3129   • Fix failure to detect abstract socket support (fd.o #29895)
 3130   • Make _dbus_system_logv actually exit with DBUS_SYSTEM_LOG_FATAL
 3131     (fd.o #32262, NB#180486)
 3132   • Improve some error code paths (fd.o #29981, fd.o #32264, fd.o #32262,
 3133     fd.o #33128, fd.o #33277, fd.o #33126, NB#180486)
 3134   • Avoid possible symlink attacks in /tmp during compilation (fd.o #32854)
 3135   • Tidy up dead code (fd.o #25306, fd.o #33128, fd.o #34292, NB#180486)
 3136   • Improve gcc malloc annotations (fd.o #32710)
 3137   • If the system bus is launched via systemd, protect it from the OOM killer
 3138   • Documentation improvements (fd.o #11190)
 3139   • Avoid readdir_r, which is difficult to use correctly (fd.o #8284,
 3140     fd.o #15922, LP#241619)
 3141   • Cope with invalid files in session.d, system.d (fd.o #19186,
 3142     Debian #230231)
 3143   • Don't distribute generated files that embed our builddir (fd.o #30285,
 3144     fd.o #34292)
 3145   • Raise the system bus's fd limit to be sufficient for its configuration
 3146     (fd.o #33474, LP#381063)
 3147   • Fix syslog string processing
 3148   • Ignore -Waddress
 3149   • Remove broken gcov parsing code and --enable-gcov, and replace them
 3150     with lcov HTML reports and --enable-compiler-coverage (fd.o #10887)
 3151   • Windows:
 3152     · avoid live-lock in Windows CE due to unfair condition variables
 3153   • OpenBSD:
 3154     · support credentials-passing (fd.o #32542)
 3155   • Solaris:
 3156     · opt-in to thread safety (fd.o #33464)
 3157 
 3158 D-Bus 1.4.1 (20 December 2010)
 3159 ==
 3160 
 3161  • Fix for CVE-2010-4352: sending messages with excessively-nested variants can
 3162    crash the bus. The existing restriction to 64-levels of nesting previously
 3163    only applied to the static type signature; now it also applies to dynamic
 3164    nesting using variants. Thanks to Rémi Denis-Courmont for discoving this
 3165    issue.
 3166  • OS X portability fixes, including launchd support.
 3167  • Windows autolaunch improvements.
 3168  • Various bug fixes.
 3169 
 3170 D-Bus 1.4.0 (6 Sep 2010)
 3171 ==
 3172  - systemd hookup
 3173 
 3174 D-Bus 1.3.1 (23 June 2010)
 3175 ==
 3176  - New standardized PropertiesChanged signal in the properties interface
 3177  - Various portability fixes, in particular to Windows platforms
 3178  - Support forking bus services, for compatibility
 3179 
 3180 D-Bus 1.3.0 (29 July 2009)
 3181 ==
 3182  - ability for dbus-send to send to any bus (--address)
 3183  - file descriptor passing on Unix socket transports
 3184  - use of GCC atomic intrinsics for better processor support
 3185    (requires -march=i486 or above for x86 compilation)
 3186  - thread-safe FD_CLOEXEC setting on recent Linux kernels (2.6.24-27 and up)
 3187    and glibc (2.9 for pipe2 and 2.10 for accept4)
 3188  - feature negotiation in the bus daemon