"Fossies" - the Fresh Open Source Software Archive

Member "dbus-1.13.18/NEWS" (2 Jul 2020, 144771 Bytes) of package /linux/misc/dbus-1.13.18.tar.xz:


As a special service "Fossies" has tried to format the requested text file into HTML format (style: standard) with prefixed line numbers. Alternatively you can here view or download the uninterpreted source code file. See also the latest Fossies "Diffs" side-by-side code changes report for "NEWS": 1.13.16_vs_1.13.18.

    1 dbus 1.13.18 (2020-07-02)
    2 =========================
    3 
    4 The “carnivorous border” release.
    5 
    6 Maybe security fixes:
    7 
    8 • On Unix, avoid a use-after-free if two usernames have the same
    9   numeric uid. In older versions this could lead to a crash (denial of
   10   service) or other undefined behaviour, possibly including incorrect
   11   authorization decisions if <policy group=...> is used.
   12   Like Unix filesystems, D-Bus' model of identity cannot distinguish
   13   between users of different names with the same numeric uid, so this
   14   configuration is not advisable on systems where D-Bus will be used.
   15   Thanks to Daniel Onaca.
   16   (dbus#305, dbus!166; Simon McVittie)
   17 
   18 Other fixes:
   19 
   20 • On Solaris and its derivatives, if a cmsg header is truncated, ensure
   21   that we do not overrun the buffer used for fd-passing, even if the
   22   kernel tells us to.
   23   (dbus#304, dbus!165; Andy Fiddaman)
   24 
   25 • When built with CMake, use GNUInstallDirs' special-cases for prefixes
   26   /, /usr and /opt/*
   27   (dbus!155, Ralf Habacker)
   28 
   29 • When built with CMake on Linux, allow systemd-specific features to be
   30   enabled, for feature parity with Autotools
   31   (dbus!155, Ralf Habacker)
   32 
   33 • When built with CMake, install the same example files as with Autotools
   34   (dbus!155, Ralf Habacker)
   35 
   36 • Correct the doc-comment for DBUS_ERROR_SPAWN_NO_MEMORY
   37   (dbus!163, Marc-André Lureau)
   38 
   39 dbus 1.13.16 (2020-06-02)
   40 =========================
   41 
   42 The “ominous mushroom hat” release.
   43 
   44 Denial of service fixes:
   45 
   46 • CVE-2020-12049: If a message contains more file descriptors than can
   47   be sent, close those that did get through before reporting error.
   48   Previously, a local attacker could cause the system dbus-daemon (or
   49   another system service with its own DBusServer) to run out of file
   50   descriptors, by repeatedly connecting to the server and sending fds that
   51   would get leaked.
   52   Thanks to Kevin Backhouse of GitHub Security Lab.
   53   (dbus#294, GHSL-2020-057; Simon McVittie)
   54 
   55 Enhancements:
   56 
   57 • The API reference manual can be built as a Qt compiled help file if
   58   qhelpgenerator(-qt5) is available. This is controlled by
   59   --enable-qt-help and --with-qchdir in the Autotools build, or
   60   -DENABLE_QT_HELP and -DINSTALL_QCH_DIR in CMake.
   61   (dbus!150, Ralf Habacker)
   62 
   63 Fixes:
   64 
   65 • When built for Windows, return all autolaunch error information in
   66   the DBusError rather than printing some of it to stderr
   67   (dbus#191, dbus!131; Ralf Habacker)
   68 
   69 • When built for Windows, don't truncate long log messages
   70   (dbus!134, Ralf Habacker)
   71 
   72 • When built using CMake for a Unix platform, dbus-cleanup-sockets and
   73   dbus-uuidgen are now included (dbus!154, Ralf Habacker)
   74 
   75 • When built for Windows with verbose mode enabled, don't print debugging
   76   messages related to poll() emulation into a fixed-size buffer that
   77   could overflow (dbus!125, Ralf Habacker)
   78 
   79 • Adjust .desktop file parser to avoid a Coverity false positive
   80   (dbus!146, Coverity CID 354884; Ralf Habacker)
   81 
   82 • Print shell-test diagnostics to stderr, avoiding warnings or errors
   83   from strict TAP parsers (dbus!157, Félix Piédallu)
   84 
   85 Tests and CI enhancements:
   86 
   87 • When the CI cross-builds Windows binaries on Linux, run unit tests
   88   using Wine (dbus#296, dbus!158; Ralf Habacker)
   89 
   90 • Really build x86_64 Windows binaries in Gitlab-CI, instead of building
   91   i686 binaries a second time (Ralf Habacker)
   92 
   93 • When tests will be run using Wine, use STABS debug symbol format so
   94   that Wine can display backtraces (dbus#133, dbus!104; Ralf Habacker)
   95 
   96 dbus 1.13.14 (2020-04-21)
   97 =========================
   98 
   99 The “mystery allium” release.
  100 
  101 Dependencies:
  102 
  103 • On Unix platforms, if getpwnam_r() and getgrnam_r() are implemented,
  104   they must be POSIX-conformant. The non-POSIX signature seen in ancient
  105   Solaris versions will no longer work. (dbus!11, Simon McVittie)
  106 
  107 Enhancements:
  108 
  109 • D-Bus Specification 0.36:
  110   · Fix a typo in an annotated hexdump of part of a message
  111     (dbus!152, Zygmunt Krynicki)
  112 
  113 • On Linux, use getrandom(2) in preference to /dev/urandom
  114   (dbus!147, Natanael Copa)
  115 
  116 • Add a --sender option to dbus-send, which requests a name and holds it
  117   until the signal has been sent. (dbus!116, Christopher Morin)
  118 
  119 Fixes:
  120 
  121 • Fix a crash when the dbus-daemon is terminated while one or more
  122   monitors are active (dbus#291, dbus!140; Simon McVittie)
  123 
  124 • Fix several test failures if the build-time tests were run as uid 0.
  125   Note that running the tests with elevated privileges is likely to be
  126   insecure, and should only be attempted in an expendable container or
  127   virtual machine. (dbus!117, Simon McVittie)
  128 
  129 • Fix an assertion failure if a client encounters an out-of-memory
  130   condition while sending its response to the "OK" authentication
  131   message, and processing of the "OK" message is subsequently retried
  132   when more memory is available (dbus!119, Simon McVittie)
  133 
  134 • Don't leak struct addrinfo if we run out of memory during a TCP
  135   connect()
  136   (dbus!143, dbus!144, Coverity CID 354880; Ralf Habacker, Simon McVittie)
  137 
  138 • On Linux with SELinux, don't assume that the system policy has the
  139   "dbus" security class or the associated AV
  140   (dbus#198, dbus!128; Laurent Bigonville)
  141 
  142 • Handle dbus_connection_set_change_sigpipe() in a thread-safe way
  143   (dbus!132; Simon McVittie, Ralf Habacker)
  144 
  145 • On Unix, use POSIX <poll.h> in preference to <sys/poll.h>
  146   (dbus!148, Natanael Copa)
  147 
  148 • When building with CMake, cope with libX11 in a non-standard location
  149   (dbus!129, Tuomo Rinne)
  150 
  151 • On Windows with verbose mode enabled and outputting to the debug port,
  152   use a dynamically-allocated buffer to avoid potential stack buffer
  153   overflows in long messages (dbus#45, dbus!133; Ralf Habacker)
  154 
  155 • The dbus-send(1) man page now documents --bus and --peer instead of
  156   the old --address synonym for --peer, which has been deprecated since
  157   the introduction of --bus and --peer in 1.7.6
  158   (fd.o #48816, dbus!115; Chris Morin)
  159 
  160 • Fix a wrong environment variable name in dbus-daemon(1)
  161   (dbus#275, dbus!122; Mubin, Philip Withnall)
  162 
  163 • Fix formatting of dbus_message_append_args example
  164   (dbus!126, Felipe Franciosi)
  165 
  166 Internal changes:
  167 
  168 • Move more test-only code from dbus/ to tests/
  169   (dbus!120, dbus!121, dbus!153; Simon McVittie)
  170 
  171 • Improve diagnostics if memory or fd leaks are detected
  172   (dbus!118, dbus!120; Simon McVittie)
  173 
  174 • Move from Debian 9 to Debian 10 for most continuous integration jobs
  175   (dbus!151, Simon McVittie)
  176 
  177 • On Windows, improve embedded version information
  178   (dbus!136, dbus!138, dbus!139; Ralf Habacker)
  179 
  180 • Indentation fixes (dbus!149, Taras Zaporozhets)
  181 
  182 dbus 1.13.12 (2019-06-11)
  183 =========================
  184 
  185 The “patio squirrel” release.
  186 
  187 Security fixes:
  188 
  189 • CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1
  190   authentication for identities that differ from the user running the
  191   DBusServer. Previously, a local attacker could manipulate symbolic
  192   links in their own home directory to bypass authentication and connect
  193   to a DBusServer with elevated privileges. The standard system and
  194   session dbus-daemons in their default configuration were immune to this
  195   attack because they did not allow DBUS_COOKIE_SHA1, but third-party
  196   users of DBusServer such as Upstart could be vulnerable.
  197   Thanks to Joe Vennix of Apple Information Security.
  198   (dbus#269, Simon McVittie)
  199 
  200 Enhancements:
  201 
  202 • dbus-daemon <allow> and <deny> rules can now specify a
  203   send_destination_prefix attribute, which is like a combination of
  204   send_destination and the arg0namespace keyword in match rules: a rule
  205   with send_destination_prefix="com.example.Foo" matches messages sent to
  206   any destination that is in the queue to own well-known names like
  207   com.example.Foo or com.example.Foo.A.B (but not com.example.Foobar).
  208   (dbus!85, Adrian Szyndela)
  209 
  210 dbus 1.13.10 (2019-05-13)
  211 =========================
  212 
  213 The “engineering brick” release.
  214 
  215 Dependencies:
  216 
  217 • GLib >= 2.38 is required if full test coverage is enabled
  218   (reduced from 2.40 in dbus 1.12.x.)
  219 
  220 Deprecations:
  221 
  222 • Third-party software should install default dbus policies for the system
  223   bus into ${datadir}/dbus-1/system.d (this has been supported since dbus
  224   1.10, released in August 2015). Installing default dbus policies in
  225   ${sysconfdir}/dbus-1/system.d is now considered to be deprecated. Policy
  226   files in ${sysconfdir}/dbus-1/system.d continue to be read, but this
  227   directory should only be used by system administrators wishing to
  228   override the default policies.
  229 
  230   The ${datadir} applicable to dbus is usually /usr/share and the
  231   ${sysconfdir} is usually /etc.
  232 
  233 • A similar pattern applies to the session bus policies in session.d.
  234 
  235 Enhancements:
  236 
  237 • D-Bus Specification 0.35:
  238   · Add UnixGroupIDs to GetConnectionCredentials()
  239     (dbus#196, dbus!105; Matthijs van Duin)
  240   · Remove some redundancies from the spec for interface names
  241     (dbus!102, Felipe Gasper)
  242 
  243 • Raise soft fd limit to match hard limit, even if unprivileged.
  244   This makes session buses with many clients, or with clients that make
  245   heavy use of fd-passing, less likely to suffer from fd exhaustion.
  246   (dbus!103, Simon McVittie)
  247 
  248 • On Linux 4.13 or later when built against a suitable glibc version,
  249   GetConnectionCredentials() now includes UnixGroupIDs, the effective
  250   group IDs of the initiator of the connection, taken from
  251   SO_PEERGROUPS. (dbus#196, dbus!105; Matthijs van Duin)
  252 
  253 • Embedded/special-purpose builds of dbus can now be configured with
  254   --disable-traditional-activation, to disable services being launched
  255   as a subprocess of the dbus-daemon. This allows the system dbus-daemon
  256   to be run in a more tightly restricted security profile (an example
  257   "drop-in" for systemd is provided).
  258 
  259   If systemd support is enabled, then services with a SystemdService
  260   configured can still be activated in these builds, via IPC to systemd.
  261   Otherwise, services will not be activatable at all.
  262 
  263   Please note that this option is not suitable for general-purpose
  264   Linux distributions that are intended to support running third-party
  265   D-Bus services.
  266 
  267   (dbus!107, Topi Miettinen)
  268 
  269 • Move CMake build system to top level, matching normal practice for
  270   CMake projects (dbus!84, Ralf Habacker)
  271 
  272 • Reformat CMake files (dbus#252, dbus!82, dbus!91; Ralf Habacker)
  273 
  274 • Avoid GLib 2.40 dependencies (dbus!79, Ralf Habacker)
  275 
  276 • Officially deprecate packaged XML policies in ${sysconfdir}, and
  277   document how to install system services correctly
  278   (dbus!76, Simon McVittie)
  279 
  280 • Add AddressSanitizer and ubsan support (dbus!57, Simon McVittie)
  281 
  282 Fixes:
  283 
  284 • If a privileged dbus-daemon has a hard fd limit greater than 64K, don't
  285   reduce it to 64K, ensuring that we can put back the original fd limits
  286   when carrying out traditional (non-systemd) activation. This fixes a
  287   regression with systemd >= 240 in which system services inherited
  288   dbus-daemon's hard and soft limit of 64K fds, instead of the intended
  289   soft limit of 1K and hard limit of 512K or 1M.
  290   (dbus!103, Debian#928877; Simon McVittie)
  291 
  292 • Fix build failures caused by an AX_CODE_COVERAGE API change in newer
  293   autoconf-archive versions (dbus#249, dbus!88; Simon McVittie)
  294 
  295 • Fix build failures with newer autoconf-archive versions that include
  296   AX_-prefixed shell variable names (dbus#249, dbus!86; Simon McVittie)
  297 
  298 • Avoid possible memory corruption in certain DBusHashTableIter use
  299   patterns, which in practice were never used (dbus!44, Simon McVittie)
  300 
  301 • Avoid a test failure on Linux when built in a container as uid 0, but
  302   without the necessary privileges to increase resource limits
  303   (dbus!58, Debian #908092; Simon McVittie)
  304 
  305 • Don't overwrite PKG_CONFIG_PATH and related environment variables when
  306   the pkg-config-based version of DBus1Config is used in a CMake project
  307   (dbus#267, dbus!96; Clemens Lang)
  308 
  309 • In CMake builds, respect GNUInstallDirs variables
  310   (dbus!77, Ralf Habacker)
  311 
  312 • In CMake builds, don't rebuild documentation every time
  313   (dbus!94, Ralf Habacker)
  314 
  315 • In CMake builds for Windows, don't require libiconv
  316   (dbus#262, dbus!100; Ralf Habacker)
  317 
  318 • Fix intermittent build failures with parallel CMake
  319   (dbus#266, dbus!113; Simon McVittie)
  320 
  321 • Don't assume we can set permissions on a directory, for the benefit of
  322   MSYS and Cygwin builds (dbus#216, dbus!110; Simon McVittie)
  323 
  324 • Avoid test failures with non-trivial NSS modules
  325   (dbus#256, dbus!93; Simon McVittie)
  326 
  327 • Fix test failures in test-syslog and test-sysdeps under Windows
  328   (dbus#238, dbus#243, dbus!61, dbus!62; Simon McVittie)
  329 
  330 • Ensure that CTest build-time tests on Windows use the just-built
  331   libdbus-1-3.dll (dbus!83, Ralf Habacker)
  332 
  333 • Don't take so long to run test-refs on Windows
  334   (dbus#244, dbus!65; Ralf Habacker)
  335 
  336 • Fix memory leaks in tests (dbus!68, Simon McVittie)
  337 
  338 • Avoid casting user-supplied pointers to DBusBasicValue *, which is
  339   formally undefined behaviour (dbus!69, Simon McVittie)
  340 
  341 • Fix a non-exploitable stack array overrun in dbus-run-session on Windows
  342   (Ralf Habacker)
  343 
  344 Tests and CI enhancements:
  345 
  346 • Verify that the result of an Autotools `make dist` can be used for a
  347   successful CMake build (dbus#255, dbus!87; Simon McVittie)
  348 
  349 • Rewrite Python tests into C to reduce circular dependencies and
  350   facilitate use of AddressSanitizer (dbus!37, Simon McVittie)
  351 
  352 • Refactor tests to extract most of their code from the bus/ and dbus/
  353   directories, and break them up into smaller modules
  354   (dbus#223, dbus#240, dbus!1, dbus!99, dbus!73, dbus!74, dbus!75;
  355   Simon McVittie, Ralf Habacker)
  356 
  357 • Do CI builds in a more minimal environment (dbus!63, Simon McVittie)
  358 
  359 • Improve test coverage with CMake (dbus#135, dbus!23; Ralf Habacker)
  360 
  361 • Avoid firewall exception requests when running build-time tests on
  362   Windows (dbus!64, Ralf Habacker)
  363 
  364 • Allow use of Wine to run cross-compiled Windows tests on Linux
  365   (dbus!60, Ralf Habacker)
  366 
  367 Internal changes:
  368 
  369 • Rename DBusSocketSet to the more accurate DBusPollableSet
  370   (dbus!81, Ralf Habacker)
  371 
  372 • Refactor Windows implementation of dbus-spawn
  373   (dbus!80; Ralf Habacker, Simon McVittie)
  374 
  375 • Delete unused code from userdb module (dbus!92, Simon McVittie)
  376 
  377 • Remove unnecessary _dbus_threads_init_debug() (dbus!72, Simon McVittie)
  378 
  379 dbus 1.13.8 (2018-12-04)
  380 ========================
  381 
  382 The “demanding dragon” release.
  383 
  384 dbus version control is now hosted on freedesktop.org's Gitlab
  385 installation, and bug reports and feature requests have switched from
  386 Bugzilla bugs (indicated by "fd.o #nnn") to Gitlab issues ("dbus#nnn")
  387 and merge requests ("dbus!nnn"). See README and CONTRIBUTING.md for
  388 more details.
  389 
  390 Dependencies:
  391 
  392 • dbus now requires at least a basic level of support for C99 variadic
  393   macros, as implemented in gcc >= 3, all versions of Clang, and
  394   MSVC >= 2005. In practice this requirement has existed since version
  395   1.9.2, but it is now official.
  396 
  397 • dbus now requires a C99-compatible va_copy() macro (or a __va_copy()
  398   macro with the same behaviour), except when building for Windows using
  399   MSVC and CMake.
  400 
  401 • Building documentation using CMake now requires xsltproc, Docbook DTDs
  402   (for example docbook-xml on Debian derivatives), and Docbook XSLT
  403   stylesheets (for example docbook-xsl on Debian derivatives). Using
  404   KDE's meinproc4 documentation processor is no longer supported.
  405 
  406 Enhancements:
  407 
  408 • Rewrite CONTRIBUTING.md to reflect the current setup
  409   (dbus!8, Simon McVittie)
  410 
  411 • D-Bus Specification v0.34:
  412   · Fix an incorrect AddMatch() call in sample code
  413     (dbus#221, dbus!56; Philip Withnall)
  414 
  415 • Tarball releases no longer contain pre-2007 changelogs and are now
  416   compressed with xz, so they should be somewhat smaller
  417   (fd.o #107630; Francesco Turco, Simon McVittie)
  418 
  419 • Reference the freedesktop.org Code of Conduct (Simon McVittie)
  420 
  421 • Build an implementation of dbus-run-session for Windows
  422   (dbus#135, dbus!22; Ralf Habacker)
  423 
  424 • On Linux with SELinux, use avc_open() and monitor the AVC netlink fd
  425   in the main event loop, instead of using the deprecated avc_init()
  426   and a thread (dbus#134, dbus!31; Laurent Bigonville)
  427 
  428 • On Linux with SELinux, use the SELINUX_CB_POLICYRELOAD callback
  429   to detect policy reloads, instead of monitoring the access vector
  430   cache with AVC_CALLBACK_RESET
  431   (dbus#134, dbus!31; Laurent Bigonville)
  432 
  433 • Avoid double slashes in pkg-config paths (dbus!30, Ralf Habacker)
  434 
  435 • Improve test coverage and clean up dead code
  436   (fd.o #107739, dbus#222; Simon McVittie)
  437 
  438 • Allow --enable-relocation in combination with absolute paths for
  439   --exec-prefix, --libdir (fd.o #107662, Simon McVittie)
  440 
  441 • Don't run a test program to check how to copy a va_list, which is
  442   awkward for cross-compiling; instead require that va_copy() or
  443   __va_copy() exists, except in older MSVC versions where we already
  444   know that simple assignment is enough (dbus!35, Simon McVittie)
  445 
  446 • Simplify configure checks (dbus!10, Simon McVittie)
  447 
  448 • Improve CMake build system parity with Autotools, including:
  449   · Detect inotify, prctl() and getpwnam_r() correctly on Linux
  450   · Use xsltproc instead of meinproc4 for documentation
  451   (dbus#57, dbus#117, dbus#193, dbus#227, dbus!18, dbus!39;
  452   Ralf Habacker, Simon McVittie)
  453 
  454 Fixes:
  455 
  456 • Stop the dbus-daemon leaking memory (an error message) if delivering
  457   the message that triggered auto-activation is forbidden. This is
  458   technically a denial of service because the dbus-daemon will
  459   run out of memory eventually, but it's a very slow and noisy one,
  460   because all the rejected messages are also very likely to have
  461   been logged to the system log, and its scope is typically limited by
  462   the finite number of activatable services available.
  463   (dbus#234, Simon McVittie)
  464 
  465 • Remove __attribute__((__malloc__)) attribute on dbus_realloc(),
  466   which does not meet the criteria for that attribute in gcc 4.7+,
  467   potentially leading to miscompilation (fd.o #107741, Simon McVittie)
  468 
  469 • Parse section/group names in .service files according to the syntax
  470   from the Desktop Entry Specification:
  471   · reject control characters and non-ASCII in section/group names
  472   · backslash escapes are not interpreted in section/group names
  473   (dbus#208; David King, Simon McVittie)
  474 
  475 • Always use select()-based poll() emulation on Darwin-based OSs
  476   (macOS, etc.) and on Interix, similar to what libcurl does
  477   (dbus#232, dbus!19; Simon McVittie)
  478 
  479 • Avoid undefined integer shifts when generating random tokens for
  480   the DBUS_COOKIE_SHA1 mechanism (dbus!45, Simon McVittie)
  481 
  482 • Document the max-connections-per-user limit as unimplemented on
  483   Windows, and don't fail tests when it isn't enforced there
  484   (dbus!54, Simon McVittie)
  485 
  486 • Avoid unnecessary file descriptors being inherited by dbus-daemon and
  487   dbus-launch subprocesses (dbus!50, Simon McVittie)
  488 
  489 • Fix some minor memory leaks
  490   (fd.o #107320, dbus!41, dbus!42; Simon McVittie)
  491 
  492 • Don't fail tests if GetConnectionUnixProcessID() succeeds on Windows,
  493   which it normally will since 1.7.x
  494   (dbus#239, dbus!55; Simon McVittie)
  495 
  496 • Extend a test timeout to avoid spurious failures in CI
  497   (dbus!26, Simon McVittie)
  498 
  499 • Avoid undefined signed integer operations when generating random
  500   message content during regression tests (dbus!46, Simon McVittie)
  501 
  502 • Fix build warnings with recent gcc (dbus#208, dbus#225; David King)
  503 
  504 • Fix build warnings without libX11 (dbus#228, Simon McVittie)
  505 
  506 • Fix whitespace and error behaviour for _dbus_command_from_pid()
  507   (dbus#222, dbus!28; Simon McVittie)
  508 
  509 • Fix a race condition in the containers test
  510   (dbus!47, Simon McVittie)
  511 
  512 • When built with CMake, install dbus-daemon-launch-helper to
  513   ${CMAKE_INSTALL_LIBEXECDIR}, analogous to ${libexecdir} in
  514   Autotools (dbus!9, Simon McVittie)
  515 
  516 • When built with CMake and disabling tests, still install
  517   dbus-daemon-launch-helper (dbus!9, Simon McVittie)
  518 
  519 Tests and CI:
  520 
  521 • Add Travis-CI builds for 64-bit Windows using mingw-w64
  522   (fd.o #105662, Ralf Habacker)
  523 
  524 • Add Gitlab-CI integration (fd.o #108177, Simon McVittie)
  525 
  526 dbus 1.13.6 (2018-08-02)
  527 ========================
  528 
  529 The “vine cutting” release.
  530 
  531 Fixes:
  532 
  533 • Prevent reading up to 3 bytes beyond the end of a truncated message.
  534   This could in principle be an information leak or denial of service
  535   on the system bus, but is not believed to be exploitable to crash
  536   the system bus or leak interesting information in practice.
  537   (fd.o #107332, Simon McVittie)
  538 
  539 • Fix build with gcc 8 -Werror=cast-function-type
  540   (fd.o #107349, Simon McVittie)
  541 
  542 • Fix warning from gcc 8 about suspicious use of strncpy() when
  543   populating struct sockaddr_un (fd.o #107350, Simon McVittie)
  544 
  545 • Fix a minor memory leak when a DBusServer listens on a new address
  546   (fd.o #107194, Simon McVittie)
  547 
  548 • Fix an invalid NULL argument to rmdir() if a nonce-tcp DBusServer
  549   runs out of memory (fd.o #107194, Simon McVittie)
  550 
  551 • Fix various memory leaks during unit tests
  552   (fd.o #107194, Simon McVittie)
  553 
  554 • Don't use misleading errno-derived error names if getaddrinfo() or
  555   getnameinfo() fails with a code other than EAI_SYSTEM
  556   (fd.o #106395, Simon McVittie)
  557 
  558 • Skip tests that require working TCP if we are in a container environment
  559   where 127.0.0.1 cannot be resolved (fd.o #106812, Simon McVittie)
  560 
  561 dbus 1.13.4 (2018-04-30)
  562 ========================
  563 
  564 The “parsimonious topping” release.
  565 
  566 Dependencies:
  567 
  568 • All Windows builds now require Windows Vista or later.
  569   (Note that we do not recommend or support use of dbus on operating
  570   systems outside their vendor's security support lifetime, such as Vista.)
  571 
  572 Enhancements:
  573 
  574 • D-Bus Specification v0.33
  575   · Be clearer about the security properties of TCP transports, which
  576     have no integrity or confidentiality protection and so should not
  577     normally be used, except via the loopback interface on Windows
  578     (fd.o #106004, Simon McVittie)
  579 
  580 • On Linux 4.13 or later, <policy group="…"> now uses the SO_PEERGROUPS
  581   credentials-passing socket option to get the effective group IDs
  582   of the initiator of the connection. On platforms where that socket
  583   option is not available, dbus-daemon continues to look up the
  584   connection's user ID in the system user and group databases and
  585   assume that it has the groups that would have been granted by
  586   initgroups(). (fd.o #103737, #97821; Simon McVittie)
  587 
  588 • If the dbus-daemon is compiled for Linux with systemd support, it
  589   now informs systemd that it is ready for use via the sd_notify()
  590   mechanism. (fd.o #104641; Michal Sekletar, Simon McVittie)
  591 
  592 • Several environment variables set by systemd are no longer passed
  593   on to activated services (fd.o #104641, Simon McVittie)
  594 
  595 • Failing to bind a TCP socket to an address produces better error
  596   messages. (fd.o #61922; Simon McVittie, Ralf Habacker)
  597 
  598 • Windows builds now set the SO_REUSEADDR and TCP_NODELAY options on
  599   TCP sockets (as Unix builds already did), which should improve
  600   robustness and performance (fd.o #61922, Ralf Habacker)
  601 
  602 • Windows executables built with cmake have version information.
  603   When building for Windows with Autotools, only libdbus-1-3.dll
  604   has version information, matching previous behaviour with cmake.
  605   (fd.o #103387, Ralf Habacker)
  606 
  607 • The Devhelp documentation index is now in version 2 format
  608   (fd.o #106186, Simon McVittie)
  609 
  610 • Give the dbus-daemon man page some scarier warnings about
  611   <allow_anonymous/> and non-local TCP, which are insecure and should
  612   not be used, particularly for the standard system and session buses
  613   (fd.o #106004, Simon McVittie)
  614 
  615 Fixes:
  616 
  617 • Listening on TCP sockets copes better with IPv6 being disabled
  618   (fd.o #61922; Ralf Habacker, Simon McVittie)
  619 
  620 • Fix installation of Ducktype documentation with newer yelp-build
  621   versions (fd.o #106171, Simon McVittie)
  622 
  623 • Fix printf formats for pointer-sized integers on 64-bit Windows
  624   (fd.o #105662, Ralf Habacker)
  625 
  626 Internal changes:
  627 
  628 • The _DBUS_GNUC_WARN_UNUSED_RESULT macro has been replaced with
  629   _DBUS_WARN_UNUSED_RESULT, which is effective with gcc, clang and MSVC
  630   (with cl.exe /analyze). Note that for MSVC compatibility, it must
  631   appear before the return type in function declarations, whereas the
  632   older macro could also have appeared after the arguments.
  633   (fd.o #105460; Daniel Wendt, Ralf Habacker)
  634 
  635 dbus 1.13.2 (2018-03-01)
  636 ========================
  637 
  638 The “can break a man's arm” release.
  639 
  640 Enhancements:
  641 
  642 • When a container manager creates an extra server at runtime, services
  643   can now request that messages from connections to that server are
  644   tagged with the container instance ID, providing a fast-path for
  645   identifying such connections. (fd.o #101899, Simon McVittie)
  646 
  647 Fixes:
  648 
  649 • Increase system dbus-daemon's RLIMIT_NOFILE rlimit before it drops
  650   privileges, because it won't have permission afterwards. This fixes a
  651   regression in dbus 1.10.18 and 1.11.0 which made the standard system bus
  652   more susceptible to deliberate or accidental denial of service.
  653   (fd.o #105165, David King)
  654 
  655 dbus 1.13.0 (2018-02-08)
  656 ========================
  657 
  658 The “Citispeed Eco 75” release.
  659 
  660 This is a new development branch for the adventurous, and comes with a
  661 risk of regressions. OS distributions should stay with the 1.12.x branch,
  662 unless they can commit to following the 1.13.x branch until it reaches
  663 a 1.14.0 stable release at an unspecified point in the future.
  664 
  665 In particular, the new Containers API is subject to change and shouldn't
  666 be enabled in distributions yet, even those aimed at early adopters
  667 (hello, Arch Linux).
  668 
  669 Behaviour changes:
  670 
  671 • DBusServer (and hence the dbus-daemon) no longer accepts usernames
  672   (login names) for the recommended EXTERNAL authentication mechanism,
  673   only numeric user IDs or the empty string. This is not believed to
  674   affect real D-Bus clients in practice, because most D-Bus clients
  675   send numeric user IDs: the only known client implementation that
  676   sends usernames is dbus-java, and that only when run on a system
  677   where the com.sun.security.auth.module.UnixSystem.getUid() method is
  678   not available. (fd.o #104588, Simon McVittie)
  679 
  680 Enhancements:
  681 
  682 • D-Bus Specification v0.32
  683   · Deprecate hyphen/minus in reversed domain names, recommending
  684     underscores instead. Recommend prepending an underscore to domain
  685     components that start with a digit, which would not be allowed.
  686     (fd.o #103914, Simon McVittie)
  687   · Clarify how the SASL authentication handshake works
  688     (fd.o #104224, Simon McVittie)
  689   · Recommend that the message bus should remove message header fields
  690     that it does not understand. The new item "HeaderFiltering" in the
  691     message bus' Features property indicates that it promises to do so.
  692     (fd.o #100317, Simon McVittie)
  693 
  694 • Add experimental support for creating extra servers at runtime, to
  695   be used by app containers like Flatpak or Snap. This API is still
  696   subject to change and is not compiled in by default.
  697   (fd.o #101354, Simon McVittie)
  698 
  699 • Improve automated test logging (fd.o #103601, Simon McVittie)
  700 
  701 • The dbus-daemon now filters the messages that it relays, removing
  702   header fields that it does not understand. Clients must not rely on
  703   this behaviour unless they have confirmed that they are connected to
  704   a suitable message bus implementation, for example by querying its
  705   Features property. (fd.o #100317, Simon McVittie)
  706 
  707 Fixes:
  708 
  709 • When iterating the DBusConnection while blocking on a pending call,
  710   don't wait for I/O if that pending call already has a result; and make
  711   sure that whether it has a result is propagated in a thread-safe way.
  712   This prevents certain multi-threaded calling patterns from blocking
  713   until their timeout even when they should have succeeded sooner.
  714   (fd.o #102839; Manish Narang, Michael Searle)
  715 
  716 • Do not look up client-supplied strings in the system user database
  717   (NSS or equivalent) when using the recommended EXTERNAL auth mechanism.
  718   This could previously lead to a deadlock or timeout in the presence of
  719   slow or network-dependent NSS modules. (fd.o #104588, Simon McVittie)
  720 
  721 • Report the correct error if OOM is reached while trying to listen
  722   on a TCP socket (fd.o #89104, Simon McVittie)
  723 
  724 • Fix a crash and an assertion failure in the server side of the
  725   nonce-tcp: transport under error conditions
  726   (fd.o #89104, Simon McVittie)
  727 
  728 • Fix assertion failures in recovery from OOM while setting up a
  729   DBusServer (fd.o #89104, Simon McVittie)
  730 
  731 • Don't leak a file descriptor if setting up a launchd server fails
  732   (fd.o #89104, Simon McVittie)
  733 
  734 • Add a missing space to a warning message (fd.o #103729, Thomas Zajic)
  735 
  736 • Fix some memory leaks in automated tests
  737   (fd.o #103600, Simon McVittie)
  738 
  739 • Expand ${bindir} correctly when pkg-config is asked for dbus_daemondir
  740   (fd.o #104265, Benedikt Heine)
  741 
  742 • On Linux systems with systemd < 237, if ${localstatedir}/dbus doesn't
  743   exist, create it before trying to create ${localstatedir}/dbus/machine-id
  744   (fd.o #104577, Chris Lesiak)
  745 
  746 • Fix escaping in dbus-api-design document (fd.o #104925, Philip Withnall)
  747 
  748 Internal changes:
  749 
  750 • Harden the nonce-tcp: transport against resource leaks and
  751   use-after-free (fd.o #103597, Simon McVittie)
  752 
  753 • Make _DBUS_STRING_DEFINE_STATIC more consistent with
  754   _dbus_string_init_const() (fd.o #89104, Simon McVittie)
  755 
  756 • Add _DBUS_STRING_INIT_INVALID, analogous to NULL, and use it to
  757   simplify error unwinding code paths (fd.o #89104, Simon McVittie)
  758 
  759 • Make the behaviour of _dbus_string_init_const()/_dbus_string_free()
  760   consistent with _dbus_string_init()/_dbus_string_free(): it now clears
  761   the string to _DBUS_STRING_INIT_INVALID, whereas previously it left
  762   the string untouched (fd.o #89104, Simon McVittie)
  763 
  764 • Remove automated test data for wire protocol version 0, which has not
  765   been supported since 2005 (fd.o #103758, Simon McVittie)
  766 
  767 • Simplify method calls in automated tests
  768   (fd.o #103600, Simon McVittie)
  769 
  770 dbus 1.12.2 (2017-11-13)
  771 ========================
  772 
  773 The “spider pumpkin” release.
  774 
  775 Enhancements:
  776 
  777 • Log a warning if a new connection cannot be accepted due to an
  778   out-of-memory condition or failure to identify its AppArmor or
  779   SELinux context (fd.o #103592, Simon McVittie)
  780 
  781 Fixes:
  782 
  783 • Make use of $(MKDIR_P) compatible with install-sh, fixing build when a
  784   GNU-compatible `mkdir -p` is not available (fd.o #103521, ilovezfs)
  785 
  786 • When building for Windows with Autotools, avoid `echo -e`, fixing
  787   cross-compilation on non-GNU platforms like macOS
  788   (fd.o #103493, Tony Theodore)
  789 
  790 • Fix crashes in the server side of the nonce-tcp: transport under
  791   various error conditions. This transport should normally only be used
  792   on Windows, where AF_UNIX sockets are unavailable; the unix: transport
  793   is the only one recommended for production use on Unix platforms.
  794   (fd.o #103597, Simon McVittie)
  795 
  796 Internal changes:
  797 
  798 • Improve test coverage on Travis-CI (Simon McVittie)
  799 
  800 dbus 1.12.0 (2017-10-30)
  801 ========================
  802 
  803 The “gingerbread skull” release.
  804 
  805 1.12.x is a new stable branch, recommended for use in OS
  806 distributions.
  807 
  808 Summary of major changes between 1.10.x and 1.12.0
  809 --------------------------------------------------
  810 
  811 Dependencies:
  812 
  813 • Expat >= 2.1.0 is required.
  814 • GLib >= 2.40 is required if full test coverage is enabled.
  815 • [Linux] libselinux >= 2.0.86 is required if SELinux support is
  816   enabled.
  817 • [Unix] dbus now requires an <inttypes.h> that defines C99 constants
  818   such as PRId64 and PRIu64, except when building for Windows.
  819 • [Autotools] Building from git (but not from tarballs) with Autotools
  820   now requires macros from the GNU Autoconf Archive.
  821 • [CMake] Builds done using CMake now require CMake 3.0.2.
  822 
  823 Build-time configuration changes:
  824 
  825 • Expat is now found using pkg-config. See the release notes for
  826   1.11.14.
  827 • The --disable-compiler-optimisations and --enable-compiler-coverage
  828   options no longer exist.  See the release notes for 1.11.4 and 1.11.8.
  829 • [Unix] The --enable-abstract-sockets and --disable-abstract-sockets
  830   options no longer exist. See the release notes for 1.11.20.
  831 • [Unix] Flag files in /var/run/console/${username} are no longer
  832   checked for at_console by default. See the release notes for 1.11.18.
  833 • [Unix, Cygwin] Init scripts are no longer provided by upstream dbus,
  834   and packagers will now need to add these downstream (most already do).
  835   See the release notes for 1.11.18.
  836 • [Unix] The process ID file no longer has a different default location
  837   on Red Hat derivatives. See the release notes for 1.11.18.
  838 • [Unix] ${runstatedir} is now independent of ${localstatedir} with
  839   recent Autotools versions. See the release notes for 1.11.16.
  840 • [Windows] The WINDRES variable is no longer used. See the release
  841   notes for 1.11.22.
  842 
  843 Deprecations:
  844 
  845 • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  846   See the release notes for spec version 0.31 (in dbus 1.11.14).
  847 • [Unix] Flag files in /var/run/console/${username} are deprecated.
  848   See the release notes for 1.11.18.
  849 
  850 New APIs:
  851 
  852 • <allow> and <deny> rules in dbus-daemon configuration can now
  853   include send_broadcast="true", send_broadcast="false",
  854   max_unix_fds="N", min_unix_fds="N" (for some integer N).
  855   See the release notes for 1.11.18.
  856 • dbus_try_get_local_machine_id() is like
  857   dbus_get_local_machine_id(), but returns a DBusError.
  858 • New APIs around DBusMessageIter to simplify cleanup.
  859   See the release notes for 1.11.16.
  860 • The message bus daemon now implements the standard Introspectable,
  861   Peer and Properties interfaces. See the release notes for
  862   dbus 1.11.14 and spec version 0.31.
  863 • DTDs for introspection XML and bus configuration are installed.
  864 • dbus can be compiled to be relocatable, making it more suitable for
  865   binary bundling with other software. On Windows, this is on by
  866   default.
  867 • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  868   never uses Linux abstract sockets, which is advantageous for
  869   containers. On non-Linux it is equivalent to unix:tmpdir=….
  870   See the release notes for dbus 1.11.14 and spec version 0.31.
  871 • [Unix] New option "dbus-launch --exit-with-x11".
  872 • [Unix] Session managers can create transient .service files in
  873   $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  874 • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  875 
  876 Miscellaneous behaviour changes:
  877 
  878 • [Unix] The session bus now logs to syslog if it was started by
  879   dbus-launch.
  880 • [Unix] Internal warnings are logged to syslog if configured.
  881 • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  882   or to stderr.
  883 
  884 Changes since 1.11.22 release candidate
  885 ---------------------------------------
  886 
  887 Standard stable-branch changes:
  888 
  889 • Disable warnings about use of deprecated functions (Simon McVittie)
  890 
  891 Fixes:
  892 
  893 • Don't distribute files generated by ./configure in the source tarball
  894   (fd.o #103420, Simon McVittie)
  895 
  896 Internal changes:
  897 
  898 • Remove some unused files from the git repository
  899   (fd.o #103420, Simon McVittie)
  900 
  901 D-Bus 1.11.22 (2017-10-23)
  902 ==========================
  903 
  904 The “fire surface” release.
  905 
  906 This is the first release-candidate for the 1.12.0 stable release.
  907 
  908 Build-time configuration changes:
  909 
  910 • When building for Windows with Autotools, setting the WINDRES variable
  911   no longer works to select a non-standard resource compiler. Use
  912   libtool's standard RC variable instead, for example
  913   "./configure RC=i686-w64-mingw32-windres"
  914 
  915 Dependencies:
  916 
  917 • Builds done using CMake now require CMake 3.0.2.
  918 
  919 Enhancements:
  920 
  921 • When building for Windows, improve quality of metadata in
  922   libdbus-1-3.dll (fd.o #103015, Ralf Habacker)
  923 
  924 Fixes:
  925 
  926 • Fix a typo "uint 16" in dbus-send(1) man page
  927   (fd.o #103075, David King)
  928 
  929 • When building for Windows, libdbus-1-3.dll always includes version
  930   information. Previously, this was missing if using CMake and any
  931   non-MSVC compiler. (fd.o #103015, Ralf Habacker)
  932 
  933 • Fix the build with MSVC, which regressed with the #102558 fix in
  934   1.11.20. (fd.o #102558, Ralf Habacker)
  935 
  936 Internal changes:
  937 
  938 • Simplify Windows resource embedding
  939   (fd.o #103015, Simon McVittie)
  940 
  941 D-Bus 1.11.20 (2017-10-03)
  942 ==
  943 
  944 The “wraith stun” release.
  945 
  946 Build-time configuration changes:
  947 
  948 • The --enable-abstract-sockets and --disable-abstract-sockets options
  949   no longer exist. Support for Linux's abstract AF_UNIX sockets is now
  950   unconditionally enabled on Linux and disabled everywhere else.
  951   (fd.o #34905, Simon McVittie)
  952 
  953 Enhancements:
  954 
  955 • Make slower tests less likely to time out, and improve diagnostics if
  956   tests do time out (fd.o #103009, Simon McVittie)
  957 
  958 • On Windows, don't compile an unused stub implementation of
  959   _dbus_set_signal_handler() (fd.o #103010, Simon McVittie)
  960 
  961 Fixes:
  962 
  963 • Be more careful to save and restore errno in POSIX async signal
  964   handlers (fd.o #103010, Simon McVittie)
  965 
  966 • On Windows, embed a manifest in dbus-update-activation-environment.exe
  967   so that the heuristics used for UAC do not assume it needs elevated
  968   privileges due to its name containing "update"
  969   (fd.o #102558, Ralf Habacker)
  970 
  971 • On Windows with Automake, embed version information in libdbus-1,
  972   as was meant to happen in all versions since 2009
  973   (fd.o #103015, Simon McVittie)
  974 
  975 D-Bus 1.11.18 (2017-09-25)
  976 ==
  977 
  978 The “vampire conquistador” release.
  979 
  980 Build-time configuration changes:
  981 
  982 • By default, dbus-daemon on Unix no longer checks for flag files
  983   /var/run/console/${username} created by the obsolete pam_console and
  984   pam_foreground PAM modules when deciding whether ${username} is
  985   currently at the console. The old default behaviour can be restored
  986   by specifying --with-console-auth-dir=/var/run/console in the
  987   recommended Autotools build system, or
  988   -DDBUS_CONSOLE_AUTH_DIR=/var/run/console in CMake. This feature is
  989   now deprecated, and will be removed in dbus 1.13 unless feedback via
  990   fd.o #101629 indicates that this would be problematic.
  991   (fd.o #101629, Simon McVittie)
  992 
  993 • LSB-style init scripts for Red Hat and Slackware, and a non-LSB init
  994   script for Cygwin, are no longer provided in the upstream dbus
  995   source. We recommend that distributors who support non-systemd service
  996   management should maintain their own init scripts or other service
  997   manager integration as part of their downstream packaging, similar to
  998   the way Debian distributes a Debian-specific LSB init script for dbus.
  999 
 1000   The systemd unit continues to be maintained as part of the upstream
 1001   dbus source, because it receives regular testing and maintenance.
 1002 
 1003   (fd.o #101706, Simon McVittie)
 1004 
 1005 • The process ID file created by the system bus is no longer influenced
 1006   by the --with-init-scripts=redhat configure option or the presence of
 1007   /etc/redhat-release at build time. If your OS's init script or other
 1008   service management relies on the Red Hat-style pid file, it can be
 1009   restored by specifying --with-system-pid-file=/run/messagebus.pid at
 1010   configure time or using the <pidfile> directive in bus configuration.
 1011 
 1012   Note that the upstream-supplied systemd unit runs dbus-daemon with
 1013   the --nopidfile option, so it does not normally write a pid file,
 1014   regardless of whether the OS is Red-Hat-derived or not.
 1015 
 1016   (fd.o #101706, Simon McVittie)
 1017 
 1018 Enhancements:
 1019 
 1020 • <allow> and <deny> rules in dbus-daemon configuration can now
 1021   include send_broadcast="true" or send_broadcast="false", which make
 1022   the rule only match broadcast signals, or only match messages that
 1023   are not broadcast signals, respectively.
 1024   (fd.o #29853, Simon McVittie)
 1025 
 1026 • <allow> and <deny> rules can now be configured to apply only to
 1027   messages with or without Unix file descriptors attached. This would
 1028   typically be used in rules like these:
 1029   <allow send_destination="..." max_unix_fds="0"/>
 1030   <deny send_destination="..." min_unix_fds="1"/>
 1031   <deny receive_sender="..." min_unix_fds="1"/>
 1032   but can also be used to set a nonzero upper limit on the number of
 1033   file descriptors:
 1034   <allow send_destination="..." max_unix_fds="4"/>
 1035   (fd.o #101848, Simon McVittie)
 1036 
 1037 • On Unix platforms, the DBUS_COOKIE_SHA1 authentication mechanism
 1038   now respects the HOME environment variable on the client side, and
 1039   on the server side when the uid attempting to connect is the same
 1040   as the uid of the server. This allows the automated tests to pass in
 1041   environments where the user's "official" home directory in /etc/passwd
 1042   is nonexistent, such as Debian autobuilders.
 1043   (fd.o #101960, Simon McVittie)
 1044 
 1045 Fixes:
 1046 
 1047 • When parsing dbus-daemon configuration, tell Expat not to use
 1048   cryptographic-quality entropy as a salt for its hash tables: we trust
 1049   the configuration files, so we are not concerned about algorithmic
 1050   complexity attacks via hash table collisions. This prevents
 1051   dbus-daemon --system from holding up the boot process (and causing
 1052   early-boot system services like systemd, logind, networkd to time
 1053   out) on entropy-starved embedded systems.
 1054   (fd.o #101858, Simon McVittie)
 1055 
 1056 • Avoid a -Werror=declaration-after-statement build failure on Solaris
 1057   (fd.o #102145, Alan Coopersmith)
 1058 
 1059 • On Unix platform, drop DBUS_SYSTEM_LOG_INFO messages from LOG_NOTICE
 1060   to LOG_INFO, matching how we use this log level in practice
 1061   (fd.o #102686, Simon McVittie)
 1062 
 1063 D-Bus 1.11.16 (2017-07-27)
 1064 ==
 1065 
 1066 The “south facing garden” release.
 1067 
 1068 Build-time configuration changes:
 1069 
 1070 • The Autotools build system now supports varying ${runstatedir}
 1071   independently of ${localstatedir}, if using an Autoconf version
 1072   that has that feature; version 2.70 will eventually have this, but
 1073   many Linux distributions add it to version 2.69 as a patch.
 1074   A typical use is to set prefix=/usr, sysconfdir=/etc, localstatedir=/var
 1075   and runstatedir=/run. (fd.o #101569, Simon McVittie)
 1076 
 1077 Enhancements:
 1078 
 1079 • New APIs DBUS_MESSAGE_ITER_INIT_CLOSED, dbus_message_iter_init_closed()
 1080   and dbus_message_iter_abandon_container_if_open() simplify the
 1081   single-exit-point ("goto out") style of resource cleanup. The API
 1082   documentation around DBusMessageIter and containers has also been
 1083   clarified. (fd.o #101568, Simon McVittie)
 1084 
 1085 Fixes:
 1086 
 1087 • Fix the implementation of re-enabling a timeout (again) so that its
 1088   countdown is always restarted as intended. (fd.o #95619,
 1089   Michal Koutný)
 1090 
 1091 • Make the dbus-daemon's Properties interface, as introduced in 1.11.14,
 1092   available to all users on the system bus (fd.o #101700, Simon McVittie)
 1093 
 1094 • dbus_message_iter_append_basic() no longer leaks memory if it fails to
 1095   append a file descriptor to a message. (fd.o #101568, Simon McVittie)
 1096 
 1097 • dbus_message_iter_open_container() no longer leaks memory if it runs out
 1098   of memory. (fd.o #101568, Simon McVittie)
 1099 
 1100 • dbus_message_append_args_valist() no longer leaks memory if given an
 1101   unsupported type. This situation is still considered to be a programming
 1102   error which needs to be corrected by the user of libdbus.
 1103   (fd.o #101568, Simon McVittie)
 1104 
 1105 • dbus_message_iter_append_basic() and dbus_message_iter_open_container()
 1106   will no longer report that their arguments were invalid if they run out
 1107   of memory at exactly the wrong time. (fd.o #101568, Simon McVittie)
 1108 
 1109 • Ensure that tests fail if they would otherwise have tried to connect to
 1110   the real session bus (fd.o #101698, Simon McVittie)
 1111 
 1112 • Make build-time tests cope with finding Python 3, but not Python 2
 1113   (fd.o #101716, Simon McVittie)
 1114 
 1115 Internal changes relevant to dbus developers:
 1116 
 1117 • DBusVariant is a new mechanism to copy single values from a message into
 1118   a buffer without copying the entire message (fd.o #101568, Simon McVittie)
 1119 
 1120 • DBUS_SYSTEM_LOG_FATAL has been replaced by DBUS_SYSTEM_LOG_ERROR.
 1121   Logging an ERROR message does not make the process exit; the caller
 1122   is responsible for calling abort() or exit(), whichever is more appropriate.
 1123   (fd.o #101568, Simon McVittie)
 1124 
 1125 • Better test coverage (fd.o #101568, Simon McVittie)
 1126 
 1127 D-Bus 1.11.14 (2017-06-29)
 1128 ==
 1129 
 1130 The “irrational fear of bees” release.
 1131 
 1132 Dependencies:
 1133 
 1134 • Expat >= 2.1.0 is always required
 1135 • libselinux >= 2.0.86 is required if SELinux support is enabled
 1136 • GLib >= 2.40 is required if full test coverage is enabled
 1137 
 1138 Build-time configuration changes:
 1139 
 1140 • We now use pkg-config to find libexpat in Autotools builds. This requires
 1141   Expat 2.1.0 (March 2012) or later. In particular, this should remove the
 1142   need to configure with LDFLAGS=-L/usr/local/lib on OpenBSD, which can
 1143   itself cause compilation failures.
 1144 
 1145   As with all pkg-config-based configure checks, you can use
 1146   PKG_CONFIG_PATH=/whatever/lib/pkgconfig to find expat.pc in a
 1147   non-standard prefix, or EXPAT_CFLAGS="-I/whatever/include" and
 1148   EXPAT_LIBS="-L/whatever/lib -lexpat" to avoid needing a .pc file
 1149   at all.
 1150 
 1151   (fd.o #69801, Simon McVittie)
 1152 
 1153 • Similarly, we now use pkg-config to find libselinux. Version 2.0.86
 1154   is required due to the removal of explicit refcounting for SIDs.
 1155   (fd.o #100912, Laurent Bigonville)
 1156 
 1157 Behaviour changes:
 1158 
 1159 • Previously, /etc/machine-id could be copied to /var/lib/dbus/machine-id
 1160   as a side-effect of a sufficiently privileged process merely reading the
 1161   machine ID. It is no longer copied as a side-effect of reading.
 1162   Running dbus-uuidgen --ensure, which should be done after installing dbus,
 1163   continues to copy /etc/machine-id to /var/lib/dbus/machine-id if the
 1164   former exists and the latter does not.
 1165   (fd.o #101257, Simon McVittie)
 1166 
 1167 • The undocumented Verbose interface, and the GetAllMatchRules method on
 1168   the undocumented Stats interface, must now be used via the object path
 1169   /org/freedesktop/DBus. Previously, they existed on all object paths.
 1170   (fd.o #101257, Simon McVittie)
 1171 
 1172 • AddMatch() with a match rule containing eavesdrop='true' will now fail
 1173   unless called by either the same user as the dbus-daemon, or Unix uid 0
 1174   (root), matching the restrictions applied to the newer BecomeMonitor()
 1175   method. On the session bus this has no practical effect. On the system
 1176   bus this will prevent certain configurations that already did not
 1177   work well in practice. (fd.o #101567, Simon McVittie)
 1178 
 1179 Enhancements:
 1180 
 1181 • D-Bus Specification version 0.31
 1182   · Don't require implementation-specific search paths to be lowest
 1183     priority
 1184   · Correct regex syntax for optionally-escaped bytes in addresses so it
 1185     includes hyphen-minus, forward slash and underscore as intended
 1186   · Describe all message bus methods in the same section
 1187   · Clarify the correct object path for method calls to the message bus
 1188     (/org/freedesktop/DBus, DBUS_PATH_DBUS in the reference implementation)
 1189   · Document that the message bus implements Introspectable, Peer and
 1190     Properties
 1191   · Add new Features and Interfaces properties for message bus
 1192     feature-discovery
 1193   · Add unix:dir=..., which resembles unix:tmpdir=... but never uses
 1194     abstract sockets
 1195   · Don't require eavesdrop='true' to be accepted from connections not
 1196     sufficiently privileged to use it successfully
 1197   · Formally deprecate eavesdropping in favour of BecomeMonitor
 1198   (fd.o #99825, #100686, #100795, #101256, #101257, #101567;
 1199   Simon McVittie, Tom Gundersen)
 1200 
 1201 • Implement the Properties and Peer interfaces in dbus-daemon
 1202   (fd.o #101257, Simon McVittie)
 1203 
 1204 • New function dbus_try_get_local_machine_id() is like
 1205   dbus_get_local_machine_id(), but returning a DBusError. Other code
 1206   that needs the machine ID will now report a recoverable error (instead
 1207   of logging to stderr and aborting) if no machine ID is available.
 1208   Generating a machine ID is still considered to be a required part of
 1209   installing dbus correctly. (fd.o #13194, Simon McVittie)
 1210 
 1211 • Implement GetConnectionSELinuxSecurityContext("org.freedesktop.DBus")
 1212   (fd.o #101315, Laurent Bigonville)
 1213 
 1214 • Avoid deprecated API calls when using SELinux
 1215   (fd.o #100912, Laurent Bigonville)
 1216 
 1217 • Switch a test from the deprecated g_test_trap_fork() to
 1218   g_test_trap_subprocess(), for Windows support and better robustness
 1219   on Unix (fd.o #101362, Simon McVittie)
 1220 
 1221 • On systemd systems, if ${localstatedir}/dbus/machine-id doesn't exist,
 1222   instruct systemd-tmpfiles to make it a symbolic link to /etc/machine-id.
 1223   This prevents the two files from going out of sync on stateless or live
 1224   images without needing to run dbus-uuidgen, and supports older D-Bus
 1225   implementations that do not necessarily read /etc/machine-id themselves.
 1226   (fd.o #101570, Simon McVittie)
 1227 
 1228 • Implement unix:dir=..., which resembles unix:tmpdir=... but never uses
 1229   abstract sockets. This is preferable when used with Linux containers.
 1230   (fd.o #101567, Simon McVittie)
 1231 
 1232 Fixes:
 1233 
 1234 • Fix a reference leak when blocking on a pending call on a connection
 1235   that has been disconnected (fd.o #101481, Shin-ichi MORITA)
 1236 
 1237 • Don't put timestamps in the Doxygen-generated documentation,
 1238   or hard-code the build directory into builds with embedded tests,
 1239   for reproducible builds (fd.o #100692, Simon McVittie)
 1240 
 1241 • Fix some integration test issues (fd.o #100686, Simon McVittie)
 1242 
 1243 • Fix memory leaks in the tests (fd.o #101257, Simon McVittie)
 1244 
 1245 • If we somehow get an autolaunch address with multiple semicolon-separated
 1246   components, and they don't work, don't invalidly "pile up" errors
 1247   (fd.o #101257, Simon McVittie)
 1248 
 1249 Documentation:
 1250 
 1251 • Update git URIs in HACKING document to sync up with cgit.freedesktop.org
 1252   (fd.o #100715, Simon McVittie)
 1253 
 1254 D-Bus 1.11.12 (2017-04-07)
 1255 ==
 1256 
 1257 The “it's something humans do” release.
 1258 
 1259 Enhancements:
 1260 
 1261 • The session dbus-daemon now supports transient .service files
 1262   in $XDG_RUNTIME_DIR/dbus-1/services. Unlike the other standard
 1263   service directories, this directory is not monitored with inotify
 1264   or similar, and the service files must be named exactly
 1265   ${bus_name}.service. (fd.o #99825, Simon McVittie)
 1266 
 1267 • dbus can be configured with --enable-relocation when building with
 1268   Autotools, or with -DDBUS_RELOCATABLE=ON when building with cmake,
 1269   to make the pkg-config metadata relocatable. This is useful for
 1270   non-standard prefixes, and in particular for Windows installations.
 1271   However, it is not recommended for system-wide installations into
 1272   /usr, because it interferes with pkg-config's ability to filter out
 1273   compiler default linker directories.
 1274 
 1275   With Autotools, the default is --enable-relocation when building
 1276   for Windows or --disable-relocation otherwise. With CMake, the default
 1277   is -DDBUS_RELOCATABLE=ON.
 1278 
 1279   (fd.o #99721; Ralf Habacker, Simon McVittie)
 1280 
 1281 • Users of CMake ≥ 2.6 can now link to libdbus without providing their
 1282   own FindDBus.cmake macros, whether dbus was compiled with Autotools
 1283   or with CMake. See the end of README.cmake for more information.
 1284   (fd.o #99721; Ralf Habacker, Simon McVittie)
 1285 
 1286 Fixes:
 1287 
 1288 • Always read service file directories in the intended order
 1289   (fd.o #99825, Simon McVittie)
 1290 
 1291 • When tests are skipped, don't try to kill nonexistent process 0
 1292   (fd.o #99825, Simon McVittie)
 1293 
 1294 • Avoid valgrind false positives (fd.o #88808, Philip Withnall)
 1295 
 1296 • Fix a harmless read overflow and some memory leaks in a unit test
 1297   (fd.o #100568, Philip Withnall)
 1298 
 1299 • Fix some typos in test code
 1300   (fd.o #99999, Coverity #141876, #141877; Philip Withnall)
 1301 
 1302 • Clarify the roles of /etc/dbus-1/s*.d and /usr/share/dbus-1/s*.d
 1303   in documentation (fd.o #99901, Philip Withnall)
 1304 
 1305 • Fix and enable compiler warnings related to -Wswitch
 1306   (fd.o #98191; Thomas Zimmermann, Simon McVittie)
 1307 
 1308 • Fix writing off the end of a fd_set when testing with valgrind
 1309   (fd.o #99839, Philip Withnall)
 1310 
 1311 D-Bus 1.11.10 (2017-02-16)
 1312 ==
 1313 
 1314 The “purple hair gives you telekinesis?” release.
 1315 
 1316 Dependencies:
 1317 
 1318 • AppArmor support requires at least libapparmor 2.8.95, reduced
 1319   from 2.10 in previous versions. One test requires 2.10 and is
 1320   skipped if building with an older version.
 1321 
 1322 Enhancements:
 1323 
 1324 • Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
 1325   stable and Debian testing in addition to the older Ubuntu that is
 1326   the default (fd.o #98889, Simon McVittie)
 1327 
 1328 • Avoid some deprecated CMake functions (fd.o #99586, Ralf Habacker)
 1329 
 1330 • Silence many -Wswitch-enum and -Wswitch-default warnings
 1331   (fd.o #98191; Thomas Zimmermann, Simon McVittie)
 1332 
 1333 • Install a sysusers.d snippet so `dbus-daemon --system` can be used
 1334   with an unpopulated /etc (fd.o #99162, Lennart Poettering)
 1335 
 1336 • Install pkg-config metadata on Unix even if building with CMake
 1337   (fd.o #99752, Ralf Habacker)
 1338 
 1339 • Exclude auth mechanisms from REJECTED message if they are supported
 1340   in the code but but configured to be disallowed (fd.o #99621,
 1341   Ralf Habacker)
 1342 
 1343 Fixes:
 1344 
 1345 • Prevent symlink attacks in the nonce-tcp transport on Unix that could
 1346   allow an attacker to overwrite a file named "nonce", in a directory
 1347   that the user running dbus-daemon can write, with a random value
 1348   known only to the user running dbus-daemon. This is unlikely to be
 1349   exploitable in practice, particularly since the nonce-tcp transport
 1350   is really only useful on Windows.
 1351 
 1352   On Unix systems we strongly recommend using only the unix: and systemd:
 1353   transports, together with EXTERNAL authentication. These are the only
 1354   transports and authentication mechanisms enabled by default.
 1355 
 1356   (fd.o #99828, Simon McVittie)
 1357 
 1358 • Avoid symlink attacks in the "embedded tests", which are not enabled
 1359   by default and should never be enabled in production builds of dbus.
 1360   (fd.o #99828, Simon McVittie)
 1361 
 1362 • Fix the implementation of re-enabling a timeout so that its
 1363   countdown is restarted as intended, instead of continually
 1364   decreasing. (fd.o #95619; Michal Koutný, Simon McVittie)
 1365 
 1366 • When receiving a message with file descriptors, do not start reading
 1367   the beginning of the next message, so that only one such message
 1368   is processed at a time. In conjunction with the fix for #95619
 1369   this means that processes sending many file descriptors, such as
 1370   systemd-logind on a system that receives very rapid ssh connections,
 1371   are not treated as abusive and kicked off the bus. Revert the previous
 1372   workaround that special-cased uid 0.
 1373   (fd.o #95263, LP#1591411; Simon McVittie)
 1374 
 1375 • Do not require TMPDIR, TEMP or TMP to be set when cross-compiling
 1376   for Windows with CMake (fd.o #99586, Ralf Habacker)
 1377 
 1378 • Do not set Unix-specific variables when targeting Windows
 1379   (fd.o #99586, Ralf Habacker)
 1380 
 1381 • Install Unix executables to ${CMAKE_INSTALL_PREFIX}/bin as intended,
 1382   not ${CMAKE_INSTALL_PREFIX}/lib (fd.o #99752, Ralf Habacker)
 1383 
 1384 • Use relative install locations in CMake on Unix to respect DESTDIR,
 1385   and use GNU-style install layout (fd.o #99721, #99752; Ralf Habacker)
 1386 
 1387 • Install dbus-arch-deps.h correctly when using CMake
 1388   (fd.o #99586, #99721; Ralf Habacker)
 1389 
 1390 • Improve argument validation for `dbus-test-tool spam`
 1391   (ffd.o #99693, Coverity #54759; Philip Withnall)
 1392 
 1393 • Don't shift by a negative integer if a hash table becomes monstrously
 1394   large (fd.o #99641, Coverity #54682; Philip Withnall)
 1395 
 1396 • Don't leak LSM label if dbus-daemon runs out of memory when dealing with
 1397   a new connection (fd.o #99612, Coverity #141058; Philip Withnall)
 1398 
 1399 • Remove an unnecessary NULL check
 1400   (fd.o #99642, Coverity #141062; Philip Withnall)
 1401 
 1402 • Improve error handling in unit tests and dbus-send
 1403   (fd.o #99643, #99694, #99712, #99722, #99723, #99724, #99758,
 1404   #99759, #99793, Coverity #54688, #54692, #54693, #54697, #54701,
 1405   #54710, #54711, #54714, #54715, #54718, #54721, #54724, #54726,
 1406   #54730, #54740, #54822, #54823, #54824, #54825; Philip Withnall)
 1407 
 1408 • Do not print verbose messages' timestamps to stderr if the actual message
 1409   has been redirected to the Windows debug port (fd.o #99749, Ralf Habacker)
 1410 
 1411 D-Bus 1.11.8 (2016-11-28)
 1412 ==
 1413 
 1414 The “panics in the face of breakfast foods” release.
 1415 
 1416 Build-time configuration:
 1417 
 1418 • The new --enable-debug configure option provides an easy way to
 1419   enable debug symbols, disable optimization and/or enable profiling.
 1420 
 1421 • The --enable-compile-warnings configure option can be used to control
 1422   compiler warnings.
 1423 
 1424 • The --disable-compiler-optimisations configure option is no longer
 1425   supported. Use --enable-debug=yes or CFLAGS=-O0 instead.
 1426 
 1427 Enhancements:
 1428 
 1429 • D-Bus Specification version 0.30
 1430   · Define the jargon term "activation" more clearly
 1431   · Define the jargon term "auto-starting", which is one form of activation
 1432   · Document the optional SystemdService key in service files
 1433   · Use versioned interface and bus names in most examples
 1434   · Clarify intended behaviour of Properties.GetAll
 1435   (fd.o #36190, fd.o #98671; Philip Withnall, Simon McVittie)
 1436 
 1437 • Fix and enable a lot of compiler warnings to improve future code
 1438   quality. This might incidentally also fix some environment variable
 1439   accesses on OS X.
 1440   · In particular, printf-style functions in the libdbus API are now annotated
 1441     with __attribute__((__format__(__printf__, *, *))) when compiling with
 1442     gcc or clang. This might make printf bugs in other software visible
 1443     at compile time.
 1444   (fd.o #97357, fd.o #98192, fd.o #98195, fd.o #98658;
 1445   Thomas Zimmermann, Simon McVittie)
 1446 
 1447 • When running with AppArmor mediation (for example using Ubuntu's patched
 1448   Linux kernel), clients can no longer auto-start services unless they would
 1449   have been able to send the auto-starting message to the service after it
 1450   starts. StartServiceByName() is unaffected, and continues to be allowed by
 1451   default in AppArmor's <abstractions/dbus-strict> and
 1452   <abstractions/dbus-session-strict>. (fd.o #98666, Simon McVittie)
 1453 
 1454 Fixes:
 1455 
 1456 • Work around an undesired effect of the fix for CVE-2014-3637
 1457   (fd.o #80559), in which processes that frequently send fds, such as
 1458   logind during a flood of new PAM sessions, can get disconnected for
 1459   continuously having at least one fd "in flight" for too long;
 1460   dbus-daemon interprets that as a potential denial of service attack.
 1461   The workaround is to disable that check for uid 0 process such as
 1462   logind, with a message in the system log. The bug remains open while
 1463   we look for a more general solution.
 1464   (fd.o #95263, LP#1591411; Simon McVittie)
 1465 
 1466 • Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
 1467   was disabled at compile time. That test is not expected to work
 1468   in that configuration. (fd.o #98665, Simon McVittie)
 1469 
 1470 D-Bus 1.11.6 (2016-10-10)
 1471 ==
 1472 
 1473 The “darkly whimsical” release.
 1474 
 1475 Security fixes:
 1476 
 1477 • Do not treat ActivationFailure message received from root-owned systemd
 1478   name as a format string. In principle this is a security vulnerability,
 1479   but we do not believe it is exploitable in practice, because only
 1480   privileged processes can own the org.freedesktop.systemd1 bus name, and
 1481   systemd does not appear to send activation failures that contain "%".
 1482 
 1483   Please note that this probably *was* exploitable in dbus versions
 1484   older than 1.6.30, 1.8.16 and 1.9.10 due to a missing check which at
 1485   the time was only thought to be a denial of service vulnerability
 1486   (CVE-2015-0245). If you are still running one of those versions,
 1487   patch or upgrade immediately.
 1488 
 1489   (fd.o #98157, Simon McVittie)
 1490 
 1491 Enhancements:
 1492 
 1493 • D-Bus Specification version 0.29
 1494   · Recommend not using '/' for object paths (fd.o #37095, Philip Withnall)
 1495   · Allow <annotation> in <arg> elements (fd.o #86162, Philip Withnall)
 1496 
 1497 • Log to syslog when we exceed various anti-DoS limits, and add test
 1498   coverage for them (fd.o #86442, Simon McVittie)
 1499 
 1500 • Improve syslog handling so that _dbus_warn() and similar warnings
 1501   go to syslog, add dbus-daemon --syslog|--nosyslog|--syslog-only options,
 1502   and log to syslog (instead of /dev/null) when dbus-daemon is started by
 1503   dbus-launch. (fd.o #97009, Simon McVittie)
 1504 
 1505 • Install introspect.dtd and busconfig.dtd to ${datadir}/xml/dbus-1
 1506   (fd.o #89011, Philip Withnall)
 1507 
 1508 • When logging messages about service activation, mention which peer
 1509   requested the activation (fd.o #68212, Philip Withnall)
 1510 
 1511 • On Linux, mention the LSM label (if available) whenever we print
 1512   debug information about a peer (fd.o #68212, Philip Withnall)
 1513 
 1514 Other fixes:
 1515 
 1516 • Harden dbus-daemon against malicious or incorrect ActivationFailure
 1517   messages by rejecting them if they do not come from a privileged
 1518   process, or if systemd activation is not enabled
 1519   (fd.o #98157, Simon McVittie)
 1520 
 1521 • Avoid undefined behaviour when setting reply serial number without going
 1522   via union DBusBasicValue (fd.o #98035, Marc Mutz)
 1523 
 1524 • Fix CMake build for Unix platforms that do not have -lrt, such as Android,
 1525   or that do need -lsocket, such as QNX (fd.o #94096, Ralf Habacker)
 1526 
 1527 • autogen.sh: fail cleanly if autoconf fails (Simon McVittie)
 1528 
 1529 D-Bus 1.11.4 (2016-08-15)
 1530 ==
 1531 
 1532 The “copper pickaxe” release.
 1533 
 1534 Dependencies:
 1535 
 1536 • Building from git (but not from tarballs) now requires
 1537   macros from the GNU Autoconf Archive, for example the autoconf-archive
 1538   package in Debian or Fedora derivatives.
 1539 
 1540 Build-time configuration:
 1541 
 1542 • The option to enable coverage instrumentation has changed from
 1543   --enable-compiler-coverage to --enable-code-coverage.
 1544 
 1545 Enhancements:
 1546 
 1547 • D-Bus Specification version 0.28
 1548   · Clarify some details of serialization (fd.o #93382, Philip Withnall)
 1549 
 1550 • Increase listen() backlog of AF_UNIX sockets to the maximum possible,
 1551   minimizing failed connections under heavy load
 1552   (fd.o #95264, Lennart Poettering)
 1553 
 1554 • Add a new dbus-launch --exit-with-x11 option (fd.o #39197, Simon McVittie)
 1555 
 1556 • Use the same regression tests for subprocess starting on Unix and Windows
 1557   (fd.o #95191, Ralf Habacker)
 1558 
 1559 • Print timestamps and thread IDs in verbose messages
 1560   (fd.o #95191, Ralf Habacker)
 1561 
 1562 • On Unix, unify the various places that reopen stdin, stdout and/or stderr
 1563   pointing to /dev/null (fd.o #97008, Simon McVittie)
 1564 
 1565 • Use AX_CODE_COVERAGE instead of our own COMPILER_COVERAGE
 1566   (fd.o #88922, Thomas Zimmermann)
 1567 
 1568 Fixes:
 1569 
 1570 • On Windows, fix a memory leak in replacing the installation prefix
 1571   (fd.o #95191, Ralf Habacker)
 1572 
 1573 • On Linux, when dbus-daemon is run with reduced susceptibility to the
 1574   OOM killer (typically via systemd), do not let child processes inherit
 1575   that setting (fd.o #32851; Kimmo Hämäläinen, WaLyong Cho)
 1576 
 1577 • On Unix, make dbus-launch and dbus-daemon --fork work as intended
 1578   even if a parent process incorrectly starts them with stdin, stdout
 1579   and/or stderr closed (fd.o #97008, Simon McVittie)
 1580 
 1581 • Output valid shell syntax in ~/.dbus/session-bus/ if the bus address
 1582   contains a semicolon (fd.o #94746, Thiago Macieira)
 1583 
 1584 • Fix memory leaks and thread safety in subprocess starting on Windows
 1585   (fd.o #95191, Ralf Habacker)
 1586 
 1587 • Stop test-dbus-daemon incorrectly failing on platforms that cannot
 1588   discover the process ID of clients (fd.o #96653, Руслан Ижбулатов)
 1589 
 1590 • In tests that exercise correct handling of crashing D-Bus services,
 1591   suppress Windows crash handler (fd.o #95155; Yiyang Fei, Ralf Habacker)
 1592 
 1593 • Explicitly check for stdint.h (Ioan-Adrian Ratiu)
 1594 
 1595 • In tests, add an invalid DBusAuthState to avoid undefined behaviour
 1596   in some test cases (fd.o #93909, Nick Lewycky)
 1597 
 1598 • Add assertions to reassure a static analysis tool
 1599   (fd.o #93210, Deepika Aggarwal)
 1600 
 1601 • Be explicit about enum comparison when loading XML
 1602   (fd.o #93205, Deepika Aggarwal)
 1603 
 1604 • update-activation-environment: produce better diagnostics on error
 1605   (fd.o #96653, Simon McVittie)
 1606 
 1607 • Avoid various compiler warnings with gcc 6
 1608   (fd.o #97282; Thomas Zimmermann, Simon McVittie)
 1609 
 1610 • On Unix when configured to use the system log, report as "dbus-daemon",
 1611   not as "dbus" (fd.o #97009, Simon McVittie)
 1612 
 1613 • During unit tests, reduce the amount we write to the system log
 1614   (fd.o #97009, Simon McVittie)
 1615 
 1616 D-Bus 1.11.2 (2016-03-07)
 1617 ==
 1618 
 1619 The “pneumatic drill vs. Iron Maiden” release.
 1620 
 1621 Fixes:
 1622 
 1623 • Enable "large file support" on systems where it exists: dbus-daemon
 1624   is not expected to open large files, but it might need to stat files
 1625   that happen to have large inode numbers (fd.o #93545, Hongxu Jia)
 1626 
 1627 • Eliminate padding inside DBusMessageIter on 64-bit platforms,
 1628   which might result in a pedantic C compiler not copying the entire contents
 1629   of a DBusMessageIter; statically assert that this is not an ABI change
 1630   in practice (fd.o #94136, Simon McVittie)
 1631 
 1632 • Document dbus-test-tool echo --sleep-ms=N instead of incorrect --sleep=N
 1633   (fd.o #94244, Dmitri Iouchtchenko)
 1634 
 1635 • Correctly report test failures in C tests from run-test.sh
 1636   (fd.o #93379; amit tewari, Simon McVittie)
 1637 
 1638 • When tests are enabled, run all the marshal-validate tests, not just
 1639   the even-numbered ones (fd.o #93908, Nick Lewycky)
 1640 
 1641 • Correct the expected error from one marshal-validate test, which was
 1642   previously not run due to the above bug (fd.o #93908, Simon McVittie)
 1643 
 1644 • Fix compilation under CMake when embedded tests are disabled
 1645   (fd.o #94094, eric.hyer)
 1646 
 1647 Internal changes:
 1648 
 1649 • Fix all -Wpointer-sign (signed/unsigned mismatch) warnings, and enable the
 1650   warning (fd.o #93069; Ralf Habacker, Simon McVittie)
 1651 
 1652 • When building with CMake, use the same gcc/clang warnings as under Autotools,
 1653   or MSVC warnings that are broadly similar (fd.o #93069, Ralf Habacker)
 1654 
 1655 • test/name-test: make C tests produce TAP output and run them directly, not
 1656   via run-test.sh (fd.o #92899, Simon McVittie)
 1657 
 1658 • Under CMake when cross-compiling for Windows on Unix, run the tests
 1659   under Wine even if binfmt_misc support is not available
 1660   (fd.o #88966, Ralf Habacker)
 1661 
 1662 • The DBUS_USE_TEST_BINARY environment variable is no longer used by builds with
 1663   embedded tests; DBUS_TEST_DBUS_LAUNCH replaces it (fd.o #92899, Simon McVittie)
 1664 
 1665 • Factor out some functions that will be needed in future for a Windows
 1666   implementation of dbus-run-session (fd.o #92899, Ralf Habacker)
 1667 
 1668 D-Bus 1.11.0 (2015-12-02)
 1669 ==
 1670 
 1671 The “peppermint deer” release.
 1672 
 1673 Dependencies:
 1674 
 1675 • On non-Windows platforms, dbus now requires an <inttypes.h> that defines
 1676   C99 constants such as PRId64 and PRIu64.
 1677 
 1678 Enhancements:
 1679 
 1680 • D-Bus Specification version 0.27
 1681   · Specify that services should not reply if NO_REPLY_EXPECTED was used
 1682     (fd.o #75749, Lars Uebernickel)
 1683 
 1684 • Add a script to do continuous-integration builds, and metadata to run it
 1685   on travis-ci.org. To use this, clone the dbus git repository on GitHub
 1686   and set it up with travis-ci.org; the only special setting needed is
 1687   "only build branches with a .travis.yml". (fd.o #93194, Simon McVittie)
 1688 
 1689 • If dbus-daemon is run with --systemd-activation, do not require
 1690   org.freedesktop.systemd1.service to exist (fd.o #93194, Simon McVittie)
 1691 
 1692 Fixes:
 1693 
 1694 • Re-order dbus-daemon startup so that on SELinux systems, the thread
 1695   that reads AVC notifications retains the ability to write to the
 1696   audit log (fd.o #92832, Laurent Bigonville)
 1697 
 1698 • Print 64-bit integers on non-GNU Unix platforms (fd.o #92043, Natanael Copa)
 1699 
 1700 • When using the Monitoring interface, match messages' destinations
 1701   (fd.o #92074, Simon McVittie)
 1702 
 1703 • On Linux with systemd, stop installing a reference to the obsolete
 1704   dbus.target, and enable dbus.socket statically (fd.o #78412, #92402;
 1705   Simon McVittie)
 1706 
 1707 • On Windows, when including configuration files with <include> or
 1708   <includedir>, apply the same relocation as for the Exec paths
 1709   in .service files (fd.o #92028, Simon McVittie)
 1710 
 1711 • Add support for backtraces on Windows (fd.o #92721, Ralf Habacker)
 1712 
 1713 • Fix many -Wpointer-sign warnings (fd.o #93069, Ralf Habacker)
 1714 
 1715 D-Bus 1.10.6 (2015-12-01)
 1716 ==
 1717 
 1718 The “marzipan beetles” release.
 1719 
 1720 Fixes:
 1721 
 1722 • On Unix when running tests as root, don't assert that root and
 1723   the dbus-daemon user can still call UpdateActivationEnvironment;
 1724   assert that those privileged users can call BecomeMonitor instead
 1725   (fd.o #93036, Simon McVittie)
 1726 
 1727 • On Windows, fix a memory leak in the autolaunch transport (fd.o #92899,
 1728   Simon McVittie)
 1729 
 1730 • On Windows Autotools builds, don't run tests that rely on
 1731   dbus-run-session and other Unix-specifics (fd.o #92899, Simon McVittie)
 1732 
 1733 D-Bus 1.10.4 (2015-11-17)
 1734 ==
 1735 
 1736 The “Frostburn Canyon” release.
 1737 
 1738 Enhancements:
 1739 
 1740 • GetConnectionCredentials, GetConnectionUnixUser and
 1741   GetConnectionUnixProcessID with argument "org.freedesktop.DBus"
 1742   will now return details of the dbus-daemon itself. This is required
 1743   to be able to call SetEnvironment on systemd.
 1744   (fd.o #92857, Jan Alexander Steffens)
 1745 
 1746 Fixes:
 1747 
 1748 • Make UpdateActivationEnvironment always fail with AccessDenied on the
 1749   system bus. Previously, it was possible to configure it so root could
 1750   call it, but the environment variables were not actually used,
 1751   because the launch helper would discard them.
 1752   (fd.o #92857, Jan Alexander Steffens)
 1753 
 1754 • On Unix with --systemd-activation on a user bus, make
 1755   UpdateActivationEnvironment pass on its arguments to systemd's
 1756   SetEnvironment method, solving inconsistency between the environments
 1757   used for traditional activation and systemd user-service activation.
 1758   (fd.o #92857, Jan Alexander Steffens)
 1759 
 1760 • On Windows, don't crash if <syslog/> or --syslog is used
 1761   (fd.o #92538, Ralf Habacker)
 1762 
 1763 • On Windows, fix a memory leak when setting a DBusError from a Windows
 1764   error (fd.o #92721, Ralf Habacker)
 1765 
 1766 • On Windows, don't go into infinite recursion if we abort the process
 1767   with backtraces enabled (fd.o #92721, Ralf Habacker)
 1768 
 1769 • Fix various failing tests, variously on Windows and cross-platform:
 1770   · don't test system.conf features (users, groups) that only make sense
 1771     on the system bus, which is not supported on Windows
 1772   · don't call _dbus_warn() when we skip a test, since it is fatal
 1773   · fix computation of expected <standard_session_servicedirs/>
 1774   · when running TAP tests, translate newlines to Unix format, fixing
 1775     cross-compiled tests under Wine on Linux
 1776   · don't stress-test refcounting under Wine, where it's really slow
 1777   · stop assuming that a message looped-back to the test will be received
 1778     immediately
 1779   · skip some system bus tests on Windows since they make no sense there
 1780   (fd.o #92538, fd.o #92721; Ralf Habacker, Simon McVittie)
 1781 
 1782 D-Bus 1.10.2 (2015-10-26)
 1783 ==
 1784 
 1785 The “worst pies in London” release.
 1786 
 1787 Fixes:
 1788 
 1789 • Correct error handling for activation: if there are multiple attempts
 1790   to activate the same service and it fails immediately, the first attempt
 1791   would get the correct reply, but the rest would time out. We now send
 1792   the same error reply to each attempt. (fd.o #92200, Simon McVittie)
 1793 
 1794 • If BecomeMonitor is called with a syntactically invalid match rule,
 1795   don't crash with an assertion failure, fixing a regression in 1.9.10.
 1796   This was not exploitable as a denial of service, because the check
 1797   for a privileged user is done first. (fd.o #92298, Simon McVittie)
 1798 
 1799 • On Linux with --enable-user-session, add the bus address to the
 1800   environment of systemd services for better backwards compatibility
 1801   (fd.o #92612, Jan Alexander Steffens)
 1802 
 1803 • On Windows, fix the logic for replacing the installation prefix
 1804   in service files' Exec lines (fd.o #83539; Milan Crha, Simon McVittie)
 1805 
 1806 • On Windows, if installed in the conventional layout with ${prefix}/etc
 1807   and ${prefix}/share, use relative paths between bus configuration files
 1808   to allow the tree to be relocated (fd.o #92028, Simon McVittie)
 1809 
 1810 • Make more of the regression tests pass in Windows builds (fd.o #92538,
 1811   Simon McVittie)
 1812 
 1813 D-Bus 1.10.0 (2015-08-25)
 1814 ==
 1815 
 1816 The “0x20” release.
 1817 
 1818 This is a new stable branch, recommended for use in OS distributions.
 1819 
 1820 Fixes since 1.9.20:
 1821 
 1822 • distribute test/tap-test.sh.in, even if the tarball was built without
 1823   tests enabled (fd.o #91684, Simon McVittie)
 1824 • work around a fd leak in libcap-ng < 0.7.7 (fd.o #91684, Simon McVittie)
 1825 
 1826 Summary of major changes since 1.8.0:
 1827 
 1828 • The basic setup for the well-known system and session buses is
 1829   now done in read-only files in ${datadir} (normally /usr/share).
 1830   See the NEWS entry for 1.9.18 for details.
 1831 
 1832 • AppArmor integration has been merged, with features similar to the
 1833   pre-existing SELinux integration. It is mostly compatible with the
 1834   patches previously shipped by Ubuntu, with one significant change:
 1835   Ubuntu's GetConnectionAppArmorSecurityContext method has been superseded
 1836   by GetConnectionCredentials and was not included.
 1837 
 1838 • The --enable-user-session configure option can be enabled
 1839   by OS integrators intending to use systemd to provide a session bus
 1840   per user (in effect, treating all concurrent graphical and non-graphical
 1841   login sessions as one large session).
 1842 
 1843 • The new listenable address mode "unix:runtime=yes" listens on
 1844   $XDG_RUNTIME_DIR/bus, the same AF_UNIX socket used by the systemd
 1845   user session. libdbus and "dbus-launch --autolaunch" will connect to
 1846   this address by default. GLib ≥ 2.45.3 and sd-bus ≥ 209 have a
 1847   matching default.
 1848 
 1849 • All executables are now dynamically linked to libdbus-1.
 1850   Previously, some executables, most notably dbus-daemon, were statically
 1851   linked to a specially-compiled variant of libdbus. This results in
 1852   various private functions in the _dbus namespace being exposed by the
 1853   shared library. These are not API, and must not be used outside
 1854   the dbus source tree.
 1855 
 1856 • On platforms with ELF symbol versioning, all public symbols
 1857   are versioned LIBDBUS_1_3.
 1858 
 1859 New bus APIs:
 1860 
 1861 • org.freedesktop.DBus.GetConnectionCredentials returns
 1862   LinuxSecurityLabel where supported
 1863 • org.freedesktop.DBus.Monitoring interface (privileged)
 1864   · BecomeMonitor method supersedes match rules with eavesdrop=true,
 1865     which are now deprecated
 1866 • org.freedesktop.DBus.Stats interface (semi-privileged)
 1867   · now enabled by default
 1868   · new GetAllMatchRules method
 1869 • org.freedesktop.DBus.Verbose interface (not normally compiled)
 1870   · toggles the effect of DBUS_VERBOSE
 1871 
 1872 New executables:
 1873 
 1874 • dbus-test-tool
 1875 • dbus-update-activation-environment
 1876 
 1877 New optional dependencies:
 1878 
 1879 • The systemd: pseudo-transport requires libsystemd or libsd-daemon
 1880 • Complete documentation requires Ducktype and yelp-tools
 1881 • Full test coverage requires GLib 2.36 and PyGI
 1882 • AppArmor integration requires libapparmor and optionally libaudit
 1883 
 1884 Dependencies removed:
 1885 
 1886 • dbus-glib
 1887 
 1888 D-Bus 1.9.20 (2015-08-06)
 1889 ==
 1890 
 1891 The “Remember Tomorrow” release.
 1892 
 1893 This is a release-candidate for D-Bus 1.10.0. OS distribution vendors
 1894 should test it.
 1895 
 1896 Fixes:
 1897 
 1898 • Don't second-guess what the ABI of poll() is, allowing it to be used
 1899   on Integrity RTOS and other unusual platforms (fd.o #90314;
 1900   Rolland Dudemaine, Simon McVittie)
 1901 
 1902 • Don't duplicate audit subsystem integration if AppArmor and SELinux are
 1903   both enabled (fd.o #89225, Simon McVittie)
 1904 
 1905 • Log audit events for AppArmor/SELinux policy violations whenever
 1906   we have CAP_AUDIT_WRITE, even if not the system bus
 1907   (fd.o #83856, Laurent Bigonville)
 1908 
 1909 D-Bus 1.9.18 (2015-07-21)
 1910 ==
 1911 
 1912 The “Pirate Elite” release.
 1913 
 1914 Configuration changes:
 1915 
 1916 • The basic setup for the well-known system and session buses is now done
 1917   in read-only files in ${datadir}, moving a step closer to systems
 1918   that can operate with an empty /etc directory. In increasing order
 1919   of precedence:
 1920 
 1921   · ${datadir}/dbus-1/s*.conf now perform the basic setup such as setting
 1922     the default message policies.
 1923   · ${sysconfdir}/dbus-1/s*.conf are now optional. By default
 1924     dbus still installs a trivial version of each, for documentation
 1925     purposes; putting configuration directives in these files is deprecated.
 1926   · ${datadir}/dbus-1/s*.d/ are now available for third-party software
 1927     to install "drop-in" configuration snippets (any packages
 1928     using those directories should explicitly depend on at least this
 1929     version of dbus).
 1930   · ${sysconfdir}/dbus-1/s*.d/ are also still available for sysadmins
 1931     or third-party software to install "drop-in" configuration snippets
 1932   · ${sysconfdir}/dbus-1/s*-local.conf are still available for sysadmins'
 1933     overrides
 1934 
 1935   ${datadir} is normally /usr/share, ${sysconfdir} is normally /etc,
 1936   and "s*" refers to either system or session as appropriate.
 1937 
 1938   (fd.o #89280, Dimitri John Ledkov)
 1939 
 1940 Fixes:
 1941 
 1942 • Fix a memory leak when GetConnectionCredentials() succeeds
 1943   (fd.o #91008, Jacek Bukarewicz)
 1944 
 1945 • Ensure that dbus-monitor does not reply to messages intended for others,
 1946   resulting in its own disconnection (fd.o #90952, Simon McVittie)
 1947 
 1948 D-Bus 1.9.16 (2015-05-14)
 1949 ==
 1950 
 1951 The “titanium barns” release.
 1952 
 1953 Dependencies:
 1954 
 1955 • Automake 1.13 is now required when compiling from git or modifying
 1956   the build system.
 1957 
 1958 Security hardening:
 1959 
 1960 • On Unix platforms, change the default configuration for the session bus
 1961   to only allow EXTERNAL authentication (secure kernel-mediated
 1962   credentials-passing), as was already done for the system bus.
 1963 
 1964   This avoids falling back to DBUS_COOKIE_SHA1, which relies on strongly
 1965   unpredictable pseudo-random numbers.
 1966 
 1967   If you are using D-Bus over the (unencrypted!) tcp: or nonce-tcp: transport,
 1968   in conjunction with DBUS_COOKIE_SHA1 and a shared home directory using
 1969   NFS or similar, you will need to reconfigure the session bus to accept
 1970   DBUS_COOKIE_SHA1 by commenting out the <auth> element. This configuration
 1971   is not recommended.
 1972 
 1973   (fd.o #90414, Simon McVittie)
 1974 
 1975 • When asked for random numbers for DBUS_COOKIE_SHA1, the nonce-tcp:
 1976   transport, UUIDs or any other reason, fail if we cannot obtain entropy
 1977   (from /dev/urandom or CryptGenRandom()) or an out-of-memory condition
 1978   occurs, instead of silently falling back to low-entropy pseudorandom
 1979   numbers from rand(). (fd.o #90414; Simon McVittie, Ralf Habacker)
 1980 
 1981 Enhancements:
 1982 
 1983 • Add dbus_message_iter_get_element_count()
 1984   (fd.o #30350; Christian Dywan, Simon McVittie)
 1985 
 1986 • Introduce new internal DBusSocket and DBusPollable types so we can
 1987   stop treating the Windows SOCKET type as if it was int. DBusSocket
 1988   is specifically a socket, cross-platform. DBusPollable is whatever
 1989   _dbus_poll() can act on, i.e. a fd on Unix or a SOCKET on Windows.
 1990   (fd.o #89444; Ralf Habacker, Simon McVittie)
 1991 
 1992 • All regression tests now output TAP <https://testanything.org/>
 1993   (fd.o #89846, Simon McVittie)
 1994 
 1995 • Internal APIs consistently use signed values for timestamps
 1996   (fd.o #18494, Peter McCurdy)
 1997 
 1998 • Improve diagnostics when UpdateActivationEnvironment calls are rejected
 1999   (fd.o #88812, Simon McVittie)
 2000 
 2001 • Clean up a lot of compiler warnings
 2002   (fd.o #17289, fd.o #89284; Ralf Habacker, Simon McVittie)
 2003 
 2004 Fixes:
 2005 
 2006 • Add locking to DBusCounter's reference count and notify function
 2007   (fd.o #89297, Adrian Szyndela)
 2008 
 2009 • Ensure that DBusTransport's reference count is protected by the
 2010   corresponding DBusConnection's lock (fd.o #90312, Adrian Szyndela)
 2011 
 2012 • Correctly release DBusServer mutex before early-return if we run out
 2013   of memory while copying authentication mechanisms (fd.o #90021,
 2014   Ralf Habacker)
 2015 
 2016 • Make dbus-test-tool and dbus-update-activation-environment portable
 2017   to Windows (fd.o #90089, Ralf Habacker)
 2018 
 2019 • Correctly initialize all fields of DBusTypeReader (fd.o #90021;
 2020   Ralf Habacker, Simon McVittie)
 2021 
 2022 • Fix some missing \n in verbose (debug log) messages (fd.o #90004,
 2023   Ralf Habacker)
 2024 
 2025 • Clean up some memory and fd leaks in test code and tools
 2026   (fd.o #90021, Ralf Habacker)
 2027 
 2028 • Fix a NULL dereference if the dbus-daemon cannot read a configuration
 2029   directory for a reason that is not ENOENT (fd.o #90021, Ralf Habacker)
 2030 
 2031 • CMake generates a versioned shared library even if the revision is 0,
 2032   as it usually is on the development branch. (fd.o #89450, Ralf Habacker)
 2033 
 2034 D-Bus 1.9.14 (2015-03-02)
 2035 ==
 2036 
 2037 The “don't stand in the poison cloud” release.
 2038 
 2039 Dependencies:
 2040 
 2041 • dbus-daemon and dbus-daemon-launch-helper now require libdbus. They
 2042   were previously linked to a static version of libdbus.
 2043 
 2044 • The tests no longer require dbus-glib in order to exercise the libdbus
 2045   shared library; they are always linked to libdbus now.
 2046 
 2047 Build-time configuration:
 2048 
 2049 • The new --enable-user-session option, off by default, can be enabled
 2050   by OS integrators intending to use systemd to provide a session bus
 2051   per user (in effect, treating all concurrent graphical and non-graphical
 2052   login sessions as one large session)
 2053 
 2054 Enhancements:
 2055 
 2056 • All executables are now linked dynamically to libdbus.
 2057   (fd.o #83115; Bertrand SIMONNET, Simon McVittie, Ralf Habacker)
 2058 
 2059 • On platforms that support them (GNU libc and possibly others),
 2060   libdbus now has versioned symbols for its public API.
 2061   All public symbols (visible in the header files) are currently
 2062   versioned as LIBDBUS_1_3; private symbols starting with _dbus or
 2063   dbus_internal have a version that changes with each release, and
 2064   must not be used by applications. (also fd.o #83115)
 2065 
 2066 • New listenable address mode "unix:runtime=yes" which listens on
 2067   a real filesystem (non-abstract) socket $XDG_RUNTIME_DIR/bus
 2068   (fd.o #61303; Colin Walters, Alexander Larsson, Simon McVittie)
 2069 
 2070 • Add optional systemd units for a per-user bus listening on
 2071   $XDG_RUNTIME_DIR/bus (fd.o #61301; Simon McVittie, Colin Walters)
 2072 
 2073 • On Unix platforms, both libdbus and "dbus-launch --autolaunch"
 2074   default to connecting to $XDG_RUNTIME_DIR/bus if it is a socket
 2075   (also fd.o #61301)
 2076 
 2077 • New dbus-update-activation-environment tool uploads environment
 2078   variables to "dbus-daemon --session" and optionally "systemd --user",
 2079   primarily as a way to keep the per-user bus compatible with
 2080   distributions' existing X11 login scripts (also fd.o #61301)
 2081 
 2082 • <includedir/> elements in dbus-daemon configuration are now silently
 2083   ignored if the directory does not exist. (fd.o #89280, Dimitri John Ledkov)
 2084 
 2085 • Add microsecond-resolution timestamps to the default output of
 2086   dbus-monitor and dbus-send (fd.o #88896; Ralf Habacker, Simon McVittie)
 2087 
 2088 Fixes:
 2089 
 2090 • Fix a race condition in the 'monitor' test introduced in 1.9.10
 2091   (fd.o #89222, Simon McVittie)
 2092 
 2093 D-Bus 1.9.12 (2015-02-19)
 2094 ==
 2095 
 2096 The “monster lasagna” release.
 2097 
 2098 Dependencies:
 2099 
 2100 • Ducktype and yelp-tools are now required to build complete documentation
 2101   (they are optional for normal builds).
 2102 
 2103 Enhancements:
 2104 
 2105 • D-Bus Specification version 0.26
 2106   · GetConnectionCredentials can return LinuxSecurityLabel or WindowsSID
 2107   · document the BecomeMonitor method
 2108 
 2109 • On Linux, add LinuxSecurityLabel to GetConnectionCredentials
 2110   (fd.o #89041; Tyler Hicks, Simon McVittie)
 2111 
 2112 • On Linux, add support for AppArmor mediation of message sending and
 2113   receiving and name ownership (paralleling existing SELinux mediation
 2114   support), and eavesdropping (a new check, currently AppArmor-specific)
 2115   (fd.o #75113; John Johansen, Tyler Hicks, Simon McVittie)
 2116 
 2117 • In dbus-send and dbus-monitor, pretty-print \0-terminated bytestrings
 2118   that have printable ASCII contents; we previously only did this for
 2119   unterminated bytestrings (fd.o #89109, Simon McVittie)
 2120 
 2121 • Add a guide to designing good D-Bus APIs (fd.o #88994, Philip Withnall)
 2122 
 2123 • On Windows, add WindowsSID to GetConnectionCredentials
 2124   (fd.o #54445, Ralf Habacker)
 2125 
 2126 • Improve clarity of dbus-monitor --profile output and add more columns
 2127   (fd.o #89165, Ralf Habacker)
 2128 
 2129 • Add a man page for dbus-test-tool, and build it under CMake as well
 2130   as Autotools (fd.o#89086, Simon McVittie)
 2131 
 2132 • If dbus-daemon was compiled with --enable-verbose, add a D-Bus API
 2133   to control it at runtime, overriding the DBUS_VERBOSE environment variable
 2134   (fd.o #88896, Ralf Habacker)
 2135 
 2136 Fixes:
 2137 
 2138 • Reduce the number of file descriptors used in the fd-passing test,
 2139   avoiding failure under the default Linux fd limit, and automatically
 2140   skip it if the rlimit is too small (fd.o #88998, Simon McVittie)
 2141 
 2142 D-Bus 1.9.10 (2015-02-09)
 2143 ==
 2144 
 2145 The “sad cyborgs” release.
 2146 
 2147 Security fixes merged from 1.8.16:
 2148 
 2149 • Do not allow non-uid-0 processes to send forged ActivationFailure
 2150   messages. On Linux systems with systemd activation, this would
 2151   allow a local denial of service: unprivileged processes could
 2152   flood the bus with these forged messages, winning the race with
 2153   the actual service activation and causing an error reply
 2154   to be sent back when service auto-activation was requested.
 2155   This does not prevent the real service from being started,
 2156   so the attack only works while the real service is not running.
 2157   (CVE-2015-0245, fd.o #88811; Simon McVittie)
 2158 
 2159 Enhancements:
 2160 
 2161 • The new Monitoring interface in the dbus-daemon lets dbus-monitor and
 2162   similar tools receive messages without altering the security properties
 2163   of the system bus, by calling the new BecomeMonitor method on a
 2164   private connection. This bypasses the normal <allow> and <deny> rules
 2165   entirely, so to preserve normal message-privacy assumptions, only root
 2166   is allowed to do this on the system bus. Restricted environments,
 2167   such as Linux with LSMs, should lock down access to the Monitoring
 2168   interface. (fd.o #46787, Simon McVittie)
 2169 
 2170 • dbus-monitor uses BecomeMonitor to capture more traffic, if the
 2171   dbus-daemon supports it and access permissions allow it.
 2172   It still supports the previous approach ("eavesdropping" match rules)
 2173   for compatibility with older bus daemons. (fd.o #46787, Simon)
 2174 
 2175 • dbus-monitor can now log the message stream as binary data for later
 2176   analysis, with either no extra framing beyond the normal D-Bus headers,
 2177   or libpcap-compatible framing treating each D-Bus message
 2178   as a captured packet. (fd.o #46787, Simon)
 2179 
 2180 Other fixes:
 2181 
 2182 • Fix some CMake build regressions (fd.o #88964, Ralf Habacker)
 2183 
 2184 • On Unix, forcibly terminate regression tests after 60 seconds to
 2185   prevent them from blocking continuous integration frameworks
 2186   (fd.o #46787, Simon)
 2187 
 2188 D-Bus 1.9.8 (2015-02-03)
 2189 ==
 2190 
 2191 The “all the types of precipitation” release.
 2192 
 2193 Dependencies:
 2194 
 2195 • full test coverage now requires GLib 2.36
 2196 • full test coverage now requires PyGI (PyGObject 3,
 2197   "import gi.repository.GObject") instead of the
 2198   obsolete PyGObject 2 ("import gobject")
 2199 
 2200 Enhancements:
 2201 
 2202 • add GLib-style "installed tests" (fd.o #88810, Simon McVittie)
 2203 
 2204 • better regression test coverage, including systemd activation
 2205   (fd.o #57952, #88810; Simon McVittie)
 2206 
 2207 Fixes:
 2208 
 2209 • fatal errors correctly make the dbus-daemon exit even if <syslog/> is
 2210   turned off (fd.o #88808, Simon McVittie)
 2211 
 2212 • TCP sockets on Windows no longer fail to listen approximately 1 time
 2213   in 256, caused by a logic error that should have always made it fail but
 2214   was mitigated by incorrect endianness for the port number
 2215   (fd.o #87999, Ralf Habacker)
 2216 
 2217 • fix some Windows build failures (fd.o #88009, #88010; Ralf Habacker)
 2218 
 2219 • on Windows, allow up to 8K connections to the dbus-daemon instead of the
 2220   previous 64, completing a previous fix which only worked under
 2221   Autotools (fd.o #71297, Ralf Habacker)
 2222 
 2223 • on Windows, if the IP family is unspecified only use IPv4,
 2224   to mitigate IPv6 not working correctly (fd.o #87999, Ralf Habacker)
 2225 
 2226 • fix some unlikely memory leaks on OOM (fd.o #88087, Simon McVittie)
 2227 
 2228 • lcov code coverage analysis works again (fd.o #88808, Simon McVittie)
 2229 
 2230 • fix an unused function error with --disable-embedded-tests (fd.o #87837,
 2231   Thiago Macieira)
 2232 
 2233 D-Bus 1.9.6 (2015-01-05)
 2234 ==
 2235 
 2236 The “I do have a bread knife” release.
 2237 
 2238 Security hardening:
 2239 
 2240 • Do not allow calls to UpdateActivationEnvironment from uids other than
 2241   the uid of the dbus-daemon. If a system service installs unsafe
 2242   security policy rules that allow arbitrary method calls
 2243   (such as CVE-2014-8148) then this prevents memory consumption and
 2244   possible privilege escalation via UpdateActivationEnvironment.
 2245 
 2246   We believe that in practice, privilege escalation here is avoided
 2247   by dbus-daemon-launch-helper sanitizing its environment; but
 2248   it seems better to be safe.
 2249 
 2250 • Do not allow calls to UpdateActivationEnvironment or the Stats interface
 2251   on object paths other than /org/freedesktop/DBus. Some system services
 2252   install unsafe security policy rules that allow arbitrary method calls
 2253   to any destination, method and interface with a specified object path;
 2254   while less bad than allowing arbitrary method calls, these security
 2255   policies are still harmful, since dbus-daemon normally offers the
 2256   same API on all object paths and other system services might behave
 2257   similarly.
 2258 
 2259 Other fixes:
 2260 
 2261 • Add missing initialization so GetExtendedTcpTable doesn't crash on
 2262   Windows Vista SP0 (fd.o #77008, Илья А. Ткаченко)
 2263 
 2264 D-Bus 1.9.4 (2014-11-24)
 2265 ==
 2266 
 2267 The “extra-sturdy caramel” release.
 2268 
 2269 Fixes:
 2270 
 2271 • Partially revert the CVE-2014-3639 patch by increasing the default
 2272   authentication timeout on the system bus from 5 seconds back to 30
 2273   seconds, since this has been reported to cause boot regressions for
 2274   some users, mostly with parallel boot (systemd) on slower hardware.
 2275 
 2276   On fast systems where local users are considered particularly hostile,
 2277   administrators can return to the 5 second timeout (or any other value
 2278   in milliseconds) by saving this as /etc/dbus-1/system-local.conf:
 2279 
 2280   <busconfig>
 2281     <limit name="auth_timeout">5000</limit>
 2282   </busconfig>
 2283 
 2284   (fd.o #86431, Simon McVittie)
 2285 
 2286 • Add a message in syslog/the Journal when the auth_timeout is exceeded
 2287   (fd.o #86431, Simon McVittie)
 2288 
 2289 • Send back an AccessDenied error if the addressed recipient is not allowed
 2290   to receive a message (and in builds with assertions enabled, don't
 2291   assert under the same conditions). (fd.o #86194, Jacek Bukarewicz)
 2292 
 2293 D-Bus 1.9.2 (2014-11-10)
 2294 ==
 2295 
 2296 The “structurally unsound flapjack” release.
 2297 
 2298 Security fixes:
 2299 
 2300 • Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
 2301   so that CVE-2014-3636 part A cannot exhaust the system bus'
 2302   file descriptors, completing the incomplete fix in 1.8.8.
 2303   (CVE-2014-7824, fd.o #85105; Simon McVittie, Alban Crequy)
 2304 
 2305 Enhancements:
 2306 
 2307 • D-Bus Specification version 0.25
 2308   · new value 'const' for EmitsChangedSignal annotation
 2309     (fd.o #72958, Lennart Poettering)
 2310   · new ALLOW_INTERACTIVE_AUTHORIZATION flag, for PolicyKit and similar
 2311     (fd.o #83449; Lennart Poettering, Simon McVittie)
 2312   · annotate table of types with reserved/basic/container, and for
 2313     basic types, fixed/string-like
 2314   · clarify arbitrary limits by quoting them in mebibytes
 2315 
 2316 • New API: add accessors for the ALLOW_INTERACTIVE_AUTHORIZATION flag
 2317   (fd.o #83449, Simon McVittie)
 2318 
 2319 • Add dbus-test-tool, a D-Bus swiss army knife with multiple subcommands,
 2320   useful for debugging and performance testing:
 2321   · dbus-test-tool spam: send repeated messages
 2322   · dbus-test-tool echo: send an empty reply for all method calls
 2323   · dbus-test-tool black-hole: do not reply to method calls
 2324   (fd.o #34140; Alban Crequy, Simon McVittie, Will Thompson)
 2325 
 2326 • Add support for process ID in credentials-passing on NetBSD
 2327   (fd.o #69702, Patrick Welche)
 2328 
 2329 • Add an example script to find potentially undesired match rules
 2330   (fd.o #84598, Alban Crequy)
 2331 
 2332 • Document the central assumption that makes our use of credentials-passing
 2333   secure (fd.o #83499, Simon McVittie)
 2334 
 2335 • Replace the dbus-glib section of the tutorial with a GDBus recommendation,
 2336   and add some links to GDBus and QtDBus documentation (fd.o #25140,
 2337   Simon McVittie)
 2338 
 2339 Fixes:
 2340 
 2341 • Use a less confusing NoReply message when disconnected with a reply pending
 2342   (fd.o #76112, Simon McVittie)
 2343 
 2344 • Make the .pc file relocatable by letting pkg-config do all variable
 2345   expansion itself (fd.o #75858, Руслан Ижбулатов)
 2346 
 2347 • Fix a build failure on platforms with kqueue, which regressed in 1.9.0
 2348   (fd.o #85563, Patrick Welche)
 2349 
 2350 • Consistently save errno after socket calls (fd.o #83625, Simon McVittie)
 2351 
 2352 • In dbus-spawn, when the grandchild process exits due to a failed exec(),
 2353   do not lose the exec() errno (fd.o #24821, Simon McVittie)
 2354 
 2355 • Do not fail the tests if a parent process has leaked non-close-on-exec
 2356   file descriptors to us (fd.o #73689, fd.o #83899; Simon McVittie)
 2357 
 2358 • Do not fail the tests on Unix platforms with incomplete
 2359   credentials-passing support, but do fail if we can't pass credentials
 2360   on a platform where it is known to work: Linux, FreeBSD, OpenBSD, NetBSD
 2361   (fd.o #69702, Simon McVittie)
 2362 
 2363 • Detect accept4, dirfd, inotify_init1, pipe2, and Unix fd passing
 2364   when building with cmake, and expand test coverage there
 2365   (fd.o #73689; Ralf Habacker, Simon McVittie)
 2366 
 2367 D-Bus 1.9.0 (2014-10-01)
 2368 ==
 2369 
 2370 The “tiered cheeses” release.
 2371 
 2372 Requirements:
 2373 
 2374 • Support for the systemd: (LISTEN_FDS) pseudo-transport on Linux now
 2375   requires either the libsystemd or libsd-daemon shared library, dropping the
 2376   embedded convenience copy of sd-daemon (fd.o #71818, Simon)
 2377 
 2378 Build-time configuration changes:
 2379 
 2380 • The Stats interface is now enabled by default, and locked-down to
 2381   root-only on the system bus. Configure with --disable-stats
 2382   to disable it altogether on memory- or disk-constrained systems,
 2383   or see ${docdir}/examples/ to open it up to non-root users on the
 2384   system bus or restrict access on the session bus.
 2385   (fd.o #80759; Simon McVittie, Alban Crequy)
 2386 
 2387 • The CMake build system now builds the same shared library name as Autotools
 2388   on at least Linux and Windows:
 2389   - on Linux (and perhaps other Unix platforms), it previously built
 2390     libdbus-1.so, but now builds libdbus-1.so.3.* with development
 2391     symlink libdbus-1.so and SONAME/symlink libdbus-1.so.3
 2392   - on Windows, it previously built either libdbus-1.dll (release) or
 2393     libdbus-1d.dll (debug), but now builds libdbus-1-3.dll, copied to
 2394     libdbus-1.dll for compatibility with older applications.
 2395   (fd.o #74117, Ralf Habacker)
 2396 
 2397 Enhancements:
 2398 
 2399 • D-Bus Specification version 0.24
 2400   · document how to quote match rules (fd.o #24307, Simon McVittie)
 2401   · explicitly say that most message types never expect a reply
 2402     regardles of whether they have NO_REPLY_EXPECTED
 2403     (fd.o #75749, Simon McVittie)
 2404 
 2405 • on Unix platforms, disable Nagle's algorithm on TCP connections to improve
 2406   initial latency (fd.o #75544, Matt Hoosier)
 2407 
 2408 • use backtrace() if it is in -lexecinfo instead of libc, as on NetBSD
 2409   (fd.o #69702, Patrick Welche)
 2410 
 2411 • in dbus-monitor, print more information about file descriptors
 2412   (fd.o #80603, Alban Crequy)
 2413 
 2414 • do not install system bus configuration if built for Windows
 2415   (fd.o #83583; Ralf Habacker, Simon McVittie)
 2416 
 2417 • Add GetAllMatchRules to the Stats interface (fd.o #24307, Alban Crequy)
 2418 
 2419 • Add a regression test for file descriptor passing (fd.o #83622,
 2420   Simon McVittie)
 2421 
 2422 Fixes:
 2423 
 2424 • fix an incorrect error message if a Unix socket path is too long
 2425   (fd.o #73887, Antoine Jacoutot)
 2426 
 2427 • in an MSYS/Cygwin environment, pass Unix-style filenames to xmlto,
 2428   fixing documentation generation (fd.o #75860, Руслан Ижбулатов)
 2429 
 2430 • in Unix with X11, avoid giving dbus-launch a misleading argv[0]
 2431   in ps(1) (fd.o #69716, Chengwei Yang)
 2432 
 2433 • avoid calling poll() with timeout < -1, which is considered invalid
 2434   on FreeBSD and NetBSD (fd.o #78480, Jaap Boender)
 2435 
 2436 • be portable to BSD-derived platforms where O_CLOEXEC is unavailable in libc
 2437   (like Mac OS X 10.6), or available in libc but unsupported by the kernel
 2438   (fd.o #77032; rmvsxop, OBATA Akio, Patrick Welche)
 2439 
 2440 • Fix include path for test/internal/*.c with cmake (Ralf Habacker)
 2441 
 2442 • Documentation improvements
 2443   (fd.o #80795, #84313; Thomas Haller, Sebastian Rasmussen)
 2444 
 2445 • in dbus-monitor, do not leak file descriptors that we have monitored
 2446   (fd.o #80603, Alban Crequy)
 2447 
 2448 • Set the close-on-exec flag for the inotify file descriptor, even
 2449   if built with CMake or older libc (fd.o #73689, Simon McVittie)
 2450 
 2451 • Remove some LGPL code from the Windows dbus-daemon
 2452   (fd.o #57272, Ralf Habacker)
 2453 
 2454 D-Bus 1.8.8 (2014-09-16)
 2455 ==
 2456 
 2457 The "smashy smashy egg man" release.
 2458 
 2459 Security fixes:
 2460 
 2461 • Do not accept an extra fd in the padding of a cmsg message, which
 2462   could lead to a 4-byte heap buffer overrun.
 2463   (CVE-2014-3635, fd.o #83622; Simon McVittie)
 2464 
 2465 • Reduce default for maximum Unix file descriptors passed per message
 2466   from 1024 to 16, preventing a uid with the default maximum number of
 2467   connections from exhausting the system bus' file descriptors under
 2468   Linux's default rlimit. Distributors or system administrators with a
 2469   more restrictive fd limit may wish to reduce these limits further.
 2470 
 2471   Additionally, on Linux this prevents a second denial of service
 2472   in which the dbus-daemon can be made to exceed the maximum number
 2473   of fds per sendmsg() and disconnect the process that would have
 2474   received them.
 2475   (CVE-2014-3636, fd.o #82820; Alban Crequy)
 2476 
 2477 • Disconnect connections that still have a fd pending unmarshalling after
 2478   a new configurable limit, pending_fd_timeout (defaulting to 150 seconds),
 2479   removing the possibility of creating an abusive connection that cannot be
 2480   disconnected by setting up a circular reference to a connection's
 2481   file descriptor.
 2482   (CVE-2014-3637, fd.o #80559; Alban Crequy)
 2483 
 2484 • Reduce default for maximum pending replies per connection from 8192 to 128,
 2485   mitigating an algorithmic complexity denial-of-service attack
 2486   (CVE-2014-3638, fd.o #81053; Alban Crequy)
 2487 
 2488 • Reduce default for authentication timeout on the system bus from
 2489   30 seconds to 5 seconds, avoiding denial of service by using up
 2490   all unauthenticated connection slots; and when all unauthenticated
 2491   connection slots are used up, make new connection attempts block
 2492   instead of disconnecting them.
 2493   (CVE-2014-3639, fd.o #80919; Alban Crequy)
 2494 
 2495 Other fixes:
 2496 
 2497 • Check for libsystemd from systemd >= 209, falling back to
 2498   the older separate libraries if not found (Umut Tezduyar Lindskog,
 2499   Simon McVittie)
 2500 
 2501 • On Linux, use prctl() to disable core dumps from a test executable
 2502   that deliberately raises SIGSEGV to test dbus-daemon's handling
 2503   of that condition (fd.o #83772, Simon McVittie)
 2504 
 2505 • Fix compilation with --enable-stats (fd.o #81043, Gentoo #507232;
 2506   Alban Crequy)
 2507 
 2508 • Improve documentation for running tests on Windows (fd.o #41252,
 2509   Ralf Habacker)
 2510 
 2511 D-Bus 1.8.6 (2014-06-02)
 2512 ==
 2513 
 2514 Security fixes:
 2515 
 2516 • On Linux ≥ 2.6.37-rc4, if sendmsg() fails with ETOOMANYREFS, silently drop
 2517   the message. This prevents an attack in which a malicious client can
 2518   make dbus-daemon disconnect a system service, which is a local
 2519   denial of service.
 2520   (fd.o #80163, CVE-2014-3532; Alban Crequy)
 2521 
 2522 • Track remaining Unix file descriptors correctly when more than one
 2523   message in quick succession contains fds. This prevents another attack
 2524   in which a malicious client can make dbus-daemon disconnect a system
 2525   service.
 2526   (fd.o #79694, fd.o #80469, CVE-2014-3533; Alejandro Martínez Suárez,
 2527   Simon McVittie, Alban Crequy)
 2528 
 2529 Other fixes:
 2530 
 2531 • When dbus-launch --exit-with-session starts a dbus-daemon but then cannot
 2532   attach to a session, kill the dbus-daemon as intended
 2533   (fd.o #74698, Роман Донченко)
 2534 
 2535 D-Bus 1.8.4 (2014-06-10)
 2536 ==
 2537 
 2538 Security fix:
 2539 
 2540 • Alban Crequy at Collabora Ltd. discovered and fixed a denial-of-service
 2541   flaw in dbus-daemon, part of the reference implementation of D-Bus.
 2542   Additionally, in highly unusual environments the same flaw could lead to
 2543   a side channel between processes that should not be able to communicate.
 2544   (CVE-2014-3477, fd.o #78979)
 2545 
 2546 D-Bus 1.8.2 (2014-04-30)
 2547 ==
 2548 
 2549 The “nobody wants red” release.
 2550 
 2551 Enhancements:
 2552 
 2553 • in the CMake build system, add some hints for Linux users cross-compiling
 2554   Windows D-Bus binaries to be able to run tests under Wine
 2555   (fd.o #41252, Ralf Habacker)
 2556 
 2557 • add Documentation key to dbus.service (fd.o #77447, Cameron Norman)
 2558 
 2559 Fixes:
 2560 
 2561 • in "dbus-uuidgen --ensure", try to copy systemd's /etc/machine-id
 2562   to /var/lib/dbus/machine-id instead of generating an entirely new ID
 2563   (fd.o #77941, Simon McVittie)
 2564 
 2565 • if dbus-launch receives an X error very quickly, do not kill
 2566   unrelated processes (fd.o #74698, Роман Донченко)
 2567 
 2568 • on Windows, allow up to 8K connections to the dbus-daemon, instead of the
 2569   previous 64 (fd.o #71297; Cristian Onet, Ralf Habacker)
 2570 
 2571 • cope with \r\n newlines in regression tests, since on Windows,
 2572   dbus-daemon.exe uses text mode (fd.o #75863, Руслан Ижбулатов)
 2573 
 2574 D-Bus 1.8.0 (2014-01-20)
 2575 ==
 2576 
 2577 The “Wolverine distrusts my printer” release.
 2578 
 2579 This starts a new stable branch. The 1.6.x branch is now considered to be
 2580 outdated, and will only receive fixes for serious bugs such as security
 2581 flaws. The 1.4.x and 1.2.x branches no longer have upstream support and
 2582 are unlikely to get any more releases, but if distributors still need to
 2583 support them, please share security patches via upstream.
 2584 
 2585 Summary of changes since 1.6.x:
 2586 
 2587 • libdbus always behaves as if dbus_threads_init_default() had been called
 2588   (thread-safety by default)
 2589 • new dbus-run-session tool, replacing certain misuses of dbus-launch
 2590 • dbus-monitor can talk to outdated versions of dbus-daemon again
 2591 • new org.freedesktop.DBus.GetConnectionCredentials method
 2592 • GetConnectionUnixProcessID also works correctly on Windows, returning
 2593   the Windows process ID
 2594 • GetConnectionWindowsSID returns the correct SID on Windows
 2595 • expat is required, libxml2 can no longer be used as a substitute
 2596 • the userDB cache is required, and cannot be disabled
 2597 • a 64-bit integer type (either int, long, long long or _int64) is required
 2598 • better systemd-journald integration on Linux
 2599 • fixed long-standing fd and array leaks when failing to parse a message
 2600 • fixed referenced-but-never-freed parent nodes (effectively memory leaks)
 2601   when using certain object-path allocation patterns, notably in Avahi
 2602 • better defaults for Windows support
 2603 • better CMake support
 2604 • better portability to mingw32, FreeBSD, NetBSD, QNX and Hurd
 2605 • the source language for the man pages is now Docbook XML
 2606 
 2607 Enhancements since 1.7.10:
 2608 
 2609 • Enhance the CMake build system to check for GLib and compile/run
 2610   a subset of the regression tests (fd.o #41252, #73495; Ralf Habacker)
 2611 
 2612 Fixes since 1.7.10:
 2613 
 2614 • don't rely on va_copy(), use DBUS_VA_COPY() wrapper (fd.o #72840,
 2615   Ralf Habacker)
 2616 
 2617 • fix compilation of systemd journal support on older systemd versions where
 2618   sd-journal.h doesn't include syslog.h (fd.o #73455, Ralf Habacker)
 2619 
 2620 • fix compilation on older MSVC versions by including stdlib.h
 2621   (fd.o #73455, Ralf Habacker)
 2622 
 2623 • Allow <allow_anonymous/> to appear in an included configuration file
 2624   (fd.o #73475, Matt Hoosier)
 2625 
 2626 Test behaviour changes since 1.7.10:
 2627 
 2628 • If the tests crash with an assertion failure, they no longer default to
 2629   blocking for a debugger to be attached. Set DBUS_BLOCK_ON_ABORT in the
 2630   environment if you want the old behaviour.
 2631 
 2632 • To improve debuggability, the dbus-daemon and dbus-daemon-eavesdrop tests
 2633   can be run with an external dbus-daemon by setting
 2634   DBUS_TEST_DAEMON_ADDRESS in the environment. Test-cases that require
 2635   an unusually-configured dbus-daemon are skipped.
 2636 
 2637 D-Bus 1.7.10 (2014-01-06)
 2638 ==
 2639 
 2640 The “weighted companion cube” release.
 2641 
 2642 This is a release candidate for D-Bus 1.8.
 2643 
 2644 D-Bus Specification 0.23:
 2645 
 2646 • don't require messages with no INTERFACE to be dispatched
 2647   (fd.o #68597, Simon McVittie)
 2648 
 2649 • document "tcp:bind=..." and "nonce-tcp:bind=..." (fd.o #72301,
 2650   Chengwei Yang)
 2651 
 2652 • define "listenable" and "connectable" addresses, and discuss
 2653   the difference (fd.o #61303, Simon McVittie)
 2654 
 2655 Enhancements:
 2656 
 2657 • support printing Unix file descriptors in dbus-send, dbus-monitor
 2658   (fd.o #70592, Robert Ancell)
 2659 
 2660 • don't install systemd units if --disable-systemd is given
 2661   (fd.o #71818, Chengwei Yang)
 2662 
 2663 Fixes:
 2664 
 2665 • don't leak memory on out-of-memory while listing activatable or
 2666   active services (fd.o #71526, Radoslaw Pajak)
 2667 
 2668 • fix undefined behaviour in a regression test (fd.o #69924, DreamNik)
 2669 
 2670 • escape Unix socket addresses correctly (fd.o #46013, Chengwei Yang)
 2671 
 2672 • on SELinux systems, don't assume that SECCLASS_DBUS, DBUS__ACQUIRE_SVC
 2673   and DBUS__SEND_MSG are numerically equal to their values in the
 2674   reference policy (fd.o #88719, osmond sun)
 2675 
 2676 • define PROCESS_QUERY_LIMITED_INFORMATION if missing from MinGW < 4 headers
 2677   (fd.o #71366, Matt Fischer)
 2678 
 2679 • define WIN32_LEAN_AND_MEAN to avoid conflicts between winsock.h and
 2680   winsock2.h (fd.o #71405, Matt Fischer)
 2681 
 2682 • do not return failure from _dbus_read_nonce() with no error set,
 2683   preventing a potential crash (fd.o #72298, Chengwei Yang)
 2684 
 2685 • on BSD systems, avoid some O(1)-per-process memory and fd leaks in kqueue,
 2686   preventing test failures (fd.o #69332, fd.o #72213; Chengwei Yang)
 2687 
 2688 • fix warning spam on Hurd by not trying to set SO_REUSEADDR on Unix sockets,
 2689   which doesn't do anything anyway on at least Linux and FreeBSD
 2690   (fd.o #69492, Simon McVittie)
 2691 
 2692 • fix use of TCP sockets on FreeBSD and Hurd by tolerating EINVAL from
 2693   sendmsg() with SCM_CREDS (retrying with plain send()), and looking
 2694   for credentials more correctly (fd.o #69492, Simon McVittie)
 2695 
 2696 • ensure that tests run with a temporary XDG_RUNTIME_DIR to avoid
 2697   getting mixed up in XDG/systemd "user sessions" (fd.o #61301,
 2698   Simon McVittie)
 2699 
 2700 • refresh cached policy rules for existing connections when bus
 2701   configuration changes (fd.o #39463, Chengwei Yang)
 2702 
 2703 D-Bus 1.7.8 (2013-11-01)
 2704 ==
 2705 
 2706 The “extreme hills” release.
 2707 
 2708 Dependencies:
 2709 
 2710 • If systemd support is enabled, libsystemd-journal is now required.
 2711 
 2712 Enhancements:
 2713 
 2714 • When activating a non-systemd service under systemd, annotate its
 2715   stdout/stderr with its bus name in the Journal. Known limitation:
 2716   because the socket is opened before forking, the process will still be
 2717   logged as if it had dbus-daemon's process ID and user ID.
 2718   (fd.o #68559, Chengwei Yang)
 2719 
 2720 • Document more configuration elements in dbus-daemon(1)
 2721   (fd.o #69125, Chengwei Yang)
 2722 
 2723 Fixes:
 2724 
 2725 • Don't leak string arrays or fds if dbus_message_iter_get_args_valist()
 2726   unpacks them and then encounters an error (fd.o #21259, Chengwei Yang)
 2727 
 2728 • If compiled with libaudit, retain CAP_AUDIT_WRITE so we can write
 2729   disallowed method calls to the audit log, fixing a regression in 1.7.6
 2730   (fd.o #49062, Colin Walters)
 2731 
 2732 • path_namespace='/' in match rules incorrectly matched nothing; it
 2733   now matches everything. (fd.o #70799, Simon McVittie)
 2734 
 2735 D-Bus 1.7.6 (2013-10-09)
 2736 ==
 2737 
 2738 The “CSI Shrewsbury” release.
 2739 
 2740 Build-time configuration changes:
 2741 
 2742 • Directory change notification via dnotify on Linux is no longer
 2743   supported; it hadn't compiled successfully since 2010 in any case.
 2744   If you don't have inotify (Linux) or kqueue (*BSD), you will need
 2745   to send SIGHUP to the dbus-daemon when its configuration changes.
 2746   (fd.o #33001, Chengwei Yang)
 2747 
 2748 • Compiling with --disable-userdb-cache is no longer supported;
 2749   it didn't work since at least 2008, and would lead to an extremely
 2750   slow dbus-daemon even it worked. (fd.o #15589, #17133, #66947;
 2751   Chengwei Yang)
 2752 
 2753 • The DBUS_DISABLE_ASSERTS CMake option didn't actually disable most
 2754   assertions. It has been renamed to DBUS_DISABLE_ASSERT to be consistent
 2755   with the Autotools build system. (fd.o #66142, Chengwei Yang)
 2756 
 2757 • --with-valgrind=auto enables Valgrind instrumentation if and only if
 2758   valgrind headers are available. The default is still --with-valgrind=no.
 2759   (fd.o #56925, Simon McVittie)
 2760 
 2761 Dependencies:
 2762 
 2763 • Platforms with no 64-bit integer type are no longer supported.
 2764   (fd.o #65429, Simon McVittie)
 2765 
 2766 • GNU make is now (documented to be) required. (fd.o #48277, Simon McVittie)
 2767 
 2768 • Full test coverage no longer requires dbus-glib, although the tests do not
 2769   exercise the shared library (only a static copy) if dbus-glib is missing.
 2770   (fd.o #68852, Simon McVittie)
 2771 
 2772 Enhancements:
 2773 
 2774 • D-Bus Specification 0.22
 2775   · Document GetAdtAuditSessionData() and
 2776     GetConnectionSELinuxSecurityContext() (fd.o #54445, Simon)
 2777   · Fix example .service file (fd.o #66481, Chengwei Yang)
 2778   · Don't claim D-Bus is "low-latency" (lower than what?), just
 2779     give factual statements about it supporting async use
 2780     (fd.o #65141, Justin Lee)
 2781   · Document the contents of .service files, and the fact that
 2782     system services' filenames are constrained
 2783     (fd.o #66608; Simon McVittie, Chengwei Yang)
 2784 
 2785 • Be thread-safe by default on all platforms, even if
 2786   dbus_threads_init_default() has not been called. For compatibility with
 2787   older libdbus, library users should continue to call
 2788   dbus_threads_init_default(): it is harmless to do so.
 2789   (fd.o #54972, Simon McVittie)
 2790 
 2791 • Add GetConnectionCredentials() method (fd.o #54445, Simon)
 2792 
 2793 • New API: dbus_setenv(), a simple wrapper around setenv().
 2794   Note that this is not thread-safe. (fd.o #39196, Simon)
 2795 
 2796 • Add dbus-send --peer=ADDRESS (connect to a given peer-to-peer connection,
 2797   like --address=ADDRESS in previous versions) and dbus-send --bus=ADDRESS
 2798   (connect to a given bus, like dbus-monitor --address=ADDRESS).
 2799   dbus-send --address still exists for backwards compatibility,
 2800   but is no longer documented. (fd.o #48816, Andrey Mazo)
 2801 
 2802 • Windows-specific:
 2803   · "dbus-daemon --nofork" is allowed on Windows again. (fd.o #68852,
 2804     Simon McVittie)
 2805 
 2806 Fixes:
 2807 
 2808 • Avoid an infinite busy-loop if a signal interrupts waitpid()
 2809   (fd.o #68945, Simon McVittie)
 2810 
 2811 • Clean up memory for parent nodes when objects are unexported
 2812   (fd.o #60176, Thomas Fitzsimmons)
 2813 
 2814 • Make dbus_connection_set_route_peer_messages(x, FALSE) behave as
 2815   documented. Previously, it assumed its second parameter was TRUE.
 2816   (fd.o #69165, Chengwei Yang)
 2817 
 2818 • Escape addresses containing non-ASCII characters correctly
 2819   (fd.o #53499, Chengwei Yang)
 2820 
 2821 • Document <servicedir> search order correctly (fd.o #66994, Chengwei Yang)
 2822 
 2823 • Don't crash on "dbus-send --session / x.y.z" which regressed in 1.7.4.
 2824   (fd.o #65923, Chengwei Yang)
 2825 
 2826 • If malloc() returns NULL in _dbus_string_init() or similar, don't free
 2827   an invalid pointer if the string is later freed (fd.o #65959, Chengwei Yang)
 2828 
 2829 • If malloc() returns NULL in dbus_set_error(), don't va_end() a va_list
 2830   that was never va_start()ed (fd.o #66300, Chengwei Yang)
 2831 
 2832 • fix build failure with --enable-stats (fd.o #66004, Chengwei Yang)
 2833 
 2834 • fix a regression test on platforms with strict alignment (fd.o #67279,
 2835   Colin Walters)
 2836 
 2837 • Avoid calling function parameters "interface" since certain Windows headers
 2838   have a namespace-polluting macro of that name (fd.o #66493, Ivan Romanov)
 2839 
 2840 • Assorted Doxygen fixes (fd.o #65755, Chengwei Yang)
 2841 
 2842 • Various thread-safety improvements to static variables (fd.o #68610,
 2843   Simon McVittie)
 2844 
 2845 • Make "make -j check" work (fd.o #68852, Simon McVittie)
 2846 
 2847 • Fix a NULL pointer dereference on an unlikely error path
 2848   (fd.o #69327, Sviatoslav Chagaev)
 2849 
 2850 • Improve valgrind memory pool tracking (fd.o #69326,
 2851   Sviatoslav Chagaev)
 2852 
 2853 • Don't over-allocate memory in dbus-monitor (fd.o #69329,
 2854   Sviatoslav Chagaev)
 2855 
 2856 • dbus-monitor can monitor dbus-daemon < 1.5.6 again
 2857   (fd.o #66107, Chengwei Yang)
 2858 
 2859 • Unix-specific:
 2860   · If accept4() fails with EINVAL, as it can on older Linux kernels
 2861     with newer glibc, try accept() instead of going into a busy-loop.
 2862     (fd.o #69026, Chengwei Yang)
 2863   · If socket() or socketpair() fails with EINVAL or EPROTOTYPE,
 2864     for instance on Hurd or older Linux with a new glibc, try without
 2865     SOCK_CLOEXEC. (fd.o #69073; Pino Toscano, Chengwei Yang)
 2866   · Fix a file descriptor leak on an error code path.
 2867     (fd.o #69182, Sviatoslav Chagaev)
 2868   · dbus-run-session: clear some unwanted environment variables
 2869     (fd.o #39196, Simon)
 2870   · dbus-run-session: compile on FreeBSD (fd.o #66197, Chengwei Yang)
 2871   · Don't fail the autolaunch test if there is no DISPLAY (fd.o #40352, Simon)
 2872   · Use dbus-launch from the builddir for testing, not the installed copy
 2873     (fd.o #37849, Chengwei Yang)
 2874   · Fix compilation if writev() is unavailable (fd.o #69409,
 2875     Vasiliy Balyasnyy)
 2876   · Remove broken support for LOCAL_CREDS credentials passing, and
 2877     document where each credential-passing scheme is used (fd.o #60340,
 2878     Simon McVittie)
 2879   · Make autogen.sh work on *BSD by not assuming GNU coreutils functionality
 2880     (fd.o #35881, #69787; Chengwei Yang)
 2881   · dbus-monitor: be portable to NetBSD (fd.o #69842, Chengwei Yang)
 2882   · dbus-launch: stop using non-portable asprintf (fd.o #37849, Simon)
 2883   · Improve error reporting from the setuid activation helper (fd.o #66728,
 2884     Chengwei Yang)
 2885 
 2886 • Windows-specific:
 2887   · Remove unavailable command-line options from 'dbus-daemon --help'
 2888     (fd.o #42441, Ralf Habacker)
 2889   · Add support for looking up local TCPv4 clients' credentials on
 2890     Windows XP via the undocumented AllocateAndGetTcpExTableFromStack
 2891     function (fd.o #66060, Ralf Habacker)
 2892   · Fix insufficient dependency-tracking (fd.o #68505, Simon McVittie)
 2893   · Don't include wspiapi.h, fixing a compiler warning (fd.o #68852,
 2894     Simon McVittie)
 2895 
 2896 • Internal changes:
 2897   · add DBUS_ENABLE_ASSERT, DBUS_ENABLE_CHECKS for less confusing
 2898     conditionals (fd.o #66142, Chengwei Yang)
 2899   · improve verbose-mode output (fd.o #63047, Colin Walters)
 2900   · consolidate Autotools and CMake build (fd.o #64875, Ralf Habacker)
 2901   · fix various unused variables, unusual build configurations
 2902     etc. (fd.o #65712, #65990, #66005, #66257, #69165, #69410, #70218;
 2903     Chengwei Yang, Vasiliy Balyasnyy)
 2904 
 2905 D-Bus 1.7.4 (2013-06-13)
 2906 ==
 2907 
 2908 The “but is your thread-safety thread-safe?” release.
 2909 
 2910 Security fixes:
 2911 
 2912 • CVE-2013-2168: Fix misuse of va_list that could be used as a denial
 2913   of service for system services. Vulnerability reported by Alexandru Cornea.
 2914   (Simon)
 2915 
 2916 Dependencies:
 2917 
 2918 • The Windows version of libdbus now contains a C++ source file, used
 2919   to provide global initialization when the library is loaded.
 2920   gcc (mingw*) users should ensure that g++ is also installed.
 2921 
 2922 • The libxml2-based configuration reader (which hasn't worked for 2.5 years,
 2923   and was never the recommended option) has been removed. Expat is now a
 2924   hard dependency.
 2925 
 2926 Enhancements:
 2927 
 2928 • It should now be safe to call dbus_threads_init_default() from any thread,
 2929   at any time. Authors of loadable modules and plugins that use libdbus
 2930   should consider doing so during initialization.
 2931   (fd.o #54972, Simon McVittie)
 2932 
 2933 • Improve dbus-send documentation and command-line parsing (fd.o #65424,
 2934   Chengwei Yang)
 2935 
 2936 Unix-specific:
 2937   · dbus-run-session: experimental new tool to start a temporary D-Bus
 2938     session, e.g. for regression tests or a text console, replacing
 2939     certain uses of dbus-launch which weren't really correct
 2940     (fd.o #39196, Simon)
 2941 
 2942 Other fixes:
 2943 
 2944 • In dbus-daemon, don't crash if a .service file starts with key=value
 2945   (fd.o #60853, Chengwei Yang)
 2946 
 2947 • Unix-specific:
 2948   · Fix a crash similar to CVE-2013-2168 the first time we try to use syslog
 2949     on a platform not defining LOG_PERROR, such as Solaris or QNX.
 2950     This regressed in 1.7.0. (Simon)
 2951   · Fix an assertion failure if we try to activate systemd services before
 2952     systemd connects to the bus (fd.o #50199, Chengwei Yang)
 2953   · Avoid compiler warnings for ignoring the return from write()
 2954     (Chengwei Yang)
 2955 
 2956 • Windows-specific:
 2957   · Under cmake, install runtime libraries (DLLs) into bin/ instead of lib/
 2958     so that Windows finds them (fd.o #59733, Ralf Habacker)
 2959 
 2960 D-Bus 1.7.2 (2013-04-25)
 2961 ==
 2962 
 2963 The “only partially opaque” release.
 2964 
 2965 Configuration changes:
 2966 
 2967 • On non-QNX Unix platforms, the default limit on fds per message in the
 2968   session bus configuration has reduced from 4096 to 1024. The default
 2969   limit used on the system bus was already 1024. On QNX, both limits are
 2970   reduced further, to 128.
 2971 
 2972 Enhancements:
 2973 
 2974 • D-Bus Specification 0.21
 2975   · Following Unicode Corrigendum #9, the noncharacters U+nFFFE, U+nFFFF,
 2976     U+FDD0..U+FDEF are allowed in UTF-8 strings again. (fd.o #63072,
 2977     Simon McVittie)
 2978 
 2979 Fixes:
 2980 
 2981 • Diagnose incorrect use of dbus_connection_get_data() with negative slot
 2982   (i.e. before allocating the slot) rather than returning junk
 2983   (fd.o #63127, Dan Williams)
 2984 
 2985 • Fix a cmake build regression since 1.7.0 (fd.o #63682; Ralf Habacker,
 2986   Simon McVittie)
 2987 
 2988 • Unix-specific:
 2989   · On Linux, link successfully with glibc 2.17 (fd.o #63166, Simon McVittie)
 2990   · Under systemd, log to syslog only, not stderr, avoiding duplication
 2991     (fd.o #61399, #39987; Colin Walters, Dagobert Michelsen)
 2992   · Under systemd, remove unnecessary dependency on syslog.socket
 2993     (fd.o #63531, Cristian Rodríguez)
 2994   · Include alloca.h for alloca() if available, fixing compilation on
 2995     Solaris 10 (fd.o #63071, Dagobert Michelsen)
 2996   · Allow use of systemd-logind without the rest of systemd
 2997     (fd.o #62585, Martin Pitt)
 2998   · When built with CMake, link to librt and use the right path for
 2999     meinproc's XSLT stylesheets (fd.o #61637, Ralf Habacker)
 3000   · Reduce the default limit on number of fds per message to 128 under
 3001     QNX, working around an arbitrary OS limit (fd.o #61176, Matt Fischer)
 3002 
 3003 • Windows-specific:
 3004   · Do not claim that all bus clients have the dbus-daemon's credentials;
 3005     pick up local TCPv4 clients' credentials (process ID and security
 3006     identifier, i.e. user) using GetExtendedTcpTable() (fd.o #61787,
 3007     Ralf Habacker)
 3008 
 3009 D-Bus 1.7.0 (2013-02-22)
 3010 ==
 3011 
 3012 The "Disingenuous Assertions" release.
 3013 
 3014 This is a new development release, starting the 1.7.x branch. D-Bus 1.6
 3015 remains the recommended version for long-term-supported distributions
 3016 or the upcoming GNOME 3.8 release.
 3017 
 3018 Build-time configuration changes:
 3019 
 3020 • The --with-dbus-session-bus-default-address configure option is no longer
 3021   supported. Use the new --with-dbus-session-bus-connect-address and
 3022   --with-dbus-session-bus-listen-address options instead. On Windows, you
 3023   usually want them to have the same argument; on Unix, the defaults are
 3024   usually correct.
 3025 
 3026 • Similarly, the DBUS_SESSION_BUS_DEFAULT_ADDRESS CMake variable is no longer
 3027   supported; use the new DBUS_SESSION_BUS_LISTEN_ADDRESS and
 3028   DBUS_SESSION_BUS_CONNECT_ADDRESS variables instead.
 3029 
 3030 • cmake/cross-compile.sh has been removed. Instead, please use a
 3031   cross-toolchain file (-DCMAKE_TOOLCHAIN_FILE) as documented at
 3032   <http://www.vtk.org/Wiki/CMake_Cross_Compiling>; or use Autotools
 3033   as documented in "info automake Cross-Compilation", and set
 3034   PKG_CONFIG_PATH appropriately.
 3035 
 3036 Requirements:
 3037 
 3038 • Man pages now require xmlto (or either xmlto or meinproc, if using CMake).
 3039 • man2html is no longer used.
 3040 
 3041 Enhancements:
 3042 
 3043 • D-Bus Specification 0.20
 3044   · actually say that /org/freedesktop/DBus is the object that
 3045     implements o.fd.DBus (fd.o #51865, Colin Walters)
 3046   · various reorganisation for better clarity (fd.o #38252, Simon McVittie)
 3047   · stop claiming that all basic types work just like INT32 (strings don't!)
 3048 
 3049 • The "source code" for the man pages is now Docbook XML, eliminating
 3050   the outdated duplicate copies used when building with CMake.
 3051   (fd.o #59805; Ralf Habacker, Simon McVittie)
 3052 
 3053 Fixes:
 3054 
 3055 • In the activation helper, when compiled for tests, do not reset the system
 3056   bus address, fixing the regression tests. (fd.o #52202, Simon)
 3057 
 3058 • Fix building with Valgrind 3.8, at the cost of causing harmless warnings
 3059   with Valgrind 3.6 on some compilers (fd.o #55932, Arun Raghavan)
 3060 
 3061 • Merge <servicehelper> from system-local.conf if necessary (fd.o #51560,
 3062   Krzysztof Konopko)
 3063 
 3064 • Under CMake, prefer xmlto over meinproc (fd.o #59733, Ralf Habacker)
 3065 
 3066 • Stop duplicating CMake's own logic to find libexpat
 3067   (fd.o #59733, Ralf Habacker)
 3068 
 3069 • Don't assume CMake host and build system are the same (fd.o #59733,
 3070   Ralf Habacker)
 3071 
 3072 • Avoid deprecation warnings for GLib 2.35 (fd.o #59971, Simon McVittie)
 3073 
 3074 • Unix-specific:
 3075   · Check for functions in libpthread correctly, fixing compilation on
 3076     (at least) OpenBSD (fd.o #47239, Simon)
 3077   · Don't leak temporary fds pointing to /dev/null (fd.o #56927,
 3078     Michel HERMIER)
 3079   · Update sd-daemon.[ch] from systemd (fd.o #60681)
 3080   · Add partial support for QNX (fd.o #60339, fd.o #61176; Matt Fischer)
 3081 
 3082 • Windows-specific:
 3083   · The default session bus listening and connecting address is now
 3084     "autolaunch:", which makes D-Bus on Windows interoperate with itself
 3085     and GDBus "out of the box". Use the configure options and cmake variables
 3086     described above if you require a different autolaunch scope.
 3087     (fd.o #38201, Simon McVittie)
 3088   · Avoid a CMake warning under Cygwin (fd.o #59401, Ralf Habacker)
 3089 
 3090 • Create session.d, system.d directories under CMake (fd.o #41319,
 3091   Ralf Habacker)
 3092 
 3093 D-Bus 1.6.8 (2012-09-28)
 3094 ==
 3095 
 3096 The "Fix one thing, break another" release.
 3097 
 3098 • Follow up to CVE-2012-3524: The additional hardening
 3099   work to use __secure_getenv() as a followup to bug #52202
 3100   broke certain configurations of gnome-keyring.  Given
 3101   the difficulty of making this work without extensive
 3102   changes to gnome-keyring, use of __secure_getenv() is
 3103   deferred.
 3104 
 3105 D-Bus 1.6.6 (2012-09-28)
 3106 ==
 3107 
 3108 The "Clear the environment in your setuid binaries, please" release.
 3109 
 3110 • CVE-2012-3524: Don't access environment variables (fd.o #52202)
 3111   Thanks to work and input from Colin Walters, Simon McVittie,
 3112   Geoffrey Thomas, and others.
 3113 • Unix-specific:
 3114   · Fix compilation on Solaris (fd.o #53286, Jonathan Perkin)
 3115   · Work around interdependent headers on OpenBSD by including sys/types.h
 3116     before each use of sys/socket.h (fd.o #54418, Brad Smith)
 3117 
 3118 D-Bus 1.6.4 (2012-07-18)
 3119 ==
 3120 
 3121 • Detect that users are "at the console" correctly when configured with
 3122   a non-default path such as --enable-console-auth-dir=/run/console
 3123   (fd.o #51521, Dave Reisner)
 3124 
 3125 • Remove an incorrect assertion from DBusTransport (fd.o #51657,
 3126   Simon McVittie)
 3127 
 3128 • Make --enable-developer default to "no" (regression in 1.6.2;
 3129   fd.o #51657, Simon McVittie)
 3130 
 3131 • Windows-specific:
 3132   · Launch dbus-daemon correctly if its path contains a space
 3133     (fd.o #49450, Wolfgang Baron)
 3134 
 3135 D-Bus 1.6.2 (2012-06-27)
 3136 ==
 3137 
 3138 The "Ice Cabbage" release.
 3139 
 3140 • Change how we create /var/lib/dbus so it works under Automake >= 1.11.4
 3141   (fd.o #51406, Simon McVittie)
 3142 
 3143 • Don't return from dbus_pending_call_set_notify with a lock held on OOM
 3144   (fd.o #51032, Simon McVittie)
 3145 
 3146 • Disconnect "developer mode" (assertions, verbose mode etc.) from
 3147   Automake maintainer mode. D-Bus developers should now configure with
 3148   --enable-developer. Automake maintainer mode is now on by default;
 3149   distributions can disable it with --disable-maintainer-mode.
 3150   (fd.o #34671, Simon McVittie)
 3151 
 3152 • Automatically define DBUS_STATIC_BUILD in static-only Autotools builds,
 3153   fixing linking when targeting Windows (fd.o #33973; william, Simon McVittie)
 3154 
 3155 • Unix-specific:
 3156   · Check for libpthread under CMake on Unix (fd.o #47237, Simon McVittie)
 3157 
 3158 D-Bus 1.6.0 (2012-06-05)
 3159 ==
 3160 
 3161 The “soul of this machine has improved” release.
 3162 
 3163 This version starts a new stable branch of D-Bus: only bug fixes will
 3164 be accepted into 1.6.x. Other changes will now go to the 1.7.x branch.
 3165 
 3166 Summary of changes since 1.4.x:
 3167 
 3168 • New requirements
 3169   · PTHREAD_MUTEX_RECURSIVE on Unix
 3170   · compiler support for 64-bit integers (int64_t or equivalent)
 3171 
 3172 • D-Bus Specification v0.19
 3173 
 3174 • New dbus-daemon features
 3175   · <allow own_prefix="com.example.Service"/> rules allow the service to
 3176     own names like com.example.Service.Instance3
 3177   · optional systemd integration when checking at_console policies
 3178   · --nopidfile option, mainly for use by systemd
 3179   · path_namespace and arg0namespace may appear in match rules
 3180   · eavesdropping is disabled unless the match rule contains eavesdrop=true
 3181 
 3182 • New public API
 3183   · functions to validate various string types (dbus_validate_path() etc.)
 3184   · dbus_type_is_valid()
 3185   · DBusBasicValue, a union of every basic type
 3186 
 3187 • Bug fixes
 3188   · removed an unsafe reimplementation of recursive mutexes
 3189   · dbus-daemon no longer busy-loops if it has far too many file descriptors
 3190   · dbus-daemon.exe --print-address works on Windows
 3191   · all the other bug fixes from 1.4.20
 3192 
 3193 • Other major implementation changes
 3194   · on Linux, dbus-daemon uses epoll if supported, for better scalability
 3195   · dbus_threads_init() ignores its argument and behaves like
 3196     dbus_threads_init_default() instead
 3197   · removed the per-connection link cache, improving dbus-daemon performance
 3198 
 3199 • Developer features
 3200   · optional Valgrind instrumentation (--with-valgrind)
 3201   · optional Stats interface on the dbus-daemon (--enable-stats)
 3202   · optionally abort whenever malloc() fails (--enable-embedded-tests
 3203     and export DBUS_MALLOC_CANNOT_FAIL=1)
 3204 
 3205 Changes since 1.5.12:
 3206 
 3207 • Be more careful about monotonic time vs. real time, fixing DBUS_COOKIE_SHA1
 3208   spec-compliance (fd.o #48580, David Zeuthen)
 3209 
 3210 • Don't use install(1) within the source/build trees, fixing the build as
 3211   non-root when using OpenBSD install(1) (fd.o #48217, Antoine Jacoutot)
 3212 
 3213 • Add missing commas in some tcp and nonce-tcp addresses, and remove
 3214   an unused duplicate copy of the nonce-tcp transport in Windows builds
 3215   (fd.o #45896, Simon McVittie)
 3216 
 3217 D-Bus 1.5.12 (2012-03-27)
 3218 ==
 3219 
 3220 The “Big Book of Science” release.
 3221 
 3222 • Add public API to validate various string types:
 3223   dbus_validate_path(), dbus_validate_interface(), dbus_validate_member(),
 3224   dbus_validate_error_name(), dbus_validate_bus_name(), dbus_validate_utf8()
 3225   (fd.o #39549, Simon McVittie)
 3226 
 3227 • Turn DBusBasicValue into public API so bindings don't need to invent their
 3228   own "union of everything" type (fd.o #11191, Simon McVittie)
 3229 
 3230 • Enumerate data files included in the build rather than using find(1)
 3231   (fd.o #33840, Simon McVittie)
 3232 
 3233 • Add support for policy rules like <allow own_prefix="com.example.Service"/>
 3234   in dbus-daemon (fd.o #46273, Alban Crequy)
 3235 
 3236 • Windows-specific:
 3237   · make dbus-daemon.exe --print-address (and --print-pid) work again
 3238     on Win32, but not on WinCE (fd.o #46049, Simon McVittie)
 3239   · fix duplicate case value when compiling against mingw-w64
 3240     (fd.o #47321, Andoni Morales Alastruey)
 3241 
 3242 D-Bus 1.5.10 (2012-02-21)
 3243 ==
 3244 
 3245 The "fire in Delerium" release.
 3246 
 3247 On Unix platforms, PTHREAD_MUTEX_RECURSIVE (as specified in POSIX 2008 Base
 3248 and SUSv2) is now required.
 3249 
 3250 • D-Bus Specification 0.19:
 3251   · Formally define unique connection names and well-known bus names,
 3252     and document best practices for interface, bus, member and error names,
 3253     and object paths (fd.o #37095, Simon McVittie)
 3254   · Document the search path for session and system services on Unix, and
 3255     where they should be installed by build systems (fd.o #21620, fd.o #35306;
 3256     Simon McVittie)
 3257   · Document the systemd transport (fd.o #35232, Lennart Poettering)
 3258 
 3259 • Make dbus_threads_init() use the same built-in threading implementation
 3260   as dbus_threads_init_default(); the user-specified primitives that it
 3261   takes as a parameter are now ignored (fd.o #43744, Simon McVittie)
 3262 
 3263 • Allow all configured auth mechanisms, not just one (fd.o #45106,
 3264   Pavel Strashkin)
 3265 
 3266 • Improve cmake build system (Ralf Habacker):
 3267   · simplify XML parser dependencies (fd.o #41027)
 3268   · generate build timestamp (fd.o #41029)
 3269   · only create batch files on Windows
 3270   · fix option and cache syntax
 3271   · add help-options target
 3272   · share dbus-arch-deps.h.in with autotools rather than having our
 3273     own version (fd.o #41033)
 3274 
 3275 • Build tests successfully with older GLib, as found in e.g. Debian 6
 3276   (fd.o #41219, Simon McVittie)
 3277 
 3278 • Avoid use of deprecated GThread API (fd.o #44413, Martin Pitt)
 3279 
 3280 • Build documentation correctly if man2html doesn't support filenames on
 3281   its command-line (fd.o #43875, Jack Nagel)
 3282 
 3283 • Improve test coverage. To get even more coverage, run the tests with
 3284   DBUS_TEST_SLOW=1 (fd.o #38285, #42811; Simon McVittie)
 3285 
 3286 • Reduce the size of the shared library by moving functionality only used
 3287   by dbus-daemon, tests etc. into their internal library and deleting
 3288   unused code (fd.o #34976, #39759; Simon McVittie)
 3289 
 3290 • Add dbus-daemon --nopidfile option, overriding the configuration, for
 3291   setups where the default configuration must include <pidfile/> to avoid
 3292   breaking traditional init, but the pid file is in fact unnecessary; use
 3293   it under systemd to improve startup time a bit (fd.o #45520,
 3294   Lennart Poettering)
 3295 
 3296 • Optionally (if configured --with-valgrind) add instrumentation to debug
 3297   libdbus and associated tools more meaningfully under Valgrind
 3298   (fd.o #37286, Simon McVittie)
 3299 
 3300 • Improve the dbus-send(1) man page (fd.o #14005, Simon McVittie)
 3301 
 3302 • Make dbus-protocol.h compatible with C++11 (fd.o #46147, Marc Mutz)
 3303 
 3304 • If tests are enabled and DBUS_MALLOC_CANNOT_FAIL is set in the environment,
 3305   abort on failure to malloc() (like GLib does), to turn runaway memory leaks
 3306   into a debuggable core-dump if a resource limit is applied (fd.o #41048,
 3307   Simon McVittie)
 3308 
 3309 • Don't crash if realloc() returns NULL in a debug build (fd.o #41048,
 3310   Simon McVittie)
 3311 
 3312 • Unix-specific:
 3313   · Replace our broken reimplementation of recursive mutexes, which has
 3314     been broken since 2006, with an ordinary pthreads recursive mutex
 3315     (fd.o #43744; Sigmund Augdal, Simon McVittie)
 3316   · Use epoll(7) for a more efficient main loop in Linux; equivalent patches
 3317     welcomed for other OSs' equivalents like kqueue, /dev/poll, or Solaris
 3318     event ports (fd.o #33337; Simon McVittie, Ralf Habacker)
 3319   · When running under systemd, use it instead of ConsoleKit to check
 3320     whether to apply at_console policies (fd.o #39609, Lennart Poettering)
 3321   · Avoid a highly unlikely fd leak (fd.o #29881, Simon McVittie)
 3322   · Don't close invalid fd -1 if getaddrinfo fails (fd.o #37258, eXeC001er)
 3323   · Don't touch ~/.dbus and ~/.dbus-keyrings when running 'make installcheck'
 3324     (fd.o #41218, Simon McVittie)
 3325   · Stop pretending we respect XDG_DATA_DIRS for system services: the launch
 3326     helper doesn't obey environment variables to avoid privilege escalation
 3327     attacks, so make the system bus follow the same rules
 3328     (fd.o #21620, Simon McVittie)
 3329 
 3330 • Windows-specific:
 3331   · Find the dbus-daemon executable next to the shared library (fd.o #41558;
 3332     Jesper Dam, Ralf Habacker)
 3333   · Remove the faulty implementation of _dbus_condvar_wake_all (fd.o #44609,
 3334     Simon McVittie)
 3335 
 3336 D-Bus 1.5.8 (2011-09-21)
 3337 ==
 3338 
 3339 The "cross-metering" release.
 3340 
 3341 In addition to dead code removal and refactoring, this release contains all
 3342 of the bugfixes from 1.4.16.
 3343 
 3344 • Clean up dead code, and make more warnings fatal in development builds
 3345   (fd.o #39231, fd.o #41012; Simon McVittie)
 3346 
 3347 • If full test coverage is requested via --enable-tests, strictly require
 3348   Python, pygobject and dbus-python, which are required by some tests; if not,
 3349   and Python is missing, skip those tests rather than failing
 3350   (fd.o #37847, Simon McVittie)
 3351 
 3352 • When using cmake, provide the same version-info API in the installed headers
 3353   as for autotools (DBUS_VERSION, etc.) (fd.o #40905, Ralf Habacker)
 3354 
 3355 • Add a regression test for fd.o #38005 (fd.o #39836, Simon McVittie)
 3356 
 3357 • Make "NOCONFIGURE=1 ./autogen.sh" not run configure (Colin Walters)
 3358 
 3359 • Add _DBUS_STATIC_ASSERT and use it to check invariants (fd.o #39636,
 3360   Simon McVittie)
 3361 
 3362 • Fix duplicates in authors list (Ralf Habacker)
 3363 
 3364 • Fix broken links from dbus-tutorial.html if $(htmldir) != $(docdir)
 3365   (fd.o #39879, Chris Mayo)
 3366 
 3367 • Fix a small memory leak, and a failure to report errors, when updating
 3368   a service file entry for activation (fd.o #39230, Simon McVittie)
 3369 
 3370 • Unix-specific:
 3371   · Clean up (non-abstract) Unix sockets on bus daemon exit (fd.o #38656;
 3372     Brian Cameron, Simon McVittie)
 3373   · On systems that use libcap-ng but not systemd, drop supplemental groups
 3374     when switching to the daemon user (Red Hat #726953, Steve Grubb)
 3375   · Make the cmake build work again on GNU platforms (fd.o #29228,
 3376     Simon McVittie)
 3377   · Fix compilation on non-C99 systems that have inttypes.h but not stdint.h,
 3378     like Solaris (fd.o #40313, Dagobert Michelsen)
 3379   · Define CMSG_ALIGN, CMSG_LEN, CMSG_SPACE on Solaris < 10
 3380     (fd.o #40235, Simon McVittie)
 3381   · Cope with Unixes that don't have LOG_PERROR, like Solaris 10
 3382     (fd.o #39987, Simon McVittie)
 3383   · Cope with platforms whose vsnprintf violates both POSIX and C99, like
 3384     Tru64, IRIX and HP-UX (fd.o #11668, Simon McVittie)
 3385 
 3386 • Windows-specific:
 3387   · Fix compilation on MSVC, which doesn't understand "inline" with its
 3388     C99 meaning (fd.o #40000; Ralf Habacker, Simon McVittie)
 3389   · Fix misuse of GPid in test/dbus-daemon.c (fd.o #40003, Simon McVittie)
 3390   · Fix cross-compilation to Windows with Automake (fd.o #40003, Simon McVittie)
 3391 
 3392 D-Bus 1.5.6 (2011-07-29)
 3393 ==
 3394 
 3395 The "weird, gravy-like aftertaste" release.
 3396 
 3397 In addition to new features and refactoring, this release contains all of the
 3398 bugfixes from 1.4.14.
 3399 
 3400 Potentially incompatible (Bustle and similar debugging tools will need
 3401 changes to work as intended):
 3402 
 3403 • Do not allow match rules to "eavesdrop" (receive messages intended for a
 3404   different recipient) by mistake: eavesdroppers must now opt-in to this
 3405   behaviour by putting "eavesdrop='true'" in the match rule, which will
 3406   not have any practical effect on buses where eavesdropping is not allowed
 3407   (fd.o #37890, Cosimo Alfarano)
 3408 
 3409 Other changes:
 3410 
 3411 • D-Bus Specification version 0.18 (fd.o #37890, fd.o #39450, fd.o #38252;
 3412   Cosimo Alfarano, Simon McVittie)
 3413   · add the "eavesdrop" keyword to match rules
 3414   · define eavesdropping, unicast messages and broadcast messages
 3415   · stop claiming that match rules are needed to match unicast messages to you
 3416   · promote the type system to be a top-level section
 3417 
 3418 • Use DBUS_ERROR_OBJECT_PATH_IN_USE if dbus_connection_try_register_object_path
 3419   or dbus_connection_try_register_fallback fails, not ...ADDRESS_IN_USE,
 3420   and simplify object-path registration (fd.o #38874, Jiří Klimeš)
 3421 
 3422 • Consistently use atomic operations on everything that is ever manipulated
 3423   via atomic ops, as was done for changes to DBusConnection's refcount in
 3424   1.4.12 (fd.o #38005, Simon McVittie)
 3425 
 3426 • Fix a file descriptor leak when connecting to a TCP socket (fd.o #37258,
 3427   Simon McVittie)
 3428 
 3429 • Make "make check" in a clean tree work, by not running tests until
 3430   test data has been set up (fd.o #34405, Simon McVittie)
 3431 
 3432 • The dbus-daemon no longer busy-loops if it has a very large number of file
 3433   descriptors (fd.o #23194, Simon McVittie)
 3434 
 3435 • Refactor message flow through dispatching to avoid locking violations if
 3436   the bus daemon's message limit is hit; remove the per-connection link cache,
 3437   which was meant to improve performance, but now reduces it (fd.o #34393,
 3438   Simon McVittie)
 3439 
 3440 • Some cmake fixes (Ralf Habacker)
 3441 
 3442 • Remove dead code, mainly from DBusString (fd.o #38570, fd.o #39610;
 3443   Simon McVittie, Lennart Poettering)
 3444 
 3445 • Stop storing two extra byte order indicators in each D-Bus message
 3446   (fd.o #38287, Simon McVittie)
 3447 
 3448 • Add an optional Stats interface which can be used to get statistics from
 3449   a running dbus-daemon if enabled at configure time with --enable-stats
 3450   (fd.o #34040, Simon McVittie)
 3451 
 3452 • Fix various typos (fd.o #27227, fd.o #38284; Sascha Silbe, Simon McVittie)
 3453 
 3454 • Documentation (fd.o #36156, Simon McVittie):
 3455   · let xsltproc be overridden as usual: ./configure XSLTPROC=myxsltproc
 3456   · install more documentation automatically, including man2html output
 3457   · put dbus.devhelp in the right place (it must go in ${htmldir})
 3458 
 3459 • Unix-specific:
 3460   · look for system services in /lib/dbus-1/system-services in addition to all
 3461     the other well-known locations; note that this should always be /lib,
 3462     even on platforms where shared libraries on the root FS would go in /lib64,
 3463     /lib/x86_64-linux-gnu or similar (fd.o #35229, Lennart Poettering)
 3464   · opt-in to fd passing on Solaris (fd.o #33465, Simon McVittie)
 3465 
 3466 • Windows-specific (Ralf Habacker):
 3467   · fix use of a mutex for autolaunch server detection
 3468   · don't crash on malloc failure in _dbus_printf_string_upper_bound
 3469 
 3470 D-Bus 1.5.4 (2011-06-10)
 3471 ==
 3472 
 3473 Security (local denial of service):
 3474 
 3475 • Byte-swap foreign-endian messages correctly, preventing a long-standing
 3476   local DoS if foreign-endian messages are relayed through the dbus-daemon
 3477   (backporters: this is git commit c3223ba6c401ba81df1305851312a47c485e6cd7)
 3478   (CVE-2011-2200, fd.o #38120, Debian #629938; Simon McVittie)
 3479 
 3480 New things:
 3481 
 3482 • The constant to use for an infinite timeout now has a name,
 3483   DBUS_TIMEOUT_INFINITE. It is numerically equivalent to 0x7fffffff (INT32_MAX)
 3484   which can be used for source compatibility with older versions of libdbus.
 3485 
 3486 • If GLib and DBus-GLib are already installed, more tests will be built,
 3487   providing better coverage. The new tests can also be installed via
 3488       ./configure --enable-installed-tests
 3489   for system integration testing, if required. (fd.o #34570, Simon McVittie)
 3490 
 3491 Changes:
 3492 
 3493 • Consistently use atomic operations for the DBusConnection's refcount,
 3494   fixing potential threading problems (fd.o #38005, Simon McVittie)
 3495 
 3496 • Don't use -Wl,--gc-sections by default: in practice the size decrease is
 3497   small (300KiB on x86-64) and it frequently doesn't work in unusual
 3498   toolchains. To optimize for minimum installed size, you should benchmark
 3499   various possibilities for CFLAGS and LDFLAGS, and set the best flags for
 3500   your particular toolchain at configure time. (fd.o #33466, Simon McVittie)
 3501 
 3502 • Use #!/bin/sh for run-with-tmp-session-bus.sh, making it work on *BSD
 3503   (fd.o #35880, Timothy Redaelli)
 3504 
 3505 • Use ln -fs to set up dbus for systemd, which should fix reinstallation
 3506   when not using a DESTDIR (fd.o #37870, Simon McVittie)
 3507 
 3508 • Windows-specific changes:
 3509   · don't try to build dbus-daemon-launch-helper (fd.o #37838, Mark Brand)
 3510 
 3511 D-Bus 1.5.2 (2011-06-01)
 3512 ==
 3513 
 3514 The "Boar Hunter" release.
 3515 
 3516 Notes for distributors:
 3517 
 3518   This version of D-Bus no longer uses -fPIE by default. Distributions wishing
 3519   to harden the dbus-daemon and dbus-launch-helper can re-enable this if their
 3520   toolchain supports it reliably, via something like:
 3521 
 3522     ./configure CFLAGS=-fPIE LDFLAGS="-pie -Wl,-z,relro"
 3523 
 3524   or by using distribution-specific wrappers such as Debian's hardening-wrapper.
 3525 
 3526 Changes:
 3527 
 3528   • D-Bus Specification v0.17
 3529     · Reserve the extra characters used in signatures by GVariant
 3530       (fd.o #34529, Simon McVittie)
 3531     · Define the ObjectManager interface (fd.o #34869, David Zeuthen)
 3532   • Don't force -fPIE: distributions and libtool know better than we do whether
 3533     it's desirable (fd.o #16621, fd.o #27215; Simon McVittie)
 3534   • Allow --disable-gc-sections, in case your toolchain offers the
 3535     -ffunction-sections, -fdata-sections and -Wl,--gc-sections options
 3536     but they're broken, as seen on Solaris (fd.o #33466, Simon McVittie)
 3537   • Install dbus-daemon and dbus-daemon-launch-helper in a more normal way
 3538     (fd.o #14512; Simon McVittie, loosely based on a patch from Luca Barbato)
 3539   • Ensure that maintainers upload documentation with the right permissions
 3540     (fd.o #36130, Simon McVittie)
 3541   • Don't force users of libdbus to be linked against -lpthread, -lrt
 3542     (fd.o #32827, Simon McVittie)
 3543   • Log system-bus activation information to syslog (fd.o #35705,
 3544     Colin Walters)
 3545   • Log messages dropped due to quotas to syslog (fd.o #35358,
 3546     Simon McVittie)
 3547   • Make the nonce-tcp transport work on Unix (fd.o #34569, Simon McVittie)
 3548   • On Unix, if /var/lib/dbus/machine-id cannot be read, try /etc/machine-id
 3549     (fd.o #35228, Lennart Poettering)
 3550   • In the regression tests, don't report fds as "leaked" if they were open
 3551     on startup (fd.o #35173, Simon McVittie)
 3552   • Make dbus-monitor bail out if asked to monitor more than one bus,
 3553     rather than silently using the last one (fd.o #26548, Will Thompson)
 3554   • Clarify documentation (fd.o #35182, Simon McVittie)
 3555   • Clean up minor dead code and some incorrect error handling
 3556     (fd.o #33128, fd.o #29881; Simon McVittie)
 3557   • Check that compiler options are supported before using them (fd.o #19681,
 3558     Simon McVittie)
 3559   • Windows:
 3560     • Remove obsolete workaround for winioctl.h (fd.o #35083, Ralf Habacker)
 3561 
 3562 D-Bus 1.5.0 (2011-04-11)
 3563 ==
 3564 
 3565 The "you never know when you need to tow something from your giant
 3566 flying shark" release.
 3567 
 3568   • D-Bus Specification v0.16
 3569     · Add support for path_namespace and arg0namespace in match rules
 3570       (fd.o #24317, #34870; Will Thompson, David Zeuthen, Simon McVittie)
 3571     · Make argNpath support object paths, not just object-path-like strings,
 3572       and document it better (fd.o #31818, Will Thompson)
 3573   • Let the bus daemon implement more than one interface (fd.o #33757,
 3574     Simon McVittie)
 3575   • Optimize _dbus_string_replace_len to reduce waste (fd.o #21261,
 3576     Roberto Guido)
 3577   • Require user intervention to compile with missing 64-bit support
 3578     (fd.o #35114, Simon McVittie)
 3579   • Add dbus_type_is_valid as public API (fd.o #20496, Simon McVittie)
 3580   • Raise UnknownObject instead of UnknownMethod for calls to methods on
 3581     paths that are not part of the object tree, and UnknownInterface for calls
 3582     to unknown interfaces in the bus daemon (fd.o #34527, Lennart Poettering)
 3583 
 3584 D-Bus 1.4.8 (2011-04-08)
 3585 ==
 3586 
 3587 The "It's like the beginning of a lobster" release.
 3588 
 3589   • Rename configure.in to configure.ac, and update it to modern conventions
 3590     (fd.o #32245; Javier Jardón, Simon McVittie)
 3591   • Correctly give XDG_DATA_HOME priority over XDG_DATA_DIRS (fd.o #34496,
 3592     Anders Kaseorg)
 3593   • Prevent X11 autolaunching if $DISPLAY is unset or empty, and add
 3594     --disable-x11-autolaunch configure option to prevent it altogether
 3595     in embedded environments (fd.o #19997, NB#219964; Simon McVittie)
 3596   • Install the documentation, and an index for Devhelp (fd.o #13495,
 3597     Debian #454142; Simon McVittie, Matthias Clasen)
 3598   • If checks are not disabled, check validity of string-like types and
 3599     booleans when sending them (fd.o #16338, NB#223152; Simon McVittie)
 3600   • Add UnknownObject, UnknownInterface, UnknownProperty and PropertyReadOnly
 3601     errors to dbus-shared.h (fd.o #34527, Lennart Poettering)
 3602   • Break up a huge conditional in config-parser so gcov can produce coverage
 3603     data (fd.o #10887, Simon McVittie)
 3604   • List which parts of the Desktop Entry specification are applicable to
 3605     .service files (fd.o #19159, Sven Herzberg)
 3606   • Don't suppress service activation if two services have the same Exec=
 3607     (fd.o #35750, Colin Walters)
 3608   • Windows:
 3609     · Avoid the name ELEMENT_TYPE due to namespace-pollution from winioctl.h
 3610       (Andre Heinecke)
 3611     · Include _dbus_path_is_absolute in libdbus on Windows, fixing compilation
 3612       (fd.o #32805, Mark Brand)
 3613 
 3614 D-Bus 1.4.6 (2010-02-17)
 3615 ==
 3616 
 3617 The "1, 2, miss a few, 99, 100" release.
 3618 
 3619   • Remove unfinished changes intended to support GTest-based tests,
 3620     which were mistakenly included in 1.4.4
 3621 
 3622 D-Bus 1.4.4 (2010-02-17)
 3623 ==
 3624 
 3625   • Switch back to using even micro versions for stable releases; 1.4.1
 3626     should have been called 1.4.2, so skip that version number
 3627   • Don't leave bad file descriptors being watched when spawning processes,
 3628     which could result in a busy-loop (fd.o #32992, NB#200248; possibly
 3629     also LP#656134, LP#680444, LP#713157)
 3630   • Check for MSG_NOSIGNAL correctly
 3631   • Fix failure to detect abstract socket support (fd.o #29895)
 3632   • Make _dbus_system_logv actually exit with DBUS_SYSTEM_LOG_FATAL
 3633     (fd.o #32262, NB#180486)
 3634   • Improve some error code paths (fd.o #29981, fd.o #32264, fd.o #32262,
 3635     fd.o #33128, fd.o #33277, fd.o #33126, NB#180486)
 3636   • Avoid possible symlink attacks in /tmp during compilation (fd.o #32854)
 3637   • Tidy up dead code (fd.o #25306, fd.o #33128, fd.o #34292, NB#180486)
 3638   • Improve gcc malloc annotations (fd.o #32710)
 3639   • If the system bus is launched via systemd, protect it from the OOM killer
 3640   • Documentation improvements (fd.o #11190)
 3641   • Avoid readdir_r, which is difficult to use correctly (fd.o #8284,
 3642     fd.o #15922, LP#241619)
 3643   • Cope with invalid files in session.d, system.d (fd.o #19186,
 3644     Debian #230231)
 3645   • Don't distribute generated files that embed our builddir (fd.o #30285,
 3646     fd.o #34292)
 3647   • Raise the system bus's fd limit to be sufficient for its configuration
 3648     (fd.o #33474, LP#381063)
 3649   • Fix syslog string processing
 3650   • Ignore -Waddress
 3651   • Remove broken gcov parsing code and --enable-gcov, and replace them
 3652     with lcov HTML reports and --enable-compiler-coverage (fd.o #10887)
 3653   • Windows:
 3654     · avoid live-lock in Windows CE due to unfair condition variables
 3655   • OpenBSD:
 3656     · support credentials-passing (fd.o #32542)
 3657   • Solaris:
 3658     · opt-in to thread safety (fd.o #33464)
 3659 
 3660 D-Bus 1.4.1 (20 December 2010)
 3661 ==
 3662 
 3663  • Fix for CVE-2010-4352: sending messages with excessively-nested variants can
 3664    crash the bus. The existing restriction to 64-levels of nesting previously
 3665    only applied to the static type signature; now it also applies to dynamic
 3666    nesting using variants. Thanks to Rémi Denis-Courmont for discoving this
 3667    issue.
 3668  • OS X portability fixes, including launchd support.
 3669  • Windows autolaunch improvements.
 3670  • Various bug fixes.
 3671 
 3672 D-Bus 1.4.0 (6 Sep 2010)
 3673 ==
 3674  - systemd hookup
 3675 
 3676 D-Bus 1.3.1 (23 June 2010)
 3677 ==
 3678  - New standardized PropertiesChanged signal in the properties interface
 3679  - Various portability fixes, in particular to Windows platforms
 3680  - Support forking bus services, for compatibility
 3681 
 3682 D-Bus 1.3.0 (29 July 2009)
 3683 ==
 3684  - ability for dbus-send to send to any bus (--address)
 3685  - file descriptor passing on Unix socket transports
 3686  - use of GCC atomic intrinsics for better processor support
 3687    (requires -march=i486 or above for x86 compilation)
 3688  - thread-safe FD_CLOEXEC setting on recent Linux kernels (2.6.24-27 and up)
 3689    and glibc (2.9 for pipe2 and 2.10 for accept4)
 3690  - feature negotiation in the bus daemon