Page MenuHomeFreeBSD
Files F177571456

D61545.1794771135.diff
No OneTemporary
Actions

Authored By
Unknown
Size
3 KB
Referenced Files
None
Subscribers
None

D61545.1794771135.diff
View Options

diff --git a/devel/dbus/Makefile b/devel/dbus/Makefile
--- a/devel/dbus/Makefile
+++ b/devel/dbus/Makefile
@@ -1,5 +1,6 @@
PORTNAME= dbus
DISTVERSION= 1.16.4
+PORTREVISION= 1
PORTEPOCH= 1
CATEGORIES= devel gnome
MASTER_SITES= https://dbus.freedesktop.org/releases/dbus/
diff --git a/devel/dbus/files/patch-dbus_dbus-connection.c b/devel/dbus/files/patch-dbus_dbus-connection.c
deleted file mode 100644
--- a/devel/dbus/files/patch-dbus_dbus-connection.c
+++ /dev/null
@@ -1,20 +0,0 @@
---- dbus/dbus-connection.c.orig 2025-02-27 16:29:06 UTC
-+++ dbus/dbus-connection.c
-@@ -2510,7 +2510,7 @@ _dbus_connection_block_pending_call (DBusPendingCall *
- */
- _dbus_verbose ("dbus_connection_send_with_reply_and_block() waiting for more memory\n");
-
-- _dbus_memory_pause_based_on_timeout (timeout_milliseconds - elapsed_milliseconds);
-+ _dbus_memory_pause_based_on_timeout (-1);
- }
- else
- {
-@@ -2519,7 +2519,7 @@ _dbus_connection_block_pending_call (DBusPendingCall *
- pending,
- DBUS_ITERATION_DO_READING |
- DBUS_ITERATION_BLOCK,
-- timeout_milliseconds - elapsed_milliseconds);
-+ -1);
- }
-
- goto recheck_status;
diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
--- a/security/vuxml/vuln/2026.xml
+++ b/security/vuxml/vuln/2026.xml
@@ -1,3 +1,47 @@
+ <vuln vid="8d5589db-df3e-11f1-a4ad-74563cf85f9d">
+ <topic>dbus -- multiple denial-of-service vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>dbus</name>
+ <range><lt>1.16.4,1</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>The dbus project reports:</p>
+ <blockquote cite="https://gitlab.freedesktop.org/dbus/dbus/-/blob/dbus-1.16.4/NEWS">
+ <p>Prevent a denial-of-service vulnerability on the system bus:
+ if a privileged user was running a monitor such as
+ dbus-monitor --system or busctl monitor --system, then an
+ unprivileged user could cause the dbus-daemon to crash by
+ arranging for delivery of a broadcast signal from the
+ dbus-daemon to be prevented, for example by filling up the
+ outgoing message queue towards a client that subscribed to it.
+ This vulnerability could be seen as an incomplete fix for
+ CVE-2023-34969. (CVE-2026-120749)</p>
+ <p>Prevent a denial-of-service vulnerability on the system bus in
+ which a client could cause a busy-loop by shutting down its
+ socket while outgoing messages were pending.</p>
+ <p>On platforms that implement struct cmsgcred (in practice this
+ is believed to mean FreeBSD and DragonFlyBSD), prevent a
+ denial-of-service in which a local AF_UNIX client could send
+ unexpected file descriptors to the system bus, which would
+ have been ignored but not closed.</p>
+ <p>In servers listening on the nonce-tcp: transport, do not allow
+ a client to make the server block for more than 1 second.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2026-120749</cvename>
+ <url>https://gitlab.freedesktop.org/dbus/dbus/-/blob/dbus-1.16.4/NEWS</url>
+ </references>
+ <dates>
+ <discovery>2026-11-12</discovery>
+ <entry>2026-11-14</entry>
+ </dates>
+ </vuln>
+
<vuln vid="d6484a4c-e01c-11f1-8e2f-5404a68ad561">
<topic>traefik -- Multiple vulnerabilities</topic>
<affects>

File Metadata

Mime Type
text/plain
Expires
Sun, Nov 15, 7:32 PM (21 h, 19 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
41747441
Default Alt Text
D61545.1794771135.diff (3 KB)

Event Timeline