Announcing dbus 1.5.4

[Simon Mcvittie]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

A new development release of dbus is now available. This is basically 1.5.2
and 1.4.12 merged together.

http://dbus.freedesktop.org/releases/dbus/dbus-1.5.4.tar.gz
http://dbus.freedesktop.org/releases/dbus/dbus-1.5.4.tar.gz.asc

D-Bus 1.5.4 (2011-06-10)
==

Security (local denial of service):

• Byte-swap foreign-endian messages correctly, preventing a long-standing
  local DoS if foreign-endian messages are relayed through the dbus-daemon
  (backporters: this is git commit c3223ba6c401ba81df1305851312a47c485e6cd7)
  (fd.o #38120, Debian #629938, no CVE number yet; Simon McVittie)

New things:

• The constant to use for an infinite timeout now has a name,
  DBUS_TIMEOUT_INFINITE. It is numerically equivalent to 0x7fffffff (INT32_MAX)
  which can be used for source compatibility with older versions of libdbus.

• If GLib and DBus-GLib are already installed, more tests will be built,
  providing better coverage. The new tests can also be installed via
      ./configure --enable-installed-tests
  for system integration testing, if required. (fd.o #34570, Simon McVittie)

Changes:

• Consistently use atomic operations for the DBusConnection's refcount,
  fixing potential threading problems (fd.o #38005, Simon McVittie)

• Don't use -Wl,--gc-sections by default: in practice the size decrease is
  small (300KiB on x86-64) and it frequently doesn't work in unusual
  toolchains. To optimize for minimum installed size, you should benchmark
  various possibilities for CFLAGS and LDFLAGS, and set the best flags for
  your particular toolchain at configure time. (fd.o #33466, Simon McVittie)

• Use #!/bin/sh for run-with-tmp-session-bus.sh, making it work on *BSD
  (fd.o #35880, Timothy Redaelli)

• Use ln -fs to set up dbus for systemd, which should fix reinstallation
  when not using a DESTDIR (fd.o #37870, Simon McVittie)

• Windows-specific changes:
  · don't try to build dbus-daemon-launch-helper (fd.o #37838, Mark Brand)
-----BEGIN PGP SIGNATURE-----
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=2Cst
-----END PGP SIGNATURE-----