rpms/dbus/devel dbus-0.22-fix-match-rule-equal.patch, NONE, 1.1 dbus.spec, 1.113, 1.114

[fedora-cvs-commits at redhat.com]

Author: davidz

Update of /cvs/dist/rpms/dbus/devel
In directory cvs.devel.redhat.com:/tmp/cvs-serv28783

Modified Files:
	dbus.spec 
Added Files:
	dbus-0.22-fix-match-rule-equal.patch 
Log Message:
* Fri Dec 15 2006 David Zeuthen <davidz at redhat.com> - 1.0.1-3%{?dist}
- CVE-2006-6107: D-Bus denial of service



dbus-0.22-fix-match-rule-equal.patch:
 signals.c |    3 +++
 1 files changed, 3 insertions(+)

--- NEW FILE dbus-0.22-fix-match-rule-equal.patch ---
diff -pur 0.61-osso23/bus/signals.c 0.61-osso23.new/bus/signals.c
--- 0.61-osso23/bus/signals.c	2006-11-23 16:46:52.589602192 +0200
+++ 0.61-osso23.new/bus/signals.c	2006-11-23 16:49:28.873843376 +0200
@@ -1067,6 +1067,9 @@ match_rule_equal (BusMatchRule *a,
   if (a->flags != b->flags)
     return FALSE;
 
+  if (a->matches_go_to != b->matches_go_to)
+    return FALSE;
+
   if ((a->flags & BUS_MATCH_MESSAGE_TYPE) &&
       a->message_type != b->message_type)
     return FALSE;


Index: dbus.spec
===================================================================
RCS file: /cvs/dist/rpms/dbus/devel/dbus.spec,v
retrieving revision 1.113
retrieving revision 1.114
diff -u -r1.113 -r1.114
--- dbus.spec	26 Nov 2006 05:12:17 -0000	1.113
+++ dbus.spec	15 Dec 2006 20:20:40 -0000	1.114
@@ -8,7 +8,7 @@
 Summary: D-BUS message bus
 Name: dbus
 Version: 1.0.1 
-Release: 2%{?dist}
+Release: 3%{?dist}
 URL: http://www.freedesktop.org/software/dbus/
 Source0: http://dbus.freedesktop.org/releases/dbus/%{name}-%{version}.tar.gz
 Source1: doxygen_to_devhelp.xsl
@@ -38,6 +38,7 @@
 Patch2: dbus-0.92-audit-system.patch
 Patch3: dbus-1.0.1-pthread-holder-fix.patch
 Patch4: dbus-1.0.1-generate-xml-docs.patch
+Patch5: dbus-0.22-fix-match-rule-equal.patch
 
 %description
 
@@ -73,6 +74,8 @@
 %patch2 -p1 -b .audit_system
 %patch3 -p1 -b .pthread-holder-fix
 %patch4 -p1 -b .generate-xml-docs
+%patch5 -p1 -b .dbus-0.22-fix-match-rule-equal.patch
+
 autoreconf -f -i
 
 %build
@@ -181,6 +184,9 @@
 %{_datadir}/devhelp/books/dbus
 
 %changelog
+* Fri Dec 15 2006 David Zeuthen <davidz at redhat.com> - 1.0.1-3%{?dist}
+- CVE-2006-6107: D-Bus denial of service
+
 * Sun Nov 26 2006 Matthias Clasen <mclasen at redhat.com> - 1.0.1-2
 - Include docs, and make them show up in devhelp