Change log for dbus package in Debian

dbus (1.16.0-1) unstable; urgency=medium

  * New upstream stable release
  * d/gbp.conf: Use upstream/1.16.x branch to import stable releases
  * d/watch: Only watch for stable releases on this branch

 -- Simon McVittie <email address hidden>  Mon, 16 Dec 2024 14:26:24 +0000

dbus (1.15.92-1) unstable; urgency=medium

  * New upstream release candidate (1.16.0 rc2)
    - Fixes a build regression on Hurd (Closes: #1089641)
  * d/rules: Update name of intrusive_tests option
  * d/control: Specifially document the debug build in dbus-tests as not
    for production use.
    This build enables options that are likely to be insecure, and
    certainly reduce performance and robustness. It should not be
    considered to be covered by security support.

 -- Simon McVittie <email address hidden>  Wed, 11 Dec 2024 14:32:26 +0000

dbus (1.15.90-1) unstable; urgency=medium

  * New upstream release candidate (effectively 1.16.0 rc1)
  * Switch packaging branch to debian/unstable.
    dbus 1.15.90 is a release candidate for 1.16.0, so it can go to
    testing/unstable.
  * d/salsa-ci.yml: Use recommended recipe
  * Drop patches, applied upstream
  * d/libdbus-1-3.symbols.in: Stop distinguishing between development versions.
    Behave as though all symbols added in a development branch had been
    added in the stable release that followed it, instead. This simplifies
    the generated dependency.
    Leave the one symbol that was added during 1.15.x as-is, since we
    have not yet reached 1.16.0.
  * Add references to #1072756, #1085407 in the 1.14.10-5 changelog entry

 -- Simon McVittie <email address hidden>  Fri, 06 Dec 2024 15:38:26 +0000

dbus (1.15.12-1) experimental; urgency=medium

  * New upstream development release
  * Merge packaging changes from unstable
  * d/p/doc-Substitute-DBUS_APIDOC_LINK-from-Meson-build-not-just.patch,
    d/p/tests-Only-check-whether-the-first-1024-fds-are-close-on-.patch:
    Drop patches that are included in the new upstream release
  * Update doc-base registration and documentation symlinks for new layout
  * d/p/doc-Use-api-html-to-link-to-Doxygen-docs-in-Devhelp-index.patch,
    d/p/doc-Use-the-top-level-index.html-as-the-table-of-contents.patch:
    Add proposed patches to fix the Devhelp documentation index
  * Enable assertions for the debug build.
    These were always meant to be enabled in the debug build (and disabled
    in the normal and udeb builds), but were accidentally disabled when
    switching from Autotools to Meson.

 -- Simon McVittie <email address hidden>  Tue, 29 Oct 2024 16:47:09 +0000

dbus (1.14.10-6) unstable; urgency=medium

  * d/p/tests-Only-check-whether-the-first-1024-fds-are-close-on-.patch:
    Fix FTBFS when running with a high rlimit.
    Thanks to Aurelien Jarno for diagnosing the root cause.
    (Closes: #1086148)

 -- Simon McVittie <email address hidden>  Mon, 28 Oct 2024 22:02:49 +0000

dbus (1.14.10-5) unstable; urgency=medium

  [ Simon McVittie ]
  * d/upstream/metadata: Add Security-Contact field

  [ Michael Biebl ]
  * Add base-files (>= 13.4~) as alternative dependency for usr-is-merged

 -- Simon McVittie <email address hidden>  Sat, 26 Oct 2024 21:04:23 +0100

dbus (1.15.10-1) experimental; urgency=medium

  * New upstream release
  * Merge packaging changes from unstable
    - No functional change, all changes were already in experimental
  * d/copyright: Update for deletion of m4/
  * Standards-Version: 4.7.0 (no changes required)
  * Refresh patch series (no functional change)
  * d/p/doc-Substitute-DBUS_APIDOC_LINK-from-Meson-build-not-just.patch:
    Add proposed patch to fix missing link from index to API docs

 -- Simon McVittie <email address hidden>  Wed, 25 Sep 2024 17:35:27 +0100

dbus (1.14.10-4) unstable; urgency=medium

  * Move the shared library from /lib/MULTIARCH to /usr/lib/MULTIARCH
    (Closes: #1060155)

 -- Simon McVittie <email address hidden>  Mon, 08 Jan 2024 21:12:25 +0000

dbus (1.15.8-4) experimental; urgency=medium

  * Move the shared library from /lib/MULTIARCH to /usr/lib/MULTIARCH
  * Merge packaging changes from unstable
    - dbus depends on usr-is-merged (>= 38~) (Closes: #1054650)
    - all other changes were already present in the experimental branch

 -- Simon McVittie <email address hidden>  Sun, 24 Dec 2023 14:29:57 +0000

dbus (1.14.10-3) unstable; urgency=medium

  * d/control: dbus Depends on usr-is-merged (>= 38~).
    Non-merged /usr has been unsupported since Debian 12, as per Technical
    Committee resolutions #978636 and #994388 (please see the Debian 12
    release notes for details).
    The version of usr-is-merged shipped in Debian 12 had an undocumented
    opt-out mechanism intended for use on buildds and QA systems targeting
    Debian 12 (piuparts, reproducible-builds, autopkgtest and similar),
    to ensure that the upgrade path from Debian 11 to 12 will continue
    to work and continue to undergo automated tests. That opt-out is
    no longer applicable or available in trixie/sid, and was removed in
    usrmerge version 38.
    Since version 1.14.10-2, dbus ships its systemd units in
    /usr/lib/systemd/system, as part of the distro-wide transition
    away from making use of "aliased" paths. This is entirely valid on
    merged-/usr systems, but will no longer work in the unsupported
    filesystem layout with non-merged /usr, because for historical
    reasons, current versions of systemd on non-merged-/usr systems will
    only read units from /lib/systemd/system.
    In the case of dbus, the symptom when this assumption is broken is
    particularly bad (various key system services will not start, with
    long delays during boot, login and shutdown), so let's hold back
    this upgrade on unsupported non-merged-/usr systems until they have
    completed the switch to merged-/usr and can install
    usr-is-merged (>= 38~).
    (Closes: #1054650)

 -- Simon McVittie <email address hidden>  Mon, 30 Oct 2023 11:51:35 +0000

dbus (1.14.10-2) unstable; urgency=low

  * Backport packaging changes from experimental:
    - Install systemd system units into /usr/lib/systemd/system.
      This was allowed by TC resolution #1053901. The shared library is
      still in /lib, for now.
      Build-depend on debhelper 13.11.6~ to ensure that the units are still
      picked up by dh_installsystemd.
    - Build-depend on pkgconf rather than pkg-config
    - dbus-x11: Don't copy XDG_SEAT_PATH, XDG_SESSION_PATH to activation
      environment. These variables are specific to a single login session.
  * d/copyright: Drop unused entry for pkg.m4.
    This is no longer included in the upstream source release since 1.14.6.
  * d/dbus-tests.lintian-overrides: Drop unused overrides.
    Lintian no longer flags our RUNPATH as problematic.

 -- Simon McVittie <email address hidden>  Wed, 25 Oct 2023 15:56:36 +0100

dbus (1.15.8-3) experimental; urgency=medium

  * Install systemd system units into /usr/lib/systemd/system.
    This was allowed by TC resolution #1053901. The shared library is still
    in /lib, for now.
    Build-depend on debhelper 13.11.6~ to ensure that the units are still
    picked up by dh_installsystemd.
  * Merge 1.14.10-1 packaging from unstable
    - No functional changes, equivalent fixes were already included in
      1.15.8 (for the upstream parts) and 1.15.8-2 (for the packaging)
  * Build-depend on pkgconf rather than pkg-config

 -- Simon McVittie <email address hidden>  Sun, 22 Oct 2023 12:54:29 +0100

dbus (1.12.28-0+deb11u1) bullseye; urgency=medium

  * New upstream stable release 1.12.26
    - Fixes a denial of service issue that is not relevant for the way
      we compile dbus in Debian
  * New upstream stable release 1.12.28
    - Fixes a denial of service issue if the root or messagebus user is
      monitoring messages on the system bus with the Monitoring interface
      (dbus-monitor, busctl monitor, gdbus monitor or similar)
      (Closes: #1037151)

 -- Simon McVittie <email address hidden>  Tue, 06 Jun 2023 15:07:35 +0100

dbus (1.14.10-1~deb12u1) bookworm; urgency=medium

  * Rebuild for bookworm

 -- Simon McVittie <email address hidden>  Sat, 16 Sep 2023 11:03:58 +0100

dbus (1.14.10-1) unstable; urgency=medium

  * New upstream stable release
    - Fix a dbus-daemon crash during policy reload if a connection belongs
      to a user account that has been deleted, or if a Name Service Switch
      plugin is broken, on kernels not supporting SO_PEERGROUPS
    - Report the error correctly if getting the groups of a uid fails
    - If a connection has a primary group ID but no supplementary groups,
      report the primary group ID in GetConnectionCredentials()
      UnixGroupIDs field
  * dbus-user-session: Copy XDG_CURRENT_DESKTOP to activation environment.
    Previously this was only done if dbus-x11 was installed.
    This is needed by various freedesktop.org specifications, in particular
    for xdg-desktop-portal (>= 1.17) to choose the correct portal backend
    for a desktop session. Some session managers like gnome-session and
    plasma-workspace already upload this into the activation environment,
    but many older or simpler session managers do not.

 -- Simon McVittie <email address hidden>  Fri, 01 Sep 2023 15:41:38 +0100

dbus (1.15.8-2) experimental; urgency=medium

  * dbus-x11: Don't copy XDG_SEAT_PATH, XDG_SESSION_PATH to activation
    environment.
    These variables are specific to a single login session.
  * dbus-user-session: Copy XDG_CURRENT_DESKTOP to activation environment.
    This is needed by various freedesktop.org specifications, in particular
    for xdg-desktop-portal (>= 1.17) to choose the correct portal backend
    for a desktop session. Some session managers like gnome-session and
    plasma-workspace already upload this into the activation environment,
    but many older or simpler session managers do not.

 -- Simon McVittie <email address hidden>  Fri, 01 Sep 2023 10:55:31 +0100

dbus (1.15.8-1) experimental; urgency=medium

  * New upstream development release
  * d/copyright: Update
  * d/rules: Pass the correct private library directory to dh_shlibdeps

 -- Simon McVittie <email address hidden>  Mon, 21 Aug 2023 18:37:36 +0100

dbus (1.14.8-2~deb12u1) bookworm; urgency=medium

  * Rebuild for bookworm

 -- Simon McVittie <email address hidden>  Tue, 11 Jul 2023 20:59:33 +0100

dbus (1.15.6-2) experimental; urgency=medium

  * Merge packaging from unstable (Closes: #1040790)

 -- Simon McVittie <email address hidden>  Tue, 11 Jul 2023 21:01:57 +0100

dbus (1.14.8-2) unstable; urgency=high

  * dbus-daemon.postinst: Stop trying to take DPKG_ROOT into account.
    This unintentionally disabled the code path that would copy systemd's
    /etc/machine-id in preference to creating an entirely new machine ID.
    (Closes: #1040790)
  * d/tests: Add test coverage for #1040790

 -- Simon McVittie <email address hidden>  Tue, 11 Jul 2023 18:38:22 +0100

dbus (1.14.8-1) unstable; urgency=medium

  [ Simon McVittie ]
  * New upstream stable release
    - Fixes a denial of service issue if the root or messagebus user is
      monitoring messages on the system bus with the Monitoring interface
      (dbus-monitor, busctl monitor, gdbus monitor or similar)
      (Closes: #1037151)

  [ Helmut Grohne ]
  * Mark dbus-daemon and dbus-bin Multi-Arch: foreign (Closes: #1033056)

 -- Simon McVittie <email address hidden>  Tue, 06 Jun 2023 15:05:50 +0100

dbus (1.15.6-1) experimental; urgency=medium

  [ Simon McVittie ]
  * New upstream development release
    - Fixes a denial of service issue if the root or messagebus user is
      monitoring messages on the system bus with the Monitoring interface
      (dbus-monitor, busctl monitor, gdbus monitor or similar)
      (Closes: #1037151)
  * d/rules: Tell dh_shlibdeps where to find dbus-tests' private libraries
    dbus-tests contains an instrumented/debug build of libdbus in a private
    directory, which has more ABI than the production build, and a second
    set of tests which depend on that debug build.
  * d/rules: Extend arbitrary timeout for tests.
    Some mipsel buildds are very slow and have seen the hash test time out
    after 30 seconds (it normally takes about 10 on slower machines).

  [ Helmut Grohne ]
  * Mark dbus-daemon and dbus-bin Multi-Arch: foreign (Closes: #1033056)

 -- Simon McVittie <email address hidden>  Tue, 06 Jun 2023 15:06:09 +0100

dbus (1.14.6-1) unstable; urgency=medium

  * New upstream stable release
    - Fixes a denial of service issue that is not relevant for the way
      we compile dbus in Debian
  * d/copyright: Update
  * Standards-Version: 4.6.2 (no changes required)
  * d/control: Mark dbus-*-bus-common as Multi-Arch: foreign.
    Thanks to Dave Jones / Ubuntu
  * d/upstream/metadata: Update Gitlab URLs to preferred format
  * Drop migration path from very old debug symbol packages
  * Avoid explicitly specifying -Wl,--as-needed linker flag,
    which is the default with Debian 12 toolchains
  * Remove version constraints unnecessary since Debian 10

 -- Simon McVittie <email address hidden>  Wed, 08 Feb 2023 13:21:47 +0000

dbus (1.15.4-1) experimental; urgency=medium

  * New upstream development release
    - Fixes a denial of service issue that is not relevant for the way
      we compile dbus in Debian
  * d/copyright: Update
  * d/rules: Explicitly enable the message bus and tools, which are now
    compile-time optional
  * Merge packaging changes from unstable

 -- Simon McVittie <email address hidden>  Wed, 08 Feb 2023 13:34:18 +0000

dbus (1.12.24-0+deb11u1) bullseye-security; urgency=medium

  * New upstream stable release 1.12.22
    - No longer logs warnings about /proc/self/oom_score_adj with
      systemd >= 250 (Closes: #1004543)
    - Improve reproducibility of documentation
    - Fix a race condition in test/integration/transient-services.sh
      which affects the autopkgtest (Closes: #1005889)
    - Fixes for some non-Debian platforms
  * New upstream stable release 1.12.24
    - Fix several denial of service issues where an authenticated attacker
      can crash the system bus by sending crafted messages
      (CVE-2022-42010, CVE-2022-42011, CVE-2022-42012)
    - Use a path-based Unix socket for the session bus, avoiding sandbox
      escape for Flatpak apps with network access (dbus#416)
    - Don't crash if asked to watch more than 128 directories for changes
    - Fix error reporting for a rare out-of-memory condition
    - Fixes for non-Debian mingw-w64 builds
  * d/gbp.conf, d/control: Switch branch for bullseye

 -- Simon McVittie <email address hidden>  Wed, 05 Oct 2022 12:04:31 +0100

dbus (1.14.4-1) unstable; urgency=high

  * New upstream stable release 1.14.4
    - Fix several denial of service issues where an authenticated attacker
      can crash the system bus by sending crafted messages
      (CVE-2022-42010, CVE-2022-42011, CVE-2022-42012)
    - Use a path-based Unix socket for the session bus, avoiding sandbox
      escape for Flatpak apps with network access (dbus#416)

 -- Simon McVittie <email address hidden>  Wed, 05 Oct 2022 12:00:00 +0100

dbus (1.15.2-1) experimental; urgency=medium

  * New upstream development release
    - Fix several denial of service issues where an authenticated attacker
      can crash the system bus by sending crafted messages
      (CVE-2022-42010, CVE-2022-42011, CVE-2022-42012)
    - Use a path-based Unix socket for the session bus, avoiding sandbox
      escape for Flatpak apps with network access (dbus#416)
  * Merge packaging from unstable

 -- Simon McVittie <email address hidden>  Wed, 05 Oct 2022 12:02:43 +0100

dbus (1.14.2-1) unstable; urgency=medium

  [ Simon McVittie ]
  * New upstream stable release
  * d/copyright: Update

  [ Dave Jones ]
  * Make autopkgtest cross-friendly

 -- Simon McVittie <email address hidden>  Mon, 26 Sep 2022 17:09:42 +0100

dbus (1.15.0-1) experimental; urgency=medium

  [ Simon McVittie ]
  * New upstream development release
  * Drop most patches, applied upstream
  * d/copyright: Update

  [ Dave Jones ]
  * Make autopkgtest cross-friendly

 -- Simon McVittie <email address hidden>  Thu, 22 Sep 2022 12:36:07 +0100

dbus (1.14.99~git20220715-1) experimental; urgency=medium

  * d/control, d/gbp.conf, d/watch: Branch for experimental
  * New upstream snapshot with Meson build system
  * Build with Meson instead of Autotools
  * d/copyright: Update
  * libdbus-1-dev: Depend on libsystemd-dev.
    Autotools represented the libsystemd dependency as Libs.private, which
    meant we would only have needed libsystemd-dev for static linking,
    but Meson uses Requires.private.
  * d/p/activation-helper-Never-crash-if-unable-to-write-oom_scor.patch,
    d/p/sysdeps-Only-open-oom_score_adj-read-write-if-we-need-to-.patch:
    Add proposed patches to make oom_score_adj handling more robust
  * d/p/test-bus-Factor-out-common-setup-teardown-code.patch,
    d/p/test-bus-Break-up-dispatch-test-into-three-separate-tests.patch,
    d/p/dispatch-test-Pass-in-test-data-directory-as-a-C-string.patch:
    Add proposed patches to speed up build-time testing
  * d/rules: Run all tests, even the slow ones.
    They're a lot less slow now.

 -- Simon McVittie <email address hidden>  Sun, 17 Jul 2022 16:25:37 +0100

dbus (1.14.0-2) unstable; urgency=medium

  * Revert workaround for #994204. Since debhelper 13.7, the workaround
    doesn't do what we wanted either, causing unwanted dbus-daemon restarts
    when rebuilt with a current debhelper.
  * Explicitly build-depend on a debhelper without #994204 (either a newer
    version where it is fixed, or an older version which didn't have that
    problem). The failure mode caused by that bug is particularly bad
    for dbus.
  * Standards-Version: 4.6.1 (no changes required)
  * Use XML catalog from built tree, fixing incorrect paths to DTDs
  * Update Lintian overrides

 -- Simon McVittie <email address hidden>  Sat, 16 Jul 2022 23:00:40 +0100

dbus (1.14.0-1) unstable; urgency=medium

  * Merge from experimental
    - d/changelog: Reorder changelog to reflect the order of events as
      seen from unstable
    - d/gbp.conf, d/control: Adjust branches for 1.14.x
  * New upstream stable release branch
    - dbus-daemon: GetConnectionCredentials provides UnixGroupIDs from
      Linux SO_PEERGROUPS
    - dbus-daemon: <policy group="..."> uses Linux SO_PEERGROUPS
    - dbus-daemon: add <allow send_destination_prefix="..."> (also works
      on <deny>)
    - dbus-daemon: removes header fields that it does not understand
    - dbus-daemon: Add ActivatableServicesChanged signal
    - dbus-user-session: dbus-daemon is now in session.slice
    - dbus-bin: Add `dbus-send --sender`
    - dbus-daemon: Installing into /etc/dbus-1/system.d is officially
      reserved for the sysadmin, packages should install into
      /usr/share/dbus-1/system.d
    - libdbus-1-3, dbus-daemon: DBusServer no longer accepts login names
      for EXTERNAL authentication, only numeric uids or the empty string
    - dbus-daemon: several environment variables set by systemd are no
      longer inherited by traditional (non-systemd) activated services
    - dbus-daemon: notifies systemd that it is ready via sd_notify()
  * d/control: Drop python3 build-dependency, no longer needed
  * d/watch: Only watch for stable releases for this branch

 -- Simon McVittie <email address hidden>  Mon, 28 Feb 2022 13:32:54 +0000

dbus (1.12.22-1) unstable; urgency=medium

  * New upstream bug fix release
    - No longer logs warnings about /proc/self/oom_score_adj with
      systemd >= 250 (Closes: #1004543)
    - Improve reproducibility of documentation
  * Drop patch for #1005889, included upstream

 -- Simon McVittie <email address hidden>  Fri, 25 Feb 2022 17:38:58 +0000

dbus (1.13.22-1) experimental; urgency=medium

  * New upstream release (release candidate for 1.14.0)
    - No longer logs warnings about /proc/self/oom_score_adj with
      systemd >= 250
  * Drop patch for #1005889, applied upstream
  * Register DTDs in the XML catalog

 -- Simon McVittie <email address hidden>  Wed, 23 Feb 2022 18:04:43 +0000

dbus (1.12.20-4) unstable; urgency=medium

  * Use debhelper 13 instead of dh-exec where possible.
    We still need to use dh-exec to filter files that are only installed
    on Linux systems, but we no longer need it for ${DEB_HOST_MULTIARCH}
    substitution.
  * d/control: Build-depend on valgrind-if-available.
    Thanks to Adam Borowski
  * Add a patch to ensure the dbus-daemon is running for an integration test.
    Hopefully closes: #1005889
  * Update Lintian overrides syntax

 -- Simon McVittie <email address hidden>  Mon, 21 Feb 2022 12:31:27 +0000

dbus (1.13.20-2) experimental; urgency=medium

  * Merge packaging from unstable

 -- Simon McVittie <email address hidden>  Mon, 21 Feb 2022 12:34:27 +0000

dbus (1.13.20-1) experimental; urgency=medium

  * Merge packaging from unstable
  * New upstream development release
  * Put the shared library in /lib/MULTIARCH, as we do in unstable,
    in accordance with the advice given by the Technical Committee
    in #994388.

 -- Simon McVittie <email address hidden>  Fri, 17 Dec 2021 13:29:39 +0000

dbus (1.12.20-3) unstable; urgency=medium

  [ Luca Boccassi ]
  * Split tools and configs into -bin and -common packages.
    User creation also moves to dbus-common. This is useful for
    other D-Bus implementations like dbus-broker.

  [ Simon McVittie ]
  * Split dbus-common into -session-bus-common and -system-bus-common.
    This allows us to install the integration files for session services
    without having to create the messagebus user or run a system bus,
    which is useful for CI environments that will run
    session-service-dependent unit tests in a container where a system bus
    is not necessary or desired, particularly in situations where creating
    new uids can be problematic such as unprivileged containers.
  * dbus: Provide a default-dbus-system-bus virtual package.
    This allows us to signal what the default implementation of
    dbus-system-bus is, even when other implementations like dbus-broker
    also provide the dbus-system-bus virtual package.
  * Move dbus-daemon, dbus-run-session and creation of
    /var/lib/dbus/machine-id to a new dbus-daemon package.
    This decouples the system integration for the well-known system bus
    (still in the dbus package) from the dbus-daemon. This means that
    packages that merely want to run a dbus-daemon in a small container
    or chroot (for example to run integration tests or provide a minimal
    session bus environment) do not need to pull in adduser, an init system,
    or the setuid helper used to implement traditional activation.
    dbus remains Priority: standard, because the majority of systems benefit
    from having a working D-Bus system bus (in particular to communicate
    with logind).
  * d/watch: Watch for any archive extension.
    Upstream releases switched from tar.gz to tar.xz for the 1.13.x branch.
  * Silence more Lintian tags for D-Bus vs. dbus in package descriptions.
    We're careful to say D-Bus when we mean the protocol, and dbus when we
    mean the reference implementation of the protocol.
  * d/tests/gnome-desktop-testing: Use set -u so we'll fail on references
    to unset environment variables
  * Update Lintian overrides for dbus-tests
  * Standards-Version: 4.6.0 (no changes required)
  * d/rules, d/dbus.prerm, d/dbus.postinst: Never restart dbus-daemon.
    Since debhelper 13.4, there appears to be no way to stop debhelper from
    restarting services, other than telling it not to start our service and
    taking responsibility for doing so ourselves. (Workaround for #994204)
  * d/dbus.postinst: Remove compatibility code for Debian 8 to 9 upgrades
  * All maintainer scripts: Respect $DPKG_ROOT
  * d/dbus.maintscript: Remove cleanup of old conffiles.
    This has been unnecessary since Debian 10 and Ubuntu 18.04.
  * Don't <include> /etc/dbus-1/s*.conf.dpkg-bak in bus configuration.
    This was part of the Debian 8 to Debian 9 upgrade path.

 -- Simon McVittie <email address hidden>  Mon, 25 Oct 2021 10:32:43 +0100

dbus (1.12.20-2) unstable; urgency=medium

  * Add Provides for the split binary packages added in experimental.
    Actually splitting up dbus seems too risky for this stage in the
    release process, but if we add them as virtual packages in Debian 11,
    then switching dependencies during the Debian 12 cycle won't require
    alternative dependencies or a flag-day transition.
  * dbus-tests: Silence Lintian warnings for breakout-link
  * Remove unnecessary Readme.txt from sha1 test data.
    This causes Lintian warnings because it isn't UTF-8, and it isn't
    actually useful.
  * Standards-Version: 4.5.1 (no changes required)

 -- Simon McVittie <email address hidden>  Sun, 21 Feb 2021 14:02:17 +0000

dbus (1.13.18-2) experimental; urgency=medium

  * Note to ftp team: The changes in this version are not targeted for
    inclusion in Debian 11, but accepting them into experimental will
    allow the various new package names to be added as Provides in the
    testing/unstable dbus package, leading to more straightforward
    upgrades and backports during the Debian 12 cycle.

  [ Luca Boccassi ]
  * Split tools and configs into -bin and -common packages.
    User creation also moves to dbus-common. This is useful for
    other D-Bus implementations like dbus-broker.

  [ Simon McVittie ]
  * Split dbus-common into -session-bus-common and -system-bus-common.
    This allows us to install the integration files for session services
    without having to create the messagebus user or run a system bus,
    which is useful for CI environments that will run
    session-service-dependent unit tests in a container where a system bus
    is not necessary or desired, particularly in situations where creating
    new uids can be problematic such as unprivileged containers.
  * dbus: Provide a default-dbus-system-bus virtual package.
    This allows us to signal what the default implementation of
    dbus-system-bus is, even when other implementations like dbus-broker
    also provide the dbus-system-bus virtual package.
  * Move dbus-daemon, dbus-run-session and creation of
    /var/lib/dbus/machine-id to a new dbus-daemon package.
    This decouples the system integration for the well-known system bus
    (still in the dbus package) from the dbus-daemon. This means that
    packages that merely want to run a dbus-daemon in a small container
    or chroot (for example to run integration tests or provide a minimal
    session bus environment) do not need to pull in adduser, an init system,
    or the setuid helper used to implement traditional activation.
    dbus remains Priority: standard, because the majority of systems benefit
    from having a working D-Bus system bus (in particular to communicate
    with logind).
  * d/watch: Watch for any archive extension.
    Upstream releases switched from tar.gz to tar.xz for the 1.13.x branch.
  * dbus-tests: Silence Lintian warnings for breakout-link
  * Remove unnecessary Readme.txt from sha1 test data.
    This causes Lintian warnings because it isn't UTF-8, and it isn't
    actually useful.
  * Silence more Lintian tags for D-Bus vs. dbus in package descriptions.
    We're careful to say D-Bus when we mean the protocol, and dbus when we
    mean the reference implementation of the protocol.
  * Standards-Version: 4.5.1 (no changes required)

 -- Simon McVittie <email address hidden>  Wed, 17 Feb 2021 21:38:53 +0000

dbus (1.12.20-0+deb10u1) buster; urgency=medium

  * New upstream stable release
    - CVE-2020-12049: Prevent a denial of service attack in which a local
      user can make the system dbus-daemon run out of file descriptors
    - Prevent use-after-free if two usernames share a uid
    - d/p/dbus-daemon-test-Don-t-test-fd-limits-if-in-an-unprivileg.patch:
      Drop patch, applied upstream.
  * d/gbp.conf: Configure for debian/buster

 -- Simon McVittie <email address hidden>  Sun, 05 Jul 2020 17:10:45 +0100

dbus (1.10.32-0+deb9u1) stretch; urgency=medium

  * New upstream stable release
    - CVE-2020-12049: Prevent a denial of service attack in which a local
      user can make the system dbus-daemon run out of file descriptors
    - Prevent use-after-free if two usernames share a uid

 -- Simon McVittie <email address hidden>  Thu, 02 Jul 2020 20:36:28 +0100

dbus (1.12.20-1) unstable; urgency=medium

  [ Mark Hindley ]
  * Fix system-bus autopkgtest detection of systemd as PID1.
    The test attempts to detect whether systemd is available by testing for
    /run/systemd. However, this path can exist on non-systemd systems.
    Look for /run/systemd/system instead. (Closes: #962466)

  [ Simon McVittie ]
  * New upstream stable release
    - Prevent use-after-free if two usernames share a uid

 -- Simon McVittie <email address hidden>  Thu, 02 Jul 2020 14:19:21 +0100

dbus (1.13.18-1) experimental; urgency=medium

  [ Mark Hindley ]
  * Fix system-bus autopkgtest detection of systemd as PID1.
    The test attempts to detect whether systemd is available by testing for
    /run/systemd. However, this path can exist on non-systemd systems.
    Look for /run/systemd/system instead. (Closes: #962466)

  [ Simon McVittie ]
  * New upstream development release
    - Prevent use-after-free if two usernames share a uid

 -- Simon McVittie <email address hidden>  Thu, 02 Jul 2020 14:15:32 +0100

dbus (1.12.18-1) unstable; urgency=medium

  [ Simon McVittie ]
  * New upstream stable release
    - CVE-2020-12049: Prevent a denial of service attack in which a local
      user can make the system dbus-daemon run out of file descriptors
    - d/p/dbus-daemon-test-Don-t-test-fd-limits-if-in-an-unprivileg.patch:
      Drop patch, applied upstream.
  * Switch to debhelper-compat 12
    - Don't restart systemd units on upgrade.
      Previously, this was handled by the dh_installinit override.
    - Add ${misc:Pre-Depends} to all binary packages.
      This is required for dbus for dh_installsystemd under dh compat
      level 12, and is harmless for the others.
  * dbus: Remove an unused Lintian override.
    Lintian used to warn twice for the statically-enabled dbus.service unit,
    but now only warns once.
  * dbus-tests: Silence package-contains-documentation-outside-usr-share-doc
    Lintian tag.
    The tests contain some READMEs that describe what is in their directory.
  * d/tests: Remove compatibility with deprecated ADTTMP.
    autopkgtest has supported AUTOPKGTEST_TMP long enough to use it
    unconditionally.
  * Introduce noinsttest build profile.
    This disables dbus-tests, and when combined with nocheck it disables
    the circular GLib dependency.
  * Remove non-standard pkg.dbus.minimal build profile.
    It was not a "safe" build profile (it altered the contents of binary
    packages, notably dropping LSM and systemd support, which could result
    in dependent packages being broken), and the combination of nocheck,
    nodoc and noinsttest achieves most of the same build-dependency
    reductions.
  * Explicitly build-depend on pkg-config.
    Previously, this was pulled in by libglib2.0-dev. (Closes: #945201)
  * d/upstream/metadata: Distinguish between Bug-Submit and Bug-Database
  * Change system bus socket to /run/dbus/system_bus_socket.
    The interoperable cross-distro path is /var/run/dbus/system_bus_socket,
    so this remains the upstream default for the benefit of distributions
    where /var/run and /run are (problematically) not guaranteed to be
    equivalent. However, Debian Policy since at least v4.1.5 guarantees
    that /var/run is a symlink to /run, and this has been implemented
    for several stable releases (since at least initscripts 2.88dsf-29
    in 2012, in the sysvinit case), so it is harmless to prefer the
    path in /run, which has advantages in a few corner cases (ability
    to unmount /var is the main one) and avoids warnings from systemd.
    (Closes: #783321, #857678, #932105, #958289)
  * Standards-Version: 4.5.0
    - Note that the user for `dbus-daemon --system` is still named
      'messagebus' for historical reasons. If it was added today,
      we'd call it _dbus as per Policy §9.2.1, but this is not the right
      package to be experimenting with renaming system users.
  * d/dbus-udeb.postinst: Remove #DEBHELPER# token.
    debhelper doesn't actually substitute this in udebs, making it just
    an ordinary comment.

  [ Debian Janitor ]
  * Remove trailing whitespace in d/changelog.
  * Use secure URI in Homepage field.
  * Re-export upstream signing key without extra signatures.
  * Set upstream metadata fields: Bug-Submit (from ./configure),
    Repository, Repository-Browse.

 -- Simon McVittie <email address hidden>  Tue, 02 Jun 2020 19:48:04 +0100

dbus (1.13.16-1) experimental; urgency=medium

  * New upstream development release
    - CVE-2020-12049: Prevent a denial of service attack in which a local
      user can make the system dbus-daemon run out of file descriptors

 -- Simon McVittie <email address hidden>  Tue, 02 Jun 2020 16:52:02 +0100

dbus (1.13.14-1) experimental; urgency=medium

  [ Simon McVittie ]
  * New upstream development release
    - Drop patches that were applied upstream
    - d/copyright: Update
  * Move to debhelper compat level 13
    - Don't restart systemd units on upgrade.
      Previously, this was handled by the dh_installinit override.
    - Add ${misc:Pre-Depends} to all binary packages.
      This is required for dbus for dh_installsystemd under dh compat
      level 12, and is harmless for the others.
    - Stop overriding HOME, which is now done by default.
  * dbus: Remove an unused Lintian override.
    Lintian used to warn twice for the statically-enabled dbus.service unit,
    but now only warns once.
  * dbus-tests: Silence package-contains-documentation-outside-usr-share-doc
    Lintian tag.
    The tests contain some READMEs that describe what is in their directory.
  * d/tests: Remove support for ancient autopkgtest versions.
    AUTOPKGTEST_TMP is now required to be set, and we do not fall back
    to the deprecated ADTTMP.
  * Introduce noinsttest build profile.
    This disables dbus-tests, and when combined with nocheck it disables
    the circular GLib dependency.
  * Remove non-standard pkg.dbus.minimal build profile.
    It was not a "safe" build profile (it altered the contents of binary
    packages, notably dropping LSM and systemd support, which could result
    in dependent packages being broken), and the combination of nocheck,
    nodoc and noinsttest achieves most of the same build-dependency
    reductions.
  * Explicitly build-depend on pkg-config.
    Previously, this was pulled in by libglib2.0-dev. (Closes: #945201)
  * d/upstream/metadata: Distinguish between Bug-Submit and Bug-Database
  * Change system bus socket to /run/dbus/system_bus_socket.
    The interoperable cross-distro path is /var/run/dbus/system_bus_socket,
    so this remains the upstream default for the benefit of distributions
    where /var/run and /run are (problematically) not guaranteed to be
    equivalent. However, Debian Policy since at least v4.1.5 guarantees
    that /var/run is a symlink to /run, and this has been implemented
    for several stable releases (since at least initscripts 2.88dsf-29
    in 2012, in the sysvinit case), so it is harmless to prefer the
    path in /run, which has advantages in a few corner cases (ability
    to unmount /var is the main one) and avoids warnings from systemd.
    (Closes: #783321, #857678, #932105, #958289)
  * Standards-Version: 4.5.0
    - Note that the user for `dbus-daemon --system` is still named
      'messagebus' for historical reasons. If it was added today,
      we'd call it _dbus as per Policy §9.2.1, but this is not the right
      package to be experimenting with renaming system users.
  * d/dbus-udeb.postinst: Remove #DEBHELPER# token.
    debhelper doesn't actually substitute this in udebs, making it just
    an ordinary comment.

  [ Debian Janitor ]
  * d/changelog: Remove trailing whitespace.
  * Use secure URI in Homepage field.
  * Re-export upstream signing key without extra signatures.
  * Set upstream metadata fields: Bug-Submit (from ./configure),
    Repository, Repository-Browse.

 -- Simon McVittie <email address hidden>  Tue, 21 Apr 2020 15:39:49 +0100

dbus (1.13.12-2) experimental; urgency=medium

  * Add bug number to 1.13.12-1 changelog entry
  * Merge packaging changes from unstable
  * d/p/tests-Skip-system-bus-test-if-we-are-root-but-messagebus-.patch,
    d/p/tests-Skip-if-unable-to-launch-uninstalled-dbus-daemon-as.patch,
    d/p/auth-Clear-GUID-from-server-if-out-of-memory.patch,
    d/p/bus-Make-audit-initialization-idempotent.patch,
    d/p/bus-tests-Shut-down-audit-socket.patch:
    Fix test failures when build-time tests are run as root (in
    particular this happens when the CI pipeline runs reprotest)

 -- Simon McVittie <email address hidden>  Mon, 30 Sep 2019 11:51:00 +0100

dbus (1.12.16-2) unstable; urgency=medium

  * Add bug number to previous changelog entry
  * Standards-Version: 4.4.1 (no changes required)
    - Note that dbus-user-session still has its previous dependencies,
      and has deliberately not been switched to the new default-logind
      virtual package. dbus-user-session relies on systemd --user: it
      is not enough to have systemd-logind or a compatible replacement
      like elogind.
  * d/dbus.init: Work around #940971 in libnss-systemd.
    If we are booting with a non-systemd init but libnss-systemd is still
    installed, tell libnss-systemd not to try to connect to dbus-daemon,
    which is never going to work well from inside dbus-daemon.
  * dbus.postinst: Append dbus to /run/reboot-required.pkgs on upgrade
    (Closes: #867263)

 -- Simon McVittie <email address hidden>  Mon, 30 Sep 2019 08:47:02 +0100

dbus (1.10.28-0+deb9u1) stretch-security; urgency=medium

  * New upstream stable release
    - CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1
      authentication for identities that differ from the user running the
      DBusServer. Previously, a local attacker could manipulate symbolic
      links in their own home directory to bypass authentication and
      connect to a DBusServer with elevated privileges. The standard
      system and session dbus-daemons in their default configuration were
      immune to this attack because they did not allow DBUS_COOKIE_SHA1,
      but third-party users of DBusServer such as Upstart could be
      vulnerable.
    - Prevent reading up to 3 bytes beyond the end of a truncated message.
      This could in principle be an information leak or denial of service
      on the system bus, but is not believed to be exploitable to crash
      the system bus or leak interesting information in practice.
    - Stop the dbus-daemon leaking memory (an error message) if delivering
      the message that triggered auto-activation is forbidden. This is
      technically a denial of service because the dbus-daemon will
      run out of memory eventually, but it's a very slow and noisy one,
      because all the rejected messages are also very likely to have
      been logged to the system log, and its scope is typically limited by
      the finite number of activatable services available.
    - Remove __attribute__((__malloc__)) attribute on dbus_realloc(),
      which does not meet the criteria for that attribute in gcc 4.7+,
      potentially leading to miscompilation.
    - Fix build with gcc 8 -Werror=cast-function-type
    - Fix warning from gcc 8 about suspicious use of strncpy() when
      populating struct sockaddr_un
    - Fix installation of Ducktype documentation with newer yelp-build
      versions
  * d/control: Update Vcs-Git, Vcs-Browser

 -- Simon McVittie <email address hidden>  Sun, 09 Jun 2019 22:42:06 +0100

dbus (1.12.16-1) unstable; urgency=medium

  * New upstream stable release
    - CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1
      authentication for identities that differ from the user running the
      DBusServer. Previously, a local attacker could manipulate symbolic
      links in their own home directory to bypass authentication and
      connect to a DBusServer with elevated privileges. The standard
      system and session dbus-daemons in their default configuration were
      immune to this attack because they did not allow DBUS_COOKIE_SHA1,
      but third-party users of DBusServer such as Upstart could be
      vulnerable.

 -- Simon McVittie <email address hidden>  Sun, 09 Jun 2019 21:34:34 +0100

dbus (1.13.12-1) experimental; urgency=medium

  * New upstream development release
    - CVE-2019-12749: Do not attempt to carry out DBUS_COOKIE_SHA1
      authentication for identities that differ from the user running the
      DBusServer. Previously, a local attacker could manipulate symbolic
      links in their own home directory to bypass authentication and
      connect to a DBusServer with elevated privileges. The standard
      system and session dbus-daemons in their default configuration were
      immune to this attack because they did not allow DBUS_COOKIE_SHA1,
      but third-party users of DBusServer such as Upstart could be
      vulnerable.

 -- Simon McVittie <email address hidden>  Sun, 09 Jun 2019 21:33:03 +0100

dbus (1.12.14-1) unstable; urgency=medium

  * New upstream release
    - Improve fd limit handling so that system services launched by
      traditional activation get the intended limit (Closes: #928877)
  * d/rules, d/tests: Run automated tests with DBUS_TEST_MALLOC_FAILURES=0.
    Testing the code paths for memory allocation failures is too slow
    to do routinely as a downstream.
  * d/tests/system-bus: Add a smoke-test for traditional activation,
    and a smoke-test for systemd activation on systems booted with systemd.

 -- Simon McVittie <email address hidden>  Sat, 18 May 2019 17:37:08 +0100

dbus (1.13.10-1) experimental; urgency=medium

  [ Simon McVittie ]
  * New upstream development release
    - Fix incorrect fd limits for services launched by the system bus
      via traditional (non-systemd) activation (Closes: #928877)
    - d/copyright: Update
  * Explicitly enable the new --enable-traditional-activation option.
    This is the upstream default anyway, but it would be a serious
    regression if our dbus builds only supported systemd activation.
  * d/tests/system-bus: Add a smoke-test for traditional activation,
    and a smoke-test for systemd activation on systems booted with systemd.
  * d/p/dbus-daemon-test-Don-t-test-fd-limits-if-in-an-unprivileg.patch:
    Drop patch, applied upstream
  * d/rules, d/tests: Run automated tests with DBUS_TEST_MALLOC_FAILURES=0.
    Testing the code paths for memory allocation failures is too slow
    to do routinely as a downstream.
  * Standards-Version: 4.3.0 (no changes required)

  [ Michael Biebl ]
  * Move libraries to /usr/lib.
    Since we can rely on /usr being available during early boot nowadays,
    there is no longer a need to move any libraries to /lib.

 -- Simon McVittie <email address hidden>  Mon, 13 May 2019 19:53:32 +0100

dbus (1.12.12-1) unstable; urgency=medium

  [ Ritesh Raj Sarraf ]
  * Explicitly set session and test socket directory to /tmp, instead
    of using a (possibly non-standard) TMPDIR

  [ Simon McVittie ]
  * New upstream stable release
  * d/tests/build: Mark as superficial (see #904979)
  * d/tests/build: Comment why we don't test or support static linking
    here (it's because libsystemd doesn't)
  * Standards-Version: 4.2.1 (no changes required)
  * d/p/dbus-daemon-test-Don-t-test-fd-limits-if-in-an-unprivileg.patch:
    Add proposed patch to skip fd limit tests if we are uid 0 but do not
    have CAP_SYS_RESOURCE (Closes: #908092)
  * dbus: Drop dependency on lsb-base. It is only needed when booting
    with sysvinit and initscripts, but initscripts already Depends on
    lsb-base (see #864999).
  * dbus: Add Provides: dbus-system-bus and Provides: dbus-bin.
    This provides a way to split the package in a later Debian version
    or in derivatives. dbus-system-bus represents the well-known system
    bus facility (/lib/systemd/system/dbus.service and /etc/init.d/dbus),
    while dbus-bin represents the availability of executables like
    dbus-daemon and dbus-send.
  * d/tests/system-bus: Add a smoke-test for the system bus

 -- Simon McVittie <email address hidden>  Tue, 04 Dec 2018 15:58:18 +0000

dbus (1.13.8-1) experimental; urgency=medium

  [ Ritesh Raj Sarraf ]
  * Explicitly set session and test socket directory to /tmp, instead
    of using a (possibly non-standard) TMPDIR

  [ Simon McVittie ]
  * New upstream development release
    - d/copyright: Update
  * d/tests/build: Mark as superficial (see #904979)
  * d/tests/build: Comment why we don't test or support static linking
    here (it's because libsystemd doesn't)
  * dbus: Drop dependency on lsb-base. It is only needed when booting
    with sysvinit and initscripts, but initscripts already Depends on
    lsb-base (see #864999).
  * dbus: Add Provides: dbus-system-bus and Provides: dbus-bin.
    This provides a way to split the package in a later Debian version
    or in derivatives. dbus-system-bus represents the well-known system
    bus facility (/lib/systemd/system/dbus.service and /etc/init.d/dbus),
    while dbus-bin represents the availability of executables like
    dbus-daemon and dbus-send.
  * Standards-Version: 4.2.1 (no changes required)
  * d/p/dbus-daemon-test-Don-t-test-fd-limits-if-in-an-unprivileg.patch:
    Add proposed patch to skip fd limit tests if we are uid 0 but do not
    have CAP_SYS_RESOURCE (Closes: #908092)
  * d/tests/system-bus: Add a smoke-test for the system bus

 -- Simon McVittie <email address hidden>  Tue, 04 Dec 2018 15:56:19 +0000

dbus (1.12.10-1) unstable; urgency=medium

  * New upstream release
    - Drop patches that were applied upstream
  * Standards-Version: 4.1.5 (no changes required)
  * Don't run the build-time tests for the debug build in parallel.
    Some of the tests added by the debug build start many processes,
    and the debug build's tests have intermittently been timing out on
    reproducible-builds infrastructure, possibly because these machines
    run with a high "make -j" value and more than one multi-processing
    test gets run at the same time.

 -- Simon McVittie <email address hidden>  Thu, 02 Aug 2018 20:13:24 +0100

dbus (1.13.6-1) experimental; urgency=medium

  * New upstream release
    - Drop patches that were applied upstream
  * Don't run the build-time tests for the debug build in parallel.
    Some of the tests added by the debug build start many processes,
    and the debug build's tests have intermittently been timing out on
    reproducible-builds infrastructure, possibly because these machines
    run with a high "make -j" value and more than one multi-processing
    test gets run at the same time.
  * Standards-Version: 4.1.5 (no changes required)
  * Update symbols file for rename of private symbol
    dbus_internal_do_not_use_get_uuid (anyone using that symbol despite
    its name should expect the consequences :-)

 -- Simon McVittie <email address hidden>  Thu, 02 Aug 2018 21:05:26 +0100

dbus (1.12.8-3) unstable; urgency=medium

  * d/rules: If tests fail, continue to run all tests before reporting
    failure
  * d/rules: On success or failure, output all test logs for comparison
    (in particular this lets us see how close we are to arbitrary
    timeouts on slower architectures)
  * d/p/debian/tests-Multiply-timeouts-by-20-on-riscv64.patch:
    Compensate for the riscv64 port being bootstrapped on
    qemu-system-riscv64 by multiplying arbitrary timeouts by 20
    (Closes: #897607)
  * d/rules: Use nss_wrapper to ensure that 127.0.0.1 and localhost
    can be resolved successfully, fixing build-time tests in pbuilder
    with the network namespace unshared (see #897662)
  * d/rules: Make sure the X11 DISPLAY (if any) doesn't leak into the
    test environment, fixing build-time tests if /tmp is unshared
  * d/p/sysdeps-unix-Handle-errors-from-getaddrinfo-correctly.patch:
    Add patch from upstream dbus-1.12 branch to fix getaddrinfo error
    reporting for tcp: and nonce-tcp: transports
  * d/p/server-oom-test-Parse-the-address-instead-of-going-direct.patch,
    d/p/test-Test-the-same-things-with-unix-that-we-do-with-tcp.patch,
    d/p/server-oom-test-Don-t-assume-localhost-is-resolvable.patch,
    test-Skip-TCP-tests-if-getaddrinfo-doesn-t-work.patch:
    Add patches from upstream dbus-1.12 branch to improve test robustness
    and coverage when getaddrinfo doesn't work

 -- Simon McVittie <email address hidden>  Sun, 10 Jun 2018 14:23:44 +0100

dbus (1.13.4-3) experimental; urgency=medium

  * d/control: Fix branch name in Vcs-Git
  * d/rules: Use nss_wrapper to ensure that 127.0.0.1 and localhost
    can be resolved successfully, fixing build-time tests in pbuilder
    with the network namespace unshared (see #897662)
  * d/rules: Make sure the X11 DISPLAY (if any) doesn't leak into the
    test environment, fixing build-time tests if /tmp is unshared
  * d/p/sysdeps-unix-Handle-errors-from-getaddrinfo-correctly.patch:
    Add patch from upstream master branch to fix getaddrinfo error
    reporting for tcp: and nonce-tcp: transports
  * d/p/server-oom-test-Parse-the-address-instead-of-going-direct.patch,
    d/p/test-Test-the-same-things-with-unix-that-we-do-with-tcp.patch,
    d/p/server-oom-test-Don-t-assume-localhost-is-resolvable.patch,
    test-Skip-TCP-tests-if-getaddrinfo-doesn-t-work.patch:
    Add patches from upstream master branch to improve test robustness
    and coverage when getaddrinfo doesn't work
  * d/rules: Improve quoting

 -- Simon McVittie <email address hidden>  Sun, 10 Jun 2018 14:21:26 +0100

dbus (1.13.4-2) experimental; urgency=medium

  * Remove debian/dbus-tests.shlibs.local. It was useful before 1.11.10-2
    to make dbus-tests depend on the debug build in dbus-1-dbg, but now
    that the debug build is itself in dbus-tests, making dbus-tests
    depend on itself is not useful. It also suppressed the generated
    dependency on libdbus-1-3 (= ${binary:Version}), causing autopkgtest
    failures when only dbus-tests was upgraded.
  * d/patches: Refresh via gbp-pq
  * d/rules: If tests fail, continue to run all tests before reporting
    failure
  * d/rules: On success or failure, output all test logs for comparison
    (in particular this lets us see how close we are to arbitrary
    timeouts on slower architectures)
  * d/p/debian/tests-Multiply-timeouts-by-20-on-riscv64.patch:
    Compensate for the riscv64 port being bootstrapped on
    qemu-system-riscv64 by multiplying arbitrary timeouts by 20. If this
    fails, the logs will at least tell us how much more time is needed.
    (Closes: #897607, hopefully)

 -- Simon McVittie <email address hidden>  Wed, 09 May 2018 15:49:21 +0100

dbus (1.12.8-2) unstable; urgency=medium

  * Remove debian/dbus-tests.shlibs.local. It was useful before 1.11.10-2
    to make dbus-tests depend on the debug build in dbus-1-dbg, but now
    that the debug build is itself in dbus-tests, making dbus-tests
    depend on itself is not useful. It also suppressed the generated
    dependency on libdbus-1-3 (= ${binary:Version}), causing autopkgtest
    failures when only dbus-tests was upgraded.

 -- Simon McVittie <email address hidden>  Thu, 03 May 2018 10:07:17 +0100

dbus (1.12.8-1) unstable; urgency=medium

  * New upstream stable release
  * Standards-Version: 4.1.4 (no changes required)
  * tests: Use AUTOPKGTEST_TMP in preference to deprecated ADTTMP
  * tests: Make sure $HOME is set to somewhere we can write (workaround for
    #897170)
  * Build ducktype documentation, unless building with nodoc
    - Build-depend on ducktype and yelp-tools

 -- Simon McVittie <email address hidden>  Mon, 30 Apr 2018 17:23:12 +0100

dbus (1.13.4-1) experimental; urgency=medium

  * New upstream development release
    - d/copyright: cmake/modules/FindGObject.cmake no longer exists
  * Standards-Version: 4.1.4 (no changes required)
  * tests: Use AUTOPKGTEST_TMP in preference to deprecated ADTTMP
  * tests: Make sure $HOME is set to somewhere we can write (workaround for
    #897170)
  * Build ducktype documentation, unless building with nodoc
    - Build-depend on ducktype and yelp-tools

 -- Simon McVittie <email address hidden>  Mon, 30 Apr 2018 15:01:11 +0100

dbus (1.10.26-0+deb9u1) stretch; urgency=medium

  * New upstream stable release
    - bus/bus.c: Raise file descriptor limit sooner, while we still can
      (before we drop privileges), fixing a regression in 1.10.18 which
      negated a previous fix for local denial of service via resource
      exhaustion
    - test/*, build system: Add a regression test for the above
  * d/tests/root: Re-run test-dbus-daemon as root, since it now contains
    tests that are skipped as non-root
  * d/tests/root: Allow stderr output, because test-dbus-daemon emits
    some (and it is not a problem)

 -- Simon McVittie <email address hidden>  Fri, 02 Mar 2018 08:59:25 +0000

dbus (1.12.6-2) unstable; urgency=medium

  * New upstream stable release 1.12.6
  * d/tests/root: Re-run test-dbus-daemon as root, since it now contains
    tests that are skipped as non-root
  * There was no 1.12.6-1 due to a mistake with `git tag`

 -- Simon McVittie <email address hidden>  Fri, 02 Mar 2018 01:36:20 +0000

dbus (1.13.2-1) experimental; urgency=medium

  * New upstream development release
  * Update symbols file for new ABI
  * d/tests/root: Re-run test-dbus-daemon as root, since it now contains
    tests that are skipped as non-root

 -- Simon McVittie <email address hidden>  Thu, 01 Mar 2018 22:55:32 +0000

dbus (1.12.4-1) unstable; urgency=medium

  * New upstream stable release 1.12.4
    - d/copyright: Update
  * Standards-Version: 4.1.3 (no changes required)
  * Use debhelper compat level 11
    - Build-depend on debhelper 11.1~ for #885998 to be fixed
  * Rely on dh_installman's compat level 11 behaviour instead of
    installing man pages by hand. This reduces the amount of dh-exec
    use needed.
  * Adapt Vcs-* for migration to salsa.debian.org Gitlab

 -- Simon McVittie <email address hidden>  Thu, 08 Feb 2018 15:05:57 +0000

dbus (1.13.0-1) experimental; urgency=medium

  * New upstream development release

 -- Simon McVittie <email address hidden>  Thu, 08 Feb 2018 18:13:38 +0000

dbus (1.10.24-0+deb9u1) stretch; urgency=medium

  * New upstream stable release
    - dbus/dbus-sysdeps-unix.c: Increase listen() backlog of
      AF_UNIX sockets to the maximum possible, minimizing failed
      connections under heavy load (Closes: #872144)
    - bus/config-loader-expat.c: When parsing dbus-daemon
      configuration, don't delay startup if high-quality entropy
      is not yet available: we trust the configuration anyway, so
      algorithmic complexity attacks via hash table collisions
      are not a concern
    - bus/*: When using the Monitoring interface, match message
      filters that specify a destination correctly
      - test/monitor.c: Add test-cases for this
    - tools/dbus-send.c: Avoid a compiler warning when gcc gets
      confused about a conditionally-initialized variable
    - dbus/dbus-sysdeps-unix.c: Avoid a compiler warning on Solaris
      (not relevant to Debian)

 -- Simon McVittie <email address hidden>  Sun, 01 Oct 2017 12:09:14 +0100

dbus (1.12.2-1) unstable; urgency=low

  * New upstream release 1.12.2
  * Remove unused Lintian override now that #736360 has been fixed
  * d/p/debian/Don-t-abort-on-fatal-warnings-by-default.patch:
    Remove patch. This was committed not long after the addition of the
    fatal-by-default _dbus_warn_check_failed() checks for programming
    errors, with the changelog message "This will be set to upstream
    default again at some point so if you have an application that
    prints a DBus warning get it fixed".

    The patch made Debian and its derivatives a little more robust
    against implementation errors in projects that use libdbus, but at
    the cost that upstream developers of those projects don't notice
    implementation errors (that would be crashes on most OSs) if they
    happen to be developing on Debian or Ubuntu. 11 years later, let's
    consider "some point" to have arrived.
  * Set migration urgency to low in case that breaks things.

 -- Simon McVittie <email address hidden>  Mon, 13 Nov 2017 15:36:08 +0000

dbus (1.12.0-1) unstable; urgency=medium

  * New upstream stable release 1.12.0
    - d/watch: Only watch for stable releases again
    - d/gbp.conf: Use upstream/1.12.x branch
  * Set Rules-Requires-Root to no. This package does not require
    fakeroot or root privileges to build with a sufficiently recent
    debhelper and dpkg-dev.
  * Replace deprecated dh_install --fail-missing with
    dh_missing --fail-missing
  * Replace deprecated dh_installinit --no-restart-on-upgrade with
    --no-stop-on-upgrade

 -- Simon McVittie <email address hidden>  Mon, 30 Oct 2017 13:37:25 +0000

dbus (1.11.22-1) unstable; urgency=medium

  * New upstream release 1.11.22 (1.12.0rc1)
  * Standards-Version: 4.1.1
    - Set messagebus's home directory to /nonexistent for new installs
    - Move tests and udebs from priority extra to optional
  * Make dbus-x11 provide default-dbus-session-bus on non-Linux ports
    (Closes: #878878)
  * Change dbus-user-session from Architecture: all to linux-any so it
    doesn't appear to provide default-dbus-session-bus on non-Linux ports
    (where it is uninstallable)

 -- Simon McVittie <email address hidden>  Mon, 23 Oct 2017 13:21:29 +0100

dbus (1.10.22-0+deb9u1) stretch; urgency=medium

  * New upstream stable release
    - d/copyright: Update
    - Drop Doxygen reproducibility patch, applied upstream
    - d/p/backports/Replace-DBUS_USE_TEST_BINARY-(etc.).patch:
      Update backported patch to apply to 1.10.22
  * debian/gbp.conf: Set git branch to debian/stretch

 -- Simon McVittie <email address hidden>  Sun, 30 Jul 2017 11:23:02 +0100

dbus (1.11.20-1) unstable; urgency=medium

  * New upstream release
    - Tolerate slower buildds, and provide better diagnostics on timeout
      (hopefully Closes: #873820)
  * Merge development branch of dbus from experimental to unstable
    - Debian derivatives should not merge this version unless they can
      commit to updating all the way to the 1.12.x stable releases
      (expected later this year). If you get on the development-branch
      train, please ride it all the way to the next station.

 -- Simon McVittie <email address hidden>  Tue, 03 Oct 2017 08:30:21 +0100