-
avahi (0.6.10-0ubuntu3.5) dapper-security; urgency=low
* SECURITY UPDATE: denial of service via crafted mDNS packet
- debian/patches/80_CVE-2008-5081.patch: verify port is > 0 in server.c
- CVE-2008-5081
* SECURITY UPDATE: denial of service via empty TXT record over dbus
- debian/patches/80_CVE-2007-3372.patch: set k to empty string in
avahi_dbus_read_strlst() if k in NULL and also check for size in
avahi_string_list_add_arbitrary() assert
- CVE-2007-3372
-- Jamie Strandboge <email address hidden> Thu, 18 Dec 2008 09:53:50 -0600
-
avahi (0.6.10-0ubuntu3.4) dapper-security; urgency=low
* SECURITY UPDATE: denial of service via malformed DNS reply.
* Add 'debian/patches/ubuntu_02_endless-dns-loop.patch' from upstream
* References
CVE-2006-6870
-- Kees Cook <email address hidden> Thu, 4 Jan 2007 15:49:12 -0800
-
avahi (0.6.10-0ubuntu3.3) dapper-security; urgency=low
* debian/patches/ubuntu_01_netlink-ownership.patch:
- Previous patch broke operation with network-manager (the kernel sends
funny process IDs, and due to the dropped packets avahi's state gets
scrambled).
- Now verify the packet's user ID instead.
- Thanks to Trent Lloyd for the updated patch.
- Closes: LP#72728
-- Martin Pitt <email address hidden> Thu, 14 Dec 2006 09:24:16 +0000
-
avahi (0.6.10-0ubuntu3.2) dapper-security; urgency=low
* SECURITY UPDATE: all netlink packets were expected to be from the kernel,
which could lead to other local users manipulating Avahi, possibly
crashing the server or gaining Avahi user privileges.
* Add 'debian/patches/ubuntu_01_netlink-ownership.patch' to verify packet
owner, as done in upstream CVS.
* References
CVE-2006-5461
-- Kees Cook <email address hidden> Fri, 10 Nov 2006 14:54:28 -0800
-
avahi (0.6.10-0ubuntu3) dapper; urgency=low
* Add kubuntu_03_fix_duplicate_entries_in_menu.patch
avahi-discover has two entries in menu, so add this
patch fix it .
-- Hou ZhengPeng <email address hidden> Fri, 26 May 2006 03:35:26 +0000
-
avahi (0.6.10-0ubuntu2) dapper; urgency=low
* debian/patches/02_avahi-sharp_processes_thread.patch:
+ Patch from upstream SVN:
- ensure the event loop is finished before freeing the poll object
- set Client.Handle to null immediately after freeing it
- fixes a segfault on Client.Dispose()
-- Sebastian Dröge <email address hidden> Mon, 15 May 2006 20:11:51 +0200
-
avahi (0.6.10-0ubuntu1) dapper; urgency=low
* New upstream release
+ SECURITY UPDATE: Fixes CVE-2006-2288 and CVE-2006-2289
* 03_cmsg_too_large.patch,
04_initscript_log_end_msg.patch,
05_empty_service_directory.patch,
06_cname_handling.patch,
07_avahi-sharp_missing_lock.patch,
08_avahi-python_regex_fix.patch:
- dropped, upstream now
* UVF Exception granted by Colin Watson
-- Sebastian Dröge <email address hidden> Wed, 10 May 2006 10:00:25 +0200
-
avahi (0.6.9-2ubuntu7) dapper; urgency=low
* 08_avahi-python_regex_fix.patch (SVN rev 1189):
+ Fix the regex in the ServiceTypeDatabase to also match on service types
with - in them like _sftp-ssh._tcp
-- Sebastian Dröge <email address hidden> Sat, 22 Apr 2006 15:07:46 +0200
-
avahi (0.6.9-2ubuntu6) dapper; urgency=low
* debian/patches/07_avahi-sharp_missing_lock.patch (SVN rev 1188):
+ Add a missing lock around the avahi_entry_group_add_service_strlst()
call (Closes: Malone #37647)
-- Sebastian Dröge <email address hidden> Tue, 18 Apr 2006 15:53:24 +0200
-
avahi (0.6.9-2ubuntu5) dapper; urgency=low
* debian/patches/06_cname_handling.patch:
+ Fix CNAME handling in avahi (Closes: Malone #36642)
-- Sebastian Dröge <email address hidden> Sat, 1 Apr 2006 18:02:44 +0200
-
avahi (0.6.9-2ubuntu4) dapper; urgency=low
* debian/patches/05_empty_service_directory.patch:
+ updated to use upstream's solution for this problem which is cleaner
-- Sebastian Dröge <email address hidden> Fri, 24 Mar 2006 15:29:05 +0100
-
avahi (0.6.9-2ubuntu3) dapper; urgency=low
Merge in Debian changes from 0.6.9-6 that are important for us:
* debian/patches/04_initscript_log_end_msg.patch:
+ Replace exit statements with return, otherwise log_end_msg might not
be called after d_start. Patch by Benjamin Leipold.
* debian/patches/05_empty_service_directory.patch:
+ Change the error message that is printed when running the daemon with an
empty or non-existing /etc/avahi/services directory to an informational
message as we have no service files installed by default. Also add that
this could be caused by an empty service directory.
* Also ship docs/NEWS
* Don't let libavahi-client3 recommend avahi-daemon. Let the end-user apps
decide if they want to recommend avahi-daemon or not.
-- Sebastian Dröge <email address hidden> Thu, 23 Mar 2006 01:23:58 +0100
-
avahi (0.6.9-2ubuntu2) dapper; urgency=low
* 03_cmsg_too_large.patch:
+ Doesn't work on 64 bit machines with 32 bit userspace because
of too big cmsg data. Patch by Sjoerd Simons <email address hidden>.
(See http://avahi.org/ticket/19)
-- Sebastian Dröge <email address hidden> Thu, 16 Mar 2006 14:16:57 +0100
-
avahi (0.6.9-2ubuntu1) dapper; urgency=low
* Merge Debian changes from 0.6.9-1 to 0.6.9-2 (see below)
* Enable the howl/libdns-sd compat packages. These are to be demoted to
universe and should stay there forever.
avahi (0.6.9-2) unstable; urgency=low
* Update shlibs of libavahi-common
-- Sebastian Dröge <email address hidden> Mon, 6 Mar 2006 16:15:45 +0100
-
avahi (0.6.9-1ubuntu1) dapper; urgency=low
* Merge with Debian. Changes from 0.6.9-0ubuntu1:
+ Tighter Conflicts of libavahi-core3 on libavahi-core4
+ Me added to Uploaders
avahi (0.6.9-1) unstable; urgency=low
* New upstream release
* Added me to Uploaders
* Fix the permissions of avahi-sharp.dll
-- Sebastian Dröge <email address hidden> Fri, 3 Mar 2006 17:18:53 +0100
-
avahi (0.6.9-0ubuntu1) dapper; urgency=low
* New upstream release
* UVF exception granted by Matt Zimmerman
* Fix permissions on avahi-sharp.dll
-- Sebastian Dröge <email address hidden> Thu, 2 Mar 2006 22:49:25 +0100
-
avahi (0.6.8-1ubuntu2) dapper; urgency=low
* Rename libavahi-core3 to libavahi-core4 to reflect soname change and
change libavahi-core4.shlibs according. libavahi-core4 Conflicts
libavahi-core3 (<= 0.6.8-1ubuntu1). (Closes: Debian #354771, Ubuntu #33199)
-- Sebastian Dröge <email address hidden> Wed, 1 Mar 2006 09:56:36 +0100
-
avahi (0.6.8-1ubuntu1) dapper; urgency=low
* UVF Exception granted by Matt Zimmerman
* Sync with Debian:
+ Move mono Build-Depends to Build-Depends-Indep
+ Remove the QT4 bindings and their Build-Depends
+ Remove the howl and libdns-sd compat libraries
avahi (0.6.8-1) unstable; urgency=low
[ Ross Burton ]
* Package the avahi.hosts(5) manpage
* Package the hosts conffile
[ Sjoerd Simons ]
* New upstream release
* debian/patches/02_avahi-initscripts.patch
Applied upstream
-- Sebastian Dröge <email address hidden> Tue, 28 Feb 2006 18:14:07 +0100
-
avahi (0.6.7-1ubuntu1) dapper; urgency=low
* Sync with Debian
avahi (0.6.7-1) unstable; urgency=low
* New upstream release
* debian/patches/02_avahi-initscripts.patch
+ Force the load of the capabilities kernel module before starting the
avahi-daemon. (Closes: #352858)
+ Fix the restart argument of the initscripts
-- Sebastian Dröge <email address hidden> Thu, 16 Feb 2006 01:26:17 +0100
-
avahi (0.6.6-2ubuntu1) dapper; urgency=low
* Sync with Debian
avahi (0.6.6-2) unstable; urgency=low
* Add libcap-dev to the build-depends to enable chroot() support
(Closes: #351699)
* Update the avahi-dnsconfd description (Closes: 351273)
-- Sebastian Dröge <email address hidden> Mon, 13 Feb 2006 10:23:01 +0100
-
avahi (0.6.6-1ubuntu2) dapper; urgency=low
* 02_iface-status-change.diff:
+ fix bug where avahi-daemon wasn't working anymore after the iface went
down/up (Closes Malone: #6509)
-- Sebastian Dröge <email address hidden> Fri, 10 Feb 2006 12:09:41 +0100
-
avahi (0.6.6-1ubuntu1) dapper; urgency=low
* Sync with Debian
avahi (0.6.6-1) unstable; urgency=low
* New upstream release
* s/Bonyour/Bonjour/ in libdnssd package descriptions (Closes: #349408)
* debian/patches/02_stdlib_NULL.patch
+ Removed. Fixed upstream
* debian/patches/03_reduce_qt3lib_depends.patch
+ Removed. Fixed upstream
* debian/patches/04_pthread_flags.patch
+ Removed Fixed upstream
* Don't let avahi-daemon suggets avahi-dnsconfd
-
avahi (0.6.5-0ubuntu1) dapper; urgency=low
* New upstream release
+ debian/libavahi-client3.shlibs:
Update shlibs to >= 0.6.5 because of new functions
+ Drop 02_stdlib_NULL.patch, 03_reduce_qt3lib_depends.patch,
04_pthread_flags.patch:
They're upstream now
* Sync with Debian
-- Sebastian Dröge <email address hidden> Tue, 24 Jan 2006 16:27:49 +0100
-
avahi (0.6.4-1ubuntu3) dapper; urgency=low
* Add avahi-common/thread-watch.h to libavahi-common-dev (SVN rev 1086)
-- Sebastian Dröge <email address hidden> Wed, 18 Jan 2006 00:11:59 +0100
-
avahi (0.6.4-0ubuntu1) dapper; urgency=low
* New upstream release
- 02_avahi-sharp-mono1.1.13.patch: dropped, upstream now
-- Sebastian Dröge <email address hidden> Sun, 15 Jan 2006 15:51:32 +0100
-
avahi (0.6.3-3ubuntu1) dapper; urgency=low
* Sync with Debian:
- 02_mono-1.1.13.diff: dropped, in Debian now
-- Sebastian Dröge <email address hidden> Sun, 15 Jan 2006 13:47:08 +0100
-
avahi (0.6.3-2ubuntu1) dapper; urgency=low
* Sync with Debian:
+ Move mono Build-Depends from arch specific to Build-Depends-Indep
+ Add the hack again to build the mono packages only on i386
+ Remove qt4 and compat packages
* 02_mono-1.1.13.diff:
+ Changes required to work with mono 1.1.13 (SVN rev 1072 and 1073)
-- Sebastian Dröge <email address hidden> Thu, 12 Jan 2006 19:33:32 +0100
-
avahi (0.6.3-0ubuntu1) dapper; urgency=low
* New upstream release
+ Fixes a double free() and another important bug in avahi-sharp
-- Sebastian Dröge <email address hidden> Sun, 8 Jan 2006 04:07:28 +0100
-
avahi (0.6.2-0ubuntu1) dapper; urgency=low
* New upstream release
+ Remove 01_dbus060_compatibility.patch, 02_avahi-sharp.patch,
04_dbus-introspection.diff. They're upstream now
* Sync with Debian
-- Sebastian Dröge <email address hidden> Fri, 6 Jan 2006 02:15:10 +0100
-
avahi (0.6.1-2ubuntu3) dapper; urgency=low
* Don't build qt4 bindings as required for the main inclusion
-- Sebastian Dröge <email address hidden> Mon, 2 Jan 2006 15:22:00 +0100
-
avahi (0.6.1-2ubuntu2) dapper; urgency=low
* 04_dbus-introspection.diff:
+ Use the correct name for the dbus introspection file (Closes Malone: #6088)
(SVN rev 1047)
* Revert last change: call the init script directly again
-- Sebastian Dröge <email address hidden> Mon, 2 Jan 2006 14:10:48 +0100
-
avahi (0.6.1-2ubuntu1) dapper; urgency=low
* Sync with Debian:
+ Build/Build-Depend on mono stuff only when building arch indep
+ Remove libavahi-compat-* packages as they will disappear anyway with the
next upstream release
+ 03_no-wide-area-dnssd.diff: Disable browsing of non-local domains by
default
+ Add needed Conflicts/Replaces wherever needed
* Run init scripts in postinst/prerm with invoke-rc.d
-- Sebastian Dröge <email address hidden> Fri, 23 Dec 2005 15:08:09 +0100
-
avahi (0.6.1-1ubuntu1) dapper; urgency=low
* Sync with Debian:
+ remove libavahi-compat-* as they will be dropped upstream with the next
release anyway
+ Add ${shlibs:Depends} to avahi-utils and make it Arch any
+ 03_no-wide-area-dnssd.diff: Disable browsing of non-local domains by
default
+ 02_avahi-sharp.patch: use the correct soname for libavahi-glib
+ Conflict libavahi-common-date with libavahi-common0
+ Add the other required Conflicts/Replaces everywhere
+ Build/Build-Depend on mono stuff only when building arch indep
-- Sebastian Dröge <email address hidden> Thu, 22 Dec 2005 16:05:31 +0100
-
avahi (0.6.1-0ubuntu6) dapper; urgency=low
* And another one... definitely not my day
-- Sebastian Dröge <email address hidden> Wed, 21 Dec 2005 18:33:41 +0100
-
avahi (0.6.1-0ubuntu4) dapper; urgency=low
* Put the mono Build-Depends in Build-Depends-Indep
* Rebuild against new dbus (>= 0.60)
* 02_dbus0.6.diff: Patch from svn required to build against dbus 0.60
-- Sebastian Dröge <email address hidden> Tue, 20 Dec 2005 20:54:12 +0100
-
avahi (0.6.1-0ubuntu3) dapper; urgency=low
* Rename library packages to reflect new soname... uploaded the wrong
version before :( Fortunately nothing depends on it yet except
gnome-user-share which will get a rebuild later. Sorry for any problems...
* Use new FSF address in copyright
* remove executable bit on avahi-sharp.dll
-- Sebastian Dröge <email address hidden> Fri, 9 Dec 2005 10:12:17 +0100
