avahi (0.8-10) unstable; urgency=medium
[ Felix Geyer ]
* Remove dependency on bind9-host.
Originally added in #433030, no longer needed as the
avahi-daemon-check-dns.sh script is no longer shipped.
[ Michael Biebl ]
* Emit error if requested service is not found.
Fixes a potential local DoS where the avahi daemon could be crashed by
an unprivileged user via a D-Bus call.
(CVE-2023-1981, Closes: #1034594)
* Update watch file to get tarballs directly from avahi.org again.
The recent changes in GitHub broke the current watch file.
As new releases are again uploaded to avahi.org, get the release
tarballs from there.
-- Michael Biebl <biebl@debian.org> Wed, 19 Apr 2023 13:51:49 +0200
avahi (0.8-9) unstable; urgency=medium
[ Gioele Barabucci ]
* Install dbus policy in /usr instead of /etc (Closes: #1031550)
-- Michael Biebl <biebl@debian.org> Sat, 18 Feb 2023 23:09:58 +0100
avahi (0.8-8) unstable; urgency=medium
* Remove obsolete SysV init scripts
* Demote resolvconf to a Suggests for avahi-dnsconfd
-- Michael Biebl <biebl@debian.org> Sun, 05 Feb 2023 14:21:18 +0100
avahi (0.8-7) unstable; urgency=medium
[ Debian Janitor ]
* Remove constraints unnecessary since buster
* Build-Depends: Drop versioned constraint on intltool, libcap-dev,
libdaemon-dev, libdbus-1-dev and libglib2.0-dev.
* avahi-daemon: Drop versioned constraint on libnss-mdns in Recommends.
* libavahi-client-dev: Drop versioned constraint on libdbus-1-dev in
Depends.
* libavahi-compat-libdnssd1: Drop versioned constraint on libnss-mdns in
Recommends.
* Remove 3 maintscript entries from 2 files.
Changes-By: deb-scrub-obsolete
[ Michael Biebl ]
* Fix encoding of avahi-common/domain.h to be valid UTF-8
* Avoid infinite-loop in avahi-daemon by handling HUP event in client_work.
Fixes a local DoS that could be triggered by writing long lines to
/run/avahi-daemon/socket.
(CVE-2021-3468, Closes: #984938)
* Bump Standards-Version to 4.6.2
* Update homepage URL in debian/{copyright,control} and use https
* Remove obsolete migration code
* Drop obsolete Conflicts against zeroconf from avahi-autoipd
* Use execute_{after,before} instead of override where possible
-- Michael Biebl <biebl@debian.org> Tue, 10 Jan 2023 09:33:02 +0100
avahi (0.8-6) unstable; urgency=medium
[ Luca Boccassi ]
* avahi-daemon: depend on default-dbus-system-bus | dbus-system-bus.
This allows the reference implementation to be removed if using a
different system bus implementation such as dbus-broker.
[smcv: Adjust commit message]
[ Simon McVittie ]
* Add patch to fix display of URLs containing '&' in avahi-discover
* Standards-Version: 4.6.0 (no changes required)
* Use recommended debhelper compat level 13
[ Michael Biebl ]
* Do not disable timeout cleanup on watch cleanup.
This was causing timeouts to never be removed from the linked list that
tracks them, resulting in both memory and CPU usage to grow larger over
time. Thanks to Gustavo Noronha Silva (Closes: #993051)
* Drop obsolete lsb-base Depends
* Fix NULL pointer crashes when trying to resolve badly-formatted hostnames.
Fixes a local DoS in avahi-daemon that can be triggered by trying to
resolve badly-formatted hostnames on the /run/avahi-daemon/socket
interface. (CVE-2021-3502, Closes: #986018)
-- Michael Biebl <biebl@debian.org> Sun, 05 Jun 2022 18:33:10 +0200
avahi (0.8-5) unstable; urgency=medium
* d/avahi-daemon.maintscript: Drop removal of symlink, they're not normal
config files.
* d/avahi-daemon.postinst: Clean up left-over dpkg-backup symlink from 0.8.3
to 0.8.4 symlink (Closes: #982016)
-- Sjoerd Simons <sjoerd@debian.org> Sat, 06 Feb 2021 16:05:37 +0100
avahi (0.8-4) unstable; urgency=medium
[ Sjoerd Simons ]
* Team upload
[ Simon McVittie ]
* Remove avahi-daemon-check-dns mechanism, no longer needed.
Thanks to Trent Lloyd, Sebastien Bacher (LP: #1870824)
(Closes: #433945, #559927, #629509, #747895, #878586, #898038, #929010)
-- Sjoerd Simons <sjoerd@debian.org> Fri, 05 Feb 2021 09:21:16 +0100
avahi (0.8-3) unstable; urgency=medium
* Team upload
* Upload python3-avahi to unstable
* d/control: Add comments about why some packages are Arch: any.
At first glance these packages seem like they should be
Architecture: all, but in fact they cannot.
* d/control, d/shlibs.local: Tighten interdependencies within src:avahi.
Co-installation of binary packages built from different versions of the
same source package is error-prone, because parts of the same source
package typically make assumptions about non-public exported symbols,
implementation details or precise behaviour beyond what's in the public
API. Upstream developers are also unlikely to be willing to support such
installations or make promises about their behaviour.
We can make partial upgrades more robust by upgrading everything from
a single source package together.
-- Simon McVittie <smcv@debian.org> Tue, 26 May 2020 11:33:06 +0100
avahi (0.8-2) experimental; urgency=medium
* Team upload
[ Andreas Henriksson, Simon McVittie ]
* Switch from python2 to python3.
This includes renaming the python-avahi package to python3-avahi.
The only remaining package with a hard dependency on python-avahi is
avahi-discover, which is also fixed in this version.
(Closes: #853239, #936173)
[ Simon McVittie ]
* Override Lintian warning for package-name-doesnt-match-sonames libdns-sd1.
The libdns_sd.so.1 SONAME conceptually belongs to a different source
package (Apple Bonjour, which isn't currently in Debian) so it's
deliberate that we are not using its package name.
* gir1.2-avahi-0.6 Provides gir1.2-avahicore-0.6, reflecting its contents.
This matches the naming scheme from the g-i mini-policy, and lets us
stop suppressing some Lintian warnings.
* d/copyright: Add some more copyright holders
-- Simon McVittie <smcv@debian.org> Sun, 24 May 2020 11:20:46 +0100
avahi (0.8-1) unstable; urgency=medium
* Team upload
[ Andreas Henriksson ]
* New upstream release (Closes: #951691)
- Support local-only services via the loopback interface
(Closes: #909564)
- Don't crash on keys with an empty value (Closes: #947891)
- Drop patches that are included upstream
- Disable Qt5 main loop binding for now
- Update libavahi-core7.symbols with newly added symbols
* d/p/Fetch-build-db-from-upstream-git.patch:
Patch back in a script that was omitted from the upstream tarball
* libavahi-core-dev: spelling-error-in-description shoudl should
* Drop obsolete X-Python-Version field
[ Simon McVittie ]
* Summarize significant upstream changes above
* Disable libevent main loop binding for now
* Continue to use Python 2 for now, so we can test v0.8 independent of
the switch from Python 2 to Python 3
* d/p/avahi_dns_packet_consume_uint32-fix-potential-undefined-b.patch:
Add patch from upstream git to fix undefined left-shift
* d/p/fix-bytestring-decoding-for-proper-display.patch,
d/p/avahi-discover-Don-t-decode-unicode-strings-only-bytestri.patch:
Make avahi-discover work for both Python 2 and Python 3
(hopefully Closes: #876107)
* Replace stage1 build-profile with nopython and pkg.avahi.nogui
* Set avahi user's home directory to /run/avahi-daemon for new installs.
For existing installations, it continues to be the
equivalent-but-deprecated /var/run/avahi-daemon.
* Add Build-Depends-Package to all .symbols files
* Don't explicitly link --as-needed.
This is the default in bullseye toolchains anyway.
* Use dpkg's default.mk
* Enable full compiler hardening
* Remove migration path from obsolete avahi-dbg package.
It was most recently shipped before Debian 9 'stretch', and we don't
support skipping a version when upgrading.
* Build-depend on python2.
We don't actually need Python development files here, just the
interpreter itself.
* d/rules: Make install invocations not require fakeroot.
The default for install(1) is 0755, root:root if running as root, or
0755 without ownership changes if running as an unprivileged user.
Under Rules-Requires-Root: no, we cannot explicitly chown a file,
but having it owned by the build user during build results in it being
owned by root:root in the .deb, which is what we want anyway.
* Set Rules-Requires-Root to no
* Standards-Version: 4.5.0 (no changes required)
* Move to debhelper-compat 12.
* Don't explicitly stop avahi-daemon.service in prerm.
The dh_installsystemd infrastructure handles this now. We do still mask
the service, since dh_installsystemd doesn't prevent D-Bus activation.
* Add ${misc:Pre-Depends} to all packages
* Add a patch to force a specific service type database format.
It was traditionally a gdbm database in Debian, but v0.8's build-db,
when run under Python 2, prefers dbhash (bsddb).
* d/avahi-autoipd.preinst: Remove transitional code from pre-stretch
-- Simon McVittie <smcv@debian.org> Thu, 07 May 2020 19:47:43 +0100
avahi (0.7-5) unstable; urgency=medium
* Team upload
* Build-depend on python-gi in addition to python-gi-dev.
python-gi-dev is likely to lose its python-gi dependency to help
with tracking the removal of Python 2 dependencies.
(Closes: #945034)
* d/p/Drop-legacy-unicast-queries-from-address-not-on-local-lin.patch:
Add patch from upstream to fix traffic amplification attacks
(CVE-2017-6519, CVE-2018-1000845; Closes: #917047)
* d/patches: Annotate with forwarding status
* d/avahi-daemon-check-dns.sh: Wrap host command with timeout(1) to
avoid it stalling indefinitely on some systems.
Mitigates: #559927, #898038, #929010.
Thanks to Trent Lloyd and Ubuntu.
-- Simon McVittie <smcv@debian.org> Fri, 13 Dec 2019 16:00:32 +0000
# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libavahi-common-dev`.
Generated by dwww version 1.15 on Sat May 18 05:52:00 CEST 2024.