Change log for avahi package in Debian

avahi (0.8-13) unstable; urgency=medium

  * Team upload
  * gir1.2-avahi-0.6: Make the Provides on gir1.2-avahicore-0.6 versioned.
    This will allow it to satisfy versioned dependencies on
    gir1.2-avahicore-0.6 (>= x).
  * libavahi-gobject-dev: Add Provides for the included GIR XML.
    To make cross-compiling and bootstrapping easier, the version of the
    gobject-introspection mini-policy currently in experimental asks for
    GIR XML to either be split into a gir1.2-x-y-dev package or have
    Provides on that name, so that dependent packages can add that package
    to their Build-Depends.
  * gir1.2-avahi-0.6, libavahi-gobject-dev: Add ${gir:Provides}.
    When built with the version of gobject-introspection currently in
    experimental, this will generate a Provides equivalent to the ones that
    are currently hard-coded.
  * libavahi-gobject-dev: Add ${gir:Depends}.
    Just for completeness: the only dependency is gir1.2-gobject-2.0, which
    all GObject-Introspection-based tools are expected to pull in as a
    dependency anyway.
  * d/control, d/rules: Implement nogir build profile.
    This allows src:avahi to be bootstrapped on new architectures before
    gobject-introspection has been compiled, breaking a cyclic dependency:
    gobject-introspection pulls in cairo, which indirectly Depends on
    the non-GObject parts of avahi (via cups and ghostscript).
    Disabling the entire libavahi-gobject-dev package is a bigger hammer
    than we would normally use, but it avoids a trip through NEW to split
    the package between C development files and a new gir1.2-avahi-0.6-dev
    binary package. (Closes: #1055437)

 -- Simon McVittie <email address hidden>  Tue, 07 Nov 2023 10:54:25 +0000

avahi (0.8-12) unstable; urgency=medium

  * Team upload
  * Install the systemd unit in /usr/lib/systemd/system.
    This was allowed by Technical Committee resolution #1053901. avahi
    has not usually been backported, so it doesn't seem important to make
    backports trivial for this particular package.
    Build-depend on debhelper (>= 13.11.6~) so that dh_installsystemd finds
    the unit in its new location.
  * d/control: Canonicalize order of build-dependencies.
    No functional change.
  * Build-depend on pkgconf instead of pkg-config
  * d/tests: Add superficial autopkgtests for the -dev packages.
    Linking a trivial executable to a library is a surprisingly effective
    way to detect packaging errors like a missing dependency.

 -- Simon McVittie <email address hidden>  Fri, 20 Oct 2023 11:07:11 +0100

avahi (0.8-11) unstable; urgency=medium

  [ Josh Triplett ]
  * Drop /etc/default/avahi-daemon entirely.
    The only option in it hasn't been used since avahi-daemon 0.8-4 in 2021,
    which removed the avahi-daemon-check-dns mechanism in favor of upstream
    logic serving the same function. Nothing else in the package references
    this at all.

  [ Jeremy Bícha ]
  * Build-Depend on dh-sequence-gir & dh-sequence-python3

  [ Robert McQueen ]
  * Fix browsing when invalid services present.
    Import patch from Arch to prevent service browsing from aborting in the
    middle if your network contains a device with an invalid service name.
    See https://github.com/lathiat/avahi/issues/212 and
    https://bugs.archlinux.org/task/71781

  [ Michael Biebl ]
  * Use default dh_autoreconf instead of calling ./autogen.sh.
    Running ./autogen.sh before build causes common/Makefile.am to be
    deleted during dh_auto_clean, resulting in a subsequent build failure.
    Use the default dh_autoreconf sequence instead which doesn't trigger
    this behaviour.
    Fixes ftbfs-binary-after-build (Closes: #1049786)
  * Clean up avahi-python/avahi/__pycache__/
    Fixes ftbfs-source-after-build (Closes: #1044112)

 -- Michael Biebl <email address hidden>  Thu, 07 Sep 2023 21:43:48 +0200

avahi (0.8-5+deb11u2) bullseye; urgency=medium

  * Avoid infinite-loop in avahi-daemon by handling HUP event in client_work.
    Fixes a local DoS that could be triggered by writing long lines to
    /run/avahi-daemon/socket. (CVE-2021-3468, Closes: #984938)

 -- Michael Biebl <email address hidden>  Tue, 10 Jan 2023 09:43:16 +0100

avahi (0.8-10) unstable; urgency=medium

  [ Felix Geyer ]
  * Remove dependency on bind9-host.
    Originally added in #433030, no longer needed as the
    avahi-daemon-check-dns.sh script is no longer shipped.

  [ Michael Biebl ]
  * Emit error if requested service is not found.
    Fixes a potential local DoS where the avahi daemon could be crashed by
    an unprivileged user via a D-Bus call.
    (CVE-2023-1981, Closes: #1034594)
  * Update watch file to get tarballs directly from avahi.org again.
    The recent changes in GitHub broke the current watch file.
    As new releases are again uploaded to avahi.org, get the release
    tarballs from there.

 -- Michael Biebl <email address hidden>  Wed, 19 Apr 2023 13:51:49 +0200

avahi (0.8-9) unstable; urgency=medium

  [ Gioele Barabucci ]
  * Install dbus policy in /usr instead of /etc (Closes: #1031550)

 -- Michael Biebl <email address hidden>  Sat, 18 Feb 2023 23:09:58 +0100

avahi (0.8-8) unstable; urgency=medium

  * Remove obsolete SysV init scripts
  * Demote resolvconf to a Suggests for avahi-dnsconfd

 -- Michael Biebl <email address hidden>  Sun, 05 Feb 2023 14:21:18 +0100

avahi (0.8-7) unstable; urgency=medium

  [ Debian Janitor ]
  * Remove constraints unnecessary since buster
    * Build-Depends: Drop versioned constraint on intltool, libcap-dev,
      libdaemon-dev, libdbus-1-dev and libglib2.0-dev.
    * avahi-daemon: Drop versioned constraint on libnss-mdns in Recommends.
    * libavahi-client-dev: Drop versioned constraint on libdbus-1-dev in
      Depends.
    * libavahi-compat-libdnssd1: Drop versioned constraint on libnss-mdns in
      Recommends.
    * Remove 3 maintscript entries from 2 files.
    Changes-By: deb-scrub-obsolete

  [ Michael Biebl ]
  * Fix encoding of avahi-common/domain.h to be valid UTF-8
  * Avoid infinite-loop in avahi-daemon by handling HUP event in client_work.
    Fixes a local DoS that could be triggered by writing long lines to
    /run/avahi-daemon/socket.
    (CVE-2021-3468, Closes: #984938)
  * Bump Standards-Version to 4.6.2
  * Update homepage URL in debian/{copyright,control} and use https
  * Remove obsolete migration code
  * Drop obsolete Conflicts against zeroconf from avahi-autoipd
  * Use execute_{after,before} instead of override where possible

 -- Michael Biebl <email address hidden>  Tue, 10 Jan 2023 09:33:02 +0100

avahi (0.8-5+deb11u1) bullseye; urgency=medium

  [ Simon McVittie ]
  * Add patch to fix display of URLs containing '&' in avahi-discover.
    Otherwise, a TXT entry containing a URL with '&' will cause an error.

  [ Michael Biebl ]
  * Do not disable timeout cleanup on watch cleanup.
    This was causing timeouts to never be removed from the linked list that
    tracks them, resulting in both memory and CPU usage to grow larger over
    time. Thanks to Gustavo Noronha Silva. (Closes: #993051)
  * Fix NULL pointer crashes when trying to resolve badly-formatted hostnames.
    Fixes a local DoS in avahi-daemon that can be triggered by trying to
    resolve badly-formatted hostnames on the /run/avahi-daemon/socket
    interface. (CVE-2021-3502, Closes: #986018)

 -- Michael Biebl <email address hidden>  Mon, 08 Aug 2022 11:27:46 +0200

avahi (0.8-6) unstable; urgency=medium

  [ Luca Boccassi ]
  * avahi-daemon: depend on default-dbus-system-bus | dbus-system-bus.
    This allows the reference implementation to be removed if using a
    different system bus implementation such as dbus-broker.
    [smcv: Adjust commit message]

  [ Simon McVittie ]
  * Add patch to fix display of URLs containing '&' in avahi-discover
  * Standards-Version: 4.6.0 (no changes required)
  * Use recommended debhelper compat level 13

  [ Michael Biebl ]
  * Do not disable timeout cleanup on watch cleanup.
    This was causing timeouts to never be removed from the linked list that
    tracks them, resulting in both memory and CPU usage to grow larger over
    time. Thanks to Gustavo Noronha Silva (Closes: #993051)
  * Drop obsolete lsb-base Depends
  * Fix NULL pointer crashes when trying to resolve badly-formatted hostnames.
    Fixes a local DoS in avahi-daemon that can be triggered by trying to
    resolve badly-formatted hostnames on the /run/avahi-daemon/socket
    interface. (CVE-2021-3502, Closes: #986018)

 -- Michael Biebl <email address hidden>  Sun, 05 Jun 2022 18:33:10 +0200

avahi (0.7-4+deb10u1) buster; urgency=medium

  [ Simon McVittie ]
  *  Remove avahi-daemon-check-dns mechanism, no longer needed.
    Thanks to Trent Lloyd, Sebastien Bacher (LP: #1870824)
    (Closes: #433945, #559927, #629509, #747895, #878586, #898038, #929010)

  [ Sjoerd Simons ]
  * Don't remove avahi-daemon postdown symlink in maintscript

 -- Sjoerd Simons <email address hidden>  Sat, 13 Feb 2021 20:35:49 +0100

avahi (0.8-5) unstable; urgency=medium

  * d/avahi-daemon.maintscript: Drop removal of symlink, they're not normal
    config files.
  * d/avahi-daemon.postinst: Clean up left-over dpkg-backup symlink from 0.8.3
    to 0.8.4 symlink (Closes: #982016)

 -- Sjoerd Simons <email address hidden>  Sat, 06 Feb 2021 16:05:37 +0100

avahi (0.8-4) unstable; urgency=medium

  [ Sjoerd Simons ]
  * Team upload

  [ Simon McVittie ]
  * Remove avahi-daemon-check-dns mechanism, no longer needed.
    Thanks to Trent Lloyd, Sebastien Bacher (LP: #1870824)
    (Closes: #433945, #559927, #629509, #747895, #878586, #898038, #929010)

 -- Sjoerd Simons <email address hidden>  Fri, 05 Feb 2021 09:21:16 +0100

avahi (0.8-3) unstable; urgency=medium

  * Team upload
  * Upload python3-avahi to unstable
  * d/control: Add comments about why some packages are Arch: any.
    At first glance these packages seem like they should be
    Architecture: all, but in fact they cannot.
  * d/control, d/shlibs.local: Tighten interdependencies within src:avahi.
    Co-installation of binary packages built from different versions of the
    same source package is error-prone, because parts of the same source
    package typically make assumptions about non-public exported symbols,
    implementation details or precise behaviour beyond what's in the public
    API. Upstream developers are also unlikely to be willing to support such
    installations or make promises about their behaviour.
    We can make partial upgrades more robust by upgrading everything from
    a single source package together.

 -- Simon McVittie <email address hidden>  Tue, 26 May 2020 11:33:06 +0100

avahi (0.8-2) experimental; urgency=medium

  * Team upload

  [ Andreas Henriksson, Simon McVittie ]
  * Switch from python2 to python3.
    This includes renaming the python-avahi package to python3-avahi.
    The only remaining package with a hard dependency on python-avahi is
    avahi-discover, which is also fixed in this version.
    (Closes: #853239, #936173)

  [ Simon McVittie ]
  * Override Lintian warning for package-name-doesnt-match-sonames libdns-sd1.
    The libdns_sd.so.1 SONAME conceptually belongs to a different source
    package (Apple Bonjour, which isn't currently in Debian) so it's
    deliberate that we are not using its package name.
  * gir1.2-avahi-0.6 Provides gir1.2-avahicore-0.6, reflecting its contents.
    This matches the naming scheme from the g-i mini-policy, and lets us
    stop suppressing some Lintian warnings.
  * d/copyright: Add some more copyright holders

 -- Simon McVittie <email address hidden>  Sun, 24 May 2020 11:20:46 +0100

avahi (0.8-1) unstable; urgency=medium

  * Team upload

  [ Andreas Henriksson ]
  * New upstream release (Closes: #951691)
    - Support local-only services via the loopback interface
      (Closes: #909564)
    - Don't crash on keys with an empty value (Closes: #947891)
    - Drop patches that are included upstream
    - Disable Qt5 main loop binding for now
    - Update libavahi-core7.symbols with newly added symbols
  * d/p/Fetch-build-db-from-upstream-git.patch:
    Patch back in a script that was omitted from the upstream tarball
  * libavahi-core-dev: spelling-error-in-description shoudl should
  * Drop obsolete X-Python-Version field

  [ Simon McVittie ]
  * Summarize significant upstream changes above
  * Disable libevent main loop binding for now
  * Continue to use Python 2 for now, so we can test v0.8 independent of
    the switch from Python 2 to Python 3
  * d/p/avahi_dns_packet_consume_uint32-fix-potential-undefined-b.patch:
    Add patch from upstream git to fix undefined left-shift
  * d/p/fix-bytestring-decoding-for-proper-display.patch,
    d/p/avahi-discover-Don-t-decode-unicode-strings-only-bytestri.patch:
    Make avahi-discover work for both Python 2 and Python 3
    (hopefully Closes: #876107)
  * Replace stage1 build-profile with nopython and pkg.avahi.nogui
  * Set avahi user's home directory to /run/avahi-daemon for new installs.
    For existing installations, it continues to be the
    equivalent-but-deprecated /var/run/avahi-daemon.
  * Add Build-Depends-Package to all .symbols files
  * Don't explicitly link --as-needed.
    This is the default in bullseye toolchains anyway.
  * Use dpkg's default.mk
  * Enable full compiler hardening
  * Remove migration path from obsolete avahi-dbg package.
    It was most recently shipped before Debian 9 'stretch', and we don't
    support skipping a version when upgrading.
  * Build-depend on python2.
    We don't actually need Python development files here, just the
    interpreter itself.
  * d/rules: Make install invocations not require fakeroot.
    The default for install(1) is 0755, root:root if running as root, or
    0755 without ownership changes if running as an unprivileged user.
    Under Rules-Requires-Root: no, we cannot explicitly chown a file,
    but having it owned by the build user during build results in it being
    owned by root:root in the .deb, which is what we want anyway.
  * Set Rules-Requires-Root to no
  * Standards-Version: 4.5.0 (no changes required)
  * Move to debhelper-compat 12.
  * Don't explicitly stop avahi-daemon.service in prerm.
    The dh_installsystemd infrastructure handles this now. We do still mask
    the service, since dh_installsystemd doesn't prevent D-Bus activation.
  * Add ${misc:Pre-Depends} to all packages
  * Add a patch to force a specific service type database format.
    It was traditionally a gdbm database in Debian, but v0.8's build-db,
    when run under Python 2, prefers dbhash (bsddb).
  * d/avahi-autoipd.preinst: Remove transitional code from pre-stretch

 -- Simon McVittie <email address hidden>  Thu, 07 May 2020 19:47:43 +0100

avahi (0.7-5) unstable; urgency=medium

  * Team upload
  * Build-depend on python-gi in addition to python-gi-dev.
    python-gi-dev is likely to lose its python-gi dependency to help
    with tracking the removal of Python 2 dependencies.
    (Closes: #945034)
  * d/p/Drop-legacy-unicast-queries-from-address-not-on-local-lin.patch:
    Add patch from upstream to fix traffic amplification attacks
    (CVE-2017-6519, CVE-2018-1000845; Closes: #917047)
  * d/patches: Annotate with forwarding status
  * d/avahi-daemon-check-dns.sh: Wrap host command with timeout(1) to
    avoid it stalling indefinitely on some systems.
    Mitigates: #559927, #898038, #929010.
    Thanks to Trent Lloyd and Ubuntu.

 -- Simon McVittie <email address hidden>  Fri, 13 Dec 2019 16:00:32 +0000

avahi (0.7-4) unstable; urgency=medium

  * Team upload

  [ Simon McVittie ]
  * Refresh patches through gbp pq
    - d/p/no-systemd-also.patch: Convert to git-style format
  * Use DEP-14 branch names debian/master, upstream/latest
  * Update Vcs-Git, Vcs-Browser for salsa.debian.org
  * d/rules: Specify that we are building for a Debian derivative,
    instead of letting it be autodetected (partially addresses #873596)
  * d/p/Remove-empty-avahi_discover-Python-module.patch:
    Don't install an empty library module into the avahi-discover package
  * Bump Standards-Version to 4.1.4

  [ Mario Lang ]
  * Install examples into the relevant -dev packages (Closes: #768595)

 -- Simon McVittie <email address hidden>  Fri, 27 Apr 2018 11:59:11 +0100

avahi (0.7-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  * d/p/no-systemd-also.patch:
    - cherry-pick Ubuntu build fix for new systemd (Closes: #880036)
      Thanks Steve Langasek for the patch

 -- Gianfranco Costamagna <email address hidden>  Fri, 02 Feb 2018 15:51:42 +0100

avahi (0.7-3) unstable; urgency=medium

  * Brown paper bag release.
  * Don't hard-code architecture in gir1.2-avahi-0.6.install.
    Otherwise we FTBFS on everything but amd64.

 -- Michael Biebl <email address hidden>  Mon, 18 Sep 2017 23:25:27 +0200

avahi (0.7-2) unstable; urgency=medium

  * Drop shlibs files.
    Those are no longer necessary as all libraries provide symbols files
    nowadays.
  * Enable gobject introspection support.
    The typelib files for libavahi-gobject are split into a new package
    named gir1.2-avahi-0.6.
  * Handle socket activation in avahi-daemon-check-dns.sh when using systemd.
    To completely stop avahi-daemon under systemd the avahi-daemon.socket
    unit needs to be stopped as well. (Closes: #847456)

 -- Michael Biebl <email address hidden>  Sun, 17 Sep 2017 23:43:27 +0200

avahi (0.7-1) unstable; urgency=medium

  [ Andreas Henriksson ]
  * New upstream version 0.7
    - All default rlimits have been removed from avahi-daemon.conf.
      Those were causing crashes due to OOM and failure to start in LXC
      containers. (Closes: #841926, #856311)
  * Drop d/p/0001-avahi-autoipd-fix-dhclient-hooks-to-check-for-avahi-.patch
    - now included in upstream release.
  * Remove (Gtk+ 2.x) libavahi-ui{0,-dev} packages (Closes: #870785)
  * Add patch to also install manpages when not building gtk2
    - debian/patches/fix-manpage-install-conditions.patch
  * Remove libavahi-qt4-{1,dev} packages (Closes: #874832)
  * Stop shipping /usr/share/avahi/service-types
  * Add one new symbol to libavahi-gobject0.symbols

  [ Michael Biebl ]
  * Update (build-)dependencies for the switch from pygtk2 to pygobject/gtk3
  * Setup gbp pq to use patches without patch numbers
  * Add missing bshell.1 symlink (Closes: #655190)
  * Fix reference to avahi-autoipd.action(8) in avahi-autoipd(8)
    (Closes: #840833)
  * Do not install upstream ChangeLog file.
    It is autogenerated by gettexize and doesn't contain any useful
    information. It also breaks multi-arch and reproducibility.
    For user visible changes please consult the NEWS file instead.
    (Closes: #804134)
  * Bump Standards-Version to 4.1.0
  * Bump debhelper compat level to 10
  * Explicitly disable introspection support.
    We don't provide any introspection packages yet (but might in the
    future). For the time being use --disable-introspection to get more
    reliable build results.
  * Switch to dh_missing and abort on uninstalled files
  * Use /usr/share/dpkg/architecture.mk include to get DEB_HOST_ARCH_OS

 -- Michael Biebl <email address hidden>  Sun, 17 Sep 2017 20:45:19 +0200

avahi (0.6.32-2) unstable; urgency=medium

  [ Christian Hofstaedtler ]
  * Ensure dhclient exit hook does not trigger an error if avahi-autoipd is
    not running. (Closes: #852256)

 -- Michael Biebl <email address hidden>  Mon, 23 Jan 2017 09:41:58 +0100

avahi (0.6.32-1) unstable; urgency=medium

  [ Michael Biebl ]
  * Update debian/watch to track new upstream releases on GitHub.
  * New upstream release. All dfsg unfree files have been removed, so
    repacking is no longer required. Drop debian/README.source accordingly.
  * Install man pages via .install files, so they don't show up in
    --list-missing.
  * Drop dbg package now that we have automatic dbgsym packages.
    Ensure proper upgrade from avahi-dbg to new dbgsym packages by using
    dh_strip --dbgsym-migration. Bump Build-Depends on debhelper accordingly
    and add versioned Build-Depends on dpkg-dev.
  * Mark -dev packages as Multi-Arch: same. (Closes: #731362)
  * Bump Standards-Version to 3.9.8.
  * avahi-autoipd: fix dhclient hooks to check for avahi-autoipd
    before trying to run it. (Closes: #809539)

  [ John Paul Adrian Glaubitz ]
  * Add a stage1 build profile which disables GTK, Qt4 and Python-GTK bindings
    in order to reduce build dependencies. (Closes: #734669)

 -- Michael Biebl <email address hidden>  Mon, 27 Jun 2016 22:54:00 +0200

avahi (0.6.32~rc+dfsg-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Don't log warnings about invalid packets, commonly triggered by Windows
      10 systems (Closes: #639163)
    - Drop debian/patches/01_avahi-daemon.conf.patch,
      d/p/avahi-core-reserve-space-for-record-data-when-size-estimate.patch,
      d/p/suse-patch-gtk-box.patch, d/p/no-deprecations.patch,
      d/p/so_reuseport-may-not-exist-in-running-kernel.patch, merged upstream.
  * debian/control: Bump Standards-Version to 3.9.6 (no further changes)
  * debian/rules: Ask dh_autoreconf to run the autogen.sh script
  * debian/control: Add dh-python to the build-dependencies

 -- Laurent Bigonville <email address hidden>  Wed, 04 Nov 2015 21:47:52 +0100

avahi (0.6.31-5) unstable; urgency=medium


  [ Andreas Henriksson ]
  * Recommend iproute2 instead of transitional package iproute.
  * Update avahi-daemon support scripts to use iproute2 tools if available
    with a fallback to net-tools and graceful degradation if neither is
    installed. (Closes: #762326)

  [ Michael Biebl ]
  * Don't run the avahi-autoipd ifupdown hook scripts if the package has been
    removed but not purged. (Closes: #780872)
  * Use --restart-after-upgrade for avahi-daemon and avahi-dnsconfd to
    minimise downtime and avoid avahi-daemon being triggered via socket or
    D-Bus activation during upgrades. (Closes: #768620)
  * Mask avahi-daemon.service on remove to avoid the stop request being
    cancelled via socket or D-Bus activation.

 -- Michael Biebl <email address hidden>  Mon, 13 Apr 2015 21:51:24 +0200

avahi (0.6.31-4) unstable; urgency=medium


  * Team upload.
  * d/p/so_reuseport-may-not-exist-in-running-kernel.patch: Do not exit
    avahi-daemon if we cannot set SO_REUSEPORT on the socket. This patch has
    be taken from Ubuntu, thanks to them (Closes: #732009)
  * debian/patches/avahi-core-reserve-space-for-record-data-when-size-estimate.patch:
    avahi-core: reserve space for record data when size estimate. This
    prevents avahi-daemon from falling into an invalid loop when many CUPS/IPP
    printer shares get registered (Closes: #693604)
  * debian/libavahi-core7.symbols: Add 2 new symbols exported by the previous
    patch
  * debian/patches/suse-patch-gtk-box.patch: Don't use GTK vbox API which is
    deprecated when compiling for GTK3.
  * debian/control: Bump Standards-Version to 3.9.5 (no further changes)

 -- Laurent Bigonville <email address hidden>  Thu, 26 Dec 2013 18:24:41 +0100

avahi (0.6.31-3) unstable; urgency=low


  * Team upload.
  [ Laurent Bigonville ]
  * debian/control: Use canonical URL's for Vcs-* fields
  * debian/avahi-daemon.init: Add "avahi-daemon" to the Provides list
    (Closes: #730546)
  * debian/avahi-dnsconfd.init: Depend against the new avahi-daemon Provides
  * debian/avahi-daemon.links, debian/avahi-dnsconfd.links, debian/control,
    debian/rules: Do not explicitly create systemd symlinks but rely on
    dh-systemd to do the correct thing
  * debian/control: Drop duplicate Section to please lintian
  * debian/control: Bump Standards-Version to 3.9.4 (no further changes)
  * debian/control, debian/rules: Update config.{guess,sub} during the build
  * debian/rules: Use debhelper 9 preferred way to set LDFLAGS (Closes: #662204)
  * debian/rules: Pass --as-needed to dh_autoreconf and add it to LDFLAGS to
    limit runtime dependencies
  * debian/avahi-daemon.init, avahi-dnsconfd.init: Fix initscripts to return
    an error in the appropriate cases (Closes: #718716)

  [ Hector Oron ]
  * debian/patch/no-deprecations.patch: Don't disable deprecated functions
    (Closes: #729124)
  * debian/rules: run autoreconf at build time.
  * debian/control: add dh-autoreconf build depend

 -- Laurent Bigonville <email address hidden>  Sat, 07 Dec 2013 16:24:13 +0100

avahi (0.6.31-2) unstable; urgency=low


  * Use recommended maintscript versioning scheme.
  * The avahi-dnsconfd init script doesn't support reload but provides a
    refresh action, so list that instead in the usage help message.
  * Update ifupdown hooks for avahi-daemon and avahi-autoipd. Drop the usage
    of ADDRFAM=NetworkManager, since network-manager no longer uses that. Run
    avahi-daemon only for ADDRFAM inet and inet6. (Closes: #699749)

 -- Michael Biebl <email address hidden>  Wed, 06 Mar 2013 22:58:55 +0100

avahi (0.6.31-1) unstable; urgency=low


  * New upstream release.
  * Mark private stdb_* symbols in libavahi-ui and libavahi-ui-gtk3 as
    optional.
  * Bump Build-Depends on debhelper to (>= 9).
  * Bump Standards-Version to 3.9.3. No further changes.
  * Use new dh_installdeb maintscript facility to (re)move the old conffiles
    for avahi-autoipd and avahi-dnsconfd.

 -- Michael Biebl <email address hidden>  Sun, 04 Mar 2012 05:23:49 +0100

avahi (0.6.30-6) unstable; urgency=low


  * Switch to dh_python2. (Closes: #637552)
  * Simplify postinst for avahi-autoipd and avahi-daemon.
  * Rebuild to enable hardened build flags. (Closes: #655188)
  * Use term GLib consistently in the package description. (Closes: #633783)

 -- Michael Biebl <email address hidden>  Tue, 10 Jan 2012 00:59:49 +0100

avahi (0.6.23-3lenny3) oldstable-security; urgency=high


  * debian/patches/17_CVE-2011-1002.patch
    - Read NULL UDP packets else we end up in an infinite loop using 100% CPU
      and DoS of Avahi. (Closes: #614785, Fixes: CVE-2011-1002)

 -- Michael Biebl <email address hidden>  Wed, 23 Feb 2011 15:34:21 +0100

avahi (0.6.30-5) unstable; urgency=low
  * debian/control: Make python-avahi Architecture: any so the path to    service-types.db in ServiceTypeDatabase.py is correctly set.    (Closes: #632437) -- Michael Biebl <email address hidden>  Sat, 02 Jul 2011 10:37:15 +0200

avahi (0.6.30-4) unstable; urgency=low
  * Add multiarch support. Patch courtesy of Steve Langasek. (Closes: #631836) -- Michael Biebl <email address hidden>  Fri, 01 Jul 2011 02:28:05 +0200

avahi (0.6.30-3) unstable; urgency=low
  * Enable GTK3 support. (Closes: #610772)    - Add Build-Depends on libgtk-3-dev.    - Add libavahi-ui-gtk3-0 and libavahi-ui-gtk3-dev package.    - Make libavahi-ui-gtk3-dev conflict with libavahi-ui-dev, as both      packages ship the same header file.    - Pass --enable-gtk3 to configure. -- Michael Biebl <email address hidden>  Fri, 29 Apr 2011 16:50:38 +0200

avahi (0.6.30-2) unstable; urgency=low
  * Remove Qt3 integration library. With KDE3 gone, there is no more package    using it. (Closes: 604341)    - Drop Build-Depends on libqt3-mt-dev.    - Drop libavahi-qt3-1 and libavahi-qt3-dev package.    - Update debian/rules, pass --disable-qt3 to configure.  * Remove libtool .la files for libavahi-client and libavahi-common.  * Stop cleaning up dependency_libs from libtool .la files. No longer    required as we don't install any .la files anymore.  * Bump Standards-Version to 3.9.2. No further changes. -- Michael Biebl <email address hidden>  Mon, 11 Apr 2011 04:44:42 +0200

avahi (0.6.30-1) unstable; urgency=low
  * New upstream release.    - iface: look for both IFA_ADDRESS and IFA_LOCAL. (Closes: #617948) -- Michael Biebl <email address hidden>  Mon, 04 Apr 2011 02:45:41 +0200

avahi (0.6.27-2+squeeze1) stable-security; urgency=high
  * debian/patches/03_read_null_udp_packets.patch    - Read NULL UDP packets else we end up in an infinite loop using 100% CPU      and DoS of Avahi. (Closes: #614785, Fixes: CVE-2011-1002)  * Urgency high for the security fix. -- Michael Biebl <email address hidden>  Wed, 23 Feb 2011 15:59:15 +0100

avahi (0.6.29-1) unstable; urgency=low
  * New upstream release.  * Remove patches, merged upstream    - debian/patches/03_read_null_udp_packets.patch    - debian/patches/04-fix_netlink_flags_for_dump_operations.patch  * debian/avahi-daemon.links    - Enable avahi-daemon by default when using systemd, so it can be started      via D-Bus activation, socket activation and multi-user.target.  * debian/avahi-dnsconfd.links    - Enable avahi-dnsconfd by default when using systemd. It will be started      by multi-user.target. -- Michael Biebl <email address hidden>  Fri, 11 Mar 2011 01:58:46 +0100

avahi (0.6.28-5) unstable; urgency=low
  * debian/rules    - Enable stack smashing protector for all architectures and let configure      check if it is supported.  * debian/patches/04-fix_netlink_flags_for_dump_operations.patch    - Use correct flag combination for rtnetlink dump operations.      Thanks to Pablo Neira Ayuso for the patch. (Closes: #610281) -- Michael Biebl <email address hidden>  Mon, 07 Mar 2011 10:35:51 +0100

avahi (0.6.28-4) unstable; urgency=high
  * Bump debhelper compatibility level to 8 and update build dependency    on debhelper accordingly.  * debian/patches/03_read_null_udp_packets.patch    - Read NULL UDP packets else we end up in an infinite loop using 100% CPU      and DoS of Avahi. (Closes: #614785, Fixes: CVE-2011-1002)  * Urgency high for the security fix. -- Michael Biebl <email address hidden>  Wed, 23 Feb 2011 15:34:21 +0100

avahi (0.6.28-3) unstable; urgency=low
  * debian/avahi-daemon.init    - Map force-reload action to reload, not restart.    - Stop trying to load the capability kernel module. Capabilities support      is enabled by default and can no longer be built as a module.    - Don't check daemon status twice on restart.    - General cleanup and white space fixes.  * debian/avahi-dnsconfd.init    - Don't check daemon status twice on restart.    - Don't map reload action to restart as it does not belong there.      Reload should probably be an alias for refresh, but drop it for now.    - General cleanup and white space fixes.  * Remove avahi-autoipd compat symlinks for dhcp3-client.  * Upload to unstable. -- Michael Biebl <email address hidden>  Mon, 07 Feb 2011 03:54:51 +0100

avahi (0.6.28-2) experimental; urgency=low
  * debian/rules: Fix and simplify .la dependency_libs cleanup.  * Stop installing libtool .la files for those packages which have no more    reverse dependencies.  * Remove pre-lenny upgrade code from maintainer scripts. -- Michael Biebl <email address hidden>  Wed, 01 Dec 2010 21:21:24 +0100

avahi (0.6.28-1) experimental; urgency=low


  * New upstream release.
  * Remove debian/patches/02_avahi_client.patch, merged upstream.
  * Move from cdbs to dh
    - Drop Build-Depends on cdbs.
    - Bump Build-Depends on debhelper to (>= 7.0.50~) for override targets.
    - Convert debian/rules to use dh.
    - Drop debian/clean-la.mk (merged into debian/rules).
  * Install systemd unit files for avahi-daemon and avahi-dnsconfd.
  * Install D-Bus system service file for avahi-daemon.

 -- Michael Biebl <email address hidden>  Thu, 18 Nov 2010 08:05:00 +0100

avahi (0.6.27-3) unstable; urgency=low


  * debian/control
    - Update Vcs-* fields: Move packaging from svn to git.
    - Bump Standards-Version to 3.9.1. No further changes.
  * debian/patches/02_avahi_client.patch
    - Replace patch with upstream commit 9a4db66 which uses Ping() to test
      whether avahi is around.

 -- Michael Biebl <email address hidden>  Thu, 18 Nov 2010 05:47:11 +0100

avahi (0.6.23-3lenny2) stable-security; urgency=high


  * CVE-2010-2244 and CVE-2009-0758

 -- Moritz Muehlenhoff <email address hidden>  Tue, 03 Aug 2010 14:43:18 -0400

avahi (0.6.27-2) unstable; urgency=low


  * Added debian/patches/02_avahi_client.patch:
    - Let the client check if the daemon is already running instead of just
      trying to start it, which doesn't work if there is no service file (the
      service file is just meant for systems using system.d) (Closes: #590760)

 -- Sjoerd Simons <email address hidden>  Sun, 15 Aug 2010 23:29:26 +0100

avahi (0.6.27-1) unstable; urgency=low


  * New upstream release.
  * Remove patches
    - debian/patches/02_have_gtk2_build_fix.patch (merged upstream)
    - debian/patches/26_am_maintainer_mode.patch (no longer required)
    - debian/patches/99_autoreconf.patch (no longer required)
  * Drop Howl compatibility library. (Closes: #588389)
    Development of the original Howl implementation has been discontinued and
    there are no more reverse dependencies in the Debian archive since lenny.

 -- Michael Biebl <email address hidden>  Sun, 25 Jul 2010 23:20:51 +0200

avahi (0.6.26-1) unstable; urgency=low


  * New upstream release.
    - Make avahi limits configurable instead of setting them during compile
      time and bump up the default limits. (Closes: #557931)
    - Clarify avahi-daemon.conf.5 man page. (Closes: #549445)
    - Don't ignore mDNS response records containing link-local addresses.
      (Closes: #567067)
  * Remove patches that were merged upstream
    - debian/patches/11_avahi-autoipd.action-add-routes.patch
    - debian/patches/15-manpage-typo-fixes.patch
    - debian/patches/20_avahi-daemon_kfreebsd.patch
    - debian/patches/25_check_net_if_dl_h_for_pfroute.patch
    - debian/patches/30_dont_reflect_link-local_addresses.patch
  * debian/patches/02_have_gtk2_build_fix.patch
    - Fix build for systems that have gtk2 but no gtk3.
  * debian/patches/99_autoreconf.patch
    - Refresh for new upstream release.
  * debian/rules
    - Disable gtk3 support.
  * debian/avahi-daemon.install
    - Install interfaces into standard D-Bus interfaces directory.
  * debian/{avahi-autoipd.install,rules}
    - The dhclient hooks are installed to /etc/dhcp by upstream now.
  * Bump libavahi-core soname from 6 to 7.
  * Replace libglade with GtkBuilder
    - Drop Build-Depends on libglade2-dev.
    - Bump Build-Depends on libgtk2.0-dev to (>= 2.14.0).
    - Update debian/avahi-discover.install for avahi-discover.ui.
  * Update debian/python-avahi.install and debian/avahi-discover.install for
    python dist-packages transition.
  * Bump Standards-Version to 3.9.0. Use architecture wild-card linux-any for
    the libcap-dev Build-Depends and avahi-autoipd.
  * Remove AVAHI_DNSCONFD_START option because we start avahi-dnsconfd by
    default anyway. As /etc/default/avahi-dnsconfd is now empty, remove it on
    upgrades.
  * debian/libavahi-common-data.install
    - Install avahi gettext translations.
  * debian/avahi-daemon.examples
    - Install sftp-ssh.service file. (Closes: #389336)
  * debian/control
    - Recommend isc-dhcp-client instead of dhcp3-client.

 -- Michael Biebl <email address hidden>  Wed, 07 Jul 2010 23:38:16 +0200

avahi (0.6.25-4) unstable; urgency=low


  * Switch to source format 3.0 (quilt)
    - Add debian/source/format.
    - Drop quilt from Build-Depends.
    - Remove /usr/share/cdbs/1/rules/patchsys-quilt.mk from debian/rules.
  * Bump Standards-Version to 3.8.4. No further changes.
  * Move dhclient hooks from /etc/dhcp3/ to /etc/dhcp/ as isc-dhcp-client
    (ISC DHCP v4) uses this new location. Create symlinks for dhcp3-client
    and preserve any local modifications. (Closes: #583992)

 -- Michael Biebl <email address hidden>  Sat, 26 Jun 2010 01:44:57 +0200

avahi (0.6.25-3) unstable; urgency=low


  * debian/control
    - Fix package description for libavahi-gobject0. (Closes: #528916)
    - Change section of avahi-ui-utils to utils. (Closes: #560830)
    - Bump Standards-Version to 3.8.3. No further changes.
  * debian/patches/20_avahi-daemon_kfreebsd.patch
    - Fix avahi-daemon on GNU/kFreeBSD. (Closes: #564607)
      Thanks to Julien BLACHE for the patch.
  * debian/patches/25_check_net_if_dl_h_for_pfroute.patch
    - Fix build failure on GNU/Hurd by improving the configure check to also
      test for net/if_dl.h so the correct backend is used. (Closes: #558975)
      Thanks to Pino Toscano for the patch.
  * debian/patches/26_am_maintainer_mode.patch
    - Set AM_MAINTAINER_MODE as it makes patching the build system less
      painful.
  * debian/patches/99_autoreconf.patch
    - Run autoreconf as 25_check_net_if_dl_h_for_pfroute.patch changes the
      build system.
  * debian/patches/30_dont_reflect_link-local_addresses.patch
    - Don't reflect link-local IPv4 or IPv6 addresses. (Closes: #517160)
      Patch pulled from upstream, original patch by Rob Leslie, thanks!
  * debian/libavahi-core6.symbols
    - Add new symbols that were introduced by
      30_dont_reflect_link-local_addresses.patch.
    - Tag the avahi_netlink_* symbols as arch=linux-any.
      This makes the arch specific symbols files for libavahi-core6 obsolete,
      so remove them.
  * debian/avahi-daemon.postrm
    - Cleanup /var/run/avahi-daemon on "purge". (Closes: #448539)
  * debian/avahi-autoipd.postrm
    - Cleanup /var/run/avahi-autoipd on "purge". (Closes: #527925)

 -- Michael Biebl <email address hidden>  Thu, 14 Jan 2010 00:47:50 +0100

avahi (0.6.25-2) unstable; urgency=low


  [ Michael Biebl ]
  * patches/15-manpage-typo-fixes.patch
    - Fix a few typos in the man pages (s/seperated/separated/).
      (Closes: #525268)
      Thanks to A. Costa for the patch.

  [ Sjoerd Simons ]
  * debian/avahi-daemon-check-dns.sh
    + Also check for a default route before checking the DNS (Closes: #551651)

 -- Sjoerd Simons <email address hidden>  Sun, 22 Nov 2009 22:46:03 +0000

avahi (0.6.25-1) unstable; urgency=low


  * New upstream release.
  * Use set -e instead of #!/bin/sh -e for all maintainer and shell scripts.
  * debian/patches/02-avahi-daemon-dbus-policy.patch
    - Removed, merged upstream.
  * debian/patches/03-avahi-daemon-reflector-packet-storm.patch
    - Removed, merged upstream.

 -- Michael Biebl <email address hidden>  Fri, 17 Apr 2009 13:21:58 +0200

avahi (0.6.24-3) unstable; urgency=low


  * Switch patch management system to quilt. 
  * debian/control
    - Change Section of avahi-dbg to debug.
    - Bump Standards-Version to 3.8.1. No further changes.
    - Change Build-Depends on libcap2-dev to libcap-dev. Tighten the version
      to (>= 1:2.16) to ensure we don't pick up any old libcap1 version.
      (Closes: #520836)
  * debian/patches/03-avahi-daemon-reflector-packet-storm.patch
    - Fix a bug in avahi-daemon that could cause packet storms when reflecting
      legacy unicast mDNS traffic. (Closes: #517683)
      SECURITY: CVE-2009-0758
      Thanks to Rob Leslie for the patch.
  * debian/python-avahi.examples
    - Install avahi-bookmarks as example in
      /usr/share/doc/python-avahi/examples/. (Closes: #368566)
  * debian/avahi-daemon.init
    - Check for DISABLE_TAG *and* AVAHI_DAEMON_DETECT_LOCAL != 0 before
      disabling the avahi-daemon service. (Closes: #517211)
      Thanks to Reed Hedges for the fix.
    - Remove some old cruft.

 -- Michael Biebl <email address hidden>  Mon, 30 Mar 2009 00:00:51 +0200

avahi (0.6.24-2) unstable; urgency=low


  * Merge changes from experimental branch. 
  * debian/compat
    - Bump to debhelper v7 compat mode.
  * debian/control
    - Bump debhelper Build-Depends to (>= 7).
    - Replace Recommends: xvncviewer with vnc-viewer for avahi-ui-utils.
      The xvncviewer package is no longer available from the archive
      (superseded by xvnc4viewer). We use the virtual package instead.
    - Bump Standards-Version to 3.8.0. No further changes.
    - Remove ancient Conflicts/Replaces from pre-oldstable (sarge).
    - Add ${misc:Depends} to all binary packages.
  * debian/rules
    - Remove DEB_SHLIBDEPS_INCLUDE, dpkg-shlibdeps works fine without it
      nowadays.
    - Remove clean-up rule in pre-build, fixed upstream.
  * debian/libavahi-core6.symbols.hurd-i386
    - Add symbols file for hurd-i386, copied from
      libavahi-core6.symbols.kfreebsd-i386. (Closes: #508895)
  * Use dh_installifupdown to install the ifupdown hook scripts for
    avahi-daemon and avahi-autoipd.
  * debian/patches/02-avahi-daemon-dbus-policy.patch
    - Update D-Bus policy and fix deny rule by adding
      send_destionation="org.freedesktop.Avahi". (Closes: #510653)

 -- Michael Biebl <email address hidden>  Tue, 17 Feb 2009 18:30:27 +0100

avahi (0.6.23-3lenny1) testing-proposed-updates; urgency=low


  * debian/avahi-{daemon,dnsconfd}.postinst
    - When upgrading the init script priorities, check if the service is
      enabled for the default runlevel before removing the old init script
      symlinks to avoid accidentally re-enabling it. (Closes: #499815)

 -- Michael Biebl <email address hidden>  Wed, 14 Jan 2009 23:22:59 +0100

avahi (0.6.23-4) unstable; urgency=low


  * debian/avahi-{daemon,dnsconfd}.postinst
    - When upgrading the init script priorities, check if the service is
      enabled for the default runlevel before removing the old init script
      symlinks to avoid accidentally re-enabling it. (Closes: #499815)

 -- Michael Biebl <email address hidden>  Wed, 14 Jan 2009 23:22:59 +0100

avahi (0.6.23-3) unstable; urgency=low


  [ Loic Minier ]
  * Generate a POT file during build; helps downstreams such as Ubuntu import
    an always up-to-date pot, even we patch the source of upstream forgets to
    do so; from Ubuntu; thanks Martin Pitt; closes: #486908.

  [ Michael Biebl ]
  * debian/avahi-daemon-check-dns.sh
    - Fix quoting error in dns_has_local().
      Thanks to James Westby for the patch. (Closes: #492466)

  [ Sjoerd Simons ]
  * debian/patches/14_CVE-2008-5081.patch
    - Added. Don't abort on receiving an UDP packet with a source port of zero.
      Fixes CVE-2008-5081 (Closes: #508700)

 -- Sjoerd Simons <email address hidden>  Sun, 14 Dec 2008 19:39:58 +0000

avahi (0.6.23-2) unstable; urgency=low


  * debian/control
    - Add myself to Uploaders.
    - Build against libcap2 instead of libcap1 to avoid kernel warning about
      using legacy support of 32-bit capabilities. Add a Build-Depends on
      libcap2-dev (>= 2.10) to avoid possibly insecure use of v2 capabilities.
      Thanks to Ted Percival for the patch. (Closes: #464712)
    - Fix spelling of GTK+ in description.
    - Drop -1 revision from python-gdbm build dependency.
  * debian/libavahi-gobject0.symbols
    - Fix incorrect package name and #MINVER# stanza. (Closes: #488947)
  * debian/patches/02_avahi-ui.disable-translations.patch
    - Disable translatable strings in the avahi-ui desktop files. The build
      system doesn't process them correctly yet and we end up with broken
      desktop files otherwise.

 -- Michael Biebl <email address hidden>  Sat, 05 Jul 2008 13:49:06 +0200

avahi (0.6.22-3) unstable; urgency=low


  [ Sjoerd Simons ]
  * debian/control: Add libavahi-glib-dev to the libavahi-gobject-dev depends
  * debian/control: Remove python-glade2 dependencies from python-avahi. It's
    not needed anymore (Closes: #464411)

  [ Michael Biebl ]
  * debian/control
    - Bump Standards-Version to 3.7.3. No further changes required.
    - Add dependency on python-glade2 to avahi-discover.
    - Remove XB-Python-Version fields. They are not required with
      python-support.
    - Bump python-support build dependency to (>= 0.6) as suggested by the
      python-support documentation.
  * debian/avahi-daemon.init, debian/avahi-dnsconfd.init
    - Fix LSB init header. (Closes: #469990)
      Use $remote_fs instead of $local_fs as the daemon requires /usr to be
      mounted. Remove S from Should-Stop.
  * debian/watch
    - Add a watch file which allows to track new upstream releases.

  [ Sjoerd Simons ]
  * debian/patches/80_better_poof.patch:
    - Added. Improve the poof algorithm to prevent false positives when on a
      unreliable network.

  [ Loic Minier ]
  * Stop shipping bssh and bvnc; these are meant as examples, but would
    require a replace if libavahi-ui would change SONAME; also these show up
    in the menus while we have nicer alternatives now (e.g. vinagre); finally
    these require additional deps which wouldn't be fit for libavahi-ui (bvnc
    requires xvncviewer); see also Launchpad #194749; closes: #461693.
  * Add armel to architecture list; closes: #469854.

 -- Sjoerd Simons <email address hidden>  Sat, 05 Apr 2008 12:15:29 +0200