-
avahi (0.8-5ubuntu3.1) hirsute-security; urgency=medium
* SECURITY UPDATE: DoS in avahi_s_host_name_resolver_start
- debian/patches/CVE-2021-3502.patch: fix multiple null pointer crashes
in avahi-core/browse-dns-server.c, avahi-core/browse-domain.c,
avahi-core/browse-service-type.c, avahi-core/browse-service.c,
avahi-core/browse.c, avahi-core/resolve-address.c,
avahi-core/resolve-host-name.c, avahi-core/resolve-service.c.
- CVE-2021-3502
-- Marc Deslauriers <email address hidden> Tue, 06 Jul 2021 11:36:31 -0400
-
avahi (0.8-5ubuntu3) hirsute; urgency=medium
* avahi-daemon-chroot-fix-bogus-assignments-in-assertions.patch,
avahi-client-fix-resource-leak.patch: Issues discovered by static analysis
(Upstream pull request #202).
* avoid-infinite-loop-in-avahi-daemon-by-handling-hup-event-in-client-work.patch:
Avoid infinite-loop in avahi-daemon by handling HUP event in client_work()
(Upstream pull request #330).
-- Till Kamppeter <email address hidden> Thu, 8 Apr 2021 15:24:07 +0200
-
avahi (0.8-5ubuntu2) hirsute; urgency=medium
* Disable lto. See https://bugzilla.redhat.com/show_bug.cgi?id=1907727.
-- Matthias Klose <email address hidden> Mon, 22 Mar 2021 20:47:51 +0100
-
avahi (0.8-5ubuntu1) hirsute; urgency=low
* Merge from Debian unstable. Remaining changes:
- debian/avahi-daemon.postinst: remove the deprecated conffiles
if-up/down entries on upgrade, use a simple logic and no
dpkg-maintscript-helper since there is no configuration worth saving
avahi (0.8-5) unstable; urgency=medium
* d/avahi-daemon.maintscript: Drop removal of symlink, they're not normal
config files.
* d/avahi-daemon.postinst: Clean up left-over dpkg-backup symlink from 0.8.3
to 0.8.4 symlink (Closes: #982016)
avahi (0.8-4) unstable; urgency=medium
[ Sjoerd Simons ]
* Team upload
[ Simon McVittie ]
* Remove avahi-daemon-check-dns mechanism, no longer needed.
Thanks to Trent Lloyd, Sebastien Bacher (LP: #1870824)
(Closes: #433945, #559927, #629509, #747895, #878586, #898038, #929010)
-- Till Kamppeter <email address hidden> Wed, 24 Feb 2021 23:53:07 +0100
-
avahi (0.8-3ubuntu2) hirsute; urgency=medium
* debian/avahi-daemon.links:
- remove buggy symlink, the target doesn't exist anymore (lp: #1901090)
* debian/avahi-daemon.postinst:
- remove the deprecated conffiles if-up/down entries on upgrade,
use a simple logic and no dpkg-maintscript-helper since there is no
configuration worth saving
-- Sebastien Bacher <email address hidden> Tue, 10 Nov 2020 15:03:56 +0100
-
avahi (0.8-3ubuntu1) groovy; urgency=low
* Merge from Debian unstable. Remaining changes:
- Remove avahi-daemon-check-dns.sh hack, the feature is provided by
libnss-mdns now
avahi (0.8-3) unstable; urgency=medium
* Team upload
* Upload python3-avahi to unstable
* d/control: Add comments about why some packages are Arch: any.
At first glance these packages seem like they should be
Architecture: all, but in fact they cannot.
* d/control, d/shlibs.local: Tighten interdependencies within src:avahi.
Co-installation of binary packages built from different versions of the
same source package is error-prone, because parts of the same source
package typically make assumptions about non-public exported symbols,
implementation details or precise behaviour beyond what's in the public
API. Upstream developers are also unlikely to be willing to support such
installations or make promises about their behaviour.
We can make partial upgrades more robust by upgrading everything from
a single source package together.
avahi (0.8-2) experimental; urgency=medium
* Team upload
[ Andreas Henriksson, Simon McVittie ]
* Switch from python2 to python3.
This includes renaming the python-avahi package to python3-avahi.
The only remaining package with a hard dependency on python-avahi is
avahi-discover, which is also fixed in this version.
(Closes: #853239, #936173)
[ Simon McVittie ]
* Override Lintian warning for package-name-doesnt-match-sonames libdns-sd1.
The libdns_sd.so.1 SONAME conceptually belongs to a different source
package (Apple Bonjour, which isn't currently in Debian) so it's
deliberate that we are not using its package name.
* gir1.2-avahi-0.6 Provides gir1.2-avahicore-0.6, reflecting its contents.
This matches the naming scheme from the g-i mini-policy, and lets us
stop suppressing some Lintian warnings.
* d/copyright: Add some more copyright holders
-- Steve Langasek <email address hidden> Tue, 09 Jun 2020 13:47:56 -0700
