Changelog for netatalk-3.1.7-8.3.1.x86_64.rpm :
Tue Dec 18 13:00:00 2018 Petr Gajdos
- security update

* CVE-2018-1160 [bsc#1119540]
+ netatalk-CVE-2018-1160.patch

Tue Jan 20 13:00:00 2015 mpluskalAATTsuse.com
- Don\'t install init script on systems with systemd
- Spec file cleanup with spec-cleaner
- Fix systemd specific conditions to match packaging guidelines

Sun Jan 11 13:00:00 2015 jeffmAATTsuse.com
- fce: afpd: fix fce_event_names array overflow

* Added: fce-afpd-fix-fce_event_names-array-overflow.patch

Wed Jan 7 13:00:00 2015 jeffmAATTsuse.com
- update to 3.1.7:

* UPD: Spotlight: enhance behaviour for long running queries, client
will now show \"progress wheel\" while waiting for first results.

* FIX: netatalk: fix a crash on Solaris when registering with mDNS

* FIX: netatalk: SIGHUP would kill the process instead of being
resent to the other Netatalk processes, bug #579

* FIX: afpd: Solaris locking problem, bug #559

* FIX: Handling of malformed UTF8 strings, bug #524

* FIX: afpd: umask handling, bug #576

* FIX: Spotlight: Limiting searches to subfolders, bug #581

* FIX: afpd: reloading logging config may result in privilege
escalation in afpd processes

* FIX: afpd: ACL related error messages, now logged with loglevel
debug instead of error

* FIX: cnid_metad: fix tsockfd_create() return value on error

* FIX: CNID/MySQL: volume table name generation, bug #566.
- via 3.0.6:

* FIX: charset conversion failed when copying from Mac OS 9. Bug #523.

* UPD: Don’t force S_ISGID for directories on FreeBSD. Bug #525.

* NEW: Add support for ZFS ACLs on FreeBSD with libsunacl. From FR#83.

* FIX: Active Directory LDAP queries for ACL support with new options
\"ldap user filter\" and \"ldap group filter\". Bug #526.

* NEW: Option \"vol dbnest\", when set to true, the CNID database for a
volume is stored in the volume root of a share in a directory
.AppleDB like in Netatalk 2. Defaults to false. From FR#84.

* FIX: Small fix in the DSI tickle handling. Bug #528.

* UPD: Enhance handling of connection attempts when hitting the
connection limit. Bug #529.

* FIX: Saving from Word to a folder that is a symlink to a folder on
another filesystem results in a crash of the afpd process and the save
to fail. This happens only if the option \"follow symlinks\" is enabled.
Bug #532.

* FIX: Disable Kerberos UAM if AFP service principal name can’t be
evaluated. Fixes bug #531.

* FIX: Fix handling of large number of volumes. Bug #527.

* NEW: Configure option --with-tbd which can be used to disable the use
of the bundled tdb and use a system installed version.
- Added build support for spotlight tracker but it is disabled due to
dbus security policy.

Tue Nov 18 13:00:00 2014 pgajdosAATTsuse.com
- update to 3.1.6:

* FIX: Spotlight: fix for long running queries

* UPD: afpd: distribute SIGHUP from parent afpd to children and force
reload shares

* FIX: netatalk: refresh Zeroconf registration when receiving SIGHUP

* NEW: configure option \"--with-init-style=debian-systemd\" for Debian
8 jessieand later.

* FIX: afpd: Hangs in Netatalk which causes it to stop responding to
connections, bug #572.

* NEW: afpd: new option \"force xattr with sticky bit = yes|no\"
(default: no), FR #94

* UPD: afpd: FCE version 2 with new event types and new config options
\"fce ignore names\" and \"fce notify script\"

* UPD: afpd: check for modified included config file, FR #95.

* UPD: libatalk: logger: remove flood protection and allocate messages

* UPD: Spotlight: use async Tracker SPARQL API

* NEW: afpd: new option \"case sensitive = yes|no\" (default: yes)
In spite of being case sensitive as a matter of fact, netatalk
3.1.3 and earlier did not notify kCaseSensitive flag to the client.
Now, it is notified correctly by default, FR #62.

* UPD: Spotlight: more SPARQL query optimisations

* UPD: Spotlight: new options \"sparql results limit\", \"spotlight
attributes\" and \"spotlight expr\"

* FIX: afpd: Unarchiving certain ZIP archives fails, bug #569

* UPD: Update Unicode support to version 7.0.0

* FIX: Memory overflow caused by \'basedir regex\', bug #567

* NEW: afpd: delete empty resource forks, from FR #92

* FIX: afpd: fix a crash when accessing ._ AppleDouble files created
by OS X via SMB, bug #564

* FIX: afpd and dbd: Converting from AppleDouble v2 to ea may corrupt
the resource fork. In some circumstances an offset calculation
is wrong resulting in corrupt resource forks after the
conversion. Bug #568.

* FIX: ad: fix for bug #563 broke ad file utilities, bug #570.

* NEW: afpd: new advanced option controlling permissions and ACLs,
from FR #93
- removed upstreamed netatalk-return-code.patch

Fri Jun 20 14:00:00 2014 pgajdosAATTsuse.com
- update to 3.1.2:

* FIX: Option \"vol dbpath\" was broken in 3.1.1

* FIX: Spotlight: file modification date, bug #545

* FIX: Improve reliability of afpd child handler

* FIX: debian initscript: add 0 and 6 to Default-Stop. debian-bug#745520

* FIX: put the Solaris share reservation after our locking stuff, bug #560.

* UPD: Improve Linux quota behaviour

* FIX: xattrs on
*BSD, bug #562

* NEW: afpd: support for using $u username variable in AFP volume
definitions. FR#90.

* FIX: getvolbypath returns incorrect volume, bug #563

* FIX: fd leak when using appledouble = v2, bug #554

* UPD: New options that control whether dbus and Tracker are started:
\'start dbus\' and \'start tracker\', both default to yes, FR#91

* UPD: Spotlight: SPARQL query optimisations

Fri Jun 6 14:00:00 2014 crrodriguezAATTopensuse.org
- netatalk-libc-xattr.patch Do not depend on libattr, glibc
provides the \"official\" xattr syscalls interface.

Fri Jun 6 14:00:00 2014 crrodriguezAATTopensuse.org
- Use the system\'s libtdb, not the bundled version.

Mon Mar 31 14:00:00 2014 pgajdosAATTsuse.com
- update to 3.1.1:

* FIX: Add asprint() compatibility function for systems lacking it

* FIX: Fix ressource fork name conversion. Bug #534.

* FIX: Fix a bug where only the first configured UAM was loaded.
Bug #537.

* UPD: Add support for AFP 3.4. From FR #85.

* FIX: Registering with mDNS crashed. Bug #540

* FIX: Saving from applications like Photoshop may fail, because
removing the ressource fork AppleDouble file failed. Bug #542.

* FIX: dbd: remove orphaned ._ AppleDouble files. Bug #549.

* NEW: afpd: Automatic conversion of ._ AppleDouble files
created by OS X. Bug #550.

* FIX: afpd: Fix a crash in of_closefork(). Bug #551.

* FIX: dbd: Don\'t print message \"Ignoring ._file\" for every ._ file.
Bug #552.

* FIX: afpd: Don\'t flood log with failed sys_set_ea() messages.

Fri Nov 15 13:00:00 2013 pgajdosAATTsuse.com
- update to 3.1.0:
NEW: Add recvfile support with splice() on Linux. New global
options \"recvfile\" (default: no) and \"splice size\"
(default 64k).
NEW: CNID backend \"mysql\" for use with a MySQL server
FIX: Build fixes for the Kerberos UAM
UPD: Use dedicated exit code for AFP connections that were
dropped by the client right after the TCP handshake
NEW: AFP Spotlight support with Gnome Tracker
NEW: New option \"spotlight\" (G/V)
NEW: If Spotlight is enabled, launch our own dbus instance
NEW: New option \"dbus daemon\" (G)
UPD: Add configure option --with-afpstats for overriding the
result of autodetecting dbus-glib presence
- added wrong-error-message.patch [bnc#849598]
- added return-code.patch

Wed Aug 28 14:00:00 2013 pgajdosAATTsuse.com
- update to 3.0.5:
FIX: Fix a crash when using pam_winbind. Fixes bug #516.
NEW: New global/volume option \"ignored attributes\"
FIX: \"afp listen\" option failed to take IPv6 addresses. Bug #515.
FIX: Fix a possible crash in set_groups. Bug #518.
NEW: Send optional AFP messages for vetoed files, new option \"veto
messages\" can be used to enable sending messages. Then
whenever a client tries to access any file or directory with
a vetoed name, it will be sent an AFP message indicating the
name and the directory. From FR #81.
NEW: New boolean volume option \"delete veto files\". If this option
is set to yes, then Netatalk will attempt to recursively
delete any vetoed files and directories. FR #82.
UPD: systemd unit dir is /usr/lib/systemd/system .
FIX: Saving files from application like MS Word may result in the
file loosing metadata like the Finder label. Bug #521.

Sun Jun 16 14:00:00 2013 jengelhAATTinai.de
- Explicitly list libattr-devel as BuildRequires
- More robust make install call. Parallel build with %_smp_mflags.

Mon May 27 14:00:00 2013 pgajdosAATTsuse.com
- update to 3.0.4:
FIX: Opening files without metadata EA may result in an invalid
metadata EA. Check for malformed metadata EAs and delete
them. Fixes bug #510.
FIX: Fix an issue with filenames containing non-ASCII characters
that lead to a failure setting the size of a files ressource
fork. This affected application like Adobe Photoshop where
saving files may fail. Fixes bug #511.
UPD: Enhance ACL mapping, change global ACL option map acl
to take the following options: \"none\", \"rights\" (default),
\"mode\". none = no mapping, this resembles the previous
false/no setting rights = map ACLs to Finder UARights,
this resembles the previous true/yes setting. This is the
default. mode = map ACLs to Finder UARights and UNIX mode
From FR #73.
FIX: Fix a possible crash in cname() where cname_mtouname calls
dirlookup() where the curdir is freed because the dircache
detected a dev/inode cache difference and evicted the
object from the cache. Fixes bug #498.
FIX: Add missing include, fixes bug #512.
FIX: Change default FinderInfo for directories to be all 0,
fixes bug 514.
NEW: New option \"afp interfaces\" which allows specifying where
Netatalk listens for AFP connections by interface names.
From FR #79.

Mon May 13 14:00:00 2013 pgajdosAATTsuse.com
- use --with-libevent=no, it means use system libevent (don\'t use
bundled)
- remove rcnetatalk.sh, use upstream init script

Mon May 6 14:00:00 2013 pgajdosAATTsuse.com
- spec file cleanup according to upstream

Tue Apr 2 14:00:00 2013 pgajdosAATTsuse.com
- update to 3.0.3:

* New ini style configuration file afp.conf which replaces all
previous configuration files

* New default AppleDouble backend using filesystem Extended
Attributes, conversion from AppleDouble v2 is done automatically
on access

* New service controller process \"netatalk\" responsible for
starting and restarting afpd and cnid_metad as necessary

* AppleTalk support has been removed

* Coherent cross-platform locking with Solaris CIFS server
- see http://netatalk.sourceforge.net/3.0/htmldocs/upgrade.html for
upgrading instructions

Tue Mar 5 13:00:00 2013 pgajdosAATTsuse.com
- build with new automake

* automake-1.13.patch

Mon Feb 25 13:00:00 2013 mlinAATTsuse.com
- Install netatalk.service accordingly (/usr/lib/systemd for 12.3
and up or /lib/systemd for older versions).

* Added netatalk-suse-servicedir-update.diff

Tue Oct 2 14:00:00 2012 pgajdosAATTsuse.com
- update to 2.2.4:
FIX: Missing UAM links
FIX: Lockup in AFP logout on Fedora 17
FIX: Reset signal handlers and alarm timer after successfull PAM
authentication. Fixes a problem with AFP disconnects caused
by pam_smbpass.so messing with our handlers and timer.
FIX: afpd: Fix a possible problem with sendfile on Solaris derived
platforms
NEW: afpd: support for mdnsresponder
NEW: afpd: new LDAP config option ldap_uuid_string
UPD: based on Unicode 6.1.0
UPD: experimental systemd service files: always run both afpd
and cnid_metad
UPD: afpd: Ensure our umask is not altered by eg pam_umask
UPD: afpd: Use GSS_C_NO_NAME as server principal when Kerberos
options -fqdn and -krb5service are not set, from Jamie Gilbertson
UPD: afpd: Changed behaviour for TimeMachine volumes in case there’s a
problem talking to the CNID daemons. Previously the volume was
flagged read-only and an AFP message was sent to the client.
As this might result in TimeMachine assuming the backup sparse
bundle is damaged, we now just switch the CNID database
to an in-memory tdb without the additional stuff.
FIX: afpd: sendfile() on FreeBSD was broken, courtesy of Denis Ahrens
FIX: afpd: Dont use searchdb when doing partial name search
FIX: afpd: Fix a possible bug handling disconnected sessions,
NetAFP Bug ID #16
FIX: afpd: Close IPC fds in afpd session child inherited from the afpd
master process
FIX: dbd: Don’t remove BerkeleyDB if it’s still in use by eg cnid_dbd,
fixes bug introduced in 2.2.2
FIX: debian initscript: start avahi-daemon (if available) before atalkd
FIX: Zeroconf could not advertise non-ASCII time machine volume name

Mon Feb 6 13:00:00 2012 pgajdosAATTsuse.com
- update to 2.2.2:

* AFP 3.3 support (necessary for TimeMachine and Lion)

* Robust network disconnect/reconnect, especially important for Time Machine

* Support for fast AFP searches (CNID backend \"dbd\" only)

* POSIX draft 1e ACL support

* Complete Netatalk volume compatible ad file utility suite

* Dynamic filesystem cache

* Builtin Zeroconf registration of the AFP server and TimeMachine volumes

* Support for ACLs without a common Directory Service between server and client

* Important: The enhancements for fast AFP searches are only implemented
for the CNID backend \"dbd\" and require changes to the underlying CNID
database, ie an additional index. This breaks drop-in compatibility
between the CNID backends \"cdb\" and \"dbd\". Once \"dbd\" has upgraded
a CNID database of a volume, \"cdb\" will reject to open it.

* removed upstreamed build.patch

Mon Jan 30 13:00:00 2012 pgajdosAATTsuse.com
- require krb5-devel for build

Thu Jan 12 13:00:00 2012 pgajdosAATTsuse.com
- Shanti Kulkarni: compile netatalk with LDAP, ACL, Kerberos V,
and quota options [bnc#740091]

Sun Nov 20 13:00:00 2011 cooloAATTsuse.com
- add libtool as buildrequire to avoid implicit dependency

Wed Sep 7 14:00:00 2011 pgajdosAATTsuse.com
- updated to 2.2.1:

* NEW: afpd: disable continous service feature by default, new option
- keepsessions to enable it

* NEW: configure option \"--enable-redhat-systemd\" for Fedora15 and later.
\"--enable-redhat\" is renamed \"--enable-redhat-sysv\".

* UPD: afpd: Enhance ACL support detection for volumes: enable them per
volume if 1) ACL support compiled in, 2) the volume supports ACLs, 3)
the new volume option \"noacls\" is not set for the volume. The previous
behaviour was to enable ACL support for a volume if 1) it was compiled
in and 2) the volume supported ACLs. There was no way to disable ACLs
for a volume.

* UPD: afpd: add a configurable hold time option to FCE file modification
event generation, default is 60 s, new option \"fceholdfmod\" to change it

* UPD: afpd: add support for new NetBSD quota subsystem, Bug ID 3249879

* many bug fixes, see NEWS or
http://netatalk.sourceforge.net/2.2/ReleaseNotes2.2.1.html

Mon Aug 29 14:00:00 2011 pgajdosAATTsuse.com
- don\'t use /var/lock/subsys in initscript [bnc#714662]

Tue Aug 16 14:00:00 2011 stefan dot muenkner at mx dot uni-saarland dot de and pgajdosAATTnovell.com
- updated to 2.2.0:

* NEW: afpd: new volume option \"nonetids\"

* NEW: afpd: ACL access check caching

* NEW: afpd: FCE event notifications

* NEW: afpd: new option \"-mimicmodel\" for specifying Bonjour model registration

* UPD: Support for Berkeley DB 5.1

* UPD: case-conversion is based on Unicode 6.0.0

* UPD: cnid_metad: allow up to 4096 volumes

* UPD: afpd: only forward SIGTERM and SIGUSR1 from parent to childs

* UPD: afpd: use internal function instead of popening du -sh in order to
calculate the used size of a volume for option \"volsizelimit\"

* UPD: afpd: Add negative UUID caching, enhance local UUID handling

* FIX: afpd: configuration reload with SIGHUP

* FIX: afpd: crashes in the dircache

* FIX: afpd: Correct afp logout vs dsi eof behaviour

* FIX: afpd: new catsearch was broken

* FIX: afpd: only use volume UUIDs in master afpd

* FIX: dbd: Multiple fixes, reliable locking

* FIX: ad file suite: fix an error that resulted in CNID database inconsistencies

Thu May 26 14:00:00 2011 stefan dot muenkner at mx dot uni-saarland dot de and pgajdosAATTnovell.com
- updated to 2.1.5:

* removed upstreamed branch-netatalk-2-0.patch

* removed upstreamed papd.vars.patch

* removed unneeded papd.quote-vars.patch (pipexlate() function
commented out in etc/papd/lp.c by upstream, see comment there)

* removed unneeded papd.quote-vars.fixed.patch

* removed upstreamed papd.stderr.patch

* shortened 1.6-suse.patch

* removed probably unneeded pie-flags.patch

* removed probably unneeded la_libdir.patch

* removed upstreamed ad_hf_mode.patch

* removed upstreamed asingle-outofbounds.patch

Thu Mar 26 13:00:00 2009 crrodriguezAATTsuse.de
- remove static modules and \"la\" files