Changelog for libavahi-client3-0.8-150400.7.10.1.x86_64.rpm :

* Wed Nov 01 2023 alynx.zhouAATTsuse.com- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one byte long (bsc#1215947, CVE-2023-38470).
* Thu Oct 26 2023 xiaoguang.wangAATTsuse.com- Add avahi-CVE-2023-38473.patch: derive alternative host name from its unescaped version (bsc#1216419 CVE-2023-38473).
* Tue Apr 11 2023 mgorseAATTsuse.com- Add avahi-CVE-2023-1981.patch: emit error if requested service is not found (boo#1210328 CVE-2023-1981).
* Wed Feb 23 2022 dmuellerAATTsuse.com- switch to use _multibuild- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete- use https urls
* Thu Feb 17 2022 dmuellerAATTsuse.com- remove avahi-mono
* subspecfiles, they are no longer required by anything. this makes the spec file slightly more readable.
* Wed Feb 16 2022 mgorseAATTsuse.com- Replace avahi-0.6.31-systemd-order.patch with avahi-add-resolv-conf-to-inotify.patch: re-read configuration when resolv.conf changes, per discussion on the bug (boo#1194561).
* Fri Jan 21 2022 gmbr3AATTopensuse.org- Change to systemd-sysusers
* Mon Jan 17 2022 mgorseAATTsuse.com- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561). This can probably go away if/when gh#lathiat/avahi#118 is fixed.- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should no longer need this given the above patch.- Add several patches from git: 0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch 0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch 0006-man-add-missing-bshell.1-symlink.patch 0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch 0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch- Build manpages with xmltoman. Currently needed for bssh.- Minor spec file clean-up.- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).
* Wed Jan 12 2022 mgorseAATTsuse.com- Move sftp-ssh and ssh services to the doc directory. They allow a host\'s up/down status to be easily discovered and should not be enabled by default (boo#1179060).
* Mon Oct 25 2021 yfjiangAATTsuse.com- Change %python38_version_nodots to %suse_version which is compatible with Leap and SLE. See also: https://github.com/openSUSE/python-rpm-macros/issues/107
* Tue Oct 19 2021 dimstarAATTopensuse.org- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd (boo#1191750).
* Thu Sep 16 2021 sbrabecAATTsuse.com- Remove obsolete translation-update-upstream support (jsc#SLE-21105).
* Mon Aug 02 2021 yfjiangAATTsuse.com- Obsolete the same version of mDNSResponder-lib and mDNSResponder in baselib.conf and spec.
* Fri Jul 02 2021 mgorseAATTsuse.com- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes (boo#1184846 CVE-2021-3502).
* Wed Jun 02 2021 christopheAATTkrop.fr- Fix libavahi-devel requirements. The devel package installs libavahi-libevent.so but didn\'t require the library it\'s pointing to.
* Tue Apr 20 2021 mgorseAATTsuse.com- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling HUP event in client_work (boo#1184521 CVE-2021-3468). https://github.com/lathiat/avahi/pull/330
* Tue Feb 16 2021 mgorseAATTsuse.com- Update avahi-daemon-check-dns.sh from Debian. Our previous version relied on ifconfig, route, and init.d.- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges when invoking avahi-daemon-check-dns.sh (boo#1180827 CVE-2021-26720).- Add sudo to requires: used to drop privileges.
* Wed Feb 10 2021 jengelhAATTinai.de- Drop configure --libexecdir variable as it does not appear to be used by the source archive.
* Sun Jan 31 2021 codeAATTbnavigator.de- Build python bindings subpackages for all flavors
* use the python-rpm-macros singlespec system: The macro %python_subpackages together with %python_subpackage_only creates the pythonXY-avahi bindings package for all python flavors on Tumbleweed (currently python36, python38)
* Put the avahi-bookmarks command under updates-alternatives control to avoid package conflicts between flavors
* outside of build_core, the build continues to use but not install everything in the primary python3 flavor.
* For distros without multiple python3 flavors and/or older python-rpm-macros, the status quo is unchanged.
* Wed Sep 02 2020 alarrosaAATTsuse.com- Use sover variables all over the spec file
* Mon Aug 31 2020 alarrosaAATTsuse.com- Update to version 0.8: + The Avahi 0.8 release brings a number of new features and bug fix changes including a backward-compatible addition to the D-Bus API and the avahi-core API. + The existing API is still fully supported however clients using the new API will not work with older Avahi releases. The avahi-client library is not affected. See the \"API Changes\" section for further details. + New Features: - New options for filtering reflected queries between networks (reflect-filter) - New mainloop integration for Qt5 and libevent - docs/THREADS: Information for multi-threaded avahi-client apps - Listen on loopback interfaces by default, allowing local-only services to be consumed by the local machine - New D-Bus V2 API and additions to the avahi-core API for splitting \"New\" calls into \"Prepare\" and \"Start\". See \"API Changes\" for more details. + Notable Changes: - avahi-autoipd: Initial IP selection based on MAC previously ignored first octet - this will cause all hosts to select a different link-local IP than previous versions based on the same MAC address - avahi-daemon: Delay sending results on an object for 10ms in an attempt to give clients enough time to subscribe to signals from the new object after receiving it\'s path in response so the New call. See \"API Changes\" for more info + Bug Fixes: - avahi-python: Various Python 3 enhancements including encoding unicode strings as UTF-8 - avahi-common: avahi_string_list_to_string will now escape embedded quotes, backslashes and control characters. - avahi-daemon: Fix a crash when txt records have an empty value in .xml service files - avahi-daemon: reflector: do not incorrectly cache responses on outgoing interfaces. Previously we would incorrectly cache responses reflected from one interface on the outgoing interface. These responses were later sent to clients on that network even if the original client had disappeared and could cause those clients to have a hostname conflict with themselves on restart. We no longer incorrectly cache such traffic. + Security Fixes: - Drop legacy unicast queries from address not on local link which can lead to UDP traffic amplification attacks (CVE-2017-6519) + API Changes: The avahi-core API and D-Bus API have implemented a new API where a call to the \"New\" method can now be split into a \"Prepare\" and then \"Start\" method for some objects. The previous \"New\" API is still fully supported and there is no intention to deprecate it. This change affects the the following objects: AsyncAddressResolver, AsyncHostNameResolver, AsyncServiceResolver, DomainBrowser, RecordBrowser, ServiceBrowser, ServiceTypeBrowser This is because the D-Bus implementation in some languages would only bind to signals of an object after it was created and had received the new object\'s path. This led to such languages missing the initial results sent between the time the object was created and it had setup a filter to receive it\'s signals. This primarily occured in languages that create dynamic bindings for D-Bus objects using introspection such as Python. The avahi-client C api was not affected as it globally binds to all avahi signals without specifying individual object paths and still makes use of the V1 API. The v2 Prepare/Start API is available under the new org.freedesktop.Avahi.Server2 D-Bus interface and also has corresponding avahi_s_
* calls for users of the embedded avahi-core library. The old org.freedesktop.Avahi.Server interface is still supported and there is no intention to remove this API. Additionally this problem has also been solved for old clients by adding a very small 10ms delay before we start sending results to give the client time to bind to the signals which should silently fix the issue in most cases without introducing a noticable or impactful delay. Clients implementing the new org.freedesktop.Avahi.Server2 D-Bus interface will not work with older Avahi daemons. It is suggested that clients may wish to either check for and fallback to the older API version, or continue to use the OLD API and rely on the 10ms timer to resolve the issue. - This release is backwards compatible with Avahi 0.6.x and 0.7.- Add qt5 bindings in a separate package- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize can be used:
* add-IT_PROG_INTLTOOL.patch- Add file missing from the tarball:
* build-db- Rebase patch:
* avahi-desktop.patch- Drop patches already included by upstream:
* avahi-0.7-dbm.patch
* avahi-0.7-encode-strings-as-utf8.patch
* avahi-0.7-python3-bookmarks.patch
* CVE-2018-1000845.patch
* Thu Aug 06 2020 jengelhAATTinai.de- Skip the xargs dance and just use find directly.
* Fri Jul 31 2020 mgorseAATTsuse.com- Pass -print0 to find, to match -r0 being passed to xargs.
* Thu Jul 30 2020 dimstarAATTopensuse.org- Call xargs -r0 instead of just xargs -r: guard against file names with whitespaces.
* Tue Jul 21 2020 mgorseAATTsuse.com- When changing ownership of /var/lib/autoipd, only change ownership of files owned by avahi, to mitigate against possible exploits (bsc#1154063).
* Wed Apr 08 2020 tchvatalAATTsuse.com- Do not pull in dbus-1-python which is py2 variant but properly pull in the python3 package
* Sun Feb 02 2020 kukukAATTsuse.com- Require shadow instead of pwdutils: pwdutils has been absorbed and replaced by shadow long ago.
* Sat Jan 25 2020 dimstarAATTopensuse.org- No longer recommend -lang: supplements are in use.
* Wed Jan 08 2020 mliskaAATTsuse.cz- Use %make_build.
* Thu Aug 22 2019 jengelhAATTinai.de- Trim descriptions of secondary packages.
* Mon Aug 12 2019 bjorn.lieAATTgmail.com- Drop gtk2-devel and python-gtk-devel BuildRequires: No longer build gtk2 support. Following this, pass --disable-gtk to configure. Drop sub-package libavahi-ui0, no longer built.- Drop long disabled sub-packages libavahi-qt4-1 and libavahi-qt4-devel.
* Fri Jul 05 2019 matthias.gerstnerAATTsuse.com- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html
* Wed Apr 17 2019 dimstarAATTopensuse.org- Drop -Qt4 variant: Qt4 is EOL.
* Sun Mar 17 2019 jengelhAATTinai.de- Remove %if..%endif guards that do not affect the build result.- Write \"D-BUS\" per its own name, \"D-Bus\".- Replace FIXME PreReq with proper requires as needed.- Update boilerplate summaries, and remove em dash grammar.
* Fri Jan 04 2019 mgorseAATTsuse.com- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use what is upstream (boo#1110668).- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as UTF-8 (boo#1110668).- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3 compatible (boo#1110668).- Add CVE-2018-1000845.patch: drop legacy unicast queries from address not on local link (boo#1120281 CVE-2018-1000845).- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.
* Thu Mar 22 2018 tchvatalAATTsuse.com- Drop the qt3 parts
* Wed Mar 14 2018 mgorseAATTsuse.com- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).- Build python bindings against python 3, rather than python 2;- Python-avahi is now python3-avahi, and python-avahi-gtk is now python3-avahi-gtk- Obsolete the python 2 packages- Replace python_sitelib with python3_sitelib in %files, and add __pycache__.
* Sat Mar 10 2018 jengelhAATTinai.de- Rename %
*soname to %
*sover to better reflect its use.
* Tue Mar 06 2018 dimstarAATTopensuse.org- Modernize spec file by calling spec-cleaner
* Mon Feb 19 2018 dimstarAATTopensuse.org- Use SPDX3.0 license tags and package COPYING as %license.
* Wed Nov 29 2017 zaitorAATTopensuse.org- Update to version 0.7: + The Avahi 0.7 release brings two new features, binary TXT records in XML service files and the ability to start the gobject client in a custom context. + New Features: - Add support for binary values in TXT records in XML service files by specifying value-format=\"text|binary-hex|binary-base64\". If not specified, defaults to the normal value of \"text\" (thus backwards compatible). - avahi-gobject: Allow starting the client in a custom GMainContext by passing context to ga_client_start_in_context instead of ga_client_start (avahi-gobject minor version has been incremented). + Notable Changes: - avahi-daemon: Remove all default rlimits from avahi-daemon.conf, as two main problems happened with firstly rlimit-nproc causing avahi to fail when started in a container without user namespaces and secondly because memory rlimits were causing avahi to crash in some cases. Leave it up to the init system to impose any modified limits instead. It is recommend to ship this change in distribution default config files. - avahi-common: Fix watch cleanup issue in watch_free - avahi-discover (python): Updated for Python3 & GTK3 - avahi-autoipd: . Clear previously set address before binding a new one. . Fix dhclient hooks to check for avahi-autoipd before running. - build: Move default rundir from /var/run to /run as per modern system setups. + Other Changes: - build: . Fix the printed value of \"Building libavahi-client\" in ./configure. . autogen.sh improved to work when called from another directory. . Fix warnings when compiling against musl libc. - avahi-compat-libdns_sd: Fix incorrect URL in warnings. - service-type-database: Add new service Types: _ipps._tcp, _xpra._tcp. - avahi-dnsconfd: Update manpage with the correct action script name. - avahi-gobject: . Use the correct shared library name in AvahiCore-0.6.gir . Fix build failing under some locales. - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon. - Update gentoo init scripts for newer openrc version. + Updated translations.- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch, avahi-move-everything-to-run.patch and avahi-outdated-URL.patch: Fixed upstream.- Drop systemd_requires macro: on a machine managed by systemd, we don\'t have to require it. If the machine/container is not managed by systemd, we don\'t want to require it.- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Thu Jun 01 2017 jengelhAATTinai.de- Do not suppress errors from avahi-autoipd user creation, but do suppress getent output.- Replace $RPM_
* shell vars by macros.
* Tue May 30 2017 dimstarAATTopensuse.org- Modify user generation (boo#1010384): + Use getent to check for existing users/groups, only creating them if not found. + Do not hide output of groupadd/useradd. + Do not mask failures: if a user can\'t be added, we have a problem.
* Wed Feb 15 2017 dimstarAATTopensuse.org- Drop %insserv_cleanup scriptlets: it\'s been a while that avahi did not install any sysV init scripts anymore.- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros in package names by now.- Drop conditions to only handle systemd services on openSUSE > 12.1; it\'s been long that we did not ship the sysv scripts anymore and openSUSE 12.1 is long EOL.
* Mon Jul 11 2016 mgorseAATTsuse.com- Replace avahi-0.6.31-systemd-order.patch with avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn on missing resolv.conf if the options that use it are enabled. https://github.com/lathiat/avahi/pull/63
* Thu Jun 23 2016 dimstarAATTopensuse.org- Update to version 0.6.32: + Don\'t log warnings about invalid packets, commonly triggered by Windows 10 systems. + Fix issue with bad packet size estimation, causing probes to continuously be sent when hosting large numbers of services. + Fix build on Solaris/SmartOS (filio.h issue). + Fix build on FreeBSD (PCAP_D_IN issue). + Fix debug output with libdaemon >= 0.14. + avahi_server_set_browse_domains now correctly uses the provided list, instead of re-using the list from the configuration file. + Set nl_pid to 0, this will automatically assign the value and prevent conflicts per netlink(7). (Bug #334). + Check for netlink pid=0 (kernel) instead of uid=0, which works correctly with network & user namespaces. + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355). + Don\'t fail the build on deprecated GTK/GLIB usage. + Gracefully fail if SO_REUSEPORT is not available. + Minor Python 3 update for the python ServiceTypeDatabase test usage of print, should be backwards compatible. + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).- Drop upstream fixed patches: + avahi-unicastdomains.patch + avahi-gtk_box_new.patch + avahi-fix-mkdir.diff + avahi-enable-ipv6.patch + avahi-reserve-space-for-record-data-when-size-e.patch- Rebase avahi-0.6.31-invalid-packet.patch.
* Thu Jun 23 2016 mgorseAATTsuse.com- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).
* Fri May 20 2016 alarrosaAATTsuse.com- Update to GNOME 3.20.2 (Fate#318572)- Added License field in spec file.
* Thu Apr 14 2016 mgorseAATTsuse.com- Update to GNOME 3.20 Fate#318572
* Mon Jan 25 2016 dimstarAATTopensuse.org- No longer install sysv services: the systemd services have been installed for a long time already and are masking the sysv scripts; those scripts existance only add confusion (boo#959908).
* Mon Oct 19 2015 zaitorAATTopensuse.org- Temp disable 2 old Conflicts that are breaking staging. These can back in once there is a new release of avahi.
* Thu Oct 08 2015 mgorseAATTsuse.com- Add avahi-0.6.31-invalid-packet.patch: do not spam logs for invalid packets (boo#947140 bsc#948277).
* Wed Aug 19 2015 dimstarAATTopensuse.org- Sync up the multiple .spec files.
* Thu Jan 22 2015 dimstarAATTopensuse.org- Add avahi-outdated-URL.patch: Do not redirect users to , which no longer exists, but bring them to the more generic blog entry http://0pointer.de/blog/projects/avahi-compat.html (boo#914298).