Changelog for
libatalk0-3.1.18-lp156.1.4.x86_64.rpm :
* Thu Oct 12 2023 pgajdosAATTsuse.com- version update to 3.1.18 [bsc#1197576] Changes in 3.1.18 =================
* FIX: CVE-2022-22995: Harden create_appledesktop_folder(), GitHub #480
* FIX: Correct syntax for libwrap check in tcp-wrappers.m4, GitHub #500
* FIX: Correct syntax for libiconv check in iconv.m4, GitHub #491
* FIX: quota is not supported on macOS, GitHub #492
* FIX: dtrace is not supported on FreeBSD aarch64, GitHub #498 Changes in 3.1.17 =================
* FIX: CVE-2023-42464: Validate data type in dalloc_value_for_key(), GitHub #486
* FIX: Declare a variable before using it in a loop, which was throwing off the default compiler on RHEL7, GitHub #481
* UPD: Distribute tarballs with xz compression by default, not gzip, GitHub #478
* UPD: Add AUTHOR sections to all man pages with a reference to CONTRIBUTORS, and standardize headers and footers, GitHub #462 Changes in 3.1.16 =================
* FIX: libatalk: Fix CVE-2022-23121, CVE-2022-23123 regression - Added guard check before access ad_entry(), GitHub#357 - Allow zero length entry, for AppleDouble specification, GitHub#368 - Remove special handling for COMMENT entries, GitHub#236 - The assertion for invalid entires is still enabled, so please report any future \"Invalid metadata EA\" errors!
* FIX: build system: Fix autoconf warnings and modernize bootstrap and configure.ac, GitHub#331
* FIX: build system: Correct syntax in libevent search macro, summary macro and netatalk executable makefile, GitHub#342
* FIX: build system: Fix native libiconv detection on macOS, GitHub#343
* FIX: build system: Use non-interactive PAM session when available, GitHub#361
* FIX: build system: Fix detection of Berkeley DB installed in multiarch location, GitHub#380
* FIX: build system: Fix support for cross-compilation with mysql_config and dtrace, GitHub#384
* FIX: build system: Support building quota against libtirpc, GitHub#385
* FIX: build system: Fix variable substitution in configure summary, GitHub#443
* UPD: build system: Remove ABI checks and the --enable-developer option, GitHub#262
* FIX: initscript: Improvements to Debian SysV init script - Source init-functions, GitHub#386 - Add a Description and Short-Description, GitHub#428
* FIX: docs: Clarify localstate dir configurability in manual, GitHub#401
* UPD: docs: Make BerkeleyDB 5.3.x the recommended version, GitHub#8
* FIX: docs: Update SourceForge URLs to fix CSS styles and download links
* FIX: docs: Remove obsoleted bug reporting sections, GitHub#455
* FIX: Sundry typo fixes in user visible strings and docs, GitHub#381, GitHub#382
* UPD: Rename asip-status.pl as asip-status to make naming implementation-agnostic, GitHub#379
* UPD: Remove redundant uid.c|h files in etc/afpd
* UPD: Don\'t build and distribute deprecated cnid2_create tool, GitHub#412
* UPD: Remove deprecated megatron code and man page, GitHub#456
* UPD: Remove deprecated uniconv code and man page, GitHub#457
* UPD: Improvements to the GitHub CI workflow Changes in 3.1.15 =================
* FIX: CVE-2022-43634
* FIX: CVE-2022-45188
* NEW: Support for macOS hosts, Intel and Apple silicon, GitHub#281
* FIX: configure.ac: update deprecated autoconf syntax
* UPD: configure.ac: Support linking with system shared libraries Introduces the --with-talloc option
* FIX: macros: largefile-check macro for largefile (clang 16)
* UPD: macros: Update pthread macro to the latest from gnu.org
* FIX: initscripts: Modernize Systemd service file.
* FIX: libatalk/conf: include sys/file.h for LOCK_EX
* FIX: libatalk: Change log level for realpath() error, SF bug#666
* FIX: libatalk: Change log level for real_name error, SF bug#596
* FIX: libatalk: The my_bool type is deprecated as of MySQL 8.0.1, GitHub#129
* UPD: libatalk: allow afpd to read read-protected afp.conf, SF bug#546
* UPD: libatalk: Make the \"valid users\" option work in the Homes section, SF bug#449
* UPD: libatalk: Check that FPDisconnectOldSession is successful, SF bug#634
* UPD: libatalk: Bring iniparser library codebase in line with current version 4.1
* FIX: afpd: Provide MNTTYPE_NFS on OmniOS to make quota work, GitHub#117
* FIX: afpd: Avoid triggering realpath() lookups with empty path, GitHub#277
* FIX: spotlight: Spotlight searches can cause afpd to segfault, GitHub#56
* UPD: spotlight: add support for tracker3, SF patch#147
* FIX: macusers: Fix output for long usernames
* FIX: macusers: account for usernames with non-word characters
* FIX: macusers: Support NetBSD
* FIX: Fix all function declarations without a prototype
* FIX: Fix C99 compliance issues
* FIX: Fix gcc10 compiler warnings
* UPD: Remove acsiidocs sources and release notes script
* FIX: manpages: afp.conf: Parameters are not quoted, SF bug#617
* FIX: manpages: afp.conf: Document $u in home name, GitHub#123
* FIX: manpages: afp.conf: Document the usage of guest user, GitHub#298
* FIX: Document how the mysql cnid backend is configured, GitHub#69
* FIX: Fix user-visible typos in log output and man pages.
* FIX: Fix spelling, syntax, and dead URLs in html manual.
* NEW: Create README.md
* NEW: Set up GitHub workflow and static analysis with Sonarcloud Changes in 3.1.14 =================
* FIX: fix build with libressl >= 2.7.0, GitHub#105
* NEW: Added Ignore Directories Feature
* UPD: Generate Unicode source code based on Unicode 14.0, GitHub#114
* FIX: Protect against removing AFP metadata xattr
* FIX: avoid setting adouble entries on symlinks
* FIX: add handling for cases where ad_entry() returns NULL, GitHub#175
* FIX: Fix setting of LD_LIBRARY_FLAGS ($shlibpath_var).
* FIX: afpstats: Fedora migrating away from IO::Socket::INET6, GitHub#130
* FIX: afpd: check return values from setXXid() functions, GitHub#115
* FIX: afpd: drop groups in become_user_permanently(), GitHub#126
* FIX: Fix use after free in get_tm_used()
* FIX: Fix sign extension problem in bsd_attr_list()
* FIX: Fix garbage read in bsd_attr_list
* FIX: make afpstats python 3 compatible
* UPD: docs: manual: Remove wrong TCP-over-TCP info; minor copy editing
* FIX: configure.ac: fix macro ordering for CentOS 6
* FIX: configure.ac: fix typo
* FIX: configure.ac: remove some trailing whitespace
* FIX: configure.ac: fix deprecated macro invocation
* FIX: configure.ac: replace obsolete macro
* FIX: libatalk/dsi/Makefile.am: fix deprecation warning
* FIX: Store AutoMake helper script in build-aux/
* FIX: configure.ac: define a dir for macros
* FIX: configure.ac: AM_CONFIG_HEADER is deprecated
* FIX: autotools: Fix another deprecation warning
* FIX: libgcrypt typo in configuration error message
* UPD: Various CI improvements
* FIX: libatalk/conf: re-generation of afp_voluuid.conf
* UPD: libatalk/conf: code cleanup and add locking to get_vol_uuid()
* UPD: add documentation for the lv_flags_t
* FIX: No need to check for attropen on Solaris, GitHub#44 Changes in 3.1.13 =================
* FIX: CVE-2021-31439
* FIX: CVE-2022-23121
* FIX: CVE-2022-23123
* FIX: CVE-2022-23122
* FIX: CVE-2022-23125
* FIX: CVE-2022-23124
* FIX: CVE-2022-0194
* FIX: afpd: make a variable declaration a definition
* UPD: Remove bundled libevent
* Tue Mar 19 2019 Luke Jones
- Update to version 3.1.12 + FIX: dhx uams: build with LibreSSL + FIX: various spelling errors + FIX: corrects lack of bounds checking (CVE-2018-1160)
* Thu Dec 07 2017 dimstarAATTopensuse.org- Escape the usage of %{VERSION} when calling out to rpm. RPM 4.14 has %{VERSION} defined as \'the main packages version\'.
* Tue May 30 2017 malcolmlewisAATTopensuse.org- Update to version 3.1.11: + NEW: Global option \"zeroconf name\", FR#99. + NEW: Show Zeroconf support by \"netatalk -V\", FR#100. + FIX: Log message: name of function doese not match, GH#78. + FIX: dsi_stream_read: len:0, unexpected EOF, GH#82. + UPD: Volume capacity reporting to match Samba behavior, GH#83. + UPD: dhx uams: OpenSSL 1.1 support, GH#87.- Drop Sysvinit conditionals, rpmlintrc and build for systemd only.
* Fri Feb 03 2017 jengelhAATTinai.de- Trim filler words from description. Remove unused --with-pic, this is implicit for shared libs.
* Thu Sep 15 2016 malcolmlewisAATTopensuse.org- Update to version 3.1.10: + FIX: Cannot build when ldap is not defined, bug #630. + FIX: SIGHUP can cause core dump when mdns is enabled, bug #72. + FIX: dsi_stream_read: len:0, unexpected EOF, bug #633.- Changes from version 3.1.9: + FIX: afpd: fix \"admin group\" option. + NEW: afpd: new options \"force user\" and \"force group\". + FIX: Listening on IPv6 wildcard address may fail if IPv6 is disabled, bug #606. + NEW: LibreSSL support, FR #98. + FIX: cannot build when acl is not defined, bug #574. + UPD: Use \"tracker daemon\" command instead of \"tracker-control\" command if Gnome Tracker is the recent version. + NEW: configure options \"--enable-rpath\" and \"--disable-rpath\" which can be used to force setting of RPATH or disable it. + NEW: configure option \"--with-tracker-install-prefix\" allows setting an alternate install prefix for tracker when cross-compiling. + UPD: asip-status.pl: IPv6 support. + UPD: asip-status.pl: show GSS-UAM SPNEGO blob. + FIX: afpd: don’t use network IDs without LDAP, bug #621. + FIX: afpd: reading from file may fail, bug #619. + FIX: ad: ad cp may crash, bug #622. + UPD: Update Unicode support to version 9.0.0.- Rebase netatalk-wrong-error-message.patch.- Rebase netatalk-libc-xattr.patch.- Update soname version to 18.
* Tue Dec 29 2015 malcolmlewisAATTopensuse.org- Update to version 3.1.8: + FIX: CNID/MySQL: Quote UUID table names, bug #585. + FIX: Crash in cnid_metad, bug #593. + UPD: Update Unicode support to version 8.0.0. + FIX: larger server side copyfile buffer for improved IO performance, bug #599. + NEW: afpd: new option \"ea = samba\". Use Samba vfs_streams_xattr compatible xattrs which means adding a 0 byte at the end of xattrs. + FIX: Listen on IPv6 wildcard address by default, bug #602. + FIX: FCE protocol version 1 packets, bug #603. + UPD: Update list of BerkeleyDB versions searched at configure time.- Rebase fce-afpd-fix-fce_event_names-array-overflow.patch.- Update soname version to 17.- Clean up more duplicate files with fdupes.- Add fno-strict-aliasing cflag option as per rpmlint compiler warning in post build checks.
* Tue Jan 20 2015 mpluskalAATTsuse.com- Don\'t install init script on systems with systemd- Spec file cleanup with spec-cleaner- Fix systemd specific conditions to match packaging guidelines
* Sun Jan 11 2015 jeffmAATTsuse.com- fce: afpd: fix fce_event_names array overflow
* Added: fce-afpd-fix-fce_event_names-array-overflow.patch
* Wed Jan 07 2015 jeffmAATTsuse.com- update to 3.1.7:
* UPD: Spotlight: enhance behaviour for long running queries, client will now show \"progress wheel\" while waiting for first results.
* FIX: netatalk: fix a crash on Solaris when registering with mDNS
* FIX: netatalk: SIGHUP would kill the process instead of being resent to the other Netatalk processes, bug #579
* FIX: afpd: Solaris locking problem, bug #559
* FIX: Handling of malformed UTF8 strings, bug #524
* FIX: afpd: umask handling, bug #576
* FIX: Spotlight: Limiting searches to subfolders, bug #581
* FIX: afpd: reloading logging config may result in privilege escalation in afpd processes
* FIX: afpd: ACL related error messages, now logged with loglevel debug instead of error
* FIX: cnid_metad: fix tsockfd_create() return value on error
* FIX: CNID/MySQL: volume table name generation, bug #566. - via 3.0.6:
* FIX: charset conversion failed when copying from Mac OS 9. Bug #523.
* UPD: Don’t force S_ISGID for directories on FreeBSD. Bug #525.
* NEW: Add support for ZFS ACLs on FreeBSD with libsunacl. From FR#83.
* FIX: Active Directory LDAP queries for ACL support with new options \"ldap user filter\" and \"ldap group filter\". Bug #526.
* NEW: Option \"vol dbnest\", when set to true, the CNID database for a volume is stored in the volume root of a share in a directory .AppleDB like in Netatalk 2. Defaults to false. From FR#84.
* FIX: Small fix in the DSI tickle handling. Bug #528.
* UPD: Enhance handling of connection attempts when hitting the connection limit. Bug #529.
* FIX: Saving from Word to a folder that is a symlink to a folder on another filesystem results in a crash of the afpd process and the save to fail. This happens only if the option \"follow symlinks\" is enabled. Bug #532.
* FIX: Disable Kerberos UAM if AFP service principal name can’t be evaluated. Fixes bug #531.
* FIX: Fix handling of large number of volumes. Bug #527.
* NEW: Configure option --with-tbd which can be used to disable the use of the bundled tdb and use a system installed version.- Added build support for spotlight tracker but it is disabled due to dbus security policy.
* Tue Nov 18 2014 pgajdosAATTsuse.com- update to 3.1.6:
* FIX: Spotlight: fix for long running queries
* UPD: afpd: distribute SIGHUP from parent afpd to children and force reload shares
* FIX: netatalk: refresh Zeroconf registration when receiving SIGHUP
* NEW: configure option \"--with-init-style=debian-systemd\" for Debian 8 jessieand later.
* FIX: afpd: Hangs in Netatalk which causes it to stop responding to connections, bug #572.
* NEW: afpd: new option \"force xattr with sticky bit = yes|no\" (default: no), FR #94
* UPD: afpd: FCE version 2 with new event types and new config options \"fce ignore names\" and \"fce notify script\"
* UPD: afpd: check for modified included config file, FR #95.
* UPD: libatalk: logger: remove flood protection and allocate messages
* UPD: Spotlight: use async Tracker SPARQL API
* NEW: afpd: new option \"case sensitive = yes|no\" (default: yes) In spite of being case sensitive as a matter of fact, netatalk 3.1.3 and earlier did not notify kCaseSensitive flag to the client. Now, it is notified correctly by default, FR #62.
* UPD: Spotlight: more SPARQL query optimisations
* UPD: Spotlight: new options \"sparql results limit\", \"spotlight attributes\" and \"spotlight expr\"
* FIX: afpd: Unarchiving certain ZIP archives fails, bug #569
* UPD: Update Unicode support to version 7.0.0
* FIX: Memory overflow caused by \'basedir regex\', bug #567
* NEW: afpd: delete empty resource forks, from FR #92
* FIX: afpd: fix a crash when accessing ._ AppleDouble files created by OS X via SMB, bug #564
* FIX: afpd and dbd: Converting from AppleDouble v2 to ea may corrupt the resource fork. In some circumstances an offset calculation is wrong resulting in corrupt resource forks after the conversion. Bug #568.
* FIX: ad: fix for bug #563 broke ad file utilities, bug #570.
* NEW: afpd: new advanced option controlling permissions and ACLs, from FR #93- removed upstreamed netatalk-return-code.patch