[ubuntu/plucky-proposed] avahi 0.8-16ubuntu1 (Accepted)

[Mateus Rodrigues de Morais]

avahi (0.8-16ubuntu1) plucky; urgency=medium

  * Merge with Debian unstable (LP: #2098794). Remaining changes:
    - avahi-daemon-chroot-fix-bogus-assignments-in-assertions.patch,
      avahi-client-fix-resource-leak.patch: Issues discovered by static
      analysis (Upstream pull request #202)
    - SECURITY UPDATE: Reachable assertions exist in domain functions in
      avahi-common
      + debian/patches/CVE-2023-38470-2.patch: bail out when escaped
        labels can't fit into ret
      + CVE-2023-38470
    - SECURITY UPDATE: Reachable assertions exist in server functions in
      avahi-core
      + debian/patches/CVE-2023-38471-2.patch: core: return errors from
        avahi_server_set_host_name properly
      + CVE-2023-38471
  * Dropped changes, no longer needed:
    - Disable lto, see https://bugzilla.redhat.com/show_bug.cgi?id=1907727
      [Fixed in 0.8-16]

avahi (0.8-16) unstable; urgency=medium

  * Stop using embedded copy of sd-daemon.{c,h} and use libsystemd instead.
    Fixes build failures with LTO enabled.
    This adds a Build-Depends on libsystemd-dev on linux-any.
    Patch cherry-picked from upstream Git.

avahi (0.8-15) unstable; urgency=medium

  * Fix "Invalid service type" failures using an upstream patch.
    The initial patch to address 'avahi-browse -a breaks with "Invalid service
    type" if a device sends a malformed service' that was applied to Debian
    was not accepted upstream but solved differently. Use that upstream patch
    instead.
  * Remove inactive Maintainers from Uploaders.
    Thanks Loic and Sebastian!
  * Add Origin metadata according to DEP-3 for patches that have been cherry
    picked

Date: Tue, 18 Feb 2025 16:22:58 -0300
Changed-By: Mateus Rodrigues de Morais <mateus.morais at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Simon Quigley <tsimonq2 at ubuntu.com>
https://launchpad.net/ubuntu/+source/avahi/0.8-16ubuntu1
-------------- next part --------------
Format: 1.8
Date: Tue, 18 Feb 2025 16:22:58 -0300
Source: avahi
Built-For-Profiles: noudeb
Architecture: source
Version: 0.8-16ubuntu1
Distribution: plucky
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Mateus Rodrigues de Morais <mateus.morais at canonical.com>
Launchpad-Bugs-Fixed: 2098794
Changes:
 avahi (0.8-16ubuntu1) plucky; urgency=medium
 .
   * Merge with Debian unstable (LP: #2098794). Remaining changes:
     - avahi-daemon-chroot-fix-bogus-assignments-in-assertions.patch,
       avahi-client-fix-resource-leak.patch: Issues discovered by static
       analysis (Upstream pull request #202)
     - SECURITY UPDATE: Reachable assertions exist in domain functions in
       avahi-common
       + debian/patches/CVE-2023-38470-2.patch: bail out when escaped
         labels can't fit into ret
       + CVE-2023-38470
     - SECURITY UPDATE: Reachable assertions exist in server functions in
       avahi-core
       + debian/patches/CVE-2023-38471-2.patch: core: return errors from
         avahi_server_set_host_name properly
       + CVE-2023-38471
   * Dropped changes, no longer needed:
     - Disable lto, see https://bugzilla.redhat.com/show_bug.cgi?id=1907727
       [Fixed in 0.8-16]
 .
 avahi (0.8-16) unstable; urgency=medium
 .
   * Stop using embedded copy of sd-daemon.{c,h} and use libsystemd instead.
     Fixes build failures with LTO enabled.
     This adds a Build-Depends on libsystemd-dev on linux-any.
     Patch cherry-picked from upstream Git.
 .
 avahi (0.8-15) unstable; urgency=medium
 .
   * Fix "Invalid service type" failures using an upstream patch.
     The initial patch to address 'avahi-browse -a breaks with "Invalid service
     type" if a device sends a malformed service' that was applied to Debian
     was not accepted upstream but solved differently. Use that upstream patch
     instead.
   * Remove inactive Maintainers from Uploaders.
     Thanks Loic and Sebastian!
   * Add Origin metadata according to DEP-3 for patches that have been cherry
     picked
Checksums-Sha1:
 6a370b431fde06ede34d7ea9cc2a27979355cebf 4112 avahi_0.8-16ubuntu1.dsc
 0bd34c3beb60e9acfd0d6e0e8e5c03cead02408e 58708 avahi_0.8-16ubuntu1.debian.tar.xz
 bfc25367f93dd69b448a5f7bac4ec06738a77512 10483 avahi_0.8-16ubuntu1_source.buildinfo
Checksums-Sha256:
 35f4c9acd2059085208517cce5b556b6d2837b5a7406a2d793acafc0aa39c776 4112 avahi_0.8-16ubuntu1.dsc
 f4b666cfa27b18dd1e2e8af578e9a7b2b5b38b4e84d7f70a2ad2a4a669876b21 58708 avahi_0.8-16ubuntu1.debian.tar.xz
 01694578baeb89380e019fba22423411f820440fc0e989ff113d19b029cd1b9d 10483 avahi_0.8-16ubuntu1_source.buildinfo
Files:
 a574e271d62c5369c47d81e8f9bdf33c 4112 net optional avahi_0.8-16ubuntu1.dsc
 ea46d33137435abdb1ffa43dfef91aba 58708 net optional avahi_0.8-16ubuntu1.debian.tar.xz
 3c7cd2e7ab74931c9464344204bbc3cc 10483 net optional avahi_0.8-16ubuntu1_source.buildinfo
Original-Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers at lists.alioth.debian.org>