Commit Graph

314 Commits

Author SHA256 Message Date
Ana Guerrero
41ded81b73 Accepting request 1164965 from GNOME:Factory
- Tag hardening patches as PATCH-FEATURE-OPENSUSE (forwarded request 1164608 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/1164965
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=168
2024-04-05 18:24:29 +00:00
d30339ae14 Accepting request 1164608 from GNOME:Next
- Tag hardening patches as PATCH-FEATURE-OPENSUSE

OBS-URL: https://build.opensuse.org/request/show/1164608
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=241
2024-04-04 14:18:13 +00:00
Ana Guerrero
04a428e395 Accepting request 1162833 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1162833
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=167
2024-03-28 12:52:26 +00:00
13a4ac00ec Accepting request 1162477 from home:xiaoguang_wang:branches:GNOME:Factory
- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).

OBS-URL: https://build.opensuse.org/request/show/1162477
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=239
2024-03-27 08:21:54 +00:00
Ana Guerrero
a6d0d96831 Accepting request 1157987 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1157987
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=166
2024-03-15 19:27:54 +00:00
fa84520b7e Accepting request 1157219 from home:pgajdos
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]

OBS-URL: https://build.opensuse.org/request/show/1157219
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=237
2024-03-14 13:04:08 +00:00
Ana Guerrero
880bc21f3b Accepting request 1129990 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1129990
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=165
2023-12-01 20:24:42 +00:00
88caf96f1d Accepting request 1129882 from home:AZhou:branches:GNOME:Factory
- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).

OBS-URL: https://build.opensuse.org/request/show/1129882
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=235
2023-11-30 12:47:16 +00:00
Ana Guerrero
78ad279add Accepting request 1129177 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1129177
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=164
2023-11-28 21:18:26 +00:00
3e70ef716d Accepting request 1129150 from GNOME:Next
- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.

OBS-URL: https://build.opensuse.org/request/show/1129150
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=233
2023-11-27 15:46:20 +00:00
Ana Guerrero
bd4755c8c2 Accepting request 1128303 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1128303
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=163
2023-11-23 20:39:09 +00:00
3f69dc7d07 Accepting request 1128273 from GNOME:Next
- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE<=11/openSUSE<=12.3, which are no longer in
  scope for upgrades nowadays.

OBS-URL: https://build.opensuse.org/request/show/1128273
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=231
2023-11-23 10:29:12 +00:00
443b7d5494 Accepting request 1128131 from GNOME:Next
- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).

OBS-URL: https://build.opensuse.org/request/show/1128131
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=230
2023-11-22 20:59:12 +00:00
Ana Guerrero
109a3e67c4 Accepting request 1126603 from GNOME:Factory
- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730). (forwarded request 1125434 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/1126603
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=162
2023-11-16 19:26:53 +00:00
e7c2e0e859 Accepting request 1125434 from GNOME:Next
- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).

OBS-URL: https://build.opensuse.org/request/show/1125434
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=228
2023-11-15 12:55:57 +00:00
Ana Guerrero
6ed288bcb5 Accepting request 1121609 from GNOME:Factory
- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470). (forwarded request 1121540 from AZhou)

OBS-URL: https://build.opensuse.org/request/show/1121609
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=161
2023-11-02 19:20:20 +00:00
8163e6028c Accepting request 1121540 from home:AZhou:branches:GNOME:Factory
- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).

OBS-URL: https://build.opensuse.org/request/show/1121540
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=226
2023-11-01 13:03:12 +00:00
Ana Guerrero
2b204243f1 Accepting request 1120633 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1120633
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=160
2023-10-29 18:39:16 +00:00
72c1ffec8c Accepting request 1120497 from home:xiaoguang_wang:branches:GNOME:Factory
- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).

OBS-URL: https://build.opensuse.org/request/show/1120497
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=224
2023-10-26 18:45:10 +00:00
Ana Guerrero
2a6fbb6870 Accepting request 1113079 from GNOME:Factory
- Don't require sudo. There is no indication it's actually used for
  anything.

OBS-URL: https://build.opensuse.org/request/show/1113079
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=159
2023-09-25 17:59:55 +00:00
c803e04f46 Tiny tweak
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=222
2023-09-22 20:05:23 +00:00
5f4c2c7d55 Accepting request 1112491 from home:lnussel:branches:GNOME:Factory
- Don't require sudo. There is no indication it's actually used for
  anything.

OBS-URL: https://build.opensuse.org/request/show/1112491
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=221
2023-09-22 20:04:52 +00:00
Dominique Leuenberger
6d7a17304e Accepting request 1110397 from GNOME:Factory
Forwarded request #1109793 from iznogood

Pushing GNOME 45.rc packages

OBS-URL: https://build.opensuse.org/request/show/1110397
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=158
2023-09-20 11:21:09 +00:00
15ea1f32a3 Accepting request 1109793 from GNOME:Next
Pushing GNOME 45.rc packages

OBS-URL: https://build.opensuse.org/request/show/1109793
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=219
2023-09-12 01:54:17 +00:00
Dominique Leuenberger
f006850a32 Accepting request 1078524 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1078524
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=157
2023-04-13 12:09:49 +00:00
4cdd0a8959 Accepting request 1078523 from GNOME:Next
- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).

OBS-URL: https://build.opensuse.org/request/show/1078523
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=217
2023-04-11 21:24:43 +00:00
Dominique Leuenberger
4a03a80006 Accepting request 1043964 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1043964
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=156
2022-12-21 15:06:11 +00:00
cc174dd54f Accepting request 1043760 from GNOME:Next
- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.

  Doesn't work since about 9 years and will not be executed on a

OBS-URL: https://build.opensuse.org/request/show/1043760
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=215
2022-12-20 17:56:10 +00:00
Dominique Leuenberger
3f1644ad04 Accepting request 1041666 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1041666
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=155
2022-12-09 12:16:51 +00:00
795e2c20fe Accepting request 1041663 from home:kukuk:cleanup
- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a 
  fresh default installation anymore

OBS-URL: https://build.opensuse.org/request/show/1041663
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=213
2022-12-08 16:13:31 +00:00
Dominique Leuenberger
4cd9d0ffcb Accepting request 1040260 from GNOME:Factory
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch

  by anything. this makes the spec file slightly more readable.

OBS-URL: https://build.opensuse.org/request/show/1040260
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=154
2022-12-07 16:33:45 +00:00
0b0c1ce0bf -------------------------------------------------------------------
- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)

  by anything. this makes the spec file slightly more readable.

OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=211
2022-12-05 12:36:19 +00:00
5ee19dccdc OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=210 2022-12-05 12:32:39 +00:00
014337f5c0 Accepting request 990376 from home:jsegitz:branches:systemdhardening:GNOME:Factory
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/990376
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=209
2022-12-03 12:16:12 +00:00
Dominique Leuenberger
0a90ee8ecf Accepting request 1001366 from GNOME:Factory
- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092) (forwarded request 1001132 from AndreasStieger)

OBS-URL: https://build.opensuse.org/request/show/1001366
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=153
2022-09-07 09:05:25 +00:00
780e418927 Accepting request 1001132 from home:AndreasStieger:branches:GNOME:Factory
- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)

OBS-URL: https://build.opensuse.org/request/show/1001132
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=207
2022-09-06 07:03:54 +00:00
Richard Brown
72ea6046b5 Accepting request 990091 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/990091
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=152
2022-07-26 17:42:40 +00:00
aedc73e6c0 Accepting request 988019 from home:gmbr3:Active
- Move the dbus-1 system.d file to /usr (bsc#1201345)

OBS-URL: https://build.opensuse.org/request/show/988019
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=205
2022-07-19 08:26:52 +00:00
Dominique Leuenberger
87519e1be8 Accepting request 971094 from GNOME:Factory
- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon. (forwarded request 970362 from jengelh)

OBS-URL: https://build.opensuse.org/request/show/971094
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=151
2022-04-22 19:53:09 +00:00
71c960bb87 Accepting request 970362 from home:jengelh:branches:GNOME:Factory
- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.

OBS-URL: https://build.opensuse.org/request/show/970362
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=203
2022-04-20 12:08:59 +00:00
Dominique Leuenberger
921e74d939 Accepting request 957125 from GNOME:Factory
- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls

OBS-URL: https://build.opensuse.org/request/show/957125
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=150
2022-02-24 17:18:31 +00:00
e205300659 Tweak
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=202
2022-02-23 16:24:04 +00:00
b30065664d Accepting request 957093 from home:dirkmueller:Factory
- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls

OBS-URL: https://build.opensuse.org/request/show/957093
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=201
2022-02-23 16:22:36 +00:00
Dominique Leuenberger
0e026aedc5 Accepting request 956509 from GNOME:Factory
- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.

OBS-URL: https://build.opensuse.org/request/show/956509
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=149
2022-02-22 20:17:51 +00:00
4656608ced tweak
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=200
2022-02-19 16:54:47 +00:00
93b93e0416 Rebase try nr 1
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=199
2022-02-19 16:51:53 +00:00
Dominique Leuenberger
18cd0c536d Accepting request 955685 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/955685
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=148
2022-02-18 22:02:43 +00:00
c42d63779a Accepting request 955708 from home:dirkmueller:Factory
- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.

OBS-URL: https://build.opensuse.org/request/show/955708
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=198
2022-02-18 01:06:16 +00:00
96533482a5 Accepting request 955448 from GNOME:Next
- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).

OBS-URL: https://build.opensuse.org/request/show/955448
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=197
2022-02-17 17:43:31 +00:00
Dominique Leuenberger
9428f55945 Accepting request 951439 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/951439
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=147
2022-02-06 22:53:55 +00:00