328 Commits

Author SHA256 Message Date
289c56720d Accepting request 1327172 from GNOME:Factory
Add avahi-CVE-2025-68276.patch, avahi-CVE-2025-68468.patch, avahi-CVE-2025-68471.patch, to fix security bugs (CVE-2025-68468, bsc#1256499, CVE-2025-68471, bsc#1256500, CVE-2025-68276, bsc#1256498) (forwarded request 1327114 from qzhao)

OBS-URL: https://build.opensuse.org/request/show/1327172
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=175
2026-01-15 15:42:30 +00:00
dc0db57dd8 Accepting request 1327114 from home:qzhao:branches:GNOME:Factory
Add avahi-CVE-2025-68276.patch, avahi-CVE-2025-68468.patch, avahi-CVE-2025-68471.patch, to fix security bugs (CVE-2025-68468, bsc#1256499, CVE-2025-68471, bsc#1256500, CVE-2025-68276, bsc#1256498)

OBS-URL: https://build.opensuse.org/request/show/1327114
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=255
2026-01-14 09:27:43 +00:00
7470dca8e4 Accepting request 1305497 from GNOME:Factory
Add avahi-CVE-2024-52615.patch: Backport 4e2e1ea from upstream, Resolve fixed source ports for wide-area DNS queries cause DNS responses be injected. (CVE-2024-52615, bsc#1233421) (forwarded request 1304974 from qzhao)

OBS-URL: https://build.opensuse.org/request/show/1305497
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=174
2025-09-24 13:21:57 +00:00
88985321ca Accepting request 1304974 from home:qzhao:branches:GNOME:Factory
Add avahi-CVE-2024-52615.patch: Backport 4e2e1ea from upstream, Resolve fixed source ports for wide-area DNS queries cause DNS responses be injected. (CVE-2024-52615, bsc#1233421)

OBS-URL: https://build.opensuse.org/request/show/1304974
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=253
2025-09-17 15:54:20 +00:00
928b3e84c8 Accepting request 1295695 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1295695
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=173
2025-07-26 11:40:04 +00:00
213ac1248f Accepting request 1281354 from home:alarrosa:branches:GNOME:Factory
- Add patch submitted to upstream at
  to enable building with Qt6 and add that flavor:
  0001-Enable-building-with-Qt6.patch
- Disable building the Qt5 flavor in SLE16.

OBS-URL: https://build.opensuse.org/request/show/1281354
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=251
2025-06-06 06:12:52 +00:00
f7633e33bf Accepting request 1280022 from GNOME:Factory
(forwarded request 1279612 from iznogood)

OBS-URL: https://build.opensuse.org/request/show/1280022
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=172
2025-05-27 16:51:11 +00:00
560709f707 Accepting request 1279612 from GNOME:Next
OBS-URL: https://build.opensuse.org/request/show/1279612
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=249
2025-05-26 08:04:01 +00:00
3c4856d433 Accepting request 1227530 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1227530
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=171
2024-12-02 15:57:56 +00:00
6fe4d40cd9 Accepting request 1227528 from home:qzhao:branches:GNOME:Factory
Add avahi-CVE-2024-52616.patch: Backporting 1dade81c from upstream: Properly randomize query id of DNS packets. (CVE-2024-52616, bsc#1233420)

OBS-URL: https://build.opensuse.org/request/show/1227528
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=247
2024-11-30 16:02:26 +00:00
39fd974930 Accepting request 1208161 from GNOME:Factory
- Drop rcFOO symlinks (PED-266). (forwarded request 1208117 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/1208161
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=170
2024-10-16 21:37:47 +00:00
1da1545121 Accepting request 1208117 from GNOME:Next
- Drop rcFOO symlinks (PED-266).

OBS-URL: https://build.opensuse.org/request/show/1208117
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=245
2024-10-15 14:45:45 +00:00
3573aaffe3 Accepting request 1181998 from GNOME:Factory
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586). (forwarded request 1181994 from mgorse)

OBS-URL: https://build.opensuse.org/request/show/1181998
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=169
2024-06-21 14:02:58 +00:00
fa4e9d8992 Accepting request 1181994 from GNOME:Next
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).

OBS-URL: https://build.opensuse.org/request/show/1181994
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=243
2024-06-20 17:06:36 +00:00
3230c3d3d3 Accepting request 1164965 from GNOME:Factory
- Tag hardening patches as PATCH-FEATURE-OPENSUSE (forwarded request 1164608 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/1164965
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=168
2024-04-05 18:24:29 +00:00
c56a8b0a04 Accepting request 1164608 from GNOME:Next
- Tag hardening patches as PATCH-FEATURE-OPENSUSE

OBS-URL: https://build.opensuse.org/request/show/1164608
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=241
2024-04-04 14:18:13 +00:00
86a1c0e090 Accepting request 1162833 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1162833
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=167
2024-03-28 12:52:26 +00:00
d0b89d4271 Accepting request 1162477 from home:xiaoguang_wang:branches:GNOME:Factory
- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).

OBS-URL: https://build.opensuse.org/request/show/1162477
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=239
2024-03-27 08:21:54 +00:00
f11fe5c377 Accepting request 1157987 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1157987
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=166
2024-03-15 19:27:54 +00:00
68261eb3a7 Accepting request 1157219 from home:pgajdos
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]

OBS-URL: https://build.opensuse.org/request/show/1157219
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=237
2024-03-14 13:04:08 +00:00
a4b09692d3 Accepting request 1129990 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1129990
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=165
2023-12-01 20:24:42 +00:00
260dba7c21 Accepting request 1129882 from home:AZhou:branches:GNOME:Factory
- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).

OBS-URL: https://build.opensuse.org/request/show/1129882
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=235
2023-11-30 12:47:16 +00:00
17f511b7ca Accepting request 1129177 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1129177
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=164
2023-11-28 21:18:26 +00:00
458ccdb08f Accepting request 1129150 from GNOME:Next
- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.

OBS-URL: https://build.opensuse.org/request/show/1129150
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=233
2023-11-27 15:46:20 +00:00
fbff0564bc Accepting request 1128303 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1128303
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=163
2023-11-23 20:39:09 +00:00
7f3956c3a5 Accepting request 1128273 from GNOME:Next
- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE<=11/openSUSE<=12.3, which are no longer in
  scope for upgrades nowadays.

OBS-URL: https://build.opensuse.org/request/show/1128273
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=231
2023-11-23 10:29:12 +00:00
738ddb6dba Accepting request 1128131 from GNOME:Next
- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).

OBS-URL: https://build.opensuse.org/request/show/1128131
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=230
2023-11-22 20:59:12 +00:00
801acfb7cd Accepting request 1126603 from GNOME:Factory
- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730). (forwarded request 1125434 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/1126603
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=162
2023-11-16 19:26:53 +00:00
d5a4e4dc24 Accepting request 1125434 from GNOME:Next
- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).

OBS-URL: https://build.opensuse.org/request/show/1125434
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=228
2023-11-15 12:55:57 +00:00
557b3aae44 Accepting request 1121609 from GNOME:Factory
- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470). (forwarded request 1121540 from AZhou)

OBS-URL: https://build.opensuse.org/request/show/1121609
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=161
2023-11-02 19:20:20 +00:00
38652dbb4b Accepting request 1121540 from home:AZhou:branches:GNOME:Factory
- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).

OBS-URL: https://build.opensuse.org/request/show/1121540
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=226
2023-11-01 13:03:12 +00:00
47afc93c82 Accepting request 1120633 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1120633
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=160
2023-10-29 18:39:16 +00:00
1836863be1 Accepting request 1120497 from home:xiaoguang_wang:branches:GNOME:Factory
- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).

OBS-URL: https://build.opensuse.org/request/show/1120497
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=224
2023-10-26 18:45:10 +00:00
83ef8d8cdc Accepting request 1113079 from GNOME:Factory
- Don't require sudo. There is no indication it's actually used for
  anything.

OBS-URL: https://build.opensuse.org/request/show/1113079
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=159
2023-09-25 17:59:55 +00:00
787b27fa2e Tiny tweak
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=222
2023-09-22 20:05:23 +00:00
ae12bdbb89 Accepting request 1112491 from home:lnussel:branches:GNOME:Factory
- Don't require sudo. There is no indication it's actually used for
  anything.

OBS-URL: https://build.opensuse.org/request/show/1112491
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=221
2023-09-22 20:04:52 +00:00
d69eb40b3a Accepting request 1110397 from GNOME:Factory
Forwarded request #1109793 from iznogood

Pushing GNOME 45.rc packages

OBS-URL: https://build.opensuse.org/request/show/1110397
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=158
2023-09-20 11:21:09 +00:00
7fb8d6f24a Accepting request 1109793 from GNOME:Next
Pushing GNOME 45.rc packages

OBS-URL: https://build.opensuse.org/request/show/1109793
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=219
2023-09-12 01:54:17 +00:00
1d86ada563 Accepting request 1078524 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1078524
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=157
2023-04-13 12:09:49 +00:00
cba10719e3 Accepting request 1078523 from GNOME:Next
- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).

OBS-URL: https://build.opensuse.org/request/show/1078523
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=217
2023-04-11 21:24:43 +00:00
6419ee8a52 Accepting request 1043964 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1043964
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=156
2022-12-21 15:06:11 +00:00
6e638b1d01 Accepting request 1043760 from GNOME:Next
- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.

  Doesn't work since about 9 years and will not be executed on a

OBS-URL: https://build.opensuse.org/request/show/1043760
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=215
2022-12-20 17:56:10 +00:00
0318233a27 Accepting request 1041666 from GNOME:Factory
OBS-URL: https://build.opensuse.org/request/show/1041666
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=155
2022-12-09 12:16:51 +00:00
dc8fee2b48 Accepting request 1041663 from home:kukuk:cleanup
- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a 
  fresh default installation anymore

OBS-URL: https://build.opensuse.org/request/show/1041663
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=213
2022-12-08 16:13:31 +00:00
7ae626511b Accepting request 1040260 from GNOME:Factory
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch

  by anything. this makes the spec file slightly more readable.

OBS-URL: https://build.opensuse.org/request/show/1040260
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=154
2022-12-07 16:33:45 +00:00
11c82f43ad -------------------------------------------------------------------
- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)

  by anything. this makes the spec file slightly more readable.

OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=211
2022-12-05 12:36:19 +00:00
8266747fdc OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=210 2022-12-05 12:32:39 +00:00
ba1165c633 Accepting request 990376 from home:jsegitz:branches:systemdhardening:GNOME:Factory
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/990376
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=209
2022-12-03 12:16:12 +00:00
e8812e9268 Accepting request 1001366 from GNOME:Factory
- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092) (forwarded request 1001132 from AndreasStieger)

OBS-URL: https://build.opensuse.org/request/show/1001366
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/avahi?expand=0&rev=153
2022-09-07 09:05:25 +00:00
7c9e8b294a Accepting request 1001132 from home:AndreasStieger:branches:GNOME:Factory
- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)

OBS-URL: https://build.opensuse.org/request/show/1001132
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/avahi?expand=0&rev=207
2022-09-06 07:03:54 +00:00