Path to this page:
Subject: CVS commit: pkgsrc/net/netatalk3
From: Hauke Fath
Date: 2024-02-05 16:02:16
Message id: 20240205150216.51CD8FA42@cvs.NetBSD.org
Log Message:
Update net/netatalk3 to v3.1.18
Includes a patch for security issue CVE-2022-22995.
What's Changed
FIX: CVE-2022-22995: Harden create_appledesktop_folder(), GitHub #480
FIX: Correct syntax for libwrap check in tcp-wrappers.m4, GitHub #500
FIX: Correct syntax for libiconv check in iconv.m4, GitHub #491
FIX: quota is not supported on macOS, GitHub #492
FIX: dtrace is not supported on FreeBSD aarch64, GitHub #498
3.1.17 - What's Changed
FIX: CVE-2023-42464: Validate data type in dalloc_value_for_key(), GitHub #486
FIX: Declare a variable before using it in a loop, which was
throwing off the default compiler on RHEL7, GitHub #481
UPD: Distribute tarballs with xz compression by default, instead
of gzip, GitHub #478
UPD: Add AUTHOR sections to all man pages with a reference to
CONTRIBUTORS, and standardize headers and footers, GitHub #462
3.1.16 - What's Changed
FIX: libatalk: Fix CVE-2022-23121, CVE-2022-23123 regression
Added guard check before access ad_entry(), GitHub #357
Allow zero length entry, for AppleDouble specification, GitHub #368
Remove special handling for COMMENT entries, GitHub #236
The assertion for invalid entires is still enabled, so please
report any future "Invalid metadata EA" errors!
FIX: build system: Fix autoconf warnings and modernize bootstrap
and configure.ac, GitHub #331
FIX: build system: Correct syntax in libevent search macro,
summary macro and netatalk executable makefile, GitHub #342
FIX: build system: Fix native libiconv detection on macOS, GitHub
#343
FIX: build system: Use non-interactive PAM session when available,
GitHub #361
FIX: build system: Fix detection of Berkeley DB installed in
multiarch location, GitHub #380
FIX: build system: Fix support for cross-compilation with
mysql_config and dtrace, GitHub #384
FIX: build system: Support building quota against libtirpc, GitHub
#385
FIX: build system: Fix variable substitution in configure summary,
GitHub #443
UPD: build system: Remove ABI checks and the
--enable-developer option, GitHub #262
FIX: initscript: Improvements to Debian SysV init script
Source init-functions, GitHub #386
Add a Description and Short-Description, GitHub #428
FIX: docs: Clarify localstate dir configurability in manual, GitHub #401
UPD: docs: Make BerkeleyDB 5.3.x the recommended version, GitHub #8
FIX: docs: Update SourceForge URLs to fix CSS styles and download links
FIX: docs: Remove obsoleted bug reporting sections, GitHub #455
FIX: Sundry typo fixes in user visible strings and docs, GitHub
#381, GitHub #382
UPD: Rename asip-status.pl as asip-status to make naming
implementation-agnostic, GitHub #379
UPD: Remove redundant uid.c|h files in etc/afpd
UPD: Don't build and distribute deprecated cnid2_create tool, GitHub #412
UPD: Remove deprecated megatron code and man page, GitHub #456
UPD: Remove deprecated uniconv code and man page, GitHub #457
UPD: Improvements to the GitHub CI workflow
Files: