Subject: CVS commit: pkgsrc/net/netatalk3
From: Hauke Fath
Date: 2024-02-05 16:02:16
Message id: 20240205150216.51CD8FA42@cvs.NetBSD.org

Log Message:
Update net/netatalk3 to v3.1.18

Includes a patch for security issue CVE-2022-22995.

What's Changed

    FIX: CVE-2022-22995: Harden create_appledesktop_folder(), GitHub #480
    FIX: Correct syntax for libwrap check in tcp-wrappers.m4, GitHub #500
    FIX: Correct syntax for libiconv check in iconv.m4, GitHub #491
    FIX: quota is not supported on macOS, GitHub #492
    FIX: dtrace is not supported on FreeBSD aarch64, GitHub #498

3.1.17 - What's Changed

    FIX: CVE-2023-42464: Validate data type in dalloc_value_for_key(), GitHub #486
    FIX: Declare a variable before using it in a loop, which was
    throwing off the default compiler on RHEL7, GitHub #481
    UPD: Distribute tarballs with xz compression by default, instead
    of gzip, GitHub #478
    UPD: Add AUTHOR sections to all man pages with a reference to
    CONTRIBUTORS, and standardize headers and footers, GitHub #462

3.1.16 - What's Changed

    FIX: libatalk: Fix CVE-2022-23121, CVE-2022-23123 regression
        Added guard check before access ad_entry(), GitHub #357
        Allow zero length entry, for AppleDouble specification, GitHub #368
        Remove special handling for COMMENT entries, GitHub #236
        The assertion for invalid entires is still enabled, so please
        report any future "Invalid metadata EA" errors!
    FIX: build system: Fix autoconf warnings and modernize bootstrap
        and configure.ac, GitHub #331
    FIX: build system: Correct syntax in libevent search macro,
        summary macro and netatalk executable makefile, GitHub #342
    FIX: build system: Fix native libiconv detection on macOS, GitHub
        #343
    FIX: build system: Use non-interactive PAM session when available,
        GitHub #361
    FIX: build system: Fix detection of Berkeley DB installed in
        multiarch location, GitHub #380
    FIX: build system: Fix support for cross-compilation with
        mysql_config and dtrace, GitHub #384
    FIX: build system: Support building quota against libtirpc, GitHub
        #385
    FIX: build system: Fix variable substitution in configure summary,
        GitHub #443
    UPD: build system: Remove ABI checks and the
        --enable-developer option, GitHub #262
    FIX: initscript: Improvements to Debian SysV init script
        Source init-functions, GitHub #386
        Add a Description and Short-Description, GitHub #428
    FIX: docs: Clarify localstate dir configurability in manual, GitHub #401
    UPD: docs: Make BerkeleyDB 5.3.x the recommended version, GitHub #8
    FIX: docs: Update SourceForge URLs to fix CSS styles and download links
    FIX: docs: Remove obsoleted bug reporting sections, GitHub #455
    FIX: Sundry typo fixes in user visible strings and docs, GitHub
        #381, GitHub #382
    UPD: Rename asip-status.pl as asip-status to make naming
        implementation-agnostic, GitHub #379
    UPD: Remove redundant uid.c|h files in etc/afpd
    UPD: Don't build and distribute deprecated cnid2_create tool, GitHub #412
    UPD: Remove deprecated megatron code and man page, GitHub #456
    UPD: Remove deprecated uniconv code and man page, GitHub #457
    UPD: Improvements to the GitHub CI workflow

Files:
RevisionActionfile
1.60modifypkgsrc/net/netatalk3/Makefile
1.3modifypkgsrc/net/netatalk3/PLIST
1.16modifypkgsrc/net/netatalk3/distinfo
1.2modifypkgsrc/net/netatalk3/patches/patch-configure
1.3modifypkgsrc/net/netatalk3/patches/patch-macros_quota-check.m4