4 This is a bugfix release and contains a fix for a low risk security
7 * Fix a local DoS vulnerability, where an assert() could be hit by
8 passing empty TXT data over D-Bus to the Avahi daemon. (Low Risk)
9 * Solaris/dbm portability fixes
10 * Close all open file descriptors when daemonizing. Is generally
11 safer and fixes a few issues with broken init systems of several
13 * avahi-autoipd: allow passing the path of the action script on the
15 * Several minor build fixes and other cleanups
17 This release is backwards compatible with Avahi 0.6.x with x < 20.
22 This is a bugfix release, but also adds a new component "avahi-ui-sharp".
24 * Rename zssh/zvnc to bssh/bvnc to avoid a name collision with another
25 free software tool, on request of the Debian developers. I hope
26 this name change early in the life of bssh/bvnc won't be too
27 difficult to handle by the distributors.
28 * Add man page for bssh/bvnc
29 * avahi-ui: fix segfault when browsing in empty domains
30 * avahi-ui: allow GTK_RESPONSE_OK, _YES and _APPLY besides _ACCEPT as
31 positive dialog response codes
32 * avahi-ui-sharp: Add Mono/C# API wrapper for avahi-ui
33 * Don't pick the first and the last 256 IP addresses from the IPV4LL
34 range in avahi-autoipd, as required by RC3927 section 2.1
35 * No longer publish the Avahi service identification cookie anymore
36 by default. It was a bad idea in the first place. A better
37 replacement will hopefully be made available in Avahi eventually.
38 * Properly set umask before writing to /var/lib/avahi-autoipd
39 * Update .deskop files to work around KDE menu issue
40 * Various build fixes and other minor fixes and updates
42 This release is backwards compatible with Avahi 0.6.x with x < 19.
47 This is a bugfix release, adds a few new features and includes a new
50 * Add a new library libavahi-ui which contains a standard Gtk dialog
51 for browsing for services, and a new tool "zssh" that makes use of
52 it, which allows browsing for SSH and VNC servers and starts ssh or
53 xvncviewer if one item is selected.
54 * avahi-autoipd has been ported to FreeBSD (original patch from Bruce M Simpson)
55 * Improve OpenBSD, Solaris, MacOS X compatibility
56 * Linux inotify support for monitoring /etc/avahi/services/ and
57 /etc/avahi/hosts for changes. (Original patch from "behanw")
58 * Add the ability to dump the service type database from avahi-browse
59 with the new option "-b".
60 * Enable GCC stack smashing protection if available and working (Patch from tedp)
61 * Improve compatibility with Bonjour's libdns_sd (patch from Chris Rivera)
62 * Various updates to the service type database (based on patches from uws)
63 * Fix a local DoS vulnerability (very low priority, all you can do is
64 make Avahi hit an assert()); problem identified by "jamesh"
65 * Fix a problem when constantly generating conflict events for an RR
66 * Fix registration of very large RRs (original patch from Sjoerd Simons)
69 This release is backwards compatible with Avahi 0.6.x with x < 18.
74 This is a bugfix release.
76 * Don't accept "localhost" as a local mDNS host name
77 * Allow running avahi-bookmarks as CGI script
78 * Improve libdns_sd compatibility
79 * Stability: libdns_sd mutex locking order fix
80 * Publish IPv6 addresses via IPv4 and vice versa
82 * A lot of minor cleanups and fixes
84 This release is backwards compatible with Avahi 0.6.x with x < 17.
89 This is a bugfix release, it fixes one DoS (100% CPU Usage) and a regression
92 * Revert previous patch to check nlmsg_pid as it is bogus and breaks in
93 many cases, notably when using NetworkManager (Closes: #72)
94 * Replace with new SO_PASSCRED-based check of the sending UID, which
95 seems to work better (Closes: #72)
96 * Handle some errors in libdns_sd more gracefully the way the real
97 libdns_sd does (Closes: #64)
98 * Apply fix for Linux 2.6.19+ where IFA_RTA / IFLA_RTA is no longer
100 * Fix doxygen comments for avahi watch, thanks to tedp (Closes: #77)
101 * Make d-bus version detection work for >= 1.0 (Closes: #71)
102 * Dont dbus_connection_close on shared dbus connections (Closes: #68)
103 * Fix potential endless loop in dns label unpacking code (Closes: #84)
104 * Fix bogus assertion in client-publish-service.c example
105 * Mild fix to some doxygen docs for avahi-common/address.h
106 * Fix passing in custom priviledged group (previously ignored setting)
109 This release is backwards compatible with Avahi 0.6.x with x < 16.
114 This is a bugfix release, this bug is potentially security sensitive
116 * Check that netlink messages actually originate from the kernel
117 and not another process.
118 * Fix build on NetBSD (thanks to Daniel S. Haischt)
119 * Fix dbus_service_browser not setting AVAHI_LOOKUP_RESULT_OUR_OWN.
121 This release is backwards compatible with Avahi 0.6.x with x < 15.
126 This release fixes some bugs and includes a new component.
130 * Add new daemon "avahi-autoipd" which is an implementation of
131 IPv4LL as defined in RFC3927, a technology for assigning link-local IP
132 addresses without DHCP server. The same functionality has been available on
133 Windows under the name APIPA. While it is not the first implemenatation of
134 this technology for Free operating systems it is clearly the most powerful
135 and hopefully even the most secure. (Because it chroot()s and drops
136 priviliges and suchlike) For more information, especially about packaging
137 this new tool for distributions, please make sure to read:
138 http://avahi.org/wiki/AvahiAutoipd
139 and of course the man page included in the tarball. For the rationale for
140 adding this program to the Avahi toolset please read this mailing list
142 http://lists.freedesktop.org/archives/avahi/2006-September/000863.html
143 * Fix a segfault in the code handling static host name registrations
144 * Add a few new entries to the service type database
146 * Documentation updates
147 * Fix service type database building on Solaris
148 * Make use of newer D-Bus APIs
149 * Fix random seed initialization
150 * Install SFTP static service file by default
151 * Other minor code cleanups
153 This release is backwards compatible with Avahi 0.6.x with x < 14.
155 Please note that this version doesn't compile on NetBSD, patches
158 Please note that avahi-autoipd is available on Linux only for
159 now. Patches welcome. It is recommended to pass --disable-autoipd to
160 "configure" on non-Linux operating systems, otherwise the build will
166 This release fixes some bugs and includes minor enhancements.
169 * Add a new D-Bus method for changing the mDNS host name during
170 runtime. This functionality is only available to members of the
171 UNIX group "netdev", which is the same access group that is
172 enforced by GNOME's NetworkManager daemon. Since NM will probably
173 be the most prominent user of this new method, we decided to limit
174 access to the same group. The access group can be set by passing
175 --with-avahi-priv-access-group= to "configure". If you need more
176 sophisticated access control you can freely edit
177 /etc/dbus/system.d/avahi-dbus.conf.
178 * Add a new utility "avahi-set-host-name" which is a command line
179 wrapper around the aforementioned SetHostName() method.
180 * Bonjour API compatibility library:
181 * Implement DNSServiceUpdateRecord()
182 * Allow passing NULL as callback function for
184 * Implement subtype registration in DNSServiceRegister() in a
185 way that is compatible with Bonjour.
186 * Update to newer copy of dns_sd.h
187 * If the host name changes update names of static services wich
189 * Don't build documentation about embedding the Avahi mDNS stack into
190 other programs by default. This is a feature used only by embedded
191 developers. Pass --enable-core-docs to "configure" to enable
192 building these docs, like in Avahi <= 0.6.12.
193 * Build Qt documentation only when Qt support is enabled in
194 the configuration. Same for GLib.
195 * Change algorithm used to find a new host name on conflict. In
196 Avahi <= 0.6.12 a conflicting host name of "foobar" would be
197 changed to the new name "foobar2". With 0.6.13 "foobar-2" will be
198 picked instead. This follows Bonjour's behaviour and has the
199 advantage not confusing people with regular host names ending in
201 * Don't disable all static services when SIGHUP is recieved.
202 * Fix build when Avahi is configured without Gtk+ but with Python
204 * Fix build on MacOS X
205 * Support using Solaris DBM instead of gdbm for the service type
206 database. The latter is still recommended
207 * Minor other fixes and documentation updates
209 This release is backwards compatible with Avahi 0.6.x with x < 13.
214 This is a bugfix and general cleanups release.
217 * Compatibility with newer D-Bus releases (0.9x)
218 * Compatibility with DBUS builds with --disable-checks
219 * Fix an error in the DBUS event loop wrapping which
220 caused the avahi client libraries to dispatch some events
221 too late when used with D-BUS 0.62 and newer.
222 * avahi-daemon: fix a minor memory leak in the DBUS code.
223 * avahi-glib: some GLIB adapter cleanups
224 * avahi-dnsconfd: fix segfault when passing an invalid command
226 * avahi-test: portability patches for Solaris
227 * avahi-browse: flush STDOUT after each line, making it useful
229 * update service type database
231 This release is backwards compatible with Avahi 0.6.x with x < 12.
236 This is a bugfix and portability release.
240 * avahi-sharp: fix a fatal error in object disposal code
241 * add a few new entries to the servivce type database
242 * fix potential crash when the daemon shuts down
243 * compatibility with newer autoconf versions
245 This release is backwards compatible with Avahi 0.6, 0.6.1, 0.6.2,
246 0.6.3, 0.6.4, 0.6.5, 0.6.6, 0.6.7, 0.6.9 and 0.6.10.
251 This is mostly a bugfix release. Two of the bugs fixed are security
252 sensitive: a remote denial-of-service vulnerability and a buffer
253 overflow that can allow local users to become the 'avahi' user. We do
254 not consider either of them major security threats.
256 The DoS vulnerability can be exploited from a local network only. It
257 is not worth much, though, since mDNS can easily be flooded with
258 nonsense anyway. It is easy to kick remote mDNS/DNS-SD services by
259 provoking a name conflict in perfect accordance with the specs.
261 The buffer overflow is hard to exploit remotely, only local users can
262 become the 'avahi' user. In addition the user is trapped inside a
263 chroot() environment (at least on Linux).
265 Anyhow, our security assessments are possibly as buggy as our
268 *** PLEASE UPDATE YOUR INSTALLATION ASAP! ***
271 * Fix a buffer overflow in avahi-core
272 * Refuse to process invalid UTF8 data
273 * Automatically reconnect to the DBUS if we're kicked. (Works only if
274 chroot() is disabled)
275 * Don't hit an assert() in the client libs when the Avahi daemon is
277 * Enumerate all service types in the database in the Service
278 Discovery Applet for Gnome
279 * Improve the Bonjour compatibility layer to make it survive
280 GnomeMeeting's broken usage
281 * Deal properly with local non-ASCII hostnames
282 * AMD64 and FreeBSD portability fixes
283 * Filter double DNS server entries in avahi-dnsconfd
284 * Fix a locking bug in avahi-sharp's EntryGroup.AddService()
285 * Ported to Solaris (incomplete)
286 * Add _airport._tcp to our service type database
288 This release is backwards compatible with Avahi 0.6, 0.6.1, 0.6.2,
289 0.6.3, 0.6.4, 0.6.5, 0.6.6, 0.6.7, 0.6.8 and 0.6.9.
294 This release fixes some bugs and includes minor enhancements.
296 * Don't allow registration of address records with invalid host names
297 * Clean up argument validity checking for AvahiHostNameResolver and
299 * Fix Avahi builds without DBUS
301 This release is backwards compatible with Avahi 0.6, 0.6.1, 0.6.2,
302 0.6.3, 0.6.4, 0.6.5, 0.6.6, 0.6.7 and 0.6.8.
307 This release fixes some bugs and adds a few new features. Users of 0.6.7,
310 * Fix broken parsing of static hosts file
311 * Improve out-of-the-box Debian support
312 * Add configuration option to allow mDNS over POINTOPOINT links.
313 This is a potential security hole and YMMV. See man page for details.
314 * Create $(localstatedir)/run on installation
316 This release is backwards compatible with Avahi 0.6, 0.6.1, 0.6.2,
317 0.6.3, 0.6.4, 0.6.5, 0.6.6 and 0.6.7.
322 This release fixes some bugs and adds a few new features
324 * Add static hosts name mappings
325 * Work around kernel bugs regarding multicast group membership
326 * ia64 portability fixes
327 * Don't require X11 to run avahi-bookmarks
328 * API: Return AVAHI_ERR_IS_EMPTY when the user tries to commit an
330 * Improved Slackware and Fedora suppport
332 This release is backwards compatible with Avahi 0.6, 0.6.1, 0.6.2,
333 0.6.3, 0.6.4, 0.6.5 and 0.6.6.
338 This release fixes some bugs and includes some documentation updates
340 * Add a bunch of new types to the service type database
341 * Return errors of avahi_entry_group_commit() properly
342 * Many doxygen documentation improvements
343 * Fix destruction of AvahiEntryGroup objects using
344 avahi_entry_group_free().
345 * Don't allow commiting of empty entry groups
346 * Use a little less memory in avahi-qt
347 * Don't accept empty TXT strings
348 * Update example "client-publish-service.c" to show how to modify an
351 This release is backwards compatible with Avahi 0.6, 0.6.1, 0.6.2,
352 0.6.3, 0.6.4 and 0.6.5.
357 This release fixes some bugs and adds a new API function.
359 * avahi-browse: properly show services that are removed from the
361 * fix build on bi-arch platforms, on GNU/kFreeBSD, on MIPS and
363 * add new API function avahi_nss_support() and DBUS function
364 IsNSSSupportAvailable() which may be used to detect whether
365 libc's gethostbyname() supports mDNS domain names.
366 * patch avahi-bookmarks to make use of
367 IsNSSSupportAvailable(). avahi-bookmarks will now generate links
368 with real hostnames instead of numeric IP addresses if mDNS support
369 is detected for gethostbyname().
370 * add init script for Mandriva Linux
371 * speed up avahi_client_free()
373 * install missing header thread-watch.h
374 * fix avahi-bookmarks to work with certain twisted versions
375 * fix record updating
376 * Use pkg-config's Requires.private directive where it makes sense
378 This release is backwards compatible with Avahi 0.6, 0.6.1, 0.6.2,
384 This is a bugfix release and adds a new event loop implementation to
385 avahi-common's public interface.
387 * avahi-common: add new AvahiThreadedPool event loop implementation
388 * avahi-sharp: compatibility with newer mono versions
389 * avahi-publish-service: don't ignore the port number specified
390 * avahi-sharp: correct some flags definitions
392 This release is backwards compatible with Avahi 0.6, 0.6.1, 0.6.2 and
395 A quick introduction how to use the new AvahiThreadedPool interface is
396 available in our Wiki:
398 http://avahi.org/wiki/RunningAvahiClientAsThread
403 This is a bugfix release. Everyone should update ASAP!
405 * avahi-sharp: make sure to append a trailing NUL byte to all C strings
406 * avahi-core: fix a double free() which occurs when wide area lookups timeout
408 This release is fully compatible with Avahi 0.6, 0.6.1 and 0.6.2.
413 This is mostly a bugfix release.
415 * Compatibility with DBUS 0.60 (Full compatibility with DBUS 0.3x and
417 * Fix introspection for some auxiliary DBUS objects
418 * Miscellaneous documentation updates
419 * Improve Autoconf support for detecting PTHREADS library
420 * Fix avahi-publish --help
421 * Workaround a DBUS limitation which might cause Avahi to die when a
422 user sends an empty TXT entry over DBUS
423 * Increase number of resolver/browser objects a DBUS client may create
424 * Remove fprintf() call in avahi_client_new()
427 This release is both up and downwards compatible with Avahi 0.6 and 0.6.1.
429 Avahi now has its own Domain (http://avahi.org) and a new Website!
431 And, most importantly, we now have a Logo:
432 http://avahi.org/chrome/site/avahi-trac.png
437 This is mostly a bugfix release.
439 * Fix a segfault when shutting down the daemon. Please note that this
440 issue was not security sensitive in any way but had the ugly side
441 effect that the daemon's PID file was not removed properly.
442 * Added init scripts for ArchLinux and FreeBSD
443 * Add DBUS API versioning through the new method GetAPIVersion()
444 * Build the HOWL compatibility library as "libhowl.so", instead of
445 "libavahi-compat-howl.so". This will help distributors to ensure
446 full API/ABI compatibility with HOWL out-of-the-box.
447 * Same for the Bonjour compatibility library
450 We encourage Linux users to update to libdaemon 0.10 since logging
451 does not work from a chroot() environment with older versions.
453 This release is fully API and ABI compatible with Avahi 0.6. This is
454 true for both the C libraries and the DBUS interface.
456 Packagers should read the new documentation file doc/COMPAT-LAYERS
457 which contains some information about maintaining full build system
458 compatibility in addition to ABI/API compatibility.
460 Avahi 0.6, the "Goddag" release
461 ===============================
463 * Support for (read-only) wide area support. (i.e. DNS-SD over unicast DNS)
464 * Ported to FreeBSD, NetBSD, Darwin/MacOSX and to some extent OpenBSD
465 * Portability fixes for ARM CPUs
466 * Compatibility layers for the HOWL and Bonjour APIs
467 * Support for registering/browsing arbitrary records
468 * Proper support for DNS-SD service subtypes
469 * Native C implementations of the client utilities
470 * Now passes the Bonjour conformance test suite without any exceptions
471 * "Passive observation of failures"
473 * Many traffic reduction improvements
476 This release is not API/ABI compatible with Avahi 0.5. Please see
477 docs/API-CHANGES-0.6 for a rough overview over the changes.
483 * Fix browing in QT applications (was totally broken)
484 * Minor documentation update.
489 * This is a bug fix release, before the big changes coming in 0.6
490 * Fix reporting of the NO_DAEMON error
491 * Fix commit throttling algorithm for entry groups
492 * Fix counting of the number of resources in an entry group
494 Avahi 0.5, the 'Bom Dia' release
495 ================================
497 * New Mono bindings, allowing you to use Avahi from
498 any CLI language such as C#
499 * Attempt auto-detection of the D-BUS system bus address
500 * Include a 'cookie' in all published records which allows us
501 to reliably determine if a service is the same as another.
502 * Add API to determine if services are local
503 * Better support for threading with AvahiSimplePoll
504 * Add some new StringList functions to help binding to it in
506 * Various build and run-time bug fixes
508 Avahi 0.4, the 'Hyvää päivää' release
509 =====================================
511 * Renamed the include dirs for the Qt bindings to include the
512 version number, as they may diverge in future.
513 * Fix a critical bug in avahi-daemon triggered by configuring an interface
514 with various DHCP clients when you have no other active addresses which
515 caused avahi-daemon to abort.
516 * Move to using python-gdbm exclusivly for the service type database.
517 * Add support for SUSE
518 * Various fixes to the build system
520 Avahi 0.3, the 'Buenos Días' release
521 ====================================
523 * New integration library for QT main-loop applications.
524 * Fix a crash in avahi-dnsconfd
525 * Documentation Updates
526 * Fix building when you don't want Python DBUS or GTK
528 - Add new help option
529 - Fix handling of paths not starting with a /
530 - You can now specify the port and IP to bind to
531 - Add option to generate links with hostnames instead of IPs
533 Avahi 0.2, the 'Dzień Dobry' release
534 ====================================
536 * Unfortunately this release broke the API/ABI of libavahi-client
537 with the following function removals
539 Removal of these functions may affect users of the 0.1 API
540 - avahi_service_resolver_block()
542 The following functions were simply for debugging information
543 and their removal should not affect anyone
544 - avahi_entry_group_get_dbus_path()
545 - avahi_domain_browser_get_dbus_path()
546 - avahi_service_type_browser_get_dbus_path()
547 - avahi_service_browser_get_dbus_path()
549 Note that while the libavahi-client API changed slightly, the DBUS
550 API itself has only had additions and no existing definitions
553 * avahi-daemon will now ignore local IP addresses with the "link" scope
554 unless it is the only IP address on the interface.
555 * avahi-daemon will no longer fail to start if D-BUS is not
556 available (if configured with enable-dbus=warn)
557 * Fixed a potential crasher when resolving things in libavahi-core.
558 * New example demonstrating integration into glib applications
559 * Addtion of a set of convenience functions for AvahiStringList
560 avahi_string_list_find()
561 avahi_string_list_get_pair()
562 avahi_string_list_add_pair()
563 avahi_string_list_add_pair_arbitrary()
564 * Fixed a typo in avahi-glib.pc that stopped programs using
565 the GLIB api from compiling correctly
566 * A critical bug in the reflector was fixed where it may go into a
567 state of constantly flooding queries out to the network.
568 * Introduced new asynchronous resolver API
569 * libavahi-client gained an API for resolving HostNames and Addresses
570 in addition to the ServiceResolver provided in 0.1
571 * Added support for Arch and Gentoo linux distributions.
572 * Allowed configuration on non-supported distributions
573 * Fixed a critical bug where you cannot use more than one AvahiClient
574 or use it in an application already using D-BUS
575 * Fixed assembly of empty string lists to RFC compliant TXT records
576 * Added a new service type description database with human
577 understandable descriptions of services with translations.
578 * Fixed various minor memory corruption bugs
579 * Fixed an issue where Avahi might think it encountered a conflict
580 if the process or machine has been suspended
581 * Fixed compilation and runtime issues on 64-bit distributions
585 Avahi 0.1, the "Guten Tag" release
586 ==================================
588 The Avahi team would like to announce the immediate availability of
589 Avahi 0.1 "Guten Tag".
591 Avahi is a fully LGPL framework for Multicast DNS Service Discovery.
592 It allows programs to publish and discover services and hosts
593 running on a local network with no specific configuration. For
594 example you can plug into a network and instantly find printers to
595 print to, files to look at and people to talk to.
597 Avahi is designed to be compatible with the mDNS/DNS-SD specification
598 and boasts the following features
600 * Fully open source and freely available under the LGPL
601 * Full IPv4 and IPv6 support
602 * An embeddable mDNS stack
603 * Dynamic adjustment to network reconfiguration
604 * Daemon with DBUS API for desktop applications
605 * C library to interface with the DBUS API
606 * Compatible with other mDNS/DNS-SD implementations such as
607 Howl and Apple Bonjour (previously Rendezvous)
608 * Ability to correctly "reflect" mDNS between two or more LAN segments
609 * Ability to configure DNS servers based on mDNS/DNS-SD published
610 information, a feature that is very usefull on IPv6
611 which has no other mechanism for this.
612 * Combined with nss-mdns, allows hostname lookup such as
613 'laptop.local' without the configuration of a DNS server.
614 http://0pointer.de/lennart/projects/nss-mdns/
615 * Easy integration into GLIB, GTK other mainloop applications.
616 * Documentation and examples of both developer APIs and utilities.
618 mDNS/DNS-SD is part of a larger set of specifications for easy
619 configuration of networking known as "ZeroConf"
620 (http://www.zeroconf.org/), with the aim of allowing you to plug into
621 a network and instantly be able to interact with it's services.
623 Avahi was designed to be a fully free implementation, and is
624 available under the LGPL. Many other implementations of the mDNS/DNS-SD
625 specification were previously non-free, restricting their use in many
626 platforms such as the GNOME desktop and many distributions.
628 While Avahi is a 0.1 release, we feel it is feature complete and
629 available for immediate use, developers can make use of the Avahi
630 client library to provide above mentioned functionality in their
633 We unfortunately do not have a logo yet! We would love if someone
634 could suggest ideas for a logo or even design us one. If you think
635 you can help us out, you can contact us on our mailing list or by
636 emailing Trent Lloyd on lathiat@bur.st.
638 If you would like more information or help, you can subscribe
639 to our mailinglist, goto
640 http://lists.freedesktop.org/mailman/listinfo/avahi
642 You can download Avahi 0.1 here
643 http://www.freedesktop.org/~lennart/avahi-0.1.tar.gz
645 You can also find out more information from our homepage
646 http://www.freedesktop.org/Software/Avahi
648 We would like to thank the following people for their
649 contribution to Avahi 0.1.