X-Git-Url: http://git.meshlink.io/?a=blobdiff_plain;f=docs%2FNEWS;h=fd37d42e50d200ae09da16a0cb1d1e95e20ef86d;hb=2c34e9d4eebf3b051ed69ceb7977402af267d7c9;hp=fe561a5d4f80a702913080c619506e5a4c2d1042;hpb=a09c6b5182720c67e150f9db459f661f5bc41893;p=catta diff --git a/docs/NEWS b/docs/NEWS index fe561a5..fd37d42 100644 --- a/docs/NEWS +++ b/docs/NEWS @@ -1,3 +1,40 @@ +Avahi 0.6.16 +============ + +This is a bugfix release, it fixes one DoS (100% CPU Usage) and a regression +from the last release + + * Revert previous patch to check nlmsg_pid as it is bogus and breaks in + many cases, notably when using NetworkManager (Closes: #72) + * Replace with new SO_PASSCRED-based check of the sending UID, which + seems to work better (Closes: #72) + * Handle some errors in libdns_sd more gracefully the way the real + libdns_sd does (Closes: #64) + * Apply fix for Linux 2.6.19+ where IFA_RTA / IFLA_RTA is no longer + defined (Closes: #86) + * Fix doxygen comments for avahi watch, thanks to tedp (Closes: #77) + * Make d-bus version detection work for >= 1.0 (Closes: #71) + * Dont dbus_connection_close on shared dbus connections (Closes: #68) + * Fix potential endless loop in dns label unpacking code (Closes: #84) + * Fix bogus assertion in client-publish-service.c example + * Mild fix to some doxygen docs for avahi-common/address.h + * Fix passing in custom priviledged group (previously ignored setting) + (Closes: #85) + +This release is backwards compatible with Avahi 0.6.x with x < 16. + +Avahi 0.6.15 +============ + +This is a bugfix release, this bug is potentially security sensitive + + * Check that netlink messages actually originate from the kernel + and not another process. + * Fix build on NetBSD (thanks to Daniel S. Haischt) + * Fix dbus_service_browser not setting AVAHI_LOOKUP_RESULT_OUR_OWN. + +This release is backwards compatible with Avahi 0.6.x with x < 15. + Avahi 0.6.14 ============ @@ -6,15 +43,17 @@ This release fixes some bugs and includes a new component. Changes: * Add new daemon "avahi-autoipd" which is an implementation of - IPv4LL as defined in RFC3927. While it is not the first - implemenatation of this technology for Free operating systems it - is clearly the most powerful and hopefully even the most - secure. (Because it chroot()s and drops priviliges and suchlike) - For more information, especially about packaging this new tool for - distributions, please make sure to read: + IPv4LL as defined in RFC3927, a technology for assigning link-local IP + addresses without DHCP server. The same functionality has been available on + Windows under the name APIPA. While it is not the first implemenatation of + this technology for Free operating systems it is clearly the most powerful + and hopefully even the most secure. (Because it chroot()s and drops + priviliges and suchlike) For more information, especially about packaging + this new tool for distributions, please make sure to read: http://avahi.org/wiki/AvahiAutoipd - For the rationale for adding this program to the Avahi toolset - please read this mailing list thread: + and of course the man page included in the tarball. For the rationale for + adding this program to the Avahi toolset please read this mailing list + thread: http://lists.freedesktop.org/archives/avahi/2006-September/000863.html * Fix a segfault in the code handling static host name registrations * Add a few new entries to the service type database