Hello community, here is the log from the commit of package netatalk for openSUSE:Factory checked in at 2015-01-14 11:44:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/netatalk (Old) and /work/SRC/openSUSE:Factory/.netatalk.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "netatalk" Changes: -------- --- /work/SRC/openSUSE:Factory/netatalk/netatalk.changes 2014-11-19 20:30:52.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.netatalk.new/netatalk.changes 2015-01-14 11:45:08.000000000 +0100 @@ -1,0 +2,50 @@ +Sun Jan 11 19:57:29 UTC 2015 - je...@suse.com + +- fce: afpd: fix fce_event_names array overflow + * Added: fce-afpd-fix-fce_event_names-array-overflow.patch + +------------------------------------------------------------------- +Wed Jan 7 16:12:19 UTC 2015 - je...@suse.com + +- update to 3.1.7: + * UPD: Spotlight: enhance behaviour for long running queries, client + will now show "progress wheel" while waiting for first results. + * FIX: netatalk: fix a crash on Solaris when registering with mDNS + * FIX: netatalk: SIGHUP would kill the process instead of being + resent to the other Netatalk processes, bug #579 + * FIX: afpd: Solaris locking problem, bug #559 + * FIX: Handling of malformed UTF8 strings, bug #524 + * FIX: afpd: umask handling, bug #576 + * FIX: Spotlight: Limiting searches to subfolders, bug #581 + * FIX: afpd: reloading logging config may result in privilege + escalation in afpd processes + * FIX: afpd: ACL related error messages, now logged with loglevel + debug instead of error + * FIX: cnid_metad: fix tsockfd_create() return value on error + * FIX: CNID/MySQL: volume table name generation, bug #566. + + - via 3.0.6: + * FIX: charset conversion failed when copying from Mac OS 9. Bug #523. + * UPD: Don’t force S_ISGID for directories on FreeBSD. Bug #525. + * NEW: Add support for ZFS ACLs on FreeBSD with libsunacl. From FR#83. + * FIX: Active Directory LDAP queries for ACL support with new options + "ldap user filter" and "ldap group filter". Bug #526. + * NEW: Option "vol dbnest", when set to true, the CNID database for a + volume is stored in the volume root of a share in a directory + .AppleDB like in Netatalk 2. Defaults to false. From FR#84. + * FIX: Small fix in the DSI tickle handling. Bug #528. + * UPD: Enhance handling of connection attempts when hitting the + connection limit. Bug #529. + * FIX: Saving from Word to a folder that is a symlink to a folder on + another filesystem results in a crash of the afpd process and the save + to fail. This happens only if the option "follow symlinks" is enabled. + Bug #532. + * FIX: Disable Kerberos UAM if AFP service principal name can’t be + evaluated. Fixes bug #531. + * FIX: Fix handling of large number of volumes. Bug #527. + * NEW: Configure option --with-tbd which can be used to disable the use + of the bundled tdb and use a system installed version. +- Added build support for spotlight tracker but it is disabled due to + dbus security policy. + +------------------------------------------------------------------- Old: ---- netatalk-3.1.6.tar.bz2 New: ---- fce-afpd-fix-fce_event_names-array-overflow.patch netatalk-3.1.7.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ netatalk.spec ++++++ --- /var/tmp/diff_new_pack.Rz31JT/_old 2015-01-14 11:45:09.000000000 +0100 +++ /var/tmp/diff_new_pack.Rz31JT/_new 2015-01-14 11:45:09.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package netatalk # -# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,12 +17,13 @@ %define with_afpstats 0 +%define with_tracker_spotlight 0 Name: netatalk Url: http://netatalk.sourceforge.net/ Requires: cyrus-sasl Requires: db-utils -Version: 3.1.6 +Version: 3.1.7 Release: 0 %define libmaj 16 Summary: AFP Fileserver for Macintosh Clients @@ -35,11 +36,15 @@ # see bnc#849598 and http://sourceforge.net/p/netatalk/bugs/538/ Patch0: %{name}-wrong-error-message.patch Patch2: netatalk-libc-xattr.patch +Patch3: fce-afpd-fix-fce_event_names-array-overflow.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: db-devel -%if %{with_afpstats} == 1 +%if 0%{?with_afpstats}%{?with_tracker_spotlight} BuildRequires: dbus-1-devel BuildRequires: dbus-1-glib-devel +%if 0%{?with_tracker_spotlight} +BuildRequires: tracker-devel +%endif %endif BuildRequires: automake BuildRequires: fdupes @@ -109,12 +114,16 @@ %setup -q -n netatalk-%{version} %patch0 %patch2 -p1 +%patch3 -p1 cp -avL %{SOURCE1} . %build autoreconf -fiv LDFLAGS="-lpthread" \ CFLAGS="$RPM_OPT_FLAGS -Wall -g -pie -fpie" \ +%if 0%{?with_tracker_spotlight} +tracker_ver=$(rpm -q --queryformat="%{VERSION}" tracker-devel|cut -d . -f 1-2) +%endif %configure --bindir=/usr/bin \ --disable-static \ --with-pic \ @@ -134,6 +143,9 @@ %if %{with_afpstats} == 1 --with-afpstats \ %endif +%if 0%{?with_tracker_spotlight} + --with-tracker-pkgconfig-version=${tracker_ver} \ +%endif --with-init-style=suse-systemd make %{?_smp_mflags} mkdir examples @@ -207,7 +219,7 @@ %config(noreplace) %{_sysconfdir}/%{name}/afp.conf %config(noreplace) %{_sysconfdir}/%{name}/extmap.conf %config(noreplace) %{_sysconfdir}/%{name}/dbus-session.conf -%if %{with_afpstats} == 1 +%if 0%{?with_afpstats}%{?with_tracker_spotlight} %config(noreplace) %{_sysconfdir}/dbus-1/system.d/netatalk-dbus.conf %endif %dir %{_sysconfdir}/pam.d ++++++ fce-afpd-fix-fce_event_names-array-overflow.patch ++++++ From: Jeff Mahoney <je...@suse.com> Subject: fce: afpd: fix fce_event_names array overflow Commit 04ba0da53534 (fce: afpd: fix event names array) increased the size fce_event_names to accomodate the logout name but then initializes two more names that are outside of the array bounds. To avoid similar bugs in the future, the array should really be declared with designated initializers, but that's a C99 (and/or gcc) feature. I'm not familiar with the compilers shipped with systems that netatalk supports, other than Linux, to know if that's safe to use. For now, we'll just bump up FCE_LAST_EVENT to reflect that FCE_CONN_BROKEN has the highest value. Behavior varies based on whatever follows fce_event_names in the afpd executable. For my local build, fce_event_names[FCE_CONN_START] and fce_event_names[FCE_CONN_BROKEN] collide with the pathname static variable in of_statdir. The effect would be that if of_statdir has been called and we issue an FCE_CONN_BROKEN event with a notify script configured, we'll crash while composing the script command line. --- include/atalk/fce_api.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/include/atalk/fce_api.h +++ b/include/atalk/fce_api.h @@ -28,7 +28,7 @@ #define FCE_CONN_BROKEN 99 #define FCE_FIRST_EVENT FCE_FILE_MODIFY /* keep in sync with last file event above */ -#define FCE_LAST_EVENT FCE_LOGOUT /* keep in sync with last file event above */ +#define FCE_LAST_EVENT FCE_CONN_BROKEN /* keep in sync with last file event above */ /* fce_packet.fce_magic */ #define FCE_PACKET_MAGIC "at_fcapi" ++++++ netatalk-3.1.6.tar.bz2 -> netatalk-3.1.7.tar.bz2 ++++++ ++++ 19023 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
