-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 13 Dec 2019 16:00:32 +0000 Source: avahi Architecture: source Version: 0.7-5 Distribution: unstable Urgency: medium Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 917047 945034 Changes: avahi (0.7-5) unstable; urgency=medium . * Team upload * Build-depend on python-gi in addition to python-gi-dev. python-gi-dev is likely to lose its python-gi dependency to help with tracking the removal of Python 2 dependencies. (Closes: #945034) * d/p/Drop-legacy-unicast-queries-from-address-not-on-local-lin.patch: Add patch from upstream to fix traffic amplification attacks (CVE-2017-6519, CVE-2018-1000845; Closes: #917047) * d/patches: Annotate with forwarding status * d/avahi-daemon-check-dns.sh: Wrap host command with timeout(1) to avoid it stalling indefinitely on some systems. Mitigates: #559927, #898038, #929010. Thanks to Trent Lloyd and Ubuntu. Checksums-Sha1: 4100f23ca44729088a493900a4902d93086676d2 4043 avahi_0.7-5.dsc a38dd59b0ebc3c4b12b9bd63b9eba5f52fbaab72 32684 avahi_0.7-5.debian.tar.xz 8c9617be0bbfa05a68154710b02cc13141eba5b2 15858 avahi_0.7-5_source.buildinfo Checksums-Sha256: 0349f4dafe0103575a3c7965790586074c2536b336a72638b03fde3cb68e55dd 4043 avahi_0.7-5.dsc 61b82b963668695c3890923f51709c257c3f0e2f091d6fd210b92a0baf01f6b9 32684 avahi_0.7-5.debian.tar.xz c07516ea1b960ef4a93ea401ad0eeb22beecc15419ee25e1ba63ca0a9728e4b8 15858 avahi_0.7-5_source.buildinfo Files: 646f34aa4bcf67d7f9cbb6ace0010171 4043 net optional avahi_0.7-5.dsc afb9dae1bd0db87c997fa4723695169c 32684 net optional avahi_0.7-5.debian.tar.xz 4caf10b8db6b388658b120ace6832a82 15858 net optional avahi_0.7-5_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAl3zv9gQHHNtY3ZAZGVi aWFuLm9yZwAKCRDgWuFHj4FMT4v4D/44IMZrivx0Ybf8wz0oNo20kczFKGvnZz58 WW+fG9vZCN8tZL4yUqwolb6NfnuueY34J5Ms5VF9OfY6suWGzxPZgeBRiJ2x9dHr /qFyvi1DaOFByW/yd8LZ4NKbgx+PR6l9vqt3/55YiuYL4lNN3MwnvFS4WYbrF2hJ jMFDwHeeobbloeNl1bJR/OX7KlLDWCBeZNRGLK7S3ygVqEZi8naSwh0p3Kuubfeb U8qD0T1sSFwbJXlNbqv1qhNE7cjDmJL99gbWBqF4waH1yV4+qb5Q9/yJYPj9Lp20 FCZoY0j9zn1JpZqRLWgUUdf5ttwrgIUzzlwQnMHm+XYSCb8U6xabAGXOU6RaaOzF H8l/aSbS+xQ6NcgfdyFHBAGiiyHjv1/Z67uv/ZttpRC6XGs0qOG2gyZEOyUdwN6t 5VqP0t2mQnYIbNbYeQ/GeuneEt/vlhnIkvIqZGJs+pPGAljaIgjrVpbGF5GiaSTj xIyqhnsQ9L9XCuW7wFe1kzVUCAhdtOUpb5ldT2Ie0MSoyLKjbqKvP4+Hn7B23xO8 GzEdB6xEsp5eB6eEDj2i3pz3Umk9f57njzBVEpPNMiAfJT5jmuj1hVaWJHWttayy X0CIdaNi1/oUKaQfvmcX3pz/X83PjzFjMDLXHTdR99JyKCPbvY0KKXMIYInAco+r xxmv/Ptq2w== =ANea -----END PGP SIGNATURE-----