Have package create empty %%DOCSDIR%% Approved by: ahzedd0adbfc6b
avahi -- denial of serviceentered 2011-03-13
Port details
net/avahi0.8
"meta-port" for the Avahi service discovery suite
- Maintainer
- gnome@FreeBSD.org
- Packages
- avahi 0.8
- Upstream
- up to date
- CPE
avahi:avahi- WWW
- https://www.avahi.org/
- Links
- cgit · VuXML
Unaddressed (13) · The CVE record lists this version as affected, no VuXML entry names the CVE
Updating to 0.9 would fix 11 of 13 unaddressed CVEs, according to the CVE records.
| CVE-2021-26720 | 7.8 | 2021-02-17 | avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a den… |
| CVE-2026-24401 | 6.5 | 2026-01-24 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed vi… |
| CVE-2025-68468 | 6.5 | 2026-01-12 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sendi… |
| CVE-2025-68471 | 6.5 | 2026-01-12 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sendi… |
| CVE-2023-38473 | 6.2 | 2023-11-02 | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function. |
| CVE-2023-38469 | 6.2 | 2023-11-02 | A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record. |
| CVE-2023-38470 | 6.2 | 2023-11-02 | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function. |
| CVE-2023-38471 | 6.2 | 2023-11-02 | A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function. |
| CVE-2023-38472 | 6.2 | 2023-11-02 | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function. |
| CVE-2026-34933 | 5.5 | 2026-04-03 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can cr… |
| CVE-2025-68276 | 5.5 | 2026-01-12 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can cras… |
| CVE-2025-59529 | 5.5 | 2025-12-18 | Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc5, the simple protocol… |
| CVE-2021-3468 | 5.5 | 2021-06-02 | A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled … |
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (1)
Show 1 fixed
VuXML entries whose affected range this version has left.
Commits (86)
Update to 0.6.12.4dc92334e4
Cleanup a leftover directory.e6a316180c
Update to 0.6.11.5988877fda
Add a PKGNAMESUFFIX when libdns support is enabled so that a CONFLICTS can be registered in mDNSResponder.edba20b53c
Make libdns (aka mDNSResponder) support optional (defaulting to off). Note: enabling this will add a conflict to mDNSResponder which may interfere with KDE applications. PR: 98566 Submitted by: Kirk Strauser <kirk@strauser.com> (with modifications)e4292daeb9
Fix the previous commit that will actually change the @PTHREAD_LIBS@ and @PTHREAD_CFLAGS@ to real in avahi-client.pc and avahi-glib.pc. Bump the PORTREVISION. Reported by: "Vladimir Timofeev" <vovkasm@gmail.com>983f13feea
Add PTHREAD_{CFLAGS,LIBS} to all avahi pkg-config files. This fixes xmms2 builds, among others.
PR: 97295
Submitted by: Alexander Botero-Lowry <alex@foxybanana.com>e86390918cNow that they re-broke pthread usage in 0.6.10, resurrect a patch to fix it. Reported by: Yasuda Keisuke <kysd@po.harenet.ne.jp>508be12c87
Update to 0.6.10. Security: This release fixes a few security vulnerabilities. See http://www.avahi.org/milestone/Avahi%200.6.10 for more details.199d07f054
- Disable mDNSResponder in avahi so net/mDNSResponder and avahi don't conflict Requested by: kde@dcc281a4c6
Presenting GNOME 2.14.1 for FreeBSD! Checkout http://www.gnome.org/start/2.14/ for the official release notes, and a list of all the gooides in this new release. In particular, GNOME 2.14 focused on performance, and they did not miss the mark. There's some new eye candy, but most of the big things are waiting until GNOME 2.16. On the FreeBSD side, we tried to clean up all the crashers we could The good news is that this release does not bring any big shared library version bumps, so you can almost do a simple portupgrade to get to 2.14. There are a few minor gotchas that will be documented in UPDATING shortly. The FreeBSD GNOME Team would like th thank the following users for their patches, feedback, and sometimes incessant complaing about crashes (you know who you are). Yasuda Keisuke <kysd@po.harenet.ne.jp> Pascal Hofstee <caelian@gmail.com> rmgls@wanadoo.fr tmclaugh Yuri Pankov <yuri.pankov@gmail.com> sajd on #freebsd-gnome ade ankon on #FreeBSD-Gnome mux Pascal Hofstee <caelian@gmail.com> QuiRK on #freebsd-gnome Vladimir Timofeev <vovkasm@gmail.com>798e9bed2a
Track the dbus socket path change. Reported by: marcus4f5f501753
Fix avahi's use of sendmsg(2) so that it actually works.475c8049b4
Correct the path to the dbus system socket.60c2f5ef22
Update to 0.6.9.dccc447c3c
Conversion to a single libtool environment. Approved by: portmgr (kris)8503536d38
Add avahi-sharp - Mono bindings for Avahi service discovery2bf52d522f
Prepare port to act as a master to an avahi-sharp slave Approved by: marcus on IRC3f88c858b1
Chase shlib bump of libexpat.a06ee65df0
In trying to solve a problem with inconsistencies when linking with -shared and ${PTHREAD_LIBS}, avahi linked its binaries with -lc_r on FreeBSD. This caused nasty runtime failures on i386, and build failures on alpha, amd64, and other platforms where libc_r no longer exists.
To fix this, don't go through the song and dance of trying to solve the
-shared/${PTHREAD_LIBS} problem, and just link with ${PTHREAD_LIBS} as
usual. Of course, ports that depend on avahi's libraries will break by
doing this, so add ${PTHREAD_{LIBS,CFLAGS}} to the right pkg-config files
to make sure dependencies will pick them up.
Patch adapted from: Yasuda Keisuke <kysd@po.harenet.ne.jp>7da8cdf04a- Update to 0.6.55a7bdcd5ba
- Update to 0.6.4e3c4e478c9
- Update to 0.6.3 - Update WWW PR: ports/91724 Submitted by: thomas@bsdunix.ch55f736d9c8
Fix build with dbus-0.60. Obtained from: Avahi SVNc2494342ad
Chase the dbus shared lib version.3549788aa1
Make sure the avahi-daemon socket is written to the correct location.a947a59137
Teach avahi the correct location of the dbus socket. Submitted by: sajd on #freebsd-gnomeb4aa4dc6e9
Update to 0.6.1.bd3ccd2ee1
Fix capitalization of IGNORE message. Pointed out by: kris0b56dcdf49
Mark IGNORE on FreeBSD 4.X. Reported by: pointyhat via krise6e3936ed9
Add optional GTK2 support to avahi.6a0fe7b9a0
- Switch avahi-daemon to avahi_daemon Pointed out by: marcus71dfce71c0
- Fix typo so the dnsconfd starts - Make the avahi-dnsconfd rcNG require avahi-daemond184f5dbd4
Add dbus to the REQUIRE line for the rcND scripts to ensure dbus is started first. Pointed out by: ahze9630e7bef6
Add avahi, another mDNS, Zeroconf, Bonjour, Redezvous, etc. implementation ...but with a twist. Avahi is a D-BUS based mDNS solution from Freedesktop.org. Avahi provides Service discovery on a local network -- this means that you can plug your laptop or computer into a network and instantly be able to view other people who you can chat with, find printers to print to or find files being shared. This kind of technology is already found in MacOS X (branded 'Rendezvous', 'Bonjour' and sometimes 'ZeroConf') and is very convenient. WWW: http://www.freedesktop.org/Software/Avahi A lot of the ground work for this port was provided by ahze.d59271e6a5