Netatalk 2.4.0

Netatalk 2.4.0 is available!

The Netatalk team is proud to announce the first release in the Netatalk 2.4 release series. Unlike the Netatalk 3.x releases, 2.x maintains support for the AppleTalk transport layer for networking with very old Mac and Apple II clients.

This release contains a number of breaking changes compared to Netatalk 2.3, and is recommended for early adopters. It is highly recommended that you take a backup of your production environment before attempting to upgrade an existing Netatalk deployment to 2.4.0.

A companion release of the Webmin Module (v2.0) is also available, with support for the new and updated features in Netatalk 2.4.0, as well as much added functionality.

Please see NEWS for the full changelog.

New Features

Meson build system

The Meson build system has been introduced, and exists in parallel with the traditional GNU Autotools build system. We plan to remove Autotools in a future feature release version of Netatalk.

One noticeable, practical difference compared to Autotools, is that all features are enabled by default. If the requisite libraries and headers are found, the feature will be compiled. If they are not found, a warning will be left in the setup log.

Additionally, whereas Autotools had a hodgepodge of --enable-*|--disable-*|--with-*|--without-* options, Meson only has -Dwith-* which are booleans that take true|false, or -Dwith-*-path options that are of the string type and take the path to libraries, headers, or binaries.

Some options were renamed in Meson to align with Netatalk 3.x:

• --enable-debian|redhat|systemd|etc. -> -Dwith-init-style=
• --disable-install-privileged -> -Dwith-init-hooks=true|false

Please see INSTALL for detailed instructions how to use the new build system. The online manual also has a new appendix with build instructions for specific operating systems.

Consequently, starting with this release, we no longer distribute tarballs that were bootstrapped by autoconf. We still ship the bootstrap script and all the macros required so that you can bootstrap it yourself if needed.

Bundled WolfSSL

OpenSSL 3.0 has deprecated the DHCAST128 and DES encryption algorithms used by Apple's DHX and Random Number UAMs, respectively. These UAMs are used for (somewhat) secure authentication with very old Mac OS clients (early OS X, Classic Mac OS, and Apple IIGS.)

We are now bundling a subset of WolfSSL with Netatalk, as the default encryption provider for these UAMs. Building Netatalk with bundled WolfSSL requires the use of the Meson build system.

Init Scripts

An OpenRC init script has been added, which was adapted from the existing Gentoo init script.

Dependency Changes

LDAP API

We have bumped the LDAP API version, and now require OpenLDAP v2.3 or later.

As a result, a new afp.conf option ldap_uri has been introduced, while the old ldap_server has been removed. The new option has a different syntax. See the manual for more information.

Perl

The Perl runtime is now an optional dependency for Netatalk (it was previously mandatory.) Only when Perl is detected at compile time, the administrative CLI utilities that use the Perl runtime are installed.

Deprecated Features

The following runtime options have been removed.

• loginmaxfail (afpd.conf)
• passwdminlen (afpd.conf)
• noallmulti (atalkd.conf)

What's Changed

• [2.4] Swap out the old ldap_init for the wonderful ldap_initialize by @rdmark in #767
• [2.4] Fix minor syntax error in sys/netatalk/at.h leading to linux headers not being picked up by meson by @dgsga in #773
• [2.4] docs: Update git instructions and README.md by @rdmark in #784
• Create meson build system for [2.4] by @dgsga in #776
• [2.4] Remove obsolete Solaris Appletalk kernel module code by @dgsga in #830
• [2.4] docs: Refresh DEVELOPER and AppleTalk readmes by @rdmark in #832
• [2.4] docs: Generate compilation manual page from build.yml by @rdmark in #838
• [2.4] docs: improve description of mimic model option by @rdmark in #843
• [2.4] Overhaul of all init scripts by @rdmark in #869
• [2.4] docs: Overhaul the install and configuration chapters by @rdmark in #874
• [2.4] Remove hard dependencies on perl and grep by @rdmark in #908
• [2.4] Fix missing rresvport function on systems using musl C library by @dgsga in #920
• [2.4] Update rc.openrc.tmpl: a2boot and timelord depend on atalkd by @NJRoadfan in #927
• [2.4] afppasswd: Check for valid password length by @rdmark in #933
• Set service name as hostname in init scripts by @rdmark in #935
• [2.4] afppasswd: Introduce -w option for password string by @rdmark in #937
• [2.4] docker: Alpine based container + Meson build by @rdmark in #909
• [2.4] Document -notransall option by @rdmark in #981
• [2.4] meson: Add WolfSSL as an external or built-in SSL provider by @dgsga in #986
• [2.4] Fix broken cracklib macro in autotools and meson (#940) by @dgsga in #990
• [2.4] Enable the DHX UAM with embedded WolfSSL in default conf by @rdmark in #994
• [2.4] docs: Move documentation from conf file templates to man pages by @rdmark in #1017
• [2.4] afpd: Remove multiple deprecated options by @rdmark in #1019
• [2.4] netatalkd: Netatalk service can only be stopped if it is already running by @rdmark in #1031
• [2.4] Enable building with quota and libtirpc on Fedora by @rdmark in #1045
• [2.4] Update data types in codebase by @dgsga in #1009
• [2.4] meson: Fix issues with quota support on macOS and linux hosts by @dgsga in #1093
• [2.4] atalkd: Remove multicast workaround for Linux by @rdmark in #1094
• [2.4] meson: Simplify options semantics and standardize feature macros by @dgsga in #1109
• [2.4] meson: Set executable flags when installing scripts and rename lp2pap by @rdmark in #1114
• [2.4] docker: Bump to Alpine 3.20 base image and fix group creation by @rdmark in #1115
• [2.4] Freshen up README.md by @rdmark in #1123

Full Changelog: netatalk-2-3-2...netatalk-2-4-0

Netatalk 3.2.0

Netatalk 3.2.0 is available!

The Netatalk team is proud to announce the first release in the Netatalk 3.2 release series.

This release contains a number of breaking changes compared to Netatalk 3.1, and is recommended for early adopters. It is highly recommended that you take a backup of your production environment before attempting to upgrade an existing Netatalk deployment to 3.2.0.

A companion release of the Webmin Module (v1.1) is also available, with support for the new and updated features in Netatalk 3.2.0, as well as a range of improvements and bugfixes.

Please see NEWS for the full changelog.

New Features

Meson build system

The Meson build system has been introduced, and exists in parallel with the traditional GNU Autotools build system. We plan to remove Autotools in a future feature release version of Netatalk.

Please see INSTALL for instruction how to use the new build system. The online manual also has a new appendix with build instructions for specific operating systems.

Consequently, starting with this release, we no longer distribute tarballs that were bootstrapped by autoconf. We still ship the bootstrap script and all the macros required so that you can bootstrap it yourself if needed.

Bundled WolfSSL

OpenSSL 3.0 has deprecated the DHCAST128 and DES encryption algorithms used by Apple's DHX and Random Number UAMs, respectively. These UAMs are used for (somewhat) secure authentication with very old Mac OS clients (early OS X, Classic Mac OS, and Apple IIGS.)

We are now bundling a subset of WolfSSL with Netatalk, as the default encryption provider for these UAMs. Building Netatalk with bundled WolfSSL requires the use of the Meson build system.

Init Scripts

New init scripts have been added: FreeBSD, OpenBSD, and OpenRC (previously: Gentoo).

Additionally, the macOS launchd init script plist has been renamed to io.netatalk.* (from com.netatalk.*)

Added compile time options

• -Dwith-embedded-ssl – Enable or disable the bundled SSL provider (currently: WolfSSL).
• -Dwith-init-style= / --with-init-style= freebsd | openbsd | openrc
• -Ddisable-init-hooks / --disable-init-hooks – Ask the build system to skip a any install or uninstall hooks that may require heightened privileges. This enables distribution scripts or installation in certain non-privileged chroot environments. Recommended for downstream packaging.

Added runtime options

• ldap uri – URI of the LDAP directory server
• log microseconds – When set to no and used together with log file, the resulting logs will have timestamps with whole second accuracy, rather than the default microsecond.
• fce sendwait – In milliseconds, set a delay for the emission of FCE events.

Dependency Changes

LDAP API

We have bumped the LDAP API version, and now require OpenLDAP v2.3 or later.

As a result, a new afp.conf option ldap uri has been introduced, while the old ldap server has been removed. The new option has a different syntax. See the manual for more information.

Spotlight toolchain

The bundled talloc library, as well as pre-generated SPARQL parser code, have been removed from distribution. These are key parts of the Spotlight tech stack, and must now be supplied by the user or packager for Spotlight functionality.

This introduces a compile- and runtime dependency on a system-supplied shared talloc library, which most contemporary operating systems have at the time of writing.

Additionally, a yacc parser (e.g. bison) and lexer (e.g. flex) are now compile time dependencies for building with Spotlight support.

Perl

The Perl runtime is now an optional dependency for Netatalk (it was previously mandatory.) Only when Perl is detected at compile time, the administrative CLI utilities that use the Perl runtime are installed.

At the same time, the afpstats CLI utility has been rewritten in Perl (previously: Python.)

Deprecated Features

Andrew File System

Andrew File System is a historical distributed file system with limited adoption at the time of writing. The AFS integration layer in Netatalk has not been functional for years, and was removed in this version.

CNID backends

The Concurrent Database (cdb) and Trivial Database (tdb) CNID backends have been removed in this version. The former was previously the default backend (v2.0 and earlier), but is prone to data loss and corruption. The latter was considered an incomplete implementation.

In Netatalk 3.2.0, Database Daemon (dbd) is the default and recommended backend, while the MySQL (mysql) backend is considered experimental but reportedly used in production environments with success.

What's Changed

• Remove unused pap directory in libatalk by @dgsga in #490
• Remove trailing whitespace from codebase by @dgsga in #495
• Fix libevent2 linking on OpenIndiana by @dgsga in #512
• libatalk: Restore invalid metadata cleanup in ad_open.c by @rdmark in #513
• Remove substitutions for configurable file paths in man pages by @rdmark in #514
• add return 0 into become_user_permanently() by @pgajdos in #524
• Deprecate legacy cnid backends by @dgsga in #528
• Remove redundant AUTHORS file by @rdmark in #538
• Remove code for obsolete host operating systems by @dgsga in #530
• Better default Homes basedir regex example by @rdmark in #547
• Validate size of ace_count in FPSetACL request by @rdmark in #546
• Update comments in configure.ac and netatalk macro by @dgsga in #568
• pam_conv: Only Solarish seems to use non-const struct type. by @rdmark in #563
• Remove bundled talloc and only build libatalk/libtalloc when needed by @dgsga in #565
• Delete obsolete locking directory in libatalk by @dgsga in #570
• Enable / disable the entire spotlight support toolchain at configure time by @dgsga in #572
• libatalk: fix parsing of macOS created AppleDouble files by @rdmark in #575
• Compile spotlight.h only when Spotlight is enabled by @rdmark in #578
• Introduce option to control the format of file log timestamp by @rdmark in #583
• Standardize man page heading case by @rdmark in #598
• Deprecate AFS (Andrew File System) support in Netatalk 3 by @dgsga in #594
• Fix Spotlight support detection and compilation on Fedora by @dgsga in #600
• Update summary macro to check for all three Spotlight requirements by @dgsga in #604
• uams: Link PGP UAM with CRYPT_LIBS by @rdmark in #608
• Improve logger_test and remove outdated comments by @rdmark in #601
• afpd: Prevent a potential buffer overflow when changing password by @neko-hat in #628
• afpd: Remove tdb fallback mechanism, and other remnants of tdb and cdb by @rdmark in #612
• Check for attr.h before using (Solaris 10 compat) by @rdmark in #622
• libatalk: Use portable fcntl() instead of flock() by @rdmark in #624
• test program should only be compiled and run on make check/distcheck by @dgsga in #637
• Refresh docs and adjust for the upcoming 3.2 release by @rdmark in #638
• Fix Zeroconf support on *BSD platforms by @dgsga in #640
• Remove unneeded HAVE_TRACKER conditional by @dgsga in #664
• manual: Link to custom download and wiki mirrors in navbar by @rdmark in #669
• manual: Link to docs landing page by @rdmark in #687
• Clean up obsoleted man pages by @rdmark in #691
• Cleanup of obsolete gitignore filters by @rdmark in #692
• Clean up remainders of SourgeForge hosting by @rdmark in #703
• Fix 'MAXPHYS' macro redefinition warning in macOS by @dgsga in #706
• Remove binary files and logo images from revision control by @rdmark in #716
• Docker configuration for netatalk v3 by @rdmark in #713
• Remove residual code for discontinued oses by @rdmark in #723
• Make macOS i...

Netatalk 2.3.2

Netatalk 2.3.2 is available!

The Netatalk development team is proud to announce a new release of the Netatalk 2 release series, notable for maintaining support for AppleTalk clients.

New Features

A Dockerfile and container entry script have been added which allows you to run Netatalk 2 containerized. AppleTalk networking is supported if the host OS has an AppleTalk network stack. Either build a Docker image yourself from the code, or pull a pre-built image from Docker Hub.

A macOS style launchd configuration file and netatalkd helper script has been added. Build it by configuring the build system with the --enable-macos parameter. Using these allows you to bypass recent limitations in macOS Sonoma that prevents forking daemons to run.

Netatalk's pap is now able to print to an ImageWriter II or LQ connected to the LocalTalk network, with papstatus providing more status information for this line of Apple printers.

What's Changed

• [2.3] Create Dockerfile and entry point by @rdmark in #704
• [2.3] Remove binary logo images from revision control by @rdmark in #717
• [2.3] Docker: Unprivileged build; expose ports and volume by @rdmark in #714
• [2.3] Docker: Check for mandatory env variables; more configurability by @rdmark in #721
• [2.3] atalkd: Bail out when attempting to -seed a single interface by @rdmark in #720
• [2.3] pap,papstatus: changes to allow Imagewriters to print, and nicer status messages by @nutzman in #722
• [2.3] docs: Correct descriptions for afpd -D and -T options by @rdmark in #727
• [2.3] Clean up residual CVS commit headers by @rdmark in #734
• [2.3] docs: Improve man page summaries by @rdmark in #733
• [2.3] docs: Print netatalk version as subtitle, and header on each html page by @rdmark in #741
• [2.3] docs: manual XML source improvements, backported from main by @rdmark in #753
• [2.3] Create init scripts for macOS by @rdmark in #757
• [2.3] Detect system docbook stylesheets at configure time by @rdmark in #763
• [2.3] docker: Check for atalkd interface before starting atalkd daemons by @rdmark in #769
• [2.3] Rename launchd plist to io.netatalk* and sort file names by @rdmark in #765

New Contributors

• @nutzman made their first contribution in #722

Full Changelog: netatalk-2-3-1...netatalk-2-3-2

Netatalk 2.3.1

Netatalk 2.3.1 is available!

The Netatalk development team is proud to announce a new feature release of the Netatalk 2 release series, notable for maintaining support for AppleTalk clients.

This version continues the effort of removing obsoleted code while improving stability and compatibility of all components. All users of prior Netatalk v2 releases are now encouraged to update their installations to this latest version.

New features

The following compile time option has been added:

• --with-docbook – Used to generate man and html pages from XML sources, the latter which are now included in the tarball.

Breaking changes

The following obsoleted features have been removed:

• Kerberos IV UAM – Version IV backwards compatibility headers were removed from Kerberos V 1.11 in 2012
• AppleDouble adouble:osx – The AD format that Mac OS X 10.3 used, but was removed in subsequent versions
• AppleDouble adouble:sfm – Microsoft's Services For Macintosh compatibility mode that required a long-gone hacked version of Samba

atalkd

The RTMP broadcast quirks mode that was introduced in v2.3.0 has been replaced with an automatic activation when atalkd is configured with a single interface and the -router flag.

Therefore, the now-unneeded -q command line option has been removed.

What's Changed

• [2.3] Fix Zeroconf support on *BSD platforms by @rdmark in #647
• [2.3] Add NetBSD, Solaris, Fedora build workflows by @rdmark in #642
• [2.3] Use correct BSD make syntax in initscripts Makefile by @rdmark in #644
• [2.3] Remove long-outdated README and VERSION files, superseded by man pages by @rdmark in #641
• [2.3] Two small memory handling patches ported from netatalk-classic by @rdmark in #645
• [2.3] macusers: Fallback output when full name not available by @rdmark in #652
• [2.3] papd: Update cups_print_job() to use CUPS destination API by @NJRoadfan in #651
• [2.3] papd: Update cups_autoadd_printers() to use current API call. by @NJRoadfan in #655
• [2.3] workflow: Compile on Debian with cracklib, ldap, quota by @rdmark in #653
• [2.3] Use GitHub actions v4 for workflow jobs by @rdmark in #662
• [2.3] manual: Link to custom download and wiki mirrors in navbar by @rdmark in #671
• [2.3] papd - More cleanup and moderization of print_cups.c by @NJRoadfan in #672
• [2.3] papd - Use cups_get_language() function by @NJRoadfan in #674
• [2.3] papd: Use cupsGetOptions() to get printer URI by @NJRoadfan in #678
• [2.3] atalkd: Fix for RTMP broadcast bug. by @NJRoadfan in #680
• [2.3] Workflow: Bump SonarScanner to v2 by @rdmark in #685
• [2.3] libatalk: Appease Fedora gcc incompatible pointer error by @rdmark in #683
• [2.3] afpd: Remove support for AppleDouble osx and sfm by @rdmark in #673
• [2.3] Remove obsoleted Kerberos v4 UAM by @rdmark in #686
• [2.3] Generate man pages through build system by @rdmark in #690
• [2.3] Cleanup of obsolete gitignore filters by @rdmark in #693
• [2.3] manual: Update URLs to internal resources by @rdmark in #695
• [2.3] papd: Refactor and cleanup cups_get_printer_ppd() by @NJRoadfan in #700
• [2.3] papd: update cups_get_printer_status() by @NJRoadfan in #696
• [2.3] manual: Remove obsoleted html-upload target, and update css URL by @rdmark in #701

Full Changelog: netatalk-2-3-0...netatalk-2-3-1

Netatalk 2.3.0

Netatalk 2.3.0 is available!

The Netatalk development team is proud to announce a new feature release from the version 2 branch Netatalk, notable for maintaining support for AppleTalk clients.

This version contains stability and security improvements, while removing long-obsoleted or less used functionality. Early adopters are recommended to upgrade their deployments to version 2.3.0.

New features

The following compile time options have been added:

• --disable-install-privileged (skips actions that require root access)
• --with-systemd-prefix

Breaking changes

As of Netatalk 2.3.0, the Database Daemon dbd CNID backend is the only one provided for use in production environments. The last CNID backend is still available for testing and read-only volumes.

The DHX UAM is now disabled by default, to avoid errors stemming from OpenSSL v3.0 removal of 128 bit modulus size support. See #358 for more details on how to make DHX work on your system, and on using alternative UAMs for authenticating with older clients.

The following features have been removed.

• Concurrent Database (cdb) CNID backend
• Trivial Database (tdb) CNID backend
• Volume mount preexec and postexec commands
• Dropbox / dropkludge
• Force UID/GID
• Andrew File System (AFS)

Compatibility macros for the following long-obsoleted operating systems have been removed.

• SunOS
• IRIX
• AIX
• Ultrix
• HPUX
• Tru64,
• GNU/kFreeBSD
• UnixWare

afpd

The following runtime options have been removed:

• nodebug (afpd.conf)
• nostat
• preexec
• postexec
• root_preexec
• root_postexec
• preexec_close
• root_preexec_close
• dropbox
• dropkludge

The following compile time options have been removed:

• --enable-debug
• --enable-debug1
• --enable-afs
• --enable-force-uidgid
• --enable-dropkludge
• --with-cnid-tdb-backend
• --with-cnid-cdb-backend
• --with-webmin

Renamed:

• asip-status.pl has been renamed to asip-status

atalkd

Netatalk versions 2.2.7 through 2.2.10 had the non-standard behavior of not rebroadcasting routing information originating from other subnets. This made certain Asanté or Dayna LocalTalk hardware bridges able to coexist with netatalk, with the drawback that subnets behind other routers aren't visible to the netatalk clients.

Netatalk 2.3.0 restores the correct behavior as per the AppleTalk specification. If you want to emulate the previous non-standard behavior, you can start atalkd with the newly introduced -q parameter.

What's Changed

• [2.2] Run distcheck target in Ubuntu job by @rdmark in #395
• [2.2] Add Documentation tags to systemd templates by @rdmark in #394
• [2.2] Support building against libtirpc as separate from glibc by @rdmark in #387
• [2.2] Fix detection of Berkeley DB installed in multiarch location by @rdmark in #391
• [2.2] Configurable systemd prefix by @rdmark in #417
• [2.2] autoconf: Option to skip privileged hooks for make install by @rdmark in #419
• Flip the check for tm->tm_gmtoff to appease FreeBSD by @rdmark in #416
• [2.2] Rename asip-status.pl to asip-status by @rdmark in #397
• [2.2] Fix user visible typos and improve English grammar by @rdmark in #399
• [2.2] autoconf: put UAM libraries in $libdir by @rdmark in #420
• [2.2] Correct install hook for static config files by @rdmark in #421
• [2.2] Create man page for cnid2_create tool by @rdmark in #411
• [2.2] Do not install at.h when glibc header is present by @rdmark in #414
• [2.2] autoconf: Fold a2boot and timelord under the appletalk conditional by @rdmark in #424
• [2.2] Write a Description and Short-Description for the Debian init script by @rdmark in #437
• [2.2] Document binheader, nadheader, and showpap in man pages by @rdmark in #438
• [2.2] Improve readability of manual README by @rdmark in #440
• [2.2] Recommend BerkeleyDB 5.3 by @rdmark in #447
• [2.2] Update URL for css stylesheet in manual pages by @rdmark in #445
• [2.2] workflow: Flesh out pull_request trigger and remove ignored paths by @rdmark in #453
• [2.2] Use absolute XSL stylesheet path and source VERSION for manual pages by @rdmark in #459
• [2.2] Remove obsoleted bug reporting sections by @rdmark in #466
• [2.2] manpages: Fix typos, improve layout in afpd.conf man page by @rdmark in #472
• Revert "[2.2] Update atalkd.service to be consistent with other init scripts." by @rdmark in #473
• [2.2] Default to xz compression for tarballs by @rdmark in #483
• [2.2] Remove vestiges of a Webmin install target by @rdmark in #517
• [2.2] Name the default home dir shared volume; clean up template by @rdmark in #519
• [2.2] Remove redundant id properties in man page by @rdmark in #520
• [2.3] Port 2.x fork code quality improvements by @rdmark in #521
• [2.2] Rearrange the dummy file system paths for the tests by @rdmark in #522
• [2.3] Don't seteuid() if process is already running as that uid. by @rdmark in #532
• [2.3] Enable, sort, and flesh out file type translation by @rdmark in #534
• [2.3] Remove dangerous afprun module from codebase by @dgsga in #531
• [2.3] Remove experimental Dropbox Kludge feature by @rdmark in #539
• [2.3] Remove redundant AUTHORS file by @rdmark in #537
• [2.3] Remove the "Force UID/GID" feature by @rdmark in #541
• [2.3] Add long-forgotten patch to make papd safer. by @rdmark in #527
• [2.3] Remove nostat option by @rdmark in #542
• [2.3] Minor cleanup of man pages by @rdmark in #544
• [2.3] Validate size of ace_count in FPSetACL request by @rdmark in #551
• [2.3] Run apt-get update before installing packages by @rdmark in #558
• [2.3] Fixes for clean compilation on OpenIndiana by @rdmark in #564
• Revert Asante and Dayna GS/OS Fix. by @NJRoadfan in #596
• Add README for the v2.3 branch by @rdmark in #588
• [2.3] Document the correct default log level for afpd by @rdmark in #589
• [2.3] Standardize man page heading case by @rdmark in #590
• [2.3] Deprecate AFS (Andrew File System) support by @rdmark in #591
• atalkd: Introduce 3rd party bridge quirks mode by @rdmark in #597
• [2.3] uams: Link PGP UAM with CRYPT_LIBS by @rdmark in #607
• [2.3] Build Kerberos V and PGP UAMs in CI workflow by @rdmark in #613
• [2.3] Improve logger_test, while re-enabling the syslog tests by @rdmark in #616
• [2.3] Enable only DHX2 UAM by default by @rdmark in #619
• [2.3] Switch from compile-time debug to run-time debug where applicable by @rdmark in #618
• [2.3] Remove cdb and tdb CNID backends by @rdmark in #611
• [2.3] Use portable fcntl() instead of flock() by @rdmark in #626
• [2.3] afpd: Use correct username length in afp_changepw by @rdmark in #630
• [2.3] Clean up residual svn commit headers by @rdmark in #631
• [2.3] Minor cleanup of residual afprun code by @rdmark in #632
• Preparing for stable release 2.3.0 by @rdmark in #633

New Contributors

• @NJRoadfan made their first contribution in #596

Full Changelog: netatalk-2-2-10...netatalk-2-3-0

Netatalk 3.1.18

Netatalk 3.1.18 is available!

The Netatalk development team is proud to announce the latest release of the Netatalk 3.1 release series. Users are encouraged to update their servers to the 3.1 release series which is the stable and supported version for production systems.

What's Changed

• FIX: CVE-2022-22995: Harden create_appledesktop_folder(), GitHub #480
• FIX: Correct syntax for libwrap check in tcp-wrappers.m4, GitHub #500
• FIX: Correct syntax for libiconv check in iconv.m4, GitHub #491
• FIX: quota is not supported on macOS, GitHub #492
• FIX: dtrace is not supported on FreeBSD aarch64, GitHub #498

Full Changelog: netatalk-3-1-17...netatalk-3-1-18

Netatalk 3.1.17

Netatalk 3.1.17 is available!

The Netatalk development team is proud to announce the latest release of the Netatalk 3.1 release series. Users are encouraged to update their servers to the 3.1 release series which is the stable and supported version for production systems.

What's Changed

• FIX: CVE-2023-42464: Validate data type in dalloc_value_for_key(), GitHub #486
• FIX: Declare a variable before using it in a loop,
  which was throwing off the default compiler on RHEL7, GitHub #481
• UPD: Distribute tarballs with xz compression by default, instead of gzip, GitHub #478
• UPD: Add AUTHOR sections to all man pages with a reference to CONTRIBUTORS,
  and standardize headers and footers, GitHub #462

Full Changelog: netatalk-3-1-16...netatalk-3-1-17

Netatalk 3.1.16

Netatalk 3.1.16 is available!

The Netatalk development team is proud to announce the latest release of the Netatalk 3.1 release series. Users are encouraged to update their servers to the 3.1 release series which is the stable and supported version for production systems.

What's Changed

• FIX: libatalk: Fix CVE-2022-23121, CVE-2022-23123 regression
  - Added guard check before access ad_entry(), GitHub #357
  - Allow zero length entry, for AppleDouble specification, GitHub #368
  - Remove special handling for COMMENT entries, GitHub #236
  - The assertion for invalid entires is still enabled,
  so please report any future "Invalid metadata EA" errors!
• FIX: build system: Fix autoconf warnings and modernize bootstrap
  and configure.ac, GitHub #331
• FIX: build system: Correct syntax in libevent search macro,
  summary macro and netatalk executable makefile, GitHub #342
• FIX: build system: Fix native libiconv detection on macOS, GitHub #343
• FIX: build system: Use non-interactive PAM session when available, GitHub #361
• FIX: build system: Fix detection of Berkeley DB installed
  in multiarch location, GitHub #380
• FIX: build system: Fix support for cross-compilation
  with mysql_config and dtrace, GitHub #384
• FIX: build system: Support building quota against libtirpc, GitHub #385
• FIX: build system: Fix variable substitution in configure summary, GitHub #443
• UPD: build system: Remove ABI checks and the --enable-developer option, GitHub #262
• FIX: initscript: Improvements to Debian SysV init script
  - Source init-functions, GitHub #386
  - Add a Description and Short-Description, GitHub #428
• FIX: docs: Clarify localstate dir configurability in manual, GitHub #401
• UPD: docs: Make BerkeleyDB 5.3.x the recommended version, GitHub #8
• FIX: docs: Update SourceForge URLs to fix CSS styles and download links
• FIX: docs: Remove obsoleted bug reporting sections, GitHub #455
• FIX: Sundry typo fixes in user visible strings and docs, GitHub #381, GitHub #382
• UPD: Rename asip-status.pl as asip-status
  to make naming implementation-agnostic, GitHub #379
• UPD: Remove redundant uid.c|h files in etc/afpd
• UPD: Don't build and distribute deprecated cnid2_create tool, GitHub #412
• UPD: Remove deprecated megatron code and man page, GitHub #456
• UPD: Remove deprecated uniconv code and man page, GitHub #457
• UPD: Improvements to the GitHub CI workflow

Full Changelog: netatalk-3-1-15...netatalk-3-1-16

Netatalk 2.2.10

Netatalk 2.2.10 is available!

The Netatalk development team is proud to announce the latest release of the Netatalk 2.2 release series. Users are encouraged to update their servers to the 2.2 release series which is the stable and supported version for production systems.

What's Changed

• [2.2] workflow: add libcups2-dev dependency by @rdmark in #335
• [2.2] Correct doc README by @rdmark in #326
• [2.2] Fix all warnings on running bootstrap by @dgsga in #346
• [2.2] bootstrap: Add checks for required packages by @rdmark in #338
• [2.2] Enable compilation on macOS hosts v2 by @dgsga in #349
• [2.2] macros: Use the AC_LANG_SOURCE macro, issue #347 by @rdmark in #351
• [2.2] Remove redundant documentation in conf files; improve man pages, #333 by @rdmark in #334
• [2.2] Use non-interactive PAM session when available by @rdmark in #367
• [2.2] papd: Future-proof CUPS API usage by @rdmark in #373
• [2.2] Update atalkd.service to be consistent with other init scripts. by @rdmark in #372
• [2.2] Adopt downstream Debian patches by @rdmark in #370
• [2.2] Restore tarball distribution of doc/ (GitHub#374) by @rdmark in #375
• [2.2] Regenerate man pages from xml sources by @rdmark in #376

Full Changelog: netatalk-2-2-9...netatalk-2-2-10

Netatalk 3.1.15

Netatalk 3.1.15 is available!

The Netatalk development team is proud to announce the latest release of the Netatalk 3.1 release series. Users are encouraged to update their servers to the 3.1 release series which is the stable and supported version for production systems.

What's Changed

• FIX: CVE-2022-43634 GitHub #186
• FIX: CVE-2022-45188 GitHub #240
• NEW: Support for macOS hosts, Intel and Apple silicon, GitHub #281
• FIX: configure.ac: update deprecated autoconf syntax GitHub #331
• UPD: configure.ac: Support linking with system shared libraries, GitHub #265
  Introduces the --with-talloc option
• FIX: macros: largefile-check macro for largefile (clang 16) GitHub #187
• UPD: macros: Update pthread macro to the latest from gnu.org GitHub #273
• FIX: initscripts: Modernize Systemd service file. GitHub #244
• FIX: libatalk/conf: include sys/file.h for LOCK_EX GitHub #187
• FIX: libatalk: Change log level for realpath() error, SF bug#666
• FIX: libatalk: Change log level for real_name error, SF bug#596
• FIX: libatalk: The my_bool type is deprecated as of MySQL 8.0.1, GitHub #129
• UPD: libatalk: allow afpd to read read-protected afp.conf, SF bug#546
• UPD: libatalk: Make the "valid users" option work in the Homes section, SF bug#449
• UPD: libatalk: Check that FPDisconnectOldSession is successful, SF bug#634
• UPD: libatalk: Bring iniparser library codebase in line with current version 4.1 GitHub #271 GitHub #282 GitHub #301
• FIX: afpd: Provide MNTTYPE_NFS on OmniOS to make quota work, GitHub #117
• FIX: afpd: Avoid triggering realpath() lookups with empty path, GitHub #277
• FIX: spotlight: Spotlight searches can cause afpd to segfault, GitHub #56
• UPD: spotlight: add support for tracker3, SF patch#147
• FIX: macusers: Fix output for long usernames GitHub #219
• FIX: macusers: account for usernames with non-word characters GitHub #219
• FIX: macusers: Support NetBSD GitHub #219
• FIX: Fix all function declarations without a prototype GitHub #272
• FIX: Fix C99 compliance issues GitHub #294
• FIX: Fix gcc10 compiler warnings GitHub #295
• UPD: Remove acsiidocs sources and release notes script GitHub #227
• FIX: manpages: afp.conf: Parameters are not quoted, SF bug#617
• FIX: manpages: afp.conf: Document $u in home name, GitHub #123
• FIX: manpages: afp.conf: Document the usage of guest user, GitHub #298
• FIX: Document how the mysql cnid backend is configured, GitHub #69
• FIX: Fix user-visible typos in log output and man pages. GitHub #218
• FIX: Fix spelling, syntax, and dead URLs in html manual. GitHub #231
• NEW: Create README.md GitHub #217
• NEW: Set up GitHub workflow and static analysis with Sonarcloud GitHub #225

Full Changelog: netatalk-3-1-14...netatalk-3-1-15