netatalk: update to version 3.1.13 (with upstream PR174) (!511) · Merge requests · Turris / Turris OS / Turris Build · GitLab

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.

Self sign-up has been disabled due to increased spam activity. If you want to get access, please send an email to a project owner (preferred) or at gitlab(at)nic(dot)cz. We apologize for the inconvenience.

Simon Borek requested to merge hotfix/netatalk-patch-3.1.13-experimentally-instead-CVE-reintroducing-3.1.12-downgrade into hbk Apr 28, 2022

Not yet merged fix for 3.1.13 version exists which seems to be already in use in TrueNAS 12.0-U8.1 as stated in https://github.com/Netatalk/Netatalk/pull/174#issuecomment-1112204339 .

Applying this fix might fix crashes without the risks involved in downgrading to vulnerable version 3.1.12.

Build and installation tested on Turris Omnia HBK 5.3.9.

Edited Jun 02, 2022 by Josef Schlehofer