avahi-daemon: reflector creates packet storm on legacy unicast traffic

Debian Bug report logs - #517683
avahi-daemon: reflector creates packet storm on legacy unicast traffic

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Rob Leslie <rob@mars.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: avahi-daemon: reflector creates packet storm on legacy unicast traffic

Date: Sun, 01 Mar 2009 04:57:44 -0800

[Message part 1 (text/plain, inline)]

Package: avahi-daemon
Version: 0.6.23-3lenny1
Severity: important
Tags: patch

The avahi-daemon reflector contains a bug that causes packet storms when
reflecting legacy unicast mDNS traffic. What happens is the reflector
forwards the initial multicast query onto the other interfaces, and then
receives it back from the same interfaces (IP_MULTICAST_LOOP) but doesn't
recognize it as the legacy unicast packet it just forwarded. It therefore
acts as though it were a separate query and forwards it back onto all the
other interfaces (including the original) and the process repeats ad
infinitum -- until the box locks up (I've had some automatically reboot via
watchdog) or if lucky the legacy unicast reflection slots that avahi-daemon
maintains will fill up and the storm will abate. A symptom of the latter
case is the syslog message "No slot available for legacy unicast reflection,
dropping query packet." (See also Avahi ticket #216 which seems to be
indicative of this problem.)

The problem is that the originates_from_local_legacy_unicast_socket()
routine in avahi-core/server.c fails to take the network byte order of
.sin_port into account when examining incoming multicast packets. The
attached patch corrects this problem.


-- System Information:
Debian Release: 5.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages avahi-daemon depends on:
ii  adduser                3.110             add and remove users and groups
ii  bind9-host [host]      1:9.5.1.dfsg.P1-1 Version of 'host' bundled with BIN
ii  dbus                   1.2.1-5           simple interprocess messaging syst
ii  libavahi-common3       0.6.23-3lenny1    Avahi common library
ii  libavahi-core5         0.6.23-3lenny1    Avahi's embeddable mDNS/DNS-SD lib
ii  libc6                  2.7-18            GNU C Library: Shared libraries
ii  libcap2                2.11-2            support for getting/setting POSIX.
ii  libdaemon0             0.12-2lenny1      lightweight C library for daemons 
ii  libdbus-1-3            1.2.1-5           simple interprocess messaging syst
ii  libexpat1              2.0.1-4           XML parsing C library - runtime li
ii  lsb-base               3.2-20            Linux Standard Base 3.2 init scrip

Versions of packages avahi-daemon recommends:
ii  libnss-mdns                   0.10-3     NSS module for Multicast DNS name 

Versions of packages avahi-daemon suggests:
pn  avahi-autoipd                 <none>     (no description available)

-- no debconf information

[server.patch (text/x-diff, attachment)]

Message #10 received at 517683@bugs.debian.org (full text, mbox, reply):

From: Rob Leslie <rob@mars.org>

To: 517683@bugs.debian.org

Subject: Consider raising severity

Date: Sun, 1 Mar 2009 16:53:20 -0800

Upon further reflection, you might consider elevating the severity of  
this bug to "Critical" since it allows the possibility of a denial-of- 
service attack by sending legacy unicast mDNS queries from other  
machines on the network. I certainly wondered why my router  
occasionally decided to reboot without warning.

-- 
Rob Leslie
rob@mars.org

Message #17 received at 517683@bugs.debian.org (full text, mbox, reply):

From: Michael Biebl <biebl@debian.org>

To: Rob Leslie <rob@mars.org>, 517683@bugs.debian.org, Nico Golde <nion@debian.org>

Subject: Re: [Pkg-utopia-maintainers] Bug#517683: avahi-daemon: reflector creates packet storm on legacy unicast traffic

Date: Thu, 19 Mar 2009 16:19:52 +0100

[Message part 1 (text/plain, inline)]

Rob Leslie wrote:
> Package: avahi-daemon
> Version: 0.6.23-3lenny1
> Severity: important
> Tags: patch
> 
> The avahi-daemon reflector contains a bug that causes packet storms when
> reflecting legacy unicast mDNS traffic. What happens is the reflector
> forwards the initial multicast query onto the other interfaces, and then
> receives it back from the same interfaces (IP_MULTICAST_LOOP) but doesn't
> recognize it as the legacy unicast packet it just forwarded. It therefore
> acts as though it were a separate query and forwards it back onto all the
> other interfaces (including the original) and the process repeats ad
> infinitum -- until the box locks up (I've had some automatically reboot via
> watchdog) or if lucky the legacy unicast reflection slots that avahi-daemon
> maintains will fill up and the storm will abate. A symptom of the latter
> case is the syslog message "No slot available for legacy unicast reflection,
> dropping query packet." (See also Avahi ticket #216 which seems to be
> indicative of this problem.)
> 
> The problem is that the originates_from_local_legacy_unicast_socket()
> routine in avahi-core/server.c fails to take the network byte order of
> .sin_port into account when examining incoming multicast packets. The
> attached patch corrects this problem.
> 

Hi Rob,

thanks for the bug report and the patch.

Looks like this is filed as CVE-2009-0758 [1]

Nico, do you consider that important enough for a s-s-u upload?

Cheers,
Michael

[1] http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0758

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

[signature.asc (application/pgp-signature, attachment)]

Message #22 received at 517683@bugs.debian.org (full text, mbox, reply):

From: Nico Golde <nion@debian.org>

To: Michael Biebl <biebl@debian.org>

Cc: Rob Leslie <rob@mars.org>, 517683@bugs.debian.org, team@security.debian.org

Subject: Re: [Pkg-utopia-maintainers] Bug#517683: avahi-daemon: reflector creates packet storm on legacy unicast traffic

Date: Thu, 19 Mar 2009 18:20:14 +0100

[Message part 1 (text/plain, inline)]

Hi Michael,
* Michael Biebl <biebl@debian.org> [2009-03-19 17:53]:
> Rob Leslie wrote:
> > Package: avahi-daemon
> > Version: 0.6.23-3lenny1
> > Severity: important
> > Tags: patch
> > 
> > The avahi-daemon reflector contains a bug that causes packet storms when
> > reflecting legacy unicast mDNS traffic. What happens is the reflector
> > forwards the initial multicast query onto the other interfaces, and then
> > receives it back from the same interfaces (IP_MULTICAST_LOOP) but doesn't
> > recognize it as the legacy unicast packet it just forwarded. It therefore
> > acts as though it were a separate query and forwards it back onto all the
> > other interfaces (including the original) and the process repeats ad
> > infinitum -- until the box locks up (I've had some automatically reboot via
> > watchdog) or if lucky the legacy unicast reflection slots that avahi-daemon
> > maintains will fill up and the storm will abate. A symptom of the latter
> > case is the syslog message "No slot available for legacy unicast reflection,
> > dropping query packet." (See also Avahi ticket #216 which seems to be
> > indicative of this problem.)
> > 
> > The problem is that the originates_from_local_legacy_unicast_socket()
> > routine in avahi-core/server.c fails to take the network byte order of
> > .sin_port into account when examining incoming multicast packets. The
> > attached patch corrects this problem.
> > 
> 
> Hi Rob,
> 
> thanks for the bug report and the patch.
> 
> Looks like this is filed as CVE-2009-0758 [1]

Yes true, we already have that in the security tracker:
http://security-tracker.debian.net/tracker/CVE-2009-0758

> Nico, do you consider that important enough for a s-s-u upload?

As avahi is mostly used on end-user desktop machines and 
this feature is switched off by default (and I don't expect 
end-users and typical desktop users to switch it on) I'd say 
no. I would be happy if you upload a fixed package to stable 
and oldstable directly. Please raise your voice if you have 
a different opinion about that!

Cheers
Nico

-- 
Nico Golde - http://www.ngolde.de - nion@jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.

[Message part 2 (application/pgp-signature, inline)]

Message #27 received at 517683@bugs.debian.org (full text, mbox, reply):

From: Rob Leslie <rob@mars.org>

To: Nico Golde <nion@debian.org>

Cc: Michael Biebl <biebl@debian.org>, 517683@bugs.debian.org, team@security.debian.org

Subject: Re: [Pkg-utopia-maintainers] Bug#517683: avahi-daemon: reflector creates packet storm on legacy unicast traffic

Date: Thu, 19 Mar 2009 11:56:53 -0700

On Mar 19, 2009, at 10:20 AM, Nico Golde wrote:
>> Nico, do you consider that important enough for a s-s-u upload?
>
> As avahi is mostly used on end-user desktop machines and this  
> feature is switched off by default (and I don't expect end-users and  
> typical desktop users to switch it on) I'd say no. I would be happy  
> if you upload a fixed package to stable and oldstable directly.  
> Please raise your voice if you have a different opinion about that!

While I agree that avahi-daemon is mostly used on end-user  
workstations with the reflector disabled, anyone who intentionally  
enables the reflector is obviously operating in a fundamentally  
different environment (e.g. multi-homed router) and it is precisely  
that environment which elevates the risk of exposure.

In other words, while I agree the risk to desktop users is minimal and  
doesn't merit special handling, the risk to other users is much higher  
and I hope you will also take them into account.

I suspect the at-risk category of users will particularly include  
enterprise networks[1].

Sincerely,

Rob Leslie
rob@mars.org

[1] See for example this fellow at Disney who seems to have been  
unknowingly bitten by this bug:
    http://lists.freedesktop.org/archives/avahi/2008-March/001325.html

Message #32 received at 517683-close@bugs.debian.org (full text, mbox, reply):

From: Michael Biebl <biebl@debian.org>

To: 517683-close@bugs.debian.org

Subject: Bug#517683: fixed in avahi 0.6.24-3

Date: Sun, 29 Mar 2009 22:32:08 +0000

Source: avahi
Source-Version: 0.6.24-3

We believe that the bug you reported is fixed in the latest version of
avahi, which is due to be installed in the Debian FTP archive:

avahi-autoipd_0.6.24-3_i386.deb
  to pool/main/a/avahi/avahi-autoipd_0.6.24-3_i386.deb
avahi-daemon_0.6.24-3_i386.deb
  to pool/main/a/avahi/avahi-daemon_0.6.24-3_i386.deb
avahi-dbg_0.6.24-3_i386.deb
  to pool/main/a/avahi/avahi-dbg_0.6.24-3_i386.deb
avahi-discover_0.6.24-3_all.deb
  to pool/main/a/avahi/avahi-discover_0.6.24-3_all.deb
avahi-dnsconfd_0.6.24-3_i386.deb
  to pool/main/a/avahi/avahi-dnsconfd_0.6.24-3_i386.deb
avahi-ui-utils_0.6.24-3_i386.deb
  to pool/main/a/avahi/avahi-ui-utils_0.6.24-3_i386.deb
avahi-utils_0.6.24-3_i386.deb
  to pool/main/a/avahi/avahi-utils_0.6.24-3_i386.deb
avahi_0.6.24-3.diff.gz
  to pool/main/a/avahi/avahi_0.6.24-3.diff.gz
avahi_0.6.24-3.dsc
  to pool/main/a/avahi/avahi_0.6.24-3.dsc
libavahi-client-dev_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-client-dev_0.6.24-3_i386.deb
libavahi-client3_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-client3_0.6.24-3_i386.deb
libavahi-common-data_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-common-data_0.6.24-3_i386.deb
libavahi-common-dev_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-common-dev_0.6.24-3_i386.deb
libavahi-common3_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-common3_0.6.24-3_i386.deb
libavahi-compat-howl-dev_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-compat-howl-dev_0.6.24-3_i386.deb
libavahi-compat-howl0_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-compat-howl0_0.6.24-3_i386.deb
libavahi-compat-libdnssd-dev_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-compat-libdnssd-dev_0.6.24-3_i386.deb
libavahi-compat-libdnssd1_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-compat-libdnssd1_0.6.24-3_i386.deb
libavahi-core-dev_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-core-dev_0.6.24-3_i386.deb
libavahi-core6_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-core6_0.6.24-3_i386.deb
libavahi-glib-dev_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-glib-dev_0.6.24-3_i386.deb
libavahi-glib1_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-glib1_0.6.24-3_i386.deb
libavahi-gobject-dev_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-gobject-dev_0.6.24-3_i386.deb
libavahi-gobject0_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-gobject0_0.6.24-3_i386.deb
libavahi-qt3-1_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-qt3-1_0.6.24-3_i386.deb
libavahi-qt3-dev_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-qt3-dev_0.6.24-3_i386.deb
libavahi-qt4-1_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-qt4-1_0.6.24-3_i386.deb
libavahi-qt4-dev_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-qt4-dev_0.6.24-3_i386.deb
libavahi-ui-dev_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-ui-dev_0.6.24-3_i386.deb
libavahi-ui0_0.6.24-3_i386.deb
  to pool/main/a/avahi/libavahi-ui0_0.6.24-3_i386.deb
python-avahi_0.6.24-3_all.deb
  to pool/main/a/avahi/python-avahi_0.6.24-3_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 517683@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael Biebl <biebl@debian.org> (supplier of updated avahi package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 30 Mar 2009 00:00:51 +0200
Source: avahi
Binary: avahi-daemon avahi-dnsconfd avahi-autoipd python-avahi avahi-utils avahi-discover libavahi-common3 libavahi-common-data libavahi-common-dev libavahi-core6 libavahi-core-dev libavahi-client3 libavahi-client-dev libavahi-glib1 libavahi-glib-dev libavahi-gobject0 libavahi-gobject-dev libavahi-qt3-1 libavahi-qt3-dev libavahi-qt4-1 libavahi-qt4-dev libavahi-compat-howl0 libavahi-compat-howl-dev libavahi-compat-libdnssd1 libavahi-compat-libdnssd-dev libavahi-ui0 libavahi-ui-dev avahi-ui-utils avahi-dbg
Architecture: source all i386
Version: 0.6.24-3
Distribution: unstable
Urgency: low
Maintainer: Utopia Maintenance Team <pkg-utopia-maintainers@lists.alioth.debian.org>
Changed-By: Michael Biebl <biebl@debian.org>
Description: 
 avahi-autoipd - Avahi IPv4LL network address configuration daemon
 avahi-daemon - Avahi mDNS/DNS-SD daemon
 avahi-dbg  - Avahi - debugging symbols
 avahi-discover - Service discover user interface for avahi
 avahi-dnsconfd - Avahi DNS configuration tool
 avahi-ui-utils - Avahi GTK+ utilities
 avahi-utils - Avahi browsing, publishing and discovery utilities
 libavahi-client-dev - Development files for the Avahi client library
 libavahi-client3 - Avahi client library
 libavahi-common-data - Avahi common data files
 libavahi-common-dev - Development files for the Avahi common library
 libavahi-common3 - Avahi common library
 libavahi-compat-howl-dev - Development headers for the Avahi Howl compatibility library
 libavahi-compat-howl0 - Avahi Howl compatibility library
 libavahi-compat-libdnssd-dev - Development headers for the Avahi Apple Bonjour compatibility lib
 libavahi-compat-libdnssd1 - Avahi Apple Bonjour compatibility library
 libavahi-core-dev - Development files for Avahi's embeddable mDNS/DNS-SD library
 libavahi-core6 - Avahi's embeddable mDNS/DNS-SD library
 libavahi-glib-dev - Development headers for the Avahi glib integration library
 libavahi-glib1 - Avahi glib integration library
 libavahi-gobject-dev - Development headers for the Avahi GObject library
 libavahi-gobject0 - Avahi GObject library
 libavahi-qt3-1 - Avahi Qt 3 integration library
 libavahi-qt3-dev - Development headers for the Avahi Qt 3 integration library
 libavahi-qt4-1 - Avahi Qt 4 integration library
 libavahi-qt4-dev - Development headers for the Avahi Qt 4 integration library
 libavahi-ui-dev - Development headers for the Avahi GTK+ User interface library
 libavahi-ui0 - Avahi GTK+ User interface library
 python-avahi - Python utility package for Avahi
Closes: 368566 517211 517683 520836
Changes: 
 avahi (0.6.24-3) unstable; urgency=low
 .
   * Switch patch management system to quilt.
   * debian/control
     - Change Section of avahi-dbg to debug.
     - Bump Standards-Version to 3.8.1. No further changes.
     - Change Build-Depends on libcap2-dev to libcap-dev. Tighten the version
       to (>= 1:2.16) to ensure we don't pick up any old libcap1 version.
       (Closes: #520836)
   * debian/patches/03-avahi-daemon-reflector-packet-storm.patch
     - Fix a bug in avahi-daemon that could cause packet storms when reflecting
       legacy unicast mDNS traffic. (Closes: #517683)
       SECURITY: CVE-2009-0758
       Thanks to Rob Leslie for the patch.
   * debian/python-avahi.examples
     - Install avahi-bookmarks as example in
       /usr/share/doc/python-avahi/examples/. (Closes: #368566)
   * debian/avahi-daemon.init
     - Check for DISABLE_TAG *and* AVAHI_DAEMON_DETECT_LOCAL != 0 before
       disabling the avahi-daemon service. (Closes: #517211)
       Thanks to Reed Hedges for the fix.
     - Remove some old cruft.
Checksums-Sha1: 
 14d79a3a087d131d91c19ec2172dc07a4b439249 2295 avahi_0.6.24-3.dsc
 2e1a9f7013ec7ce34fa40914e26054fe57902008 32392 avahi_0.6.24-3.diff.gz
 7bc347f8f8a4a4d4ad3f14784bed48e9c5eb543f 32762 python-avahi_0.6.24-3_all.deb
 269b1950e7bc05a498aa521a58295838fdd68758 37726 avahi-discover_0.6.24-3_all.deb
 fbdc13306e3138672b3482efb3e5d358c790e948 88048 avahi-daemon_0.6.24-3_i386.deb
 f66045b90de4c2fdb7939b1962f1a38c79e4953e 39462 avahi-dnsconfd_0.6.24-3_i386.deb
 7e9e754f06ae36e026482e76669015b3ec3587a3 49494 avahi-autoipd_0.6.24-3_i386.deb
 a05e06ba110392934ce9b13b6130a4ae527a6522 51856 avahi-utils_0.6.24-3_i386.deb
 3b3ecd88ebdeb686922e37b585d7456f3c570ef5 48610 libavahi-common3_0.6.24-3_i386.deb
 e187bad54d1ea8d986bf12773d0f7a4102a4ac06 32938 libavahi-common-data_0.6.24-3_i386.deb
 3af9e5a0280dd31f3989701456064a79629a2dff 67702 libavahi-common-dev_0.6.24-3_i386.deb
 c2a1ecafd62c2da99b0ed2d7c7bd83cc6d201d83 116378 libavahi-core6_0.6.24-3_i386.deb
 b46a9dd53769497760e425057f967c670f841301 153074 libavahi-core-dev_0.6.24-3_i386.deb
 25200502108c2b922df268b78e6e0aa50381a779 52624 libavahi-client3_0.6.24-3_i386.deb
 3a0555a5c20b6a94ea276cbcec7b171e7460958e 62352 libavahi-client-dev_0.6.24-3_i386.deb
 fb140884016e8383c6206f0e65a24ed91e9470e2 33014 libavahi-glib1_0.6.24-3_i386.deb
 86740821798d546f680a1040e4ed96ea674b087b 34552 libavahi-glib-dev_0.6.24-3_i386.deb
 88e6716c78468d01a4eda19451c95262cc5592a9 42754 libavahi-gobject0_0.6.24-3_i386.deb
 885d420513b5f1f1b9fe6d64ff84b2879b564fb6 49948 libavahi-gobject-dev_0.6.24-3_i386.deb
 1de3f18b42fb1d50fee946f5fe54a87b9e8a59a7 34392 libavahi-qt3-1_0.6.24-3_i386.deb
 c0553ade45d7e98a6d6e4fd852fa1782be21cbce 35162 libavahi-qt3-dev_0.6.24-3_i386.deb
 97faef0ca1f4afac858c2d7b3a317a15827f6735 32520 libavahi-qt4-1_0.6.24-3_i386.deb
 bdb824c120d4d276efa8e3460bf575f2b31173d5 33532 libavahi-qt4-dev_0.6.24-3_i386.deb
 55343f784118585e00ce3dac9f44003b2d443ecb 47570 libavahi-compat-howl0_0.6.24-3_i386.deb
 94cf3538b6a0248fe0ccc10ec8cda75fc8d1a390 60392 libavahi-compat-howl-dev_0.6.24-3_i386.deb
 7f5782e1345beee3908078fe95eac3d311657153 41272 libavahi-compat-libdnssd1_0.6.24-3_i386.deb
 373dc9da02b7177a5ab148431b41624cb23c4be3 60316 libavahi-compat-libdnssd-dev_0.6.24-3_i386.deb
 cacf3efca1440a739b504a26da00faa6c753747d 46454 libavahi-ui0_0.6.24-3_i386.deb
 f2d3d626ace81dd8940371e4ba783f48b5a492e9 47988 libavahi-ui-dev_0.6.24-3_i386.deb
 708f4faf27f3c884fb48d033e9c07fec195c3daa 35482 avahi-ui-utils_0.6.24-3_i386.deb
 bd79377284c0d0c3f142b87082647c94c33fceb2 650940 avahi-dbg_0.6.24-3_i386.deb
Checksums-Sha256: 
 f2c1916170df72863cb42ff7e6988e14f1639b75e11d2820a46df6da513acfd5 2295 avahi_0.6.24-3.dsc
 3f16e02d8c5e179259d8f407cc43cb3dc790229cb3f5e2536e59f7d5c0d6e9bb 32392 avahi_0.6.24-3.diff.gz
 83bae552a41d0d0995361df0235f0347cb2e916222ecb403049f416b12924185 32762 python-avahi_0.6.24-3_all.deb
 814bd3e1907268ed2b414b67d8fe10ba00b1663d3320865acf35d7aade6cc2db 37726 avahi-discover_0.6.24-3_all.deb
 636562370c89c862a22d9b5de1fea31a0aea0aa700e7f7a44f0de4994afaeefd 88048 avahi-daemon_0.6.24-3_i386.deb
 4c576a70e71af46afb5bb04d0d1c693adad7ac94f01327646ae651436b8ba8ca 39462 avahi-dnsconfd_0.6.24-3_i386.deb
 c6f054b088e3d9b0c2445bf4395d0a588ed82c767584897f48598c0a5721ae69 49494 avahi-autoipd_0.6.24-3_i386.deb
 7d45e71846f21d430e3d20c8b4e93435b4eb42565d2baf3c99357c901aa46cb4 51856 avahi-utils_0.6.24-3_i386.deb
 14a828807c7b30b15255e4074d9db0e33d334203266fc2150ca158f5420c072a 48610 libavahi-common3_0.6.24-3_i386.deb
 36ccd8417648a1a3e21ed4ff5d43cfaf5459ddd6a9a73419a684a0ae524b1b98 32938 libavahi-common-data_0.6.24-3_i386.deb
 401dbfa0fa7a48569746aae00ce484ea2abcd64e67860356dc531734bb33f09c 67702 libavahi-common-dev_0.6.24-3_i386.deb
 20ea58133cef5517d5464648f0d689a90e63a6eb2354187cb993eda3292aaec5 116378 libavahi-core6_0.6.24-3_i386.deb
 0ecda86a82d0c7020e38028b489b2d7618953e6c64fe29342fa95e1d07272513 153074 libavahi-core-dev_0.6.24-3_i386.deb
 e3ea2ad800dae8bd998f5dc0e0af75d1f8d2a53f0f249c22a44ee3fb57d6dd0f 52624 libavahi-client3_0.6.24-3_i386.deb
 90cd0870eb9cbfc0879fdc64ae5d626417675de405835175e9471063b3999a06 62352 libavahi-client-dev_0.6.24-3_i386.deb
 9f396bfb0d3913d31c66fa6e919cefcde5460b9126a6ed7051e8dd4845cda9d2 33014 libavahi-glib1_0.6.24-3_i386.deb
 84e9507d2cf1352c8658da80f77c86200d1878019b8cfd3146c6fc8526a8d974 34552 libavahi-glib-dev_0.6.24-3_i386.deb
 2dcba031fdb9ea44a7785cd17f37b6fb0476058f2bf1b01cf299fa5078d98e1b 42754 libavahi-gobject0_0.6.24-3_i386.deb
 a953d4b5d1e4af8224a17af39b3e1acf01cb21cc737ece385013bad2f3eed318 49948 libavahi-gobject-dev_0.6.24-3_i386.deb
 b55c777c0db28313b6be62c5b6883cec1152a76d1ad170a72e5622a53ed62b7c 34392 libavahi-qt3-1_0.6.24-3_i386.deb
 2748485f8409c6ecdfea139a8574ffcfa04d2f1e6f9320eb1ef6e5fc9f4d1b17 35162 libavahi-qt3-dev_0.6.24-3_i386.deb
 f8b2571fda8ac2fdb706d4b109aff0ebe29c2745702cd1182e9063e68cfcd913 32520 libavahi-qt4-1_0.6.24-3_i386.deb
 c803f6ede0e424e81ad32a96225bee669e68174ba5a842b92c0e7f30adac26d4 33532 libavahi-qt4-dev_0.6.24-3_i386.deb
 214a42855417c144f455abe12c11cd72deeb4a2fbdd1fa4b6eb404f0013c7ec6 47570 libavahi-compat-howl0_0.6.24-3_i386.deb
 b27b3216e7919e8f3b902c91cd55b70f84c295ba8dc48995aa91ff66cbe944b6 60392 libavahi-compat-howl-dev_0.6.24-3_i386.deb
 9c40a2b805a4598383bde63621cb31029e956ddf0eaf37ec634658cc06254f44 41272 libavahi-compat-libdnssd1_0.6.24-3_i386.deb
 4053935c8d01a509c9b43d731564581daef62458839fbef6f20ecf419a316552 60316 libavahi-compat-libdnssd-dev_0.6.24-3_i386.deb
 33a42fecae63df9b918a3b00b84bd928aba4dc2a7680755f41b1de16fb259d25 46454 libavahi-ui0_0.6.24-3_i386.deb
 b0496c274101d81dc673a42765b996dd88f5119c4a563095e193e4e0ffff5950 47988 libavahi-ui-dev_0.6.24-3_i386.deb
 3af51a8c2f905c1fdf09992002fb8fc5de4183a619783a472fa7db617525d528 35482 avahi-ui-utils_0.6.24-3_i386.deb
 32b61f72414e71a11dacbdfda4cf1cd4bf32a3102d55a5734954f65bb9579e85 650940 avahi-dbg_0.6.24-3_i386.deb
Files: 
 7729834097019fb7addecc63b90fddf1 2295 net optional avahi_0.6.24-3.dsc
 61068eb9661137e42923a2a56e340330 32392 net optional avahi_0.6.24-3.diff.gz
 628b6994849c0eccace0468884579c55 32762 python optional python-avahi_0.6.24-3_all.deb
 db1eae5f540825dd38b8cf6880cf2645 37726 net optional avahi-discover_0.6.24-3_all.deb
 e7eb48a004e6d778d5e13c73d3baa29a 88048 net optional avahi-daemon_0.6.24-3_i386.deb
 8a58fc55075ef38c6863b19969036860 39462 net optional avahi-dnsconfd_0.6.24-3_i386.deb
 1a212c396d5e099876b06761aa236f53 49494 net optional avahi-autoipd_0.6.24-3_i386.deb
 a8e61ce2a675d15e6036c11ee53d5b1b 51856 net optional avahi-utils_0.6.24-3_i386.deb
 06209b539c07a150e31c05a0bc8f08cd 48610 libs optional libavahi-common3_0.6.24-3_i386.deb
 a3e530f3549e4f69796b08b7c2f151ba 32938 libs optional libavahi-common-data_0.6.24-3_i386.deb
 32e2bdd13e469ec9fe03529f69f656a7 67702 libdevel optional libavahi-common-dev_0.6.24-3_i386.deb
 5372b9f51424944946572ec22072dc37 116378 libs optional libavahi-core6_0.6.24-3_i386.deb
 13ac3a9208322975fc17b577fb43cdfd 153074 libdevel optional libavahi-core-dev_0.6.24-3_i386.deb
 48a99d26f1d209bc4cb0b2f6c896b473 52624 libs optional libavahi-client3_0.6.24-3_i386.deb
 0f76fc12f1a206b1af86acf63a6a45a8 62352 libdevel optional libavahi-client-dev_0.6.24-3_i386.deb
 9dfe9436b28be624f063143c563c2afb 33014 libs optional libavahi-glib1_0.6.24-3_i386.deb
 d72b8c8005a30ee35d129caf6b7d79a8 34552 libdevel optional libavahi-glib-dev_0.6.24-3_i386.deb
 b3f5bed5927b33c0433b2b0d8bee8bb7 42754 libs optional libavahi-gobject0_0.6.24-3_i386.deb
 12ddd8f54f4d8a8181affe08dc5706ea 49948 libdevel optional libavahi-gobject-dev_0.6.24-3_i386.deb
 2acbcca58e181d978745645f7c3f4278 34392 libs optional libavahi-qt3-1_0.6.24-3_i386.deb
 daaaf64ad88494df17815fd214ad1b1b 35162 libdevel optional libavahi-qt3-dev_0.6.24-3_i386.deb
 d7ba482536053253fcc072411ecfe7b4 32520 libs optional libavahi-qt4-1_0.6.24-3_i386.deb
 384fbf680efe7372d4f9b9370dcc63e1 33532 libdevel optional libavahi-qt4-dev_0.6.24-3_i386.deb
 c307bfc3df2375beac0a2d9f7a3fe996 47570 libs optional libavahi-compat-howl0_0.6.24-3_i386.deb
 aee0dd4f5fedf58ad29ff62952e68a47 60392 libdevel optional libavahi-compat-howl-dev_0.6.24-3_i386.deb
 aeb1e9a48b20e75944c49393d3b10326 41272 libs optional libavahi-compat-libdnssd1_0.6.24-3_i386.deb
 0a6bcc6657b3465d5e3368eb0ae34329 60316 libdevel optional libavahi-compat-libdnssd-dev_0.6.24-3_i386.deb
 8e84228bffd72d58a599ae34ceee6ee0 46454 libs optional libavahi-ui0_0.6.24-3_i386.deb
 d8066032cc1212fb90580d6bae62abde 47988 libdevel optional libavahi-ui-dev_0.6.24-3_i386.deb
 ea327f509e020910e49737ae84c9226a 35482 libs optional avahi-ui-utils_0.6.24-3_i386.deb
 50af2fc59db97352e27854c08f4af211 650940 debug extra avahi-dbg_0.6.24-3_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAknP9YAACgkQh7PER70FhVTdXgCfRcz5DxARGJ/IePAkMSWh7TZm
nTMAnAio2vSl6dAd40FBxeNjWf+rFfgh
=z4n8
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.