Hello community, here is the log from the commit of package libupnp.1284 for openSUSE:12.2:Update checked in at 2013-02-07 08:39:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.2:Update/libupnp.1284 (Old) and /work/SRC/openSUSE:12.2:Update/.libupnp.1284.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libupnp.1284", Maintainer is "" Changes: -------- New Changes file: --- /dev/null 2013-02-07 00:49:24.196010006 +0100 +++ /work/SRC/openSUSE:12.2:Update/.libupnp.1284.new/libupnp.changes 2013-02-07 08:39:32.000000000 +0100 @@ -0,0 +1,33 @@ +------------------------------------------------------------------- +Wed Jan 30 13:43:38 UTC 2013 - [email protected] + +- Update to version 1.6.18 (bnc#801061) + + Security fix for CERT issue VU#922681 + This patch addresses three possible buffer overflows in function + unique_service_name(). The three issues have the folowing CVE numbers: + CVE-2012-5958 Issue #2: Stack buffer overflow of Tempbuf + CVE-2012-5959 Issue #4: Stack buffer overflow of Event->UDN + CVE-2012-5960 Issue #8: Stack buffer overflow of Event->UDN + + Notice that the following issues have already been dealt by previous + work: + CVE-2012-5961 Issue #1: Stack buffer overflow of Evt->UDN + CVE-2012-5962 Issue #3: Stack buffer overflow of Evt->DeviceType + CVE-2012-5963 Issue #5: Stack buffer overflow of Event->UDN + CVE-2012-5964 Issue #6: Stack buffer overflow of Event->DeviceType + CVE-2012-5965 Issue #7: Stack buffer overflow of Event->DeviceType + +------------------------------------------------------------------- +Sat Feb 25 08:35:41 UTC 2012 - [email protected] + +- sync package name with spec file name + +------------------------------------------------------------------- +Mon Jan 30 13:09:31 UTC 2012 - [email protected] + +- Properly provide pkgconfig symbols + +------------------------------------------------------------------- +Sat Oct 8 10:26:59 UTC 2011 - [email protected] + +- Initial version + New: ---- baselibs.conf libupnp-1.6.18.tar.bz2 libupnp.changes libupnp.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libupnp.spec ++++++ # # spec file for package libupnp # # Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. # Copyright (c) 2011, Sascha Peilicke <[email protected]> # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # %define lname libupnp6 Name: libupnp Version: 1.6.18 Release: 0 Summary: Portable Universal Plug and Play (UPnP) SDK License: BSD-3-Clause Group: System/Libraries Url: http://sourceforge.net/projects/pupnp/ Source0: http://downloads.sourceforge.net/pupnp/libupnp-%{version}.tar.bz2 BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: pkgconfig %description The portable Universal Plug and Play (UPnP) SDK provides support for building UPnP-compliant control points, devices, and bridges on several operating systems. %package -n %lname Summary: Portable Universal Plug and Play (UPnP) SDK Group: System/Libraries %description -n %lname The portable Universal Plug and Play (UPnP) SDK provides support for building UPnP-compliant control points, devices, and bridges on several operating systems %package -n libupnp-devel Summary: Portable Universal Plug and Play (UPnP) SDK Group: Development/Libraries/C and C++ Requires: %{lname} = %{version} %description -n libupnp-devel The portable Universal Plug and Play (UPnP) SDK provides support for building UPnP-compliant control points, devices, and bridges on several operating systems. %prep %setup %build %configure --disable-static make %{?_smp_mflags} %install %makeinstall find %{buildroot} -type f -name '*.la' -exec rm -f {} ';' %post -p /sbin/ldconfig -n %lname %postun -p /sbin/ldconfig -n %lname %files -n %lname %defattr(-,root,root,-) %doc ChangeLog NEWS README TODO %{_libdir}/libixml.so.* %{_libdir}/libthreadutil.so.* %{_libdir}/libupnp.so.* %files -n libupnp-devel %defattr(-,root,root,-) %{_libdir}/pkgconfig/libupnp.pc %{_libdir}/libixml.so %{_libdir}/libthreadutil.so %{_libdir}/libupnp.so %{_includedir}/upnp/ %changelog ++++++ baselibs.conf ++++++ libupnp6 -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
