Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package live555 for openSUSE:Factory checked in at 2026-10-20 12:34:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/live555 (Old) and /work/SRC/openSUSE:Factory/.live555.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "live555" Tue Oct 20 12:34:31 2026 rev:50 rq:1385899 version:2026.10.17 Changes: -------- --- /work/SRC/openSUSE:Factory/live555/live555.changes 2026-10-15 18:20:26.399183011 +0200 +++ /work/SRC/openSUSE:Factory/.live555.new.3698736/live555.changes 2026-10-20 12:34:45.137577233 +0200 @@ -1,0 +2,10 @@ +Sat Oct 17 17:04:08 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 2026.10.17: + * Matroska: guard the AAC codec-private config string allocation + against oversized values (boo#1254419, CVE-2025-65406). + * BasicTaskScheduler: honor FD_SETSIZE in the select loop instead + of a hardcoded descriptor limit. + * Spec cleanup: drop obsolete Group tags, use %make_build. + +------------------------------------------------------------------- Old: ---- live.2026.10.13.tar.gz New: ---- live.2026.10.17.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ live555.spec ++++++ --- /var/tmp/diff_new_pack.nyxoqO/_old 2026-10-20 12:34:45.858607292 +0200 +++ /var/tmp/diff_new_pack.nyxoqO/_new 2026-10-20 12:34:45.860607376 +0200 @@ -18,13 +18,11 @@ %define lmdmaj 120 - Name: live555 -Version: 2026.10.13 +Version: 2026.10.17 Release: 0 Summary: LIVE555 Streaming Media License: LGPL-2.1-only -Group: System/Libraries URL: http://www.live555.com/liveMedia/ Source: https://download.live555.com/live.%{version}.tar.gz # PATCH-MISSING-TAG -- See http://wiki.opensuse.org/openSUSE:Packaging_Patches_guidelines @@ -40,7 +38,6 @@ %package -n libliveMedia%{lmdmaj} Summary: Basic Usage Environment library of live555 streaming media -Group: System/Libraries %description -n libliveMedia%{lmdmaj} This code forms a set of C++ libraries for multimedia streaming, @@ -49,7 +46,6 @@ %package -n libBasicUsageEnvironment2 Summary: Basic Usage Environment library of live555 streaming media -Group: System/Libraries %description -n libBasicUsageEnvironment2 This code forms a set of C++ libraries for multimedia streaming, @@ -58,7 +54,6 @@ %package -n libgroupsock33 Summary: Group sock library of live555 streaming media -Group: System/Libraries %description -n libgroupsock33 This code forms a set of C++ libraries for multimedia streaming, @@ -67,7 +62,6 @@ %package -n libUsageEnvironment3 Summary: Usage Environment library of live555 streaming media -Group: System/Libraries %description -n libUsageEnvironment3 This code forms a set of C++ libraries for multimedia streaming, @@ -76,7 +70,6 @@ %package devel Summary: LIVE555 Streaming Media -Group: Development/Languages/C and C++ Requires: libBasicUsageEnvironment2 = %{version} Requires: libUsageEnvironment3 = %{version} Requires: libgroupsock33 = %{version} @@ -109,7 +102,7 @@ export CXXFLAGS="-std=c++20 %{optflags}" %endif ./genMakefiles linux-with-shared-libraries -make %{?_smp_mflags} +%make_build %install %make_install PREFIX=%{_prefix} LIBDIR=%{_libdir} ++++++ live.2026.10.13.tar.gz -> live.2026.10.17.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/live/BasicUsageEnvironment/BasicTaskScheduler.cpp new/live/BasicUsageEnvironment/BasicTaskScheduler.cpp --- old/live/BasicUsageEnvironment/BasicTaskScheduler.cpp 2026-10-13 23:43:35.000000000 +0200 +++ new/live/BasicUsageEnvironment/BasicTaskScheduler.cpp 2026-10-17 14:48:11.000000000 +0200 @@ -111,7 +111,13 @@ // that had already been closed) being used in "select()" - we print out the sockets that were being used in "select()", // to assist in debugging: fprintf(stderr, "socket numbers used in the select() call:"); - for (int i = 0; i < 10000; ++i) { + for (int i = 0; i < +#if defined(FD_SETSIZE) + FD_SETSIZE; +#else + fMaxNumSockets; +#endif + ++i) { if (FD_ISSET(i, &fReadSet) || FD_ISSET(i, &fWriteSet) || FD_ISSET(i, &fExceptionSet)) { fprintf(stderr, " %d(", i); if (FD_ISSET(i, &fReadSet)) fprintf(stderr, "r"); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/live/BasicUsageEnvironment/include/BasicUsageEnvironment_version.hh new/live/BasicUsageEnvironment/include/BasicUsageEnvironment_version.hh --- old/live/BasicUsageEnvironment/include/BasicUsageEnvironment_version.hh 2026-10-13 23:43:35.000000000 +0200 +++ new/live/BasicUsageEnvironment/include/BasicUsageEnvironment_version.hh 2026-10-17 14:48:11.000000000 +0200 @@ -19,8 +19,8 @@ #ifndef _BASICUSAGEENVIRONMENT_VERSION_HH #define _BASICUSAGEENVIRONMENT_VERSION_HH -#define BASICUSAGEENVIRONMENT_LIBRARY_VERSION_STRING "2026.10.13" -#define BASICUSAGEENVIRONMENT_LIBRARY_VERSION_INT 1791849600 +#define BASICUSAGEENVIRONMENT_LIBRARY_VERSION_STRING "2026.10.17" +#define BASICUSAGEENVIRONMENT_LIBRARY_VERSION_INT 1792195200 extern char const* const BasicUsageEnvironmentLibraryVersionStr; extern int const BasicUsageEnvironmentLibraryVersionInt; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/live/UsageEnvironment/include/UsageEnvironment_version.hh new/live/UsageEnvironment/include/UsageEnvironment_version.hh --- old/live/UsageEnvironment/include/UsageEnvironment_version.hh 2026-10-13 23:43:35.000000000 +0200 +++ new/live/UsageEnvironment/include/UsageEnvironment_version.hh 2026-10-17 14:48:11.000000000 +0200 @@ -19,8 +19,8 @@ #ifndef _USAGEENVIRONMENT_VERSION_HH #define _USAGEENVIRONMENT_VERSION_HH -#define USAGEENVIRONMENT_LIBRARY_VERSION_STRING "2026.10.13" -#define USAGEENVIRONMENT_LIBRARY_VERSION_INT 1791849600 +#define USAGEENVIRONMENT_LIBRARY_VERSION_STRING "2026.10.17" +#define USAGEENVIRONMENT_LIBRARY_VERSION_INT 1792195200 extern char const* const UsageEnvironmentLibraryVersionStr; extern int const UsageEnvironmentLibraryVersionInt; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/live/config.linux-with-shared-libraries new/live/config.linux-with-shared-libraries --- old/live/config.linux-with-shared-libraries 2026-10-13 23:44:17.000000000 +0200 +++ new/live/config.linux-with-shared-libraries 2026-10-17 14:48:45.000000000 +0200 @@ -4,7 +4,7 @@ # One or more interfaces were added, but no existing interfaces were changed or removed => CURRENT += 1; REVISION = 0; AGE += 1 libliveMedia_VERSION_CURRENT=120 -libliveMedia_VERSION_REVISION=12 +libliveMedia_VERSION_REVISION=13 libliveMedia_VERSION_AGE=0 libliveMedia_LIB_SUFFIX=so.$(shell expr $(libliveMedia_VERSION_CURRENT) - $(libliveMedia_VERSION_AGE)).$(libliveMedia_VERSION_AGE).$(libliveMedia_VERSION_REVISION) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/live/groupsock/include/groupsock_version.hh new/live/groupsock/include/groupsock_version.hh --- old/live/groupsock/include/groupsock_version.hh 2026-10-13 23:43:35.000000000 +0200 +++ new/live/groupsock/include/groupsock_version.hh 2026-10-17 14:48:11.000000000 +0200 @@ -19,8 +19,8 @@ #ifndef _GROUPSOCK_VERSION_HH #define _GROUPSOCK_VERSION_HH -#define GROUPSOCK_LIBRARY_VERSION_STRING "2026.10.13" -#define GROUPSOCK_LIBRARY_VERSION_INT 1791849600 +#define GROUPSOCK_LIBRARY_VERSION_STRING "2026.10.17" +#define GROUPSOCK_LIBRARY_VERSION_INT 1792195200 extern char const* const groupsockLibraryVersionStr; extern int const groupsockLibraryVersionInt; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/live/liveMedia/MatroskaFile.cpp new/live/liveMedia/MatroskaFile.cpp --- old/live/liveMedia/MatroskaFile.cpp 2026-10-13 23:43:35.000000000 +0200 +++ new/live/liveMedia/MatroskaFile.cpp 2026-10-17 14:48:11.000000000 +0200 @@ -614,8 +614,10 @@ } else if (strcmp(track->mimeType, "audio/AAC") == 0) { // The Matroska file's 'Codec Private' data is assumed to be the AAC configuration // information. Use this to generate a hexadecimal 'config' string for the new RTP sink: + if (track->codecPrivateSize > (UINT_MAX-1)/2) break; char* configStr = new char[2*track->codecPrivateSize + 1]; if (configStr == NULL) break; // 2 hex digits per byte, plus the trailing '\0' + configStr[0] = '\0'; for (unsigned i = 0; i < track->codecPrivateSize; ++i) { sprintf(&configStr[2*i], "%02X", track->codecPrivate[i]); } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/live/liveMedia/include/liveMedia_version.hh new/live/liveMedia/include/liveMedia_version.hh --- old/live/liveMedia/include/liveMedia_version.hh 2026-10-13 23:43:35.000000000 +0200 +++ new/live/liveMedia/include/liveMedia_version.hh 2026-10-17 14:48:11.000000000 +0200 @@ -19,8 +19,8 @@ #ifndef _LIVEMEDIA_VERSION_HH #define _LIVEMEDIA_VERSION_HH -#define LIVEMEDIA_LIBRARY_VERSION_STRING "2026.10.13" -#define LIVEMEDIA_LIBRARY_VERSION_INT 1791849600 +#define LIVEMEDIA_LIBRARY_VERSION_STRING "2026.10.17" +#define LIVEMEDIA_LIBRARY_VERSION_INT 1792195200 extern char const* const liveMediaLibraryVersionStr; extern int const liveMediaLibraryVersionInt; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/live/testProgs/whiteroom.mp3 new/live/testProgs/whiteroom.mp3 --- old/live/testProgs/whiteroom.mp3 2026-10-20 12:34:46.123618340 +0200 +++ new/live/testProgs/whiteroom.mp3 1970-01-01 01:00:00.000000000 +0100 @@ -1 +0,0 @@ -symbolic link to /home/ec2-user/tmp/mpeg/mp3/whiteroom.mp3
