Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package usbredir for openSUSE:Factory checked in at 2021-08-26 23:14:21 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/usbredir (Old) and /work/SRC/openSUSE:Factory/.usbredir.new.1899 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "usbredir" Thu Aug 26 23:14:21 2021 rev:15 rq:914041 version:0.11.0 Changes: -------- --- /work/SRC/openSUSE:Factory/usbredir/usbredir.changes 2021-04-15 16:57:20.506667128 +0200 +++ /work/SRC/openSUSE:Factory/.usbredir.new.1899/usbredir.changes 2021-08-26 23:14:38.232258872 +0200 @@ -1,0 +2,19 @@ +Tue Aug 24 12:36:57 UTC 2021 - Michal Suchanek <msucha...@suse.de> + +- Update to version 0.11.0 + - Avoid use-after-free in serialization (CVE-2021-3700, bsc#1189491) + - Add local directory to include search path for meson + - Fix generated by meson libusbredirhost.pc +- Remove upstreamed patches + - meson-Fix-include-directories-needed-to-build.patch + - meson-Fix-pkgconfig-required-library-name-reference.patch + - usbredir-CVE-2021-3700.patch + +------------------------------------------------------------------- +Tue Aug 24 13:46:46 CEST 2021 - r...@suse.de + +- add patch usbredir-CVE-2021-3700.patch + fix use-after-free in usbredirparser_serialize + (CVE-2021-3700,bsc#1189491) + +------------------------------------------------------------------- Old: ---- meson-Fix-include-directories-needed-to-build.patch meson-Fix-pkgconfig-required-library-name-reference.patch usbredir-0.9.0.tar.xz usbredir-0.9.0.tar.xz.sig New: ---- usbredir-0.11.0.tar.xz usbredir-0.11.0.tar.xz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ usbredir.spec ++++++ --- /var/tmp/diff_new_pack.FXY04X/_old 2021-08-26 23:14:38.760258649 +0200 +++ /var/tmp/diff_new_pack.FXY04X/_new 2021-08-26 23:14:38.764258648 +0200 @@ -18,7 +18,7 @@ Name: usbredir -Version: 0.9.0 +Version: 0.11.0 Release: 0 Summary: A protocol for redirecting USB traffic License: GPL-2.0-or-later AND LGPL-2.1-or-later @@ -26,8 +26,6 @@ URL: https://www.spice-space.org/usbredir.html Source: https://www.spice-space.org/download/usbredir/%{name}-%{version}.tar.xz Source1: https://www.spice-space.org/download/usbredir/%{name}-%{version}.tar.xz.sig -Patch1: meson-Fix-include-directories-needed-to-build.patch -Patch2: meson-Fix-pkgconfig-required-library-name-reference.patch BuildRequires: gcc-c++ BuildRequires: glib2-devel >= 2.44 BuildRequires: meson >= 0.48 @@ -76,8 +74,6 @@ %prep %setup -n %{name}-%{version} -%patch1 -p1 -%patch2 -p1 %build %meson -Dllvm-fuzz=disabled ++++++ usbredir-0.9.0.tar.xz -> usbredir-0.11.0.tar.xz ++++++ ++++ 2970 lines of diff (skipped)
