Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libeXosip2 for openSUSE:Factory checked in at 2022-12-16 17:51:38 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libeXosip2 (Old) and /work/SRC/openSUSE:Factory/.libeXosip2.new.1835 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libeXosip2" Fri Dec 16 17:51:38 2022 rev:27 rq:1043206 version:5.3.0 Changes: -------- --- /work/SRC/openSUSE:Factory/libeXosip2/libeXosip2.changes 2020-08-31 16:48:35.576306211 +0200 +++ /work/SRC/openSUSE:Factory/.libeXosip2.new.1835/libeXosip2.changes 2022-12-16 17:51:46.112056242 +0100 @@ -1,0 +2,108 @@ +Mon Sep 5 19:05:29 UTC 2022 - Benoît Monin <benoit.mo...@gmx.fr> + +- update to 5.3.0: + * rewrite socket error management in order to apply them to all + pending ICT and NICT transactions + * add time information in cb_xixt_kill_transaction callback for + debugging + * eXosip_lock will now include read on sockets + * [TLS] allow to accept wildcard with a new bit in + tls_verify_client_certificate + * [TLS] disable loading OS certifiate with a new bit in + tls_verify_client_certificate + * [TLS] I beleive there is no reason to cut packet in 500 bytes + chunks on ios + * [EXOSIP_OPT_SET_CONTACT_DIALOG_EXTRA_PARAMS] new option to set + Contact parameters in request/answers dialogs + * [AMSIP_OPTION_SET_SIP_INSTANCE] allow any value inside + +sip.instance instead of only urn:uuid + * [epoll] fix eXosip_event_wait when using epoll implementation + where events are distributed in the next eXosip_event_wait call +- additional changes from 5.2.1: + * [ENABLE_MAIN_SOCKET] fix epoll mechanism for server socket with + TCP and TLS + * [crash] check scheme upon processing 3xx + * [ssl] fix to be compatible with libressl + * [ssl] https://savannah.nongnu.org/patch/?10046 compatibility + with openssl below 1.1.0 + * fix when Content-Type indicates application/sdp, but there is + no body + * [TLS] modify the code for TLS validation in order to improve + logs and details on the connection + * use time_t instead of int for r_retry_after_delay variable + [fix 1367a34ca commited on March 1st] + * eXosip_default_action will return OSIP_RETRY_LIMIT when limit + is reached + * make sure to obey the Retry-After header from REGISTER reply + * use newer osip_timersub MACRO + * [bug#60024] fix openssl usage to always use callback mode for + private key password, even when missing + * eXosip_reset_transports was not effective any more since [5.1.2] + [commit 705643fa 2020-07-07] [do not use unless you understand + it] + * [windows] a HANDLE is leaked when loading trusted certificates + * dp layer: handle WSAEMSGSIZE when buffer is too short for + complete incoming message + * cleaner code to retreive an SDP from a SIP message + * fix crash when ENABLE_MAIN_SOCKET is defined and epoll is used +- additional changes from 5.2.0: + * fix memory and socket leak [major] [affected TCP, TLS, UDP: + since 5.1.2, need update asap] + * fix to make sure a non yet established TLS descriptor with read + descriptor set will be processed when no outgoing transaction + is in a state to handle it [since 5.1.2] + * fix SRV rotation for TLS [was rotating TCP records instead of + TLS] [since 5.1.2] + * fix duplicate packets for TCP and TLS when several outgoing + NICT are happening at the same time [since 5.1.2] + * add outbound proxy parameter in sip_monitor tool + * ABI update: modification of "eXosip_tls_ctx_t" +- additional changes from 5.1.3: + * EXOSIP_OPT_FORCE_CONNECTIONREUSE; new option to force reusing + established socket for ACK and dialog message + * tls: fix building DH parameter with 5.1.2 and openssl < 1.1.0 +- additional changes from 5.1.2: + * tls: use RFC 5114 dh param with 2048 bits size. + * tls: use 2048 bits for ephemeral RSA key genearation. + * tls: use SSL_OP_NO_COMPRESSION to make sure it's disabled. + * tls: use SSL_OP_NO_TICKET to disable ticket. + * tls: use HIGH:!COMPLEMENTOFDEFAULT:!kRSA:!PSK:!SRP cipher list + for higher security and less ciphers + * fix possible race condition in sample code [sip_reg and + sip_monitor] + * new format style using clang-format. + * reduce and rewrite logs for readability. + * fix broken epoll implementation. (DO NOT USE 5.1.1 with epoll) + * rewrite UDP/TCP/TLS (and DTLS untested) for both select and + epoll mode. + * Fix NAPTR/SRV on windows when CARES is not used. (not advised) + * ACK sent out of transaction with no existing connection may be + sent later. (TCP/TLS) + * Upon TLS loss, try to use domain or NAPTR SNI when TLS + connection is not initiated by an outgoing transaction. + * sip_monitor: new tool to monitor sip service + * add support for authentication using SHA-256 (openssl required) + * only use first supported proposed authentication when same + realm is used + * fix: upon UDP errors, like ICMP buffer size may reach abnormal + values (avoid useless reallocation) +- additional changes from 5.1.1: + * new API: + int eXosip_hexa_generate_random(char *val, int val_size) + int eXosip_byte_generate_random(char *val, int val_size) + * provide more entropy with eXosip_byte_generate_random (with + openssl when available). + * fix TLS security issue reported by Alexander Traud regarding + hostname validation when using NAPTR/SRV. + * add support for epoll (detected by configured) // becomes the + default on linux platforms with autotools + * fix bug #56839: The cnonce should not be static -this is + identified as replay attack by some services-. + * fix tcp and tls connection failure detection (accelerate error + detection and recovery) + * fix: fixed a crash with DTLS +- update soname to libeXosip2-15 +- add source archive signature and author keyring +- add new binaries sip_monitor and sip_storm + +------------------------------------------------------------------- Old: ---- libexosip2-5.1.0.tar.gz New: ---- libeXosip2.keyring libexosip2-5.3.0.tar.gz libexosip2-5.3.0.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libeXosip2.spec ++++++ --- /var/tmp/diff_new_pack.FxpYU0/_old 2022-12-16 17:51:47.056061438 +0100 +++ /var/tmp/diff_new_pack.FxpYU0/_new 2022-12-16 17:51:47.060061460 +0100 @@ -1,7 +1,7 @@ # # spec file for package libeXosip2 # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,22 +16,24 @@ # -%define soname libeXosip2-12 +%define soname libeXosip2-15 Name: libeXosip2 -Version: 5.1.0 +Version: 5.3.0 Release: 0 Summary: Extended osip2 library License: GPL-2.0-or-later Group: Productivity/Networking/Other URL: http://savannah.nongnu.org/projects/exosip/ Source: http://download.savannah.nongnu.org/releases/exosip/libexosip2-%{version}.tar.gz +Source1: http://download.savannah.nongnu.org/releases/exosip/libexosip2-%{version}.tar.gz.sig +Source2: https://savannah.gnu.org/people/viewgpg.php?user_id=3960#/%{name}.keyring BuildRequires: c-ares-devel BuildRequires: gcc BuildRequires: glibc-devel BuildRequires: openssl-devel BuildRequires: pkg-config -BuildRequires: pkgconfig(libosip2) >= 5.1.0 +BuildRequires: pkgconfig(libosip2) >= 5.3.0 BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -50,7 +52,7 @@ Group: Development/Libraries/C and C++ Requires: %{soname} = %{version} Requires: glibc-devel -Requires: libosip2-devel >= 5.1.0 +Requires: libosip2-devel >= 5.3.0 Requires: openssl-devel Provides: %{soname}-devel = %{version} @@ -76,7 +78,9 @@ %files %defattr(-,root,root) +%{_bindir}/sip_monitor %{_bindir}/sip_reg +%{_bindir}/sip_storm %files -n %{soname} %defattr(-,root,root) ++++++ libexosip2-5.1.0.tar.gz -> libexosip2-5.3.0.tar.gz ++++++ ++++ 50198 lines of diff (skipped)