Hello community,

here is the log from the commit of package libnftnl for openSUSE:Factory 
checked in at 2017-10-23 16:36:29
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/libnftnl (Old)
 and      /work/SRC/openSUSE:Factory/.libnftnl.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "libnftnl"

Mon Oct 23 16:36:29 2017 rev:9 rq:533852 version:1.0.8

Changes:
--------
--- /work/SRC/openSUSE:Factory/libnftnl/libnftnl.changes        2016-12-29 
22:43:13.445939204 +0100
+++ /work/SRC/openSUSE:Factory/.libnftnl.new/libnftnl.changes   2017-10-23 
16:36:34.487627126 +0200
@@ -1,0 +2,12 @@
+Fri Oct 13 00:29:52 UTC 2017 - [email protected]
+
+- Update to new upstream release 1.0.8
+  * ct: add support for zone, helper and eventmask
+  * exthdr: tcp option set support
+  * rt: tcpmss get support
+  * ct: add average bytes per packet counter support
+  * exthdr: Add support for exthdr flags
+- Add bufferov.diff
+- Drop baselibs.conf
+
+-------------------------------------------------------------------

Old:
----
  baselibs.conf
  libnftnl-1.0.7.tar.bz2
  libnftnl-1.0.7.tar.bz2.sig

New:
----
  bufferov.diff
  libnftnl-1.0.8.tar.bz2
  libnftnl-1.0.8.tar.bz2.sig

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ libnftnl.spec ++++++
--- /var/tmp/diff_new_pack.n6KabG/_old  2017-10-23 16:36:35.151596041 +0200
+++ /var/tmp/diff_new_pack.n6KabG/_new  2017-10-23 16:36:35.155595854 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package libnftnl
 #
-# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,8 +17,8 @@
 
 
 Name:           libnftnl
-%define lname  libnftnl4
-Version:        1.0.7
+%define lname  libnftnl7
+Version:        1.0.8
 Release:        0
 Summary:        Userspace library to access the nftables Netlink interface
 License:        GPL-2.0+
@@ -28,7 +28,7 @@
 #Git-Clone:    git://git.netfilter.org/libnftnl
 Source:         http://ftp.netfilter.org/pub/libnftnl/%name-%version.tar.bz2
 Source2:        
http://ftp.netfilter.org/pub/libnftnl/%name-%version.tar.bz2.sig
-Source3:        baselibs.conf
+Patch1:         bufferov.diff
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 # Normally, this require would not be needed, as upstream ships all headers.
 # Except when they don't and then don't bother fixing it.
@@ -51,9 +51,9 @@
 programming interface (API) to the in-kernel nf_tables subsystem.
 
 %package devel
-Requires:       %lname = %version
-Summary:        Development files to libnftnl
+Summary:        Development files for libnftnl
 Group:          Development/Libraries/C and C++
+Requires:       %lname = %version
 
 %description devel
 libnftnl is a userspace library providing a low-level netlink
@@ -64,6 +64,7 @@
 
 %prep
 %setup -q
+%patch -P 1 -p1
 
 %build
 %configure \
@@ -73,7 +74,7 @@
 make %{?_smp_mflags}
 
 %install
-make install DESTDIR="%buildroot"
+%make_install
 rm -f "%buildroot/%_libdir"/*.la
 
 %post   -n %lname -p /sbin/ldconfig
@@ -81,7 +82,7 @@
 
 %files -n %lname
 %defattr(-,root,root)
-%_libdir/libnftnl.so.4*
+%_libdir/libnftnl.so.7*
 
 %files devel
 %defattr(-,root,root)

++++++ bufferov.diff ++++++
From: Jan Engelhardt <[email protected]>
Date: 2017-10-13 02:43:06.480980575 +0200
X-Upstream: reported

resolve a potential buffer overflow when i > 9
[reg->len > 36].


expr/data_reg.c:69:27: warning: '%d' directive writing between 1 and
10 bytes into a region of size 2 [-Wformat-overflow=]
   sprintf(node_name, "data%d", i);

---
 src/expr/data_reg.c |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Index: libnftnl-1.0.8/src/expr/data_reg.c
===================================================================
--- libnftnl-1.0.8/src/expr/data_reg.c
+++ libnftnl-1.0.8/src/expr/data_reg.c
@@ -60,7 +60,7 @@ static int nftnl_data_reg_value_json_par
                                         struct nftnl_parse_err *err)
 {
        int i;
-       char node_name[6];
+       char node_name[16];
 
        if (nftnl_jansson_parse_val(data, "len", NFTNL_TYPE_U8, &reg->len, err) 
< 0)
                        return DATA_NONE;
++++++ libnftnl-1.0.7.tar.bz2 -> libnftnl-1.0.8.tar.bz2 ++++++
++++ 29579 lines of diff (skipped)


Reply via email to