Hello community, here is the log from the commit of package gmime for openSUSE:Factory checked in at 2019-11-24 00:08:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gmime (Old) and /work/SRC/openSUSE:Factory/.gmime.new.26869 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gmime" Sun Nov 24 00:08:30 2019 rev:68 rq:749281 version:3.2.5 Changes: -------- --- /work/SRC/openSUSE:Factory/gmime/gmime.changes 2019-10-17 12:59:10.993321355 +0200 +++ /work/SRC/openSUSE:Factory/.gmime.new.26869/gmime.changes 2019-11-24 00:08:32.267092220 +0100 @@ -1,0 +2,19 @@ +Thu Nov 14 17:23:07 UTC 2019 - Bjørn Lie <[email protected]> + +- Update to version 3.2.5: + + Modified GMimeParser to prevent stack overflows when parsing + deeply nested messages. GMimeParser now has a limit on how deep + multipart and/or message/rfc822 MIME part nesting is allowed to + go before the parser will take action to prevent a stack + overflow. If the max level is reached at a message/rfc822 part, + then that part will be consumed by the parser as a generic + GMimePart rather than a GMimeMessagePart. Likewise, if the max + level is reached at any type of multipart, then the content of + said multipart will be packed into the GMimeMultipart's preface + and not parsed any further. + + g_mime_multipart_foreach has been rewritten to avoid recursion, + thereby avoiding potential stack overflows. + + The gmime-port-2-6-to-3-0.sh script has been fixed to use + proper sed syntax. + +------------------------------------------------------------------- Old: ---- gmime-3.2.4.tar.xz New: ---- gmime-3.2.5.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gmime.spec ++++++ --- /var/tmp/diff_new_pack.9JeBNH/_old 2019-11-24 00:08:32.907092286 +0100 +++ /var/tmp/diff_new_pack.9JeBNH/_new 2019-11-24 00:08:32.907092286 +0100 @@ -1,7 +1,7 @@ # # spec file for package gmime # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LLC. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -22,7 +22,7 @@ # NOTE - also update baselibs.conf when bumping this %define so_ver 3_0 Name: gmime -Version: 3.2.4 +Version: 3.2.5 Release: 0 Summary: MIME Parser and Utility Library License: LGPL-2.1-or-later ++++++ gmime-3.2.4.tar.xz -> gmime-3.2.5.tar.xz ++++++ ++++ 2509 lines of diff (skipped)
