Hello community,

here is the log from the commit of package gmime for openSUSE:Factory checked 
in at 2019-11-24 00:08:30
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/gmime (Old)
 and      /work/SRC/openSUSE:Factory/.gmime.new.26869 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "gmime"

Sun Nov 24 00:08:30 2019 rev:68 rq:749281 version:3.2.5

Changes:
--------
--- /work/SRC/openSUSE:Factory/gmime/gmime.changes      2019-10-17 
12:59:10.993321355 +0200
+++ /work/SRC/openSUSE:Factory/.gmime.new.26869/gmime.changes   2019-11-24 
00:08:32.267092220 +0100
@@ -1,0 +2,19 @@
+Thu Nov 14 17:23:07 UTC 2019 - Bjørn Lie <bjorn....@gmail.com>
+
+- Update to version 3.2.5:
+  + Modified GMimeParser to prevent stack overflows when parsing
+    deeply nested messages. GMimeParser now has a limit on how deep
+    multipart and/or message/rfc822 MIME part nesting is allowed to
+    go before the parser will take action to prevent a stack
+    overflow. If the max level is reached at a message/rfc822 part,
+    then that part will be consumed by the parser as a generic
+    GMimePart rather than a GMimeMessagePart. Likewise, if the max
+    level is reached at any type of multipart, then the content of
+    said multipart will be packed into the GMimeMultipart's preface
+    and not parsed any further.
+  + g_mime_multipart_foreach has been rewritten to avoid recursion,
+    thereby avoiding potential stack overflows.
+  + The gmime-port-2-6-to-3-0.sh script has been fixed to use
+    proper sed syntax.
+
+-------------------------------------------------------------------

Old:
----
  gmime-3.2.4.tar.xz

New:
----
  gmime-3.2.5.tar.xz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ gmime.spec ++++++
--- /var/tmp/diff_new_pack.9JeBNH/_old  2019-11-24 00:08:32.907092286 +0100
+++ /var/tmp/diff_new_pack.9JeBNH/_new  2019-11-24 00:08:32.907092286 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package gmime
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LLC.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -22,7 +22,7 @@
 # NOTE - also update baselibs.conf when bumping this
 %define so_ver 3_0
 Name:           gmime
-Version:        3.2.4
+Version:        3.2.5
 Release:        0
 Summary:        MIME Parser and Utility Library
 License:        LGPL-2.1-or-later

++++++ gmime-3.2.4.tar.xz -> gmime-3.2.5.tar.xz ++++++
++++ 2509 lines of diff (skipped)


Reply via email to