Hello community, here is the log from the commit of package libqxmpp for openSUSE:Factory checked in at 2020-09-01 20:10:20 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libqxmpp (Old) and /work/SRC/openSUSE:Factory/.libqxmpp.new.3399 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libqxmpp" Tue Sep 1 20:10:20 2020 rev:16 rq:830985 version:1.3.1 Changes: -------- --- /work/SRC/openSUSE:Factory/libqxmpp/libqxmpp.changes 2020-06-02 14:34:17.218695257 +0200 +++ /work/SRC/openSUSE:Factory/.libqxmpp.new.3399/libqxmpp.changes 2020-09-01 20:10:36.472683319 +0200 @@ -1,0 +2,51 @@ +Thu Aug 27 18:55:57 UTC 2020 - Dirk Mueller <[email protected]> + +- update to 1.3.1: + * The most important change of this release is the fix of CVE-2017-5603. QXmpp is +not vulnerable to roster push attacks (CVE-2016-9928). + - QXmppRosterIq: Set subscriptionType to NotSet correctly (#293, @melvo) + - Fix `QXMPP_EXPORT` define when linking statically (#299, @leobasilio) + - QXmppMessageReceiptManager: Ignore all error messages (#300, @lnjX) + - QXmppCarbonManager: Fix CVE-2017-5603 (missing sender check) (#304, @lnjX) +QXmpp complys with the XMPP Compliance Suites 2020 (XEP-0423) for client +development in the Core, IM and Advanced Mobile suites now. For this prupose it +has been updated to RFC6120 and RFC6121. ABI compatibility was kept with this +release (apart from classes marked as 'NOT FINALIZED'). + - Port QXmppCallManager to GStreamer (#207, @olesalscheider) + - Add XEP-0245: The /me Command (#276, @lnjX) + - Add XEP-0357: Push Notifications: Enable/disable IQ (#271, @jbbgameich, + @zatroxde) + - Add XEP-0359: Unique and Stable Stanza IDs (#256, @lnjX) + - Add XEP-0428: Fallback Indication (#253, @lnjX) + - Update from RFC3920 to RFC6120: + * Deprecate PaymentRequired stanza error condition as it was not adopted in + RFC6120 (#277, @lnjX) + * Add PolicyViolation stanza error condition added in RFC6120 (#279, @lnjX) + * Add redirection URI from RFC6120 for Gone and Redirect conditions (#280, + @lnjX) + * Add 'by' attribute to QXmppStanza::Error from RFC6120 (#283, @lnjX) + - Update from RFC3921 to RFC6121: + * Add pre-approved presence subscriptions (#285, @lnjX): + - Add 'approved' attribute to QXmppRosterIq + - Add stream feature for pre-approved presence subscriptions + * Add stream feature for roster versioning (#286, @lnjX) + - Use QUuid by default to generate unique stanza IDs (#255, @lnjX) + - Add roster extension for MIX-PAM (XEP-0405) (#175, @lnjX) + - Update MAM to v0.6 (including namespace bump to `urn:xmpp:mam:2`) (#254, + #257, @lnjX) + - Add not-authorized stream error condition in QXmppOutgoingClient (#191, + @henry61024) + - Add missing static service discovery features for supported message + extensions (#287, @lnjX) + - Add utility constructor to QXmppDataForm and QXmppDataForm::Field to make + creation of forms easier (#273, @lnjX) + - Make QXmpp work with projects using `QT_NO_KEYWORDS` (#258, @tomcucinotta) + - Add hyperlinks to XEP references in the documentation (@lnjX) + - Move from Travis-CI to GitHub Actions (#265, @jlaine) + - Replace deprecated `qsrand()` and `qrand()` by QRandomGenerator (#267, + @melvo) + - Add tests for QXmppStanza::Error parsing (#279, @lnjX) + - `QXmppStanza::Error::Condition::PaymentRequired`: The error condition was + unused and not adopted in RFC6120 + +------------------------------------------------------------------- Old: ---- libqxmpp-1.2.1.tar.gz New: ---- libqxmpp-1.3.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libqxmpp.spec ++++++ --- /var/tmp/diff_new_pack.Ary2GB/_old 2020-09-01 20:10:37.960684015 +0200 +++ /var/tmp/diff_new_pack.Ary2GB/_new 2020-09-01 20:10:37.964684017 +0200 @@ -1,7 +1,7 @@ # # spec file for package libqxmpp # -# Copyright (c) 2019 SUSE LLC. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ %define sover 3 Name: libqxmpp -Version: 1.2.1 +Version: 1.3.1 Release: 0 Summary: Qt XMPP Library License: LGPL-2.1-or-later ++++++ libqxmpp-1.2.1.tar.gz -> libqxmpp-1.3.1.tar.gz ++++++ ++++ 19718 lines of diff (skipped)
