2013-02-17 19:03:12 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Feb 5 21:10:59 UTC 2013 - zaitor@opensuse.org
|
|
|
|
|
|
|
|
- Update to version 1.6.18:
|
|
|
|
+ Security fix for CERT issue VU#922681.
|
|
|
|
+ CVE-2012-5958 Issue #2: Stack buffer overflow of Tempbuf
|
|
|
|
+ CVE-2012-5959 Issue #4: Stack buffer overflow of Event->UDN
|
|
|
|
+ CVE-2012-5960 Issue #8: Stack buffer overflow of Event->UDN
|
|
|
|
+ Notice that the following issues have already been dealt by
|
|
|
|
previous work:
|
|
|
|
- CVE-2012-5961 Issue #1: Stack buffer overflow of Evt->UDN
|
|
|
|
- CVE-2012-5962 Issue #3: Stack buffer overflow of
|
|
|
|
Evt->DeviceType
|
|
|
|
- CVE-2012-5963 Issue #5: Stack buffer overflow of Event->UDN
|
|
|
|
- CVE-2012-5964 Issue #6: Stack buffer overflow of
|
|
|
|
Event->DeviceType
|
|
|
|
- CVE-2012-5965 Issue #7: Stack buffer overflow of
|
|
|
|
Event->DeviceType
|
|
|
|
+ Fix memory leak and access violation in
|
|
|
|
UpnpSendAction(Ex)Async.
|
|
|
|
+ Disable SetGenaCallback call if device is disabled.
|
|
|
|
+ Fix problems detected as dead assignment warning by clang
|
|
|
|
scan-build.
|
|
|
|
+ Fix condition for allocation failure in get_content_type().
|
|
|
|
+ Avoid dereference of null pointer in
|
|
|
|
ixmlNode_setNodeProperties.
|
|
|
|
+ Avoid access violation after parser_parse_chunky_headers call.
|
|
|
|
+ Remove possibility of access violation.
|
|
|
|
+ Fix type of local variable stopSock in RunMiniServer().
|
|
|
|
+ Compilation optimisation.
|
|
|
|
+ Use of thread-unsafe gmtime() in httpreadwrite.c sf#3507819.
|
|
|
|
- Changes from version 1.6.17:
|
|
|
|
+ Remove implicit casts.
|
|
|
|
+ Add --enable-unspecified_server
|
|
|
|
+ Removing implicit casts in miniserver.c
|
|
|
|
+ Bugs fixed: sf#3512833, sf#3510693, sf#3511149, sf#3514145.
|
|
|
|
- Changes from version 1.6.16:
|
|
|
|
+ Replace sprintf by snprintf in http_WriteHttpPost to avoid
|
|
|
|
buffer overflow.
|
|
|
|
+ Add infoSize parameter to get_sdk_info
|
|
|
|
+ Check return code in ixml.
|
|
|
|
+ Add --disable-optssdp option
|
|
|
|
+ Add more explicit casts and remove dead code.
|
|
|
|
+ Bug fix in ixmlNode_allowChildren.
|
|
|
|
+ Improve upnp/genlib/net.
|
|
|
|
+ Improve ssdp part. Do not compile
|
|
|
|
CreateClientRequestPacketUlaGua if IPv6 is disabled.
|
|
|
|
+ Bugs fixed: sf#3502958, sf#3499781, sf#3499878, sf#3175217,
|
|
|
|
sf#3496993, sf#3497714, sf#3498442, sf#3498439, sf#3498436,
|
|
|
|
sf#3497714, sf#2989399, sf#3325246, sf#3417134, sf#3497159,
|
|
|
|
sf#3497140, sf#3497126, sf#3497034, sf#3497033, sf#3497027,
|
|
|
|
sf#3497009, sf#3496703, sf#3496702, sf#3496942, sf#3496938,
|
|
|
|
sf#3496934, sf#3496933, sf#3496581, sf#3495616, sf#3495286,
|
|
|
|
sf#3495280, sf#3494865, sf#3489999, sf#3489990, sf#3489999.
|
|
|
|
- Changes from version 1.6.15:
|
|
|
|
+ Bug fix on M-SEARCH for IPv6 CPs.
|
|
|
|
+ Retrieve IPv6 addresses in Upnp_Discovery.
|
|
|
|
+ Fix bug sf#3469344.
|
|
|
|
- Changes from version 1.6.14:
|
|
|
|
+ UPnP Low Power Support.
|
|
|
|
+ Bug fix in IN6_IS_ADDR_GLOBAL.
|
|
|
|
+ Bug Fix on M-SEARCH.
|
|
|
|
+ Fixes for compilation under Windows.
|
|
|
|
+ Several fixes to correctly use SOCKET (and related) types
|
|
|
|
instead of non-portable variations.
|
|
|
|
- Rebase libupnp-configure.patch.
|
|
|
|
|
2013-02-04 19:20:48 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Feb 3 17:15:23 UTC 2013 - crrodriguez@opensuse.org
|
|
|
|
|
|
|
|
- Previous patch was incomplete and did not consider files
|
|
|
|
in the upnp directory. (updates libupnp-configure.patch)
|
|
|
|
|
2012-07-19 18:59:57 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jul 17 14:53:58 UTC 2012 - crrodriguez@opensuse.org
|
|
|
|
|
|
|
|
- Enable IPV6 support...
|
|
|
|
- Fix autotools, all C files must include "*config.h"
|
|
|
|
- DO not build samples
|
|
|
|
|
2012-02-25 09:35:59 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sat Feb 25 08:35:41 UTC 2012 - coolo@suse.com
|
|
|
|
|
|
|
|
- sync package name with spec file name
|
|
|
|
|
2012-01-30 14:10:30 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jan 30 13:09:31 UTC 2012 - jengelh@medozas.de
|
|
|
|
|
|
|
|
- Properly provide pkgconfig symbols
|
|
|
|
|
2011-10-09 08:59:25 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sat Oct 8 10:26:59 UTC 2011 - saschpe@gmx.de
|
|
|
|
|
|
|
|
- Initial version
|
|
|
|
|