From e2c8849551dca30237d5a9c0fd8a6d23f0f32be1c1b1c8e3ecb61dcde1b05148 Mon Sep 17 00:00:00 2001 From: Dirk Mueller Date: Tue, 1 Sep 2020 07:49:56 +0000 Subject: [PATCH] Accepting request 830069 from home:dirkmueller:branches:network - update to 1.3.1: * The most important change of this release is the fix of CVE-2017-5603. QXmpp is not vulnerable to roster push attacks (CVE-2016-9928). - QXmppRosterIq: Set subscriptionType to NotSet correctly (#293, @melvo) - Fix `QXMPP_EXPORT` define when linking statically (#299, @leobasilio) - QXmppMessageReceiptManager: Ignore all error messages (#300, @lnjX) - QXmppCarbonManager: Fix CVE-2017-5603 (missing sender check) (#304, @lnjX) QXmpp complys with the XMPP Compliance Suites 2020 (XEP-0423) for client development in the Core, IM and Advanced Mobile suites now. For this prupose it has been updated to RFC6120 and RFC6121. ABI compatibility was kept with this release (apart from classes marked as 'NOT FINALIZED'). - Port QXmppCallManager to GStreamer (#207, @olesalscheider) - Add XEP-0245: The /me Command (#276, @lnjX) - Add XEP-0357: Push Notifications: Enable/disable IQ (#271, @jbbgameich, @zatroxde) - Add XEP-0359: Unique and Stable Stanza IDs (#256, @lnjX) - Add XEP-0428: Fallback Indication (#253, @lnjX) - Update from RFC3920 to RFC6120: * Deprecate PaymentRequired stanza error condition as it was not adopted in RFC6120 (#277, @lnjX) * Add PolicyViolation stanza error condition added in RFC6120 (#279, @lnjX) * Add redirection URI from RFC6120 for Gone and Redirect conditions (#280, @lnjX) * Add 'by' attribute to QXmppStanza::Error from RFC6120 (#283, @lnjX) - Update from RFC3921 to RFC6121: * Add pre-approved presence subscriptions (#285, @lnjX): - Add 'approved' attribute to QXmppRosterIq - Add stream feature for pre-approved presence subscriptions * Add stream feature for roster versioning (#286, @lnjX) - Use QUuid by default to generate unique stanza IDs (#255, @lnjX) OBS-URL: https://build.opensuse.org/request/show/830069 OBS-URL: https://build.opensuse.org/package/show/network/libqxmpp?expand=0&rev=28 --- libqxmpp-1.2.1.tar.gz | 3 --- libqxmpp-1.3.1.tar.gz | 3 +++ libqxmpp.changes | 51 +++++++++++++++++++++++++++++++++++++++++++ libqxmpp.spec | 4 ++-- 4 files changed, 56 insertions(+), 5 deletions(-) delete mode 100644 libqxmpp-1.2.1.tar.gz create mode 100644 libqxmpp-1.3.1.tar.gz diff --git a/libqxmpp-1.2.1.tar.gz b/libqxmpp-1.2.1.tar.gz deleted file mode 100644 index f5d6ed1..0000000 --- a/libqxmpp-1.2.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:f83eb44e2b21b070a7568b2b234e269a6ab7c64007728d62b01487de843688ee -size 312945 diff --git a/libqxmpp-1.3.1.tar.gz b/libqxmpp-1.3.1.tar.gz new file mode 100644 index 0000000..34e3b14 --- /dev/null +++ b/libqxmpp-1.3.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:812e718a2dd762ec501a9012a1281b9b6c6d46ec38adbc6eec242309144e1c55 +size 302843 diff --git a/libqxmpp.changes b/libqxmpp.changes index 3b3d70a..4c37bde 100644 --- a/libqxmpp.changes +++ b/libqxmpp.changes @@ -1,3 +1,54 @@ +------------------------------------------------------------------- +Thu Aug 27 18:55:57 UTC 2020 - Dirk Mueller + +- update to 1.3.1: + * The most important change of this release is the fix of CVE-2017-5603. QXmpp is +not vulnerable to roster push attacks (CVE-2016-9928). + - QXmppRosterIq: Set subscriptionType to NotSet correctly (#293, @melvo) + - Fix `QXMPP_EXPORT` define when linking statically (#299, @leobasilio) + - QXmppMessageReceiptManager: Ignore all error messages (#300, @lnjX) + - QXmppCarbonManager: Fix CVE-2017-5603 (missing sender check) (#304, @lnjX) +QXmpp complys with the XMPP Compliance Suites 2020 (XEP-0423) for client +development in the Core, IM and Advanced Mobile suites now. For this prupose it +has been updated to RFC6120 and RFC6121. ABI compatibility was kept with this +release (apart from classes marked as 'NOT FINALIZED'). + - Port QXmppCallManager to GStreamer (#207, @olesalscheider) + - Add XEP-0245: The /me Command (#276, @lnjX) + - Add XEP-0357: Push Notifications: Enable/disable IQ (#271, @jbbgameich, + @zatroxde) + - Add XEP-0359: Unique and Stable Stanza IDs (#256, @lnjX) + - Add XEP-0428: Fallback Indication (#253, @lnjX) + - Update from RFC3920 to RFC6120: + * Deprecate PaymentRequired stanza error condition as it was not adopted in + RFC6120 (#277, @lnjX) + * Add PolicyViolation stanza error condition added in RFC6120 (#279, @lnjX) + * Add redirection URI from RFC6120 for Gone and Redirect conditions (#280, + @lnjX) + * Add 'by' attribute to QXmppStanza::Error from RFC6120 (#283, @lnjX) + - Update from RFC3921 to RFC6121: + * Add pre-approved presence subscriptions (#285, @lnjX): + - Add 'approved' attribute to QXmppRosterIq + - Add stream feature for pre-approved presence subscriptions + * Add stream feature for roster versioning (#286, @lnjX) + - Use QUuid by default to generate unique stanza IDs (#255, @lnjX) + - Add roster extension for MIX-PAM (XEP-0405) (#175, @lnjX) + - Update MAM to v0.6 (including namespace bump to `urn:xmpp:mam:2`) (#254, + #257, @lnjX) + - Add not-authorized stream error condition in QXmppOutgoingClient (#191, + @henry61024) + - Add missing static service discovery features for supported message + extensions (#287, @lnjX) + - Add utility constructor to QXmppDataForm and QXmppDataForm::Field to make + creation of forms easier (#273, @lnjX) + - Make QXmpp work with projects using `QT_NO_KEYWORDS` (#258, @tomcucinotta) + - Add hyperlinks to XEP references in the documentation (@lnjX) + - Move from Travis-CI to GitHub Actions (#265, @jlaine) + - Replace deprecated `qsrand()` and `qrand()` by QRandomGenerator (#267, + @melvo) + - Add tests for QXmppStanza::Error parsing (#279, @lnjX) + - `QXmppStanza::Error::Condition::PaymentRequired`: The error condition was + unused and not adopted in RFC6120 + ------------------------------------------------------------------- Tue May 19 10:00:23 UTC 2020 - Wolfgang Bauer diff --git a/libqxmpp.spec b/libqxmpp.spec index aef3b6b..33b2e1c 100644 --- a/libqxmpp.spec +++ b/libqxmpp.spec @@ -1,7 +1,7 @@ # # spec file for package libqxmpp # -# Copyright (c) 2019 SUSE LLC. +# Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ %define sover 3 Name: libqxmpp -Version: 1.2.1 +Version: 1.3.1 Release: 0 Summary: Qt XMPP Library License: LGPL-2.1-or-later