- Update to release 1.14.5

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libupnp?expand=0&rev=44
2021-04-06 23:39:20 +00:00
parent b46eaaaa43
commit 243f32121b
4 changed files with 11 additions and 4 deletions
--- a/libupnp-1.14.4.tar.bz2
+++ b/libupnp-1.14.4.tar.bz2
--- a/libupnp-1.14.5.tar.bz2
+++ b/libupnp-1.14.5.tar.bz2
--- a/libupnp.changes
+++ b/libupnp.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Tue Apr  6 23:38:27 UTC 2021 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 1.14.5
+  * Non-recursive version of ixmlNode_free() avoids stack overflow
+    attack (Fixes CVE-2021-28302).
+
 -------------------------------------------------------------------
 Tue Mar 30 06:28:49 UTC 2021 - Jan Engelhardt <jengelh@inai.de>

--- a/libupnp.spec
+++ b/libupnp.spec
@@ -20,7 +20,7 @@
 %define pnpver 17
 %define ixmlver 11
 Name:           libupnp
-Version:        1.14.4
+Version:        1.14.5
 Release:        0
 Summary:        An implementation of Universal Plug and Play (UPnP)
 License:        BSD-3-Clause