From 8ad159cee3e8395622f5892bb80c86e3cfec8179983f2539be9f8ba4e17a45a2 Mon Sep 17 00:00:00 2001 From: Dominique Leuenberger Date: Tue, 1 Jun 2021 09:42:23 +0000 Subject: [PATCH] Accepting request 896477 from home:susnux:branches:GNOME:Factory Update to version 1.2.6 Fix CVE-2021-33516 ( boo#1186590 ) OBS-URL: https://build.opensuse.org/request/show/896477 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/gupnp?expand=0&rev=114 --- gupnp.changes | 21 +++++++++++++++++++++ gupnp.spec | 8 ++++---- 2 files changed, 25 insertions(+), 4 deletions(-) diff --git a/gupnp.changes b/gupnp.changes index ec4d486..080a0db 100644 --- a/gupnp.changes +++ b/gupnp.changes @@ -1,3 +1,24 @@ +------------------------------------------------------------------- +Tue Jun 1 01:19:08 UTC 2021 - Ferdinand Thiessen + +- Update to version 1.2.6 + + Fix CVE-2021-33516 ( boo#1186590 ) + + Fix potential fd leak in linux CM + + Fix potential NULL pointer dereference when evaluating unset + ServiceProxyActions + + Fix leaking the message string if an action is never sent + + Fix leaking the ServiceProxyAction if sending fails in + call_action + + Fix potential use-after-free if service proxy is + destroxed before libsoup request finishes in control point + + Fix potential data leak due to being vulnerable to DNS + rebind attacs + + Fix introspection annotation for send_action and + call_action_finish to prevent a double-free + + Fix introspection annotation for send_action_list + + Make ServiceIntrospection usable from gobject-introspection +- Fix dependencies + ------------------------------------------------------------------- Thu May 27 17:02:15 UTC 2021 - Bjørn Lie diff --git a/gupnp.spec b/gupnp.spec index 042b4cc..8f4e502 100644 --- a/gupnp.spec +++ b/gupnp.spec @@ -29,16 +29,15 @@ Group: Development/Libraries/C and C++ URL: http://www.gupnp.org/ Source0: https://download.gnome.org/sources/gupnp/1.2/%{name}-%{version}.tar.xz Source1: baselibs.conf - BuildRequires: gtk-doc BuildRequires: meson BuildRequires: pkgconfig BuildRequires: pkgconfig(gio-2.0) >= 2.58 BuildRequires: pkgconfig(glib-2.0) >= 2.58 -BuildRequires: pkgconfig(gmodule-2.0) >= 2.58 -BuildRequires: pkgconfig(gobject-2.0) >= 2.58 +BuildRequires: pkgconfig(gmodule-2.0) >= 2.44 +BuildRequires: pkgconfig(gobject-2.0) >= 2.44 BuildRequires: pkgconfig(gobject-introspection-1.0) >= 0.6.4 -BuildRequires: pkgconfig(gssdp-1.2) >= 1.1.3 +BuildRequires: pkgconfig(gssdp-1.2) >= 1.2.3 BuildRequires: pkgconfig(libsoup-2.4) >= 2.48.0 BuildRequires: pkgconfig(libxml-2.0) BuildRequires: pkgconfig(uuid) @@ -94,6 +93,7 @@ libraries utilizing the GUPnP framework. %prep %autosetup -p1 +sed -i 's|env python3|python3|' tools/gupnp-binding-tool-1.2 %build %meson \