rpm/gupnp
SHA256
1
0
Fork 0
forked from pool/gupnp
Code Pull Requests Activity

Accepting request 896477 from home:susnux:branches:GNOME:Factory

Browse Source 
Update to version 1.2.6

Fix CVE-2021-33516 ( boo#1186590 )

OBS-URL: https://build.opensuse.org/request/show/896477
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/gupnp?expand=0&rev=114
This commit is contained in:
Dominique Leuenberger 2021-06-01 09:42:23 +00:00 committed by Git OBS Bridge
parent 5f992b3420
commit 8ad159cee3
2 changed files with 25 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
gupnp.changes
View File

@ -1,3 +1,24 @@
-------------------------------------------------------------------
Tue Jun 1 01:19:08 UTC 2021 - Ferdinand Thiessen <rpm@fthiessen.de>
- Update to version 1.2.6
+ Fix CVE-2021-33516 ( boo#1186590 )
+ Fix potential fd leak in linux CM
+ Fix potential NULL pointer dereference when evaluating unset
ServiceProxyActions
+ Fix leaking the message string if an action is never sent
+ Fix leaking the ServiceProxyAction if sending fails in
call_action
+ Fix potential use-after-free if service proxy is
destroxed before libsoup request finishes in control point
+ Fix potential data leak due to being vulnerable to DNS
rebind attacs
+ Fix introspection annotation for send_action and
call_action_finish to prevent a double-free
+ Fix introspection annotation for send_action_list
+ Make ServiceIntrospection usable from gobject-introspection
- Fix dependencies
-------------------------------------------------------------------
Thu May 27 17:02:15 UTC 2021 - Bjørn Lie <bjorn.lie@gmail.com>

8
gupnp.spec
View File

@ -29,16 +29,15 @@ Group: Development/Libraries/C and C++
URL: http://www.gupnp.org/
Source0: https://download.gnome.org/sources/gupnp/1.2/%{name}-%{version}.tar.xz
Source1: baselibs.conf
BuildRequires: gtk-doc
BuildRequires: meson
BuildRequires: pkgconfig
BuildRequires: pkgconfig(gio-2.0) >= 2.58
BuildRequires: pkgconfig(glib-2.0) >= 2.58
BuildRequires: pkgconfig(gmodule-2.0) >= 2.58
BuildRequires: pkgconfig(gobject-2.0) >= 2.58
BuildRequires: pkgconfig(gmodule-2.0) >= 2.44
BuildRequires: pkgconfig(gobject-2.0) >= 2.44
BuildRequires: pkgconfig(gobject-introspection-1.0) >= 0.6.4
BuildRequires: pkgconfig(gssdp-1.2) >= 1.1.3
BuildRequires: pkgconfig(gssdp-1.2) >= 1.2.3
BuildRequires: pkgconfig(libsoup-2.4) >= 2.48.0
BuildRequires: pkgconfig(libxml-2.0)
BuildRequires: pkgconfig(uuid)
@ -94,6 +93,7 @@ libraries utilizing the GUPnP framework.
%prep
%autosetup -p1
sed -i 's|env python3|python3|' tools/gupnp-binding-tool-1.2
%build
%meson \