Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package lldpd for openSUSE:Factory checked
in at 2021-01-15 19:46:48
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/lldpd (Old)
and /work/SRC/openSUSE:Factory/.lldpd.new.28504 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "lldpd"
Fri Jan 15 19:46:48 2021 rev:14 rq:863265 version:1.0.8
Changes:
--------
--- /work/SRC/openSUSE:Factory/lldpd/lldpd.changes 2020-11-02
10:36:51.511315842 +0100
+++ /work/SRC/openSUSE:Factory/.lldpd.new.28504/lldpd.changes 2021-01-15
19:47:30.346135936 +0100
@@ -1,0 +2,12 @@
+Thu Jan 14 20:00:41 UTC 2021 - Martin Hauke <mar...@gmx.de>
+
+- Update to version 1.0.8:
+ Fix:
+ * Out-of-bound read access when parsing LLDP-MED civic address in
+ liblldpctl for malformed fields.
+ * Fix memory leak when receiving LLDPU with duplicate fields.
+ CVE-2020-27827.
+ Changes:
+ * Enable "router" capability bit when IPv6 routing is enabled.
+
+-------------------------------------------------------------------
Old:
----
lldpd-1.0.7.tar.gz
lldpd-1.0.7.tar.gz.asc
New:
----
lldpd-1.0.8.tar.gz
lldpd-1.0.8.tar.gz.asc
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ lldpd.spec ++++++
--- /var/tmp/diff_new_pack.J0YSdB/_old 2021-01-15 19:47:31.054136990 +0100
+++ /var/tmp/diff_new_pack.J0YSdB/_new 2021-01-15 19:47:31.062137002 +0100
@@ -1,7 +1,7 @@
#
# spec file for package lldpd
#
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -26,7 +26,7 @@
%define _fillupdir %{_localstatedir}/adm/fillup-templates
%endif
Name: lldpd
-Version: 1.0.7
+Version: 1.0.8
Release: 0
Summary: Implementation of IEEE 802.1ab (LLDP)
# We have some GPL linux headers in include/linux, they are used on
++++++ lldpd-1.0.7.tar.gz -> lldpd-1.0.8.tar.gz ++++++
++++ 29838 lines of diff (skipped)
