Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libupnp for openSUSE:Factory checked in at 2021-04-10 15:26:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libupnp (Old) and /work/SRC/openSUSE:Factory/.libupnp.new.2401 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libupnp" Sat Apr 10 15:26:08 2021 rev:24 rq:883462 version:1.14.5 Changes: -------- --- /work/SRC/openSUSE:Factory/libupnp/libupnp.changes 2021-03-10 08:48:41.202358317 +0100 +++ /work/SRC/openSUSE:Factory/.libupnp.new.2401/libupnp.changes 2021-04-10 15:26:25.674311446 +0200 @@ -1,0 +2,13 @@ +Tue Apr 6 23:38:27 UTC 2021 - Jan Engelhardt <jeng...@inai.de> + +- Update to release 1.14.5 + * Non-recursive version of ixmlNode_free() avoids stack overflow + attack (Fixes CVE-2021-28302). + +------------------------------------------------------------------- +Tue Mar 30 06:28:49 UTC 2021 - Jan Engelhardt <jeng...@inai.de> + +- Update to release 1.14.4 + * Fix for gena leak. + +------------------------------------------------------------------- Old: ---- libupnp-1.14.2.tar.bz2 New: ---- libupnp-1.14.5.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libupnp.spec ++++++ --- /var/tmp/diff_new_pack.uZgJI4/_old 2021-04-10 15:26:26.170312029 +0200 +++ /var/tmp/diff_new_pack.uZgJI4/_new 2021-04-10 15:26:26.174312034 +0200 @@ -20,7 +20,7 @@ %define pnpver 17 %define ixmlver 11 Name: libupnp -Version: 1.14.2 +Version: 1.14.5 Release: 0 Summary: An implementation of Universal Plug and Play (UPnP) License: BSD-3-Clause ++++++ libupnp-1.14.2.tar.bz2 -> libupnp-1.14.5.tar.bz2 ++++++ ++++ 3122 lines of diff (skipped)
