Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package live555 for openSUSE:Factory checked in at 2026-09-11 19:00:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/live555 (Old) and /work/SRC/openSUSE:Factory/.live555.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "live555" Fri Sep 11 19:00:27 2026 rev:48 rq:1376923 version:2026.08.25 Changes: -------- --- /work/SRC/openSUSE:Factory/live555/live555.changes 2026-08-26 19:51:54.813906460 +0200 +++ /work/SRC/openSUSE:Factory/.live555.new.1265/live555.changes 2026-09-11 19:00:59.590772817 +0200 @@ -1,0 +2,7 @@ +Thu Sep 10 10:57:16 UTC 2026 - Dominique Leuenberger <[email protected]> + +- Update to version 2026.08.25: + + Fixed a bug in "VorbisAudioRTPSource" that could have caused a + malicious SDP description to crash a RTP client. + +------------------------------------------------------------------- @@ -86,4 +93,4 @@ -- Update to version 2026.03.23: - + Fixed a bug in the RTSP server code that caused it to - improperly handle non-interleaved "SETUP"s that were sent for a - session where interleaving (i.e., RTP/RTCP-over-TCP) had +- Update to version 2026.03.23 (boo#1279932): + + CVE-2026-38998: Fixed a bug in the RTSP server code that caused + it to improperly handle non-interleaved "SETUP"s that were sent + for a session where interleaving (i.e., RTP/RTCP-over-TCP) had Old: ---- live.2026.08.14.tar.gz New: ---- live.2026.08.25.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ live555.spec ++++++ --- /var/tmp/diff_new_pack.WS9w9G/_old 2026-09-11 19:01:00.492810409 +0200 +++ /var/tmp/diff_new_pack.WS9w9G/_new 2026-09-11 19:01:00.496810576 +0200 @@ -20,7 +20,7 @@ %define lmdmaj 120 Name: live555 -Version: 2026.08.14 +Version: 2026.08.25 Release: 0 Summary: LIVE555 Streaming Media License: LGPL-2.1-only ++++++ live.2026.08.14.tar.gz -> live.2026.08.25.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/live/BasicUsageEnvironment/include/BasicUsageEnvironment_version.hh new/live/BasicUsageEnvironment/include/BasicUsageEnvironment_version.hh --- old/live/BasicUsageEnvironment/include/BasicUsageEnvironment_version.hh 2026-08-14 14:53:03.000000000 +0200 +++ new/live/BasicUsageEnvironment/include/BasicUsageEnvironment_version.hh 2026-08-25 22:31:29.000000000 +0200 @@ -19,8 +19,8 @@ #ifndef _BASICUSAGEENVIRONMENT_VERSION_HH #define _BASICUSAGEENVIRONMENT_VERSION_HH -#define BASICUSAGEENVIRONMENT_LIBRARY_VERSION_STRING "2026.08.14" -#define BASICUSAGEENVIRONMENT_LIBRARY_VERSION_INT 1786665600 +#define BASICUSAGEENVIRONMENT_LIBRARY_VERSION_STRING "2026.08.25" +#define BASICUSAGEENVIRONMENT_LIBRARY_VERSION_INT 1787616000 extern char const* const BasicUsageEnvironmentLibraryVersionStr; extern int const BasicUsageEnvironmentLibraryVersionInt; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/live/UsageEnvironment/include/UsageEnvironment_version.hh new/live/UsageEnvironment/include/UsageEnvironment_version.hh --- old/live/UsageEnvironment/include/UsageEnvironment_version.hh 2026-08-14 14:53:03.000000000 +0200 +++ new/live/UsageEnvironment/include/UsageEnvironment_version.hh 2026-08-25 22:31:29.000000000 +0200 @@ -19,8 +19,8 @@ #ifndef _USAGEENVIRONMENT_VERSION_HH #define _USAGEENVIRONMENT_VERSION_HH -#define USAGEENVIRONMENT_LIBRARY_VERSION_STRING "2026.08.14" -#define USAGEENVIRONMENT_LIBRARY_VERSION_INT 1786665600 +#define USAGEENVIRONMENT_LIBRARY_VERSION_STRING "2026.08.25" +#define USAGEENVIRONMENT_LIBRARY_VERSION_INT 1787616000 extern char const* const UsageEnvironmentLibraryVersionStr; extern int const UsageEnvironmentLibraryVersionInt; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/live/config.linux-with-shared-libraries new/live/config.linux-with-shared-libraries --- old/live/config.linux-with-shared-libraries 2026-08-14 14:53:19.000000000 +0200 +++ new/live/config.linux-with-shared-libraries 2026-08-25 22:32:59.000000000 +0200 @@ -4,7 +4,7 @@ # One or more interfaces were added, but no existing interfaces were changed or removed => CURRENT += 1; REVISION = 0; AGE += 1 libliveMedia_VERSION_CURRENT=120 -libliveMedia_VERSION_REVISION=8 +libliveMedia_VERSION_REVISION=9 libliveMedia_VERSION_AGE=0 libliveMedia_LIB_SUFFIX=so.$(shell expr $(libliveMedia_VERSION_CURRENT) - $(libliveMedia_VERSION_AGE)).$(libliveMedia_VERSION_AGE).$(libliveMedia_VERSION_REVISION) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/live/groupsock/include/groupsock_version.hh new/live/groupsock/include/groupsock_version.hh --- old/live/groupsock/include/groupsock_version.hh 2026-08-14 14:53:03.000000000 +0200 +++ new/live/groupsock/include/groupsock_version.hh 2026-08-25 22:31:29.000000000 +0200 @@ -19,8 +19,8 @@ #ifndef _GROUPSOCK_VERSION_HH #define _GROUPSOCK_VERSION_HH -#define GROUPSOCK_LIBRARY_VERSION_STRING "2026.08.14" -#define GROUPSOCK_LIBRARY_VERSION_INT 1786665600 +#define GROUPSOCK_LIBRARY_VERSION_STRING "2026.08.25" +#define GROUPSOCK_LIBRARY_VERSION_INT 1787616000 extern char const* const groupsockLibraryVersionStr; extern int const groupsockLibraryVersionInt; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/live/liveMedia/VorbisAudioRTPSource.cpp new/live/liveMedia/VorbisAudioRTPSource.cpp --- old/live/liveMedia/VorbisAudioRTPSource.cpp 2026-08-14 14:53:03.000000000 +0200 +++ new/live/liveMedia/VorbisAudioRTPSource.cpp 2026-08-25 22:31:29.000000000 +0200 @@ -183,13 +183,16 @@ // Copy the remaining config bytes into the appropriate 'header' buffers: if (identificationHdr != NULL) { + if (rem < identificationHdrSize) break; memmove(identificationHdr, p, identificationHdrSize); ADVANCE(identificationHdrSize); - if (commentHdr != NULL) { - memmove(commentHdr, p, commentHdrSize); ADVANCE(commentHdrSize); - if (setupHdr != NULL) { - memmove(setupHdr, p, setupHdrSize); ADVANCE(setupHdrSize); - } - } + } + if (commentHdr != NULL) { + if (rem < commentHdrSize) break; + memmove(commentHdr, p, commentHdrSize); ADVANCE(commentHdrSize); + } + if (setupHdr != NULL) { + if (rem < setupHdrSize) break; + memmove(setupHdr, p, setupHdrSize); ADVANCE(setupHdrSize); } } while (0); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/live/liveMedia/include/liveMedia_version.hh new/live/liveMedia/include/liveMedia_version.hh --- old/live/liveMedia/include/liveMedia_version.hh 2026-08-14 14:53:03.000000000 +0200 +++ new/live/liveMedia/include/liveMedia_version.hh 2026-08-25 22:31:29.000000000 +0200 @@ -19,8 +19,8 @@ #ifndef _LIVEMEDIA_VERSION_HH #define _LIVEMEDIA_VERSION_HH -#define LIVEMEDIA_LIBRARY_VERSION_STRING "2026.08.14" -#define LIVEMEDIA_LIBRARY_VERSION_INT 1786665600 +#define LIVEMEDIA_LIBRARY_VERSION_STRING "2026.08.25" +#define LIVEMEDIA_LIBRARY_VERSION_INT 1787616000 extern char const* const liveMediaLibraryVersionStr; extern int const liveMediaLibraryVersionInt;
