Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package freerdp for openSUSE:Factory checked in at 2021-10-25 15:17:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/freerdp (Old) and /work/SRC/openSUSE:Factory/.freerdp.new.1890 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "freerdp" Mon Oct 25 15:17:15 2021 rev:52 rq:926760 version:2.4.1 Changes: -------- --- /work/SRC/openSUSE:Factory/freerdp/freerdp.changes 2021-10-11 15:30:44.838761285 +0200 +++ /work/SRC/openSUSE:Factory/.freerdp.new.1890/freerdp.changes 2021-10-25 15:17:55.365693990 +0200 @@ -1,0 +2,27 @@ +Thu Oct 21 10:15:38 UTC 2021 - Johannes Weberhofer <jweberho...@weberhofer.at> + +- Upgraded to freerdp 2.4.1 + + Important security issues, boo#1191895: + * CVE-2021-41159: Improper client input validation for gateway connections allows to overwrite memory + * CVE-2021-41160: Improper region checks in all clients allow out of bound write to memory + + Noteworthy changes: + * Refactored RPC gateway parsing code + * OpenSSL 3.0 compatibility fixes + * USB redirection: fixed transfer lengths + + Fixed issues: + * #gh:FreeRDP/FreeRDP#7363: Length checks in ConvertUTF8toUTF16 + * #gh:FreeRDP/FreeRDP#7349: Added checks for bitmap width and heigth values + +- Force library update to the latest, renamed versions (followup to + boo#1191755) + +------------------------------------------------------------------- +Wed Oct 20 06:56:31 UTC 2021 - Johannes Weberhofer <jweberho...@weberhofer.at> + +- Renamed libraries to follow packaging standards as requested in + boo#1191755 + +------------------------------------------------------------------- Old: ---- FreeRDP-2.4.0.tar.gz New: ---- FreeRDP-2.4.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ freerdp.spec ++++++ --- /var/tmp/diff_new_pack.3uJ3ME/_old 2021-10-25 15:17:55.889694318 +0200 +++ /var/tmp/diff_new_pack.3uJ3ME/_new 2021-10-25 15:17:55.889694318 +0200 @@ -31,6 +31,7 @@ #global _with_gss 1 %define major_version 2 +%define libfreerdp_package %{major_version}-%{major_version} %define uwac_version 0 %define uwac_package %{uwac_version}-%{uwac_version} %ifarch aarch64 %{arm} @@ -38,7 +39,7 @@ %endif Name: freerdp -Version: 2.4.0 +Version: 2.4.1 Release: 0 Summary: Remote Desktop Viewer Client License: Apache-2.0 @@ -88,12 +89,12 @@ BuildRequires: pkgconfig(xrender) BuildRequires: pkgconfig(xtst) BuildRequires: pkgconfig(xv) -Requires: lib%{name}%{major_version} = %{version}-%{release} -Requires: libwinpr%{major_version} = %{version}-%{release} %{?_with_ffmpeg: BuildRequires: pkgconfig(libavcodec) >= 57.48.101 BuildRequires: pkgconfig(libavutil) } +# force installation of latest library version +Requires: lib%{name}%{libfreerdp_package} = %{version}-%{release} %description FreeRDP is a client-side implementation of the Remote Desktop Protocol (RDP) @@ -127,13 +128,15 @@ channels allowed for all connections passing through. It allows monitoring of the running sessions. -%package -n lib%{name}%{major_version} +%package -n lib%{name}%{libfreerdp_package} Summary: Remote Desktop Viewer client library Group: System/Libraries Obsoletes: lib%{name} < %{version}-%{release} Provides: lib%{name} = %{version}-%{release} +Obsoletes: lib%{name}2 < %{version}-%{release} +Provides: lib%{name}2 = %{version}-%{release} -%description -n lib%{name}%{major_version} +%description -n lib%{name}%{libfreerdp_package} FreeRDP is a client-side implementation of the Remote Desktop Protocol (RDP) following the Microsoft Open Specifications. This package provides the shared libraries used by the client. @@ -141,30 +144,33 @@ %package devel Summary: Development Files for freerdp Group: Development/Libraries/C and C++ -Requires: lib%{name}%{major_version} = %{version}-%{release} +Requires: lib%{name}%{libfreerdp_package} = %{version}-%{release} +Requires: winpr-devel = %{version}-%{release} %description devel This package contains development files necessary for developing applications based on libfreerdp. -%package -n libwinpr%{major_version} +%package -n libwinpr%{libfreerdp_package} Summary: Windows Portable Runtime Group: Productivity/Networking/Other +Obsoletes: libwinpr2 < %{version}-%{release} +Provides: libwinpr2 = %{version}-%{release} -%description -n libwinpr%{major_version} +%description -n libwinpr%{libfreerdp_package} WinPR provides API compatibility for applications targeting non-Windows environments. When on Windows, the original native API is being used instead of the equivalent WinPR implementation, without having to modify the code using it. -%package -n winpr%{major_version}-devel +%package -n winpr-devel Summary: Windows Portable Runtime development files Group: Development/Languages/C and C++ Requires: cmake >= 2.8 -Requires: libwinpr%{major_version} = %{version}-%{release} +Requires: libwinpr%{libfreerdp_package} = %{version}-%{release} Obsoletes: libwinpr2-devel < %{version}-%{release} Provides: libwinpr2-devel = %{version}-%{release} -%description -n winpr%{major_version}-devel +%description -n winpr-devel This package contains header files for developing applications that use the winpr and winpr-tools libraries. @@ -268,10 +274,10 @@ %make_install %fdupes %{buildroot}%{_libdir}/cmake/ -%post -n lib%{name}%{major_version} -p /sbin/ldconfig -%postun -n lib%{name}%{major_version} -p /sbin/ldconfig -%post -n libwinpr%{major_version} -p /sbin/ldconfig -%postun -n libwinpr%{major_version} -p /sbin/ldconfig +%post -n lib%{name}%{libfreerdp_package} -p /sbin/ldconfig +%postun -n lib%{name}%{libfreerdp_package} -p /sbin/ldconfig +%post -n libwinpr%{libfreerdp_package} -p /sbin/ldconfig +%postun -n libwinpr%{libfreerdp_package} -p /sbin/ldconfig %post -n libuwac%{uwac_package} -p /sbin/ldconfig %postun -n libuwac%{uwac_package} -p /sbin/ldconfig @@ -295,7 +301,7 @@ %files proxy %{_bindir}/%{name}-proxy -%files -n lib%{name}%{major_version} +%files -n lib%{name}%{libfreerdp_package} %license LICENSE %{_libdir}/lib%{name}%{major_version}.so.* %{_libdir}/lib%{name}-client%{major_version}.so.* @@ -317,12 +323,12 @@ %{_libdir}/pkgconfig/%{name}-server%{major_version}.pc %{_libdir}/pkgconfig/%{name}-shadow%{major_version}.pc -%files -n libwinpr%{major_version} +%files -n libwinpr%{libfreerdp_package} %license LICENSE %{_libdir}/libwinpr%{major_version}.so.* %{_libdir}/libwinpr-tools%{major_version}.so.* -%files -n winpr%{major_version}-devel +%files -n winpr-devel %{_libdir}/cmake/WinPR%{major_version} %{_includedir}/winpr%{major_version} %{_libdir}/libwinpr%{major_version}.so ++++++ FreeRDP-2.4.0.tar.gz -> FreeRDP-2.4.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/freerdp/FreeRDP-2.4.0.tar.gz /work/SRC/openSUSE:Factory/.freerdp.new.1890/FreeRDP-2.4.1.tar.gz differ: char 29, line 1