Hello everyone,

I have released new versions of GUPnP. The main "feature" of this
release is the implementation of the UDA 2.0 spec addendum from
2020/04/17 which restricts notifications registered with SUBSCRIBE to
the subnet of the server. For this reason, a new GSSDP version is
required to provide the required information.

This is a reaction to CVE-2020-12695 (https://www.callstranger.com/)

Other changes are listed below:

GSSDP 1.0.4:
============

 - Set the correct multicast source interface on the correct socket
 - Add gssdp_client_get_address_mask

Bugs fixed in this release:
 - https://gitlab.gnome.org/GNOME/gssdp/issues/4

All contributors to this release:
 - Jens Georg <m...@jensge.org>

GSSDP 1.2.3:
============
 - Prevent crash if client is not initialized
 - Fix critical if network device does not exists
 - Fix ::1 multicast
 - client. Add getter for network mask

Bugs fixed in this release:
 - https://gitlab.gnome.org/GNOME/gssdp/issues/5
 - https://gitlab.gnome.org/GNOME/gssdp/issues/6

All contributors to this release:
 - Jens Georg <m...@jensge.org>

GUPnP 1.0.5:
============
- Attention! Version requirement change: Requires GSSDP 1.0.4
- Fix an issue with if.h redefinition
- Fix introspection annotation for introspection callback
- Add mitigation for CVE-CVE-2020-12695 (CallStranger)
- Implement UDA 2.0 April 17 2020 addendum (CallStranger prevention)

Bugs fixed in this release:
 - https://gitlab.gnome.org/GNOME/gupnp/issues/16

All contributors to this release:
 - Jens Georg <m...@jensge.org>
 - soiamsoNG <83182...@qq.com>
 - Fabrice Fontaine <fontaine.fabr...@gmail.com>

GUPnP 1.2.3:
============
- Attention: Requires GSSDP 1.2.3!
- Always build the gupnp-binding-tool manpage
- Fix meson build on Windows
- Fix context creation for tests across different platforms
- Fix static linking issue caused by libguul subproject
- Add mitigations for CVE-2020-12695 (CallStranger)
- Implement UDA 2.0 April 17 2020 Addendum (Partial fix for CVE-2020-
12695)

Bugs fixed in this release:
 - https://gitlab.gnome.org/GNOME/gupnp/issues/15
 - https://gitlab.gnome.org/GNOME/gupnp/issues/16

All contributors to this release:
 - Jens Georg <m...@jensge.org>
 - soiamsoNG <83182...@qq.com>
 - Peter Seiderer <ps.rep...@gmx.net>
 - Jan-Michael Brummer <jan.brum...@tabos.org>
 - Mart Raudsepp <l...@gentoo.org>


_______________________________________________
gnome-announce-list mailing list
gnome-announce-list@gnome.org
https://mail.gnome.org/mailman/listinfo/gnome-announce-list

Reply via email to