Version: 1.14.18-bp156.1.4
* Tue Aug 22 2023 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.18
* miniserver: fix busy loop on socket error
* Mon May 01 2023 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.17
* No user-visible changes
* Include fuzzer and gtest in the tarball
* Thu Mar 30 2023 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.16
* Fix memory leak and ActionExAsync
Version: 1.14.15-bp155.1.5
* Sat Nov 19 2022 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.15
* Fix for some CMake missing files in the autotools distro
* Thu Oct 06 2022 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.14
* Skip leading UTF-8 BOM in XML documents
* Wed Aug 03 2022 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.13
* http: RecvMessage: Fix potential allocation failure
* Thu Nov 15 2018 Tomáš Chvátal <tchvatal@suse.com>
- Version update to 1.8.4:
* Various fixes to communicate right with some TVs
* Compiler fixes
* Testsuite fun
- Rebase patch libupnp-configure.patch
* Fri Apr 13 2018 adam.majer@suse.de
- Install license with %license tag instead of as documentation
Version: 1.6.25-bp150.2.4
* Fri Apr 13 2018 adam.majer@suse.de
- Install license with %license tag instead of as documentation
* Fri Apr 13 2018 bjorn.lie@gmail.com
- Update to version 1.6.25:
+ Fix and add more compat helpers.
+ Fix assertion error when http_MakeMessage is called with E in
fmt.
+ libupnp.pc: drop -pthread from Cflags.
+ Fix segmentation fault in http_MakeMessage.
- Changes from version 1.6.23:
+ Allow extra headers to be sent to client in the File_Info
struct by adding extra_headers, an array of struct
Extra_Headers.
+ Queue events on their subscription object instead of adding
them to the thread pool immediately.
- Changes from version 1.6.22:
+ Fix some compiler warning messages on md5.c.
+ Replace MD5 impmplementation with public-domain version.
+ ixml/test/test_document.c is missing the string.h include,
therefore the compiler complains about an implicit declaration.
- Rebase libupnp-configure.patch with quilt.
- Run spec-cleaner, modernize spec.
* Thu Mar 02 2017 jengelh@inai.de
- Rectify RPM groups, use find -delete over -exec rm.
* Fri Feb 24 2017 olaf@aepfle.de
- Update to version 1.6.21 (bsc#898167)
* use stderr if log file cannot be opened
* fix out-of-bounds access [CVE-2016-8863] (bsc#1006256)
* miniserver: fix binding to ipv6 link-local addresses
* fix for file write via POST [CVE-2016-6255] (bsc#989948)
- Replace individual packages from Packman to make migration to
Tumbleweed easier.
- Package LICENSE file
* Thu Feb 19 2015 p.drouand@gmail.com
- Update to version 1.6.19
* Fix access violation due to changed usage of pthreads-win32
(closes SF Bug Tracker #119)
- Update libupnp-configure.patch
- added baselibs.conf to sources
- add .sha1 download from sf ... (not much useful)
* Tue Feb 05 2013 zaitor@opensuse.org
- Update to version 1.6.18:
+ Security fix for CERT issue VU#922681.
+ CVE-2012-5958 Issue #2: Stack buffer overflow of Tempbuf
+ CVE-2012-5959 Issue #4: Stack buffer overflow of Event->UDN
+ CVE-2012-5960 Issue #8: Stack buffer overflow of Event->UDN
+ Notice that the following issues have already been dealt by
previous work:
- CVE-2012-5961 Issue #1: Stack buffer overflow of Evt->UDN
- CVE-2012-5962 Issue #3: Stack buffer overflow of
Evt->DeviceType
- CVE-2012-5963 Issue #5: Stack buffer overflow of Event->UDN
- CVE-2012-5964 Issue #6: Stack buffer overflow of
Event->DeviceType
- CVE-2012-5965 Issue #7: Stack buffer overflow of
Event->DeviceType
+ Fix memory leak and access violation in
UpnpSendAction(Ex)Async.
+ Disable SetGenaCallback call if device is disabled.
+ Fix problems detected as dead assignment warning by clang
scan-build.
+ Fix condition for allocation failure in get_content_type().
+ Avoid dereference of null pointer in
ixmlNode_setNodeProperties.
+ Avoid access violation after parser_parse_chunky_headers call.
+ Remove possibility of access violation.
+ Fix type of local variable stopSock in RunMiniServer().
+ Compilation optimisation.
+ Use of thread-unsafe gmtime() in httpreadwrite.c sf#3507819.
- Changes from version 1.6.17:
+ Remove implicit casts.
+ Add --enable-unspecified_server
+ Removing implicit casts in miniserver.c
+ Bugs fixed: sf#3512833, sf#3510693, sf#3511149, sf#3514145.
- Changes from version 1.6.16:
+ Replace sprintf by snprintf in http_WriteHttpPost to avoid
buffer overflow.
+ Add infoSize parameter to get_sdk_info
+ Check return code in ixml.
+ Add --disable-optssdp option
+ Add more explicit casts and remove dead code.
+ Bug fix in ixmlNode_allowChildren.
+ Improve upnp/genlib/net.
+ Improve ssdp part. Do not compile
CreateClientRequestPacketUlaGua if IPv6 is disabled.
+ Bugs fixed: sf#3502958, sf#3499781, sf#3499878, sf#3175217,
sf#3496993, sf#3497714, sf#3498442, sf#3498439, sf#3498436,
sf#3497714, sf#2989399, sf#3325246, sf#3417134, sf#3497159,
sf#3497140, sf#3497126, sf#3497034, sf#3497033, sf#3497027,
sf#3497009, sf#3496703, sf#3496702, sf#3496942, sf#3496938,
sf#3496934, sf#3496933, sf#3496581, sf#3495616, sf#3495286,
sf#3495280, sf#3494865, sf#3489999, sf#3489990, sf#3489999.
- Changes from version 1.6.15:
+ Bug fix on M-SEARCH for IPv6 CPs.
+ Retrieve IPv6 addresses in Upnp_Discovery.
+ Fix bug sf#3469344.
- Changes from version 1.6.14:
+ UPnP Low Power Support.
+ Bug fix in IN6_IS_ADDR_GLOBAL.
+ Bug Fix on M-SEARCH.
+ Fixes for compilation under Windows.
+ Several fixes to correctly use SOCKET (and related) types
instead of non-portable variations.
- Rebase libupnp-configure.patch.
* Sun Feb 03 2013 crrodriguez@opensuse.org
- Previous patch was incomplete and did not consider files
in the upnp directory. (updates libupnp-configure.patch)
* Tue Jul 17 2012 crrodriguez@opensuse.org
- Enable IPV6 support...
- Fix autotools, all C files must include "*config.h"
- DO not build samples
* Sat Feb 25 2012 coolo@suse.com
- sync package name with spec file name
* Mon Jan 30 2012 jengelh@medozas.de
- Properly provide pkgconfig symbols
* Sat Oct 08 2011 saschpe@gmx.de
- Initial version
Version: 1.14.12-bp154.1.66
* Tue Sep 28 2021 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.12
* Changes to build system only; nothing user-visible.
* Tue Aug 17 2021 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.10
* Changes to build system only; nothing user-visible.
* Wed Aug 11 2021 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.9
* Removes references to deprecated pthread_mutexattr_{g,s}etkind_np
* Wed May 12 2021 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.7
* Build fixes for Windows
* Wed Apr 21 2021 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.6
* Fix for a DNS Rebind exploit. [CVE-2021-29462]
* Tue Apr 06 2021 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.5
* Non-recursive version of ixmlNode_free() avoids stack overflow
attack (Fixes CVE-2021-28302).
* Tue Mar 30 2021 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.4
* Fix for gena leak.
* Mon Mar 01 2021 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.2
* Fix crash in UpnpGetIfInfo due to unexpected null addresses
showing up for tunnel netdevices.
* Wed Feb 10 2021 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.1
* Remove port >= 49152 restriction.
Version: 1.14.0-bp153.1.19
* Sun Aug 16 2020 Jan Engelhardt <jengelh@inai.de>
- Update to release 1.14.0
* Remove deprecated "UpnpInit" function
* Reworked the miniserver code to deal with SO_REUSEADDR
- Drop 0001-Fixes-177-NULL-pointer-dereference-in-FindServiceCon.patch
(merged)
* Tue Apr 21 2020 Michal Vyskocil <mvyskocil@opensuse.org>
- Update to version 1.12.1:
* #129: Remove and replace the list.h file
* Reduce spurious HTTP 416 errors due to ill-defined bytes header
* #138: Use stdbool.h instead of BOOL typedef and defines
* #140: Remove IN, OUT and INOUT defines
* #129: Remove and replace the list.h file
* and many more, see ChangeLog
- Bump libpnpn defines to 16 following upstream changes (also in
baselibs.conf).
- ChangeLog installed with devel package, not libXY ones
* Mon Dec 30 2019 Dominique Leuenberger <dimstar@opensuse.org>
- Update to version 1.10.1:
+ Fix format string for ExtraHeaders.
+ Use higher port when reuseaddr is set and the default port is
busy (boo#1132829).
- Drop libupnp-configure.patch: patch seems no longer needed (patch
was added before 2013 and only ever rebased without validating
its usefulness).
- Drop libtool BuildRequires and no longer call autoreconf: since
we have no patch left, there is no need to bootstrap.
- Bump libpnpn defines to 15 and libixmlver to 11, following
upstream chanes (also in baselibs.conf).
* Thu Nov 29 2018 Jan Engelhardt <jengelh@inai.de>
- Update descriptions. "Portable" is part of the proper noun,
and needs an uppercase P here.
* Wed Nov 28 2018 davejplater@gmail.com
- Split off libixml10 and renamed libupnp6 to it's correct name
libupnp13. Major version 6 was last seen long ago.
- libthreadutil was merged with libupnp in version 1.8.1
* Thu Nov 15 2018 Tomá? Chvátal <tchvatal@suse.com>
- Version update to 1.8.4:
* Various fixes to communicate right with some TVs
* Compiler fixes
* Testsuite fun
- Rebase patch libupnp-configure.patch