| Age | Commit message (Collapse) | Author |
|---|
|
Signed-off-by: Markus Volk <f_l_k@t-online.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
* deprecated since libxml2-2.11 upgraded in oe-core in:
https://git.openembedded.org/openembedded-core/commit/?id=24860598ba8557ea3a145f249938ea411f1ef1d8
* fixes:
../gupnp-1.4.1/libgupnp/gupnp-service-info.c: In function 'got_scpd_url':
../gupnp-1.4.1/libgupnp/gupnp-service-info.c:595:17: error: 'xmlRecoverMemory' is deprecated [-Werror=deprecated-declarations]
595 | scpd = xmlRecoverMemory (msg->response_body->data,
| ^~~~
In file included from /OE/build/luneos-nanbield/webos-ports/tmp-glibc/work/cortexa8t2hf-neon-webos-linux-gnueabi/gupnp/1.4.1-r0/recipe-sysroot/usr/include/libxml2/libxml/globals.h:18,
from /OE/build/luneos-nanbield/webos-ports/tmp-glibc/work/cortexa8t2hf-neon-webos-linux-gnueabi/gupnp/1.4.1-r0/recipe-sysroot/usr/include/libxml2/libxml/threads.h:35,
from /OE/build/luneos-nanbield/webos-ports/tmp-glibc/work/cortexa8t2hf-neon-webos-linux-gnueabi/gupnp/1.4.1-r0/recipe-sysroot/usr/include/libxml2/libxml/xmlmemory.h:222,
from /OE/build/luneos-nanbield/webos-ports/tmp-glibc/work/cortexa8t2hf-neon-webos-linux-gnueabi/gupnp/1.4.1-r0/recipe-sysroot/usr/include/libxml2/libxml/tree.h:1310,
from ../gupnp-1.4.1/libgupnp/gupnp-service-introspection-private.h:12,
from ../gupnp-1.4.1/libgupnp/gupnp-service-info.c:26:
/OE/build/luneos-nanbield/webos-ports/tmp-glibc/work/cortexa8t2hf-neon-webos-linux-gnueabi/gupnp/1.4.1-r0/recipe-sysroot/usr/include/libxml2/libxml/parser.h:872:17: note: declared here
872 | xmlRecoverMemory (const char *buffer,
| ^~~~~~~~~~~~~~~~
cc1: some warnings being treated as errors
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
Hardening fix was applied
1.2.7
=====
- Fix build with -Wformat-security=error
- Bump required GLib version to 2.66
- Fix some introspection annotations
- Add missing varargs functions to vapi
- Revert fix from 1.2.5 which causes managed control points to
live too long
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
In their mail announcement they stated out clearly:
GUPnP 1.0.7 and GUPnP 1.2.5 fix a potential DNS rebind issue.
An impact of this would be that for example a user could be tricked
into opening a malicious web page that could scan the local network for
UPnP media servers and download the user's shared files, or, if
enabled, even delete them.
Upgrade to 1.2.5 (or where that is not possible, 1.0.7) is strongly
recommended.
At repo side:
1.2.6
=====
- Fix wrong dependency on GSSDP 1.2.4
Bugs fixed in this release:
- https://gitlab.gnome.org/GNOME/gupnp/issues/48
All contributors to this release:
- Jens Georg <mail@jensge.org>
1.2.5
=====
- Fix introspection annotation for send_action_list
- Fix potential fd leak in linux CM
- Fix potential NULL pointer dereference when evaluating
unset ServiceProxyActions
- Fix leaking the message string if an action is never
sent
- Fix leaking the ServiceProxyAction if sending fails
in call_action
- Fix introspection annotation for send_action and
call_action_finish to prevent a double-free
- Make ServiceIntrospection usable from
gobject-introspection
- Add Python examle
- Add C example
- Fix JavaScript example
- Fix potential use-after-free if service proxy is
destroxed before libsoup request finishes in control
point
- Fix potential data leak due to being vulnerable to DNS
rebind attacs
Bugs fixed in this release:
- https://gitlab.gnome.org/GNOME/gupnp/issues/47
- https://gitlab.gnome.org/GNOME/gupnp/issues/46
- https://gitlab.gnome.org/GNOME/gupnp/issues/23
- https://gitlab.gnome.org/GNOME/gupnp/issues/24
All contributors to this release:
- Jens Georg <mail@jensge.org>
- Doug Nazar <nazard@nazar.ca>
- Andre Klapper <a9016009@gmx.de>
Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
Markus Volk
Martin Jansa
Andreas Müller