b85b58a467
In their mail announcement they stated out clearly: GUPnP 1.0.7 and GUPnP 1.2.5 fix a potential DNS rebind issue. An impact of this would be that for example a user could be tricked into opening a malicious web page that could scan the local network for UPnP media servers and download the user's shared files, or, if enabled, even delete them. Upgrade to 1.2.5 (or where that is not possible, 1.0.7) is strongly recommended. At repo side: 1.2.6 ===== - Fix wrong dependency on GSSDP 1.2.4 Bugs fixed in this release: - https://gitlab.gnome.org/GNOME/gupnp/issues/48 All contributors to this release: - Jens Georg <mail@jensge.org> 1.2.5 ===== - Fix introspection annotation for send_action_list - Fix potential fd leak in linux CM - Fix potential NULL pointer dereference when evaluating unset ServiceProxyActions - Fix leaking the message string if an action is never sent - Fix leaking the ServiceProxyAction if sending fails in call_action - Fix introspection annotation for send_action and call_action_finish to prevent a double-free - Make ServiceIntrospection usable from gobject-introspection - Add Python examle - Add C example - Fix JavaScript example - Fix potential use-after-free if service proxy is destroxed before libsoup request finishes in control point - Fix potential data leak due to being vulnerable to DNS rebind attacs Bugs fixed in this release: - https://gitlab.gnome.org/GNOME/gupnp/issues/47 - https://gitlab.gnome.org/GNOME/gupnp/issues/46 - https://gitlab.gnome.org/GNOME/gupnp/issues/23 - https://gitlab.gnome.org/GNOME/gupnp/issues/24 All contributors to this release: - Jens Georg <mail@jensge.org> - Doug Nazar <nazard@nazar.ca> - Andre Klapper <a9016009@gmx.de> Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> |
||
|---|---|---|
| .. | ||
| classes | ||
| conf | ||
| licenses | ||
| recipes-connectivity | ||
| recipes-dvb | ||
| recipes-mkv | ||
| recipes-multimedia | ||
| recipes-support | ||
| COPYING.MIT | ||
| README | ||
This layer depends on:
URI: git://github.com/openembedded/oe-core.git branch: master revision: HEAD
URI: git://github.com/openembedded/meta-oe.git layers: meta-oe branch: master revision: HEAD
Send pull requests to openembedded-devel@lists.openembedded.org with '[meta-multimedia]' in the subject'
When sending single patches, please use something like: 'git send-email -M -1 --to openembedded-devel@lists.openembedded.org --subject-prefix=meta-multimedia][PATCH
You are encouraged to fork the mirror on github https://github.com/openembedded/meta-openembedded to share your patches, this is preferred for patch sets consisting of more than one patch. Other services like GitLab, repo.or.cz or self hosted setups are of course accepted as well, 'git fetch ' works the same on all of them. We recommend github because it is free, easy to use, has been proven to be reliable and has a really good web GUI.
Layer maintainer: Andreas Müller schnitzeltony@gmail.com