Changelog for
libosip2-5.0.0-bp152.3.22.x86_64.rpm :
* Thu Apr 20 2017 roAATTsuse.de- drop patch already in 5.0.0 0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch- drop patch already in 5.0.0 0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch- drop patch already in 5.0.0 0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch
* Thu Apr 20 2017 roAATTsuse.de- fix a set of buffer overflows: - add patch for (bnc#1034570, CVE-2017-7853) SIP_body_len_underflow.patch - add patch for (bnc#1034571, CVE-2016-10326) 0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch - add patch for (bnc#1034572, CVE-2016-10325) 0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch - add patch for (bnc#1034574, CVE-2016-10324) 0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch
* Thu Apr 20 2017 roAATTsuse.de- Update to 5.0.0:
* STRUCTURE change: additionnal parameter for \"struct osip_srv_entry\" used for failover in eXosip2.
* fix overflow: sr #109133: Heap buffer overflow in utility function
*osip_clrncpy
*
* fix overflow: sr #109132: Heap buffer overflow in
*osip_body_to_str
*
* fix overflow: sr #109131: Heap buffer overflow in `_osip_message_to_str`
* simplify usage of timercmp/timerisset/timerclear
* optimize list search: use iterator
* improve/update autotools (./configure and options, Makefile.am, ax_thread.m4...)
* verify a URI scheme only contains allowed char
* improve make check (test unit) to make it clear about the results expected.
* fix a possible buffer overflow of 1 byte in sdp_message_to_str (size=sdp allocated size)
* fix cseq check in order to stop retransmission of 200ok
* update to reject negative value in port number
* add support for ntlm authentication in parser
* include application_data when cloning sip message
* fix to allow correct parsing of quoted string in from/to/contact/...
* add authorizations and proxy_authorizations into ACK for 3xx, 4xx, 5xx, and 6xx (if answer was not 401/407)
* additionnal check for cseq number for matching incoming ack restransmission
* patch to transmit ack for OSIP_ICT_ACK_SENT event
* improve management of body length // fix a bug when initial value of body is \\0.
* increase timer E as soon as we receive 1xx for NICT.
* update all reasons according to RFC.
* add some reason code from rfc4412, rfc3261 and rfc6086.
* parse addr spec with LAQUOT and RAQUOT in generic parameters.
* avoid issue with comma in userinfo of URI which may appear for several headers such as Contact.
* do not use multiple header method for t, f, i, r, refer-to, b, referred-by headers.
* allow faster connection with non blocking reliable sockets.
* improve android time compensation.- rename libosip2-4.1.0.patch to libosip2-5.0.0.patch- drop libosip2-4.1.0-pthread.patch, obsolete
* Sun May 25 2014 fisiuAATTopensuse.org- Update to 4.1.0:
* fix sdp re-allocation
* increase max length size
* osip_trace_initialize returns 0 if log are compiled.
* timer e and timer g will use #define DEFAULT_T2 instead of 4000.
* handle additionnal possible malloc failure.
* fix compatibility with old UA for INVITE retransmission.
* fix osip_sem_destroy leak on apple.
* accept lowercase sip/2.0.- Rebase libosip2-3.5.0.dif and rename to libosip2-4.1.0.patch.- Rebase libosip2-3.5.0-pthread.patch and rename to libosip2-4.1.0-pthread.patch.
* Thu Jun 20 2013 fisiuAATTopensuse.org- Update to 4.0.0:
* reduce path len // remove path in front of logs.
* accept only SIP/D.D format message.
* fix bug when releasing request with missing major headers.
* fix minor memory leak // remove limitation on fifo size.
* use system independant time for osip_gettimeofday on unix platform.
* To compile/use osip based application in multi threaded env, you don\'t need to define -DOSIP_MT any more. Instead, if you wish to disable the feature, you can compile with - DOSIP_MONOTHREAD.
* A few other clean up were made inside osip to avoid any define to appear in include files. Also to avoid conflict, config.h has been renamed to osip-config.h.- Patches updated.- Spec cleanup.
* Mon Feb 13 2012 cooloAATTsuse.com- patch license to follow spdx.org standard
* Mon Nov 21 2011 jengelhAATTmedozas.de- Remove redundant/unwanted tags/section (cf. specfile guidelines)- Use %_smp_mflags for parallel building
* Sun Nov 20 2011 cooloAATTsuse.com- add libtool as buildrequire to avoid implicit dependency
* Wed Apr 27 2011 crrodriguezAATTopensuse.org- fix botched pthread linkage,it is going to break sooner or later.
* Sun Jan 16 2011 seife+obsAATTb1-systems.com- update to version 3.5.0
* iphone with TCP/TLS background support.
* a lot of minor change/fix/improvments, sorry for not being able to have an history here...- libosip2 (3.4.0)
* remove CRLF before parsing SIP message.
* modification to allow non-blocking socket for reliable transport.
* fix race condition for non-atomic incrementation operation.
* osip_list improvements.
* osip_list prototypes and warnings fix.
* new osip_strcasestr method.- libosip2 (3.3.0)
* new APPLE native interface for semaphore
* add relative time in log information on linux/windows
* fix: unescape last uri parameters.- libosip2 (3.2.0)
* return new error code for all API.
