Important: GSSDP 1.0.4, GSSDP 1.2.3, GUPnP 1.0.5 and GUPnP 1.2.3 released
Jens Georg <[email protected]> Tue, 23 Jun 2020 09:09:53 +0200
| Newsgroups | gmane.comp.gnome.announce |
|---|---|
| Message-ID | <[email protected]> |
Hello everyone, I have released new versions of GUPnP. The main "feature" of this release is the implementation of the UDA 2.0 spec addendum from 2020/04/17 which restricts notifications registered with SUBSCRIBE to the subnet of the server. For this reason, a new GSSDP version is required to provide the required information. This is a reaction to CVE-2020-12695 (https://www.callstranger.com/) Other changes are listed below: GSSDP 1.0.4: ============ - Set the correct multicast source interface on the correct socket - Add gssdp_client_get_address_mask Bugs fixed in this release: - https://gitlab.gnome.org/GNOME/gssdp/issues/4 All contributors to this release: - Jens Georg <[email protected]> GSSDP 1.2.3: ============ - Prevent crash if client is not initialized - Fix critical if network device does not exists - Fix ::1 multicast - client. Add getter for network mask Bugs fixed in this release: - https://gitlab.gnome.org/GNOME/gssdp/issues/5 - https://gitlab.gnome.org/GNOME/gssdp/issues/6 All contributors to this release: - Jens Georg <[email protected]> GUPnP 1.0.5: ============ - Attention! Version requirement change: Requires GSSDP 1.0.4 - Fix an issue with if.h redefinition - Fix introspection annotation for introspection callback - Add mitigation for CVE-CVE-2020-12695 (CallStranger) - Implement UDA 2.0 April 17 2020 addendum (CallStranger prevention) Bugs fixed in this release: - https://gitlab.gnome.org/GNOME/gupnp/issues/16 All contributors to this release: - Jens Georg <[email protected]> - soiamsoNG <[email protected]> - Fabrice Fontaine <[email protected]> GUPnP 1.2.3: ============ - Attention: Requires GSSDP 1.2.3! - Always build the gupnp-binding-tool manpage - Fix meson build on Windows - Fix context creation for tests across different platforms - Fix static linking issue caused by libguul subproject - Add mitigations for CVE-2020-12695 (CallStranger) - Implement UDA 2.0 April 17 2020 Addendum (Partial fix for CVE-2020- 12695) Bugs fixed in this release: - https://gitlab.gnome.org/GNOME/gupnp/issues/15 - https://gitlab.gnome.org/GNOME/gupnp/issues/16 All contributors to this release: - Jens Georg <[email protected]> - soiamsoNG <[email protected]> - Peter Seiderer <[email protected]> - Jan-Michael Brummer <[email protected]> - Mart Raudsepp <[email protected]>