Hello community, here is the log from the commit of package libevent for openSUSE:Factory checked in at 2015-02-27 11:03:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libevent (Old) and /work/SRC/openSUSE:Factory/.libevent.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libevent" Changes: -------- --- /work/SRC/openSUSE:Factory/libevent/libevent.changes 2013-06-29 19:42:38.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.libevent.new/libevent.changes 2015-02-27 11:03:28.000000000 +0100 @@ -1,0 +2,57 @@ +Sun Feb 22 15:47:36 UTC 2015 - benoit.monin@gmx.fr + +- update to 2.0.22: + * Avoid integer overflow bugs in evbuffer_add() and related + functions. See CVE-2014-6272 advisory for more information + * fix #73 and fix http_connection_fail_test to catch it + * Avoid racy bufferevent activation + * Fix compilation with WIN32_HAVE_CONDITION_VARIABLES enabled + * Fix missing AC_PROG_SED on older Autoconfs + * Backport libevent to vanilla Autoconf 2.59 (as used in RHEL5) + * Use AC_CONFIG_HEADERS in place of AM_CONFIG_HEADERS for + autmake 1.13 compat + * Rename configure.in to configure.ac to appease newer autoconfs + * Avoid using top_srcdir in TESTS: new automakes do not like this + * Use windows vsnprintf fixup logic on all windows environments + * Fix a compiler warning when checking for arc4random_buf linker + breakage + * Fix another arc4random_buf-related warning + * Add -Qunused-arguments for clang on macos + * Avoid leaking fds on evconnlistener with no callback set + * Avoid double-close on getsockname error in + evutil_ersatz_socketpair + * Fix a locking error in bufferevent_socket_get_dns_error + * libevent/win32_dealloc() : fix sizeof(pointer) vs + sizeof(*pointer) + * bufferevent_pair: don't call downcast(NULL) + * Consistently check for failure from evbuffer_pullup() + * Fix race caused by event_active + * Avoid redundant invocations of init_extension_functions for + IOCP + * Typo fixes from Linus Nordberg + * Add a few files created by "make verify" to .gitignore + * regress_buffer: fix 'memcmp' compare size + * Fix bufferevent setwatermark suspend_read + * Fix evbuffer_peek() with len==-1 and start_at non-NULL + * Checking request nameserver for NULL, before using it + * Fix SEGFAULT after evdns_base_resume if no nameservers + installed + * Fix a crash in evdns related to shutting down evdns + * Check does arch have the epoll_create and __NR_epoll_wait + syscalls + * Avoid other RNG initialization FS reads when urandom file is + specified + * When we seed from /proc/sys/kernel/random/uuid, count it as + success + * Document that arc4random is not a great cryptographic PRNG + * Add evutil_secure_rng_set_urandom_device_file + * Really remove RNG seeds from the stack + * Fix a mistake in evbuffer_remove() arguments in example http + server code + * Fix a typo in a comment in buffer.h + * Clarify event_base_loop exit conditions + * Use FindClose for handle from FindFirstFile in http-server.c + * Fix a typo in a doxygen comment +- update source URL + +------------------------------------------------------------------- Old: ---- libevent-2.0.21-stable.tar.gz New: ---- libevent-2.0.22-stable.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libevent.spec ++++++ --- /var/tmp/diff_new_pack.bxL0dg/_old 2015-02-27 11:03:29.000000000 +0100 +++ /var/tmp/diff_new_pack.bxL0dg/_new 2015-02-27 11:03:29.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package libevent # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,13 +19,13 @@ Name: libevent %define libsoname %{name}-2_0-5 -Version: 2.0.21 +Version: 2.0.22 Release: 0 Summary: An event notification library License: BSD-3-Clause Group: System/Libraries Url: http://libevent.org/ -Source0: https://github.com/downloads/libevent/libevent/%{name}-%{version}-stable.tar.gz +Source0: https://sourceforge.net/projects/levent/files/libevent/libevent-2.0/%{name}-%{version}-stable.tar.gz Source1: baselibs.conf BuildRequires: openssl-devel BuildRequires: pkg-config ++++++ libevent-2.0.21-stable.tar.gz -> libevent-2.0.22-stable.tar.gz ++++++ ++++ 5740 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org