libosip2-15-5.3.2-1.1 RPM for x86_64

From OpenSuSE Tumbleweed for x86_64

This is the GNU oSIP library. It has been designed to provide the
Internet community with a simple way to support the Session Initiation
Protocol. SIP is described in the RFC 3261, which is available at
http://www.ietf.org/rfc/rfc3261.txt.

Provides

• libosip2-15
• libosip2-15(x86-64)
• libosip2.so.15()(64bit)
• libosipparser2.so.15()(64bit)

Requires

• /sbin/ldconfig
• /sbin/ldconfig
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.2)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libosipparser2.so.15()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1

License

LGPL-2.1-or-later

Changelog

* Sat Jul 25 2026 Andreas Stieger <andreas.stieger@gmx.de>
  - update to 5.3.2:
    * Fix a potential out-of-bounds read when parsing malformed SDP
      data
* Fri Nov 25 2022 Dominique Leuenberger <dimstar@opensuse.org>
  - Update to version 5.3.1:
    + In multipart bodies, LWS can't exist (CVE-2022-41550).
* Mon Nov 22 2021 Andreas Stieger <andreas.stieger@gmx.de>
  - update to 5.3.0:
    * STRUCTURE change: struct osip_transaction
    * CHANGE: if out_socket contains -999 and timer_b or timer_f
      fires, the transaction will report a transport-error
    * improve TIMER_E to avoid high interval after DNS or socket
      events
    * when port number starts with 0, just put 0 and discard other
      char [no op in practice]
* Wed May 26 2021 Andreas Stieger <andreas.stieger@gmx.de>
  - update to 5.2.1:
    * add OSIP_RETRY_LIMIT which may be useful to exosip
    * add osip_timersub macro
    * fix validate that the API are used with the expected/required
      leading char
    * fix memory out-of-bound access in broken uncompliant Via header
    * fix k= within media being rejected since 5.1.1 [wrong check]
  - package license text
  - add upstream signing key and validate source signature
  - run tests
  - drop libosip2-5.0.0.patch, not required
* Mon Jan 11 2021 Dirk Mueller <dmueller@suse.com>
  - update to 5.2.0:
    * use localtime_r when __USE_POSIX is available
    * sync versions with libexosip
  - use https for urls
* Sat Aug 29 2020 Jan Engelhardt <jengelh@inai.de>
  - Drop old specfile constructs and excess Provides lines.
* Sat Aug 15 2020 Dirk Mueller <dmueller@suse.com>
  - update to 5.1.1:
    * fix vulnerability report: Authentication-Info or Proxy-Authentication-Info are affected by a buffer overflow when building sip messages.
    * fix vulnerability report: when boundary only contains one quote, strncpy will use the unsigned value of -1 as size parameter.
    * fix: avoid several memory leaks detected in the SDP parser upon invalid SDP formats.
    * fix bug #57467: infinite loop in sdp_message_a_attribute_del_at_index
    * fix bug #56071: Heap-buffer-overflow in osip_util_replace_all_lws function in osip_message_parse.c
    * fix to reject any non compliant answer with missing version digits.
* Wed Feb 05 2020 David Sugar <tychosoft@gmail.com>
  - Update to 5.1.0
    * See package, very many changes since prior 5.0.0 release.
  - drop patch already in 5.1.0
    SIP_body_len_underflow.patch
  - make package so library naming compliant with opensuse library versioning
  - pre-requisite for updating to libeXosip2 5.1.0
* Thu Apr 20 2017 ro@suse.de
  - drop patch already in 5.0.0
    0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
  - drop patch already in 5.0.0
    0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
  - drop patch already in 5.0.0
    0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch
* Thu Apr 20 2017 ro@suse.de
  - fix a set of buffer overflows:
    - add patch for (bnc#1034570, CVE-2017-7853)
      SIP_body_len_underflow.patch
    - add patch for (bnc#1034571, CVE-2016-10326)
      0001-Patch-2.1-Fixes-heap-buffer-overflow-in-osip_body_to_s.patch
    - add patch for (bnc#1034572, CVE-2016-10325)
      0001-Patch-1-Fixes-heap-buffer-overflow-in-_osip_message_to_str.patch
    - add patch for (bnc#1034574, CVE-2016-10324)
      0001-Patch-3-Fixes-heap-buffer-overflow-in-osip_clrncpy.patch

Files

/usr/lib64/libosip2.so.15
/usr/lib64/libosip2.so.15.0.1
/usr/lib64/libosipparser2.so.15
/usr/lib64/libosipparser2.so.15.0.1
/usr/share/licenses/libosip2-15
/usr/share/licenses/libosip2-15/COPYING

Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Oct 29 23:33:48 2026