File _patchinfo of Package patchinfo

<patchinfo incident="10638">
  <issue tracker="bnc" id="1121995">live555: does not build shared libraries</issue>
  <issue tracker="bnc" id="1124159">VUL-1: CVE-2019-7314: live555: A use-after-free error causes the RTSP server to crash</issue>
  <issue tracker="bnc" id="1127341">VUL-1: CVE-2019-9215: live555: malformed headers lead to invalid memory access in the parseAuthorizationHeader function</issue>
  <issue tracker="cve" id="2019-9215"/>
  <issue tracker="cve" id="2019-7314"/>
  <packager>plater</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for live555</summary>
  <description>This update for live555 fixes the following issues:

- CVE-2019-9215: Malformed headers could have lead to invalid memory
  access in the parseAuthorizationHeader function. (boo#1127341)

- CVE-2019-7314: Mishandled termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up could have lead to a Use-After-Free error causing the RTSP server to crash or possibly have unspecified other impact. (boo#1124159)

- Update to version 2019.06.28, 
- Convert to dynamic libraries (boo#1121995):
  + Use make ilinux-with-shared-libraries: build the dynamic libs
    instead of the static one.
  + Use make install instead of a manual file copy script: this
    also reveals that we missed quite a bit of code to be installed
    before.
  + Split out shared library packages according the SLPP.
- Use FAT LTO objects in order to provide proper static library.

</description>
</patchinfo>
openSUSE Build Service is sponsored by