Accepting request 45958 from home:dimstar:branches:devel:libraries:c_c++

Copy from home:dimstar:branches:devel:libraries:c_c++/neon via accept of submit request 45958 revision 6.
Request was accepted with message:

OBS-URL: https://build.opensuse.org/request/show/45958
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/neon?expand=0&rev=11
This commit is contained in:
2010-08-25 06:49:14 +00:00
committed by Git OBS Bridge
parent e8a64c2467
commit e56d1b56bf
5 changed files with 87 additions and 417 deletions

View File

@@ -1,3 +1,62 @@
-------------------------------------------------------------------
Sun Aug 22 13:34:21 UTC 2010 - dimstar@opensuse.org
- Update to version 0.29.3
+ Change ne_sock_close() to no longer wait for SSL closure alert
+ Fix memory leak with GnuTLS
+ API clarification in ne_sock_close()
- Changes from version 0.29.2:
+ Fix spurious 'certificate verify failed' errors with OpenSSL
+ Fix unnecessary re-authentication with SSPI
- Changes from version 0.29.1:
+ Fixes for (Unix) NTLM implementation:
- fix handling of session timeout
- fix possible crash
+ Build fixes for Win32:
+ Fix build with versions of GnuTLS older than 2.8.0.
- Changes from version 0.29.0:
+ New interfaces and features:
- added NTLM auth support for Unix builds
- ne_auth.h: added NE_AUTH_GSSAPI and NE_AUTH_NTLM auth protocol
codes
- added ne_acl3744.h, updated WebDAV ACL support
- added built-in SOCKS v4/v4a/v5 support:
ne_socket.h:ne_sock_proxy(), and
ne_session.h:ne_session_socks_proxy()
- added support for system-default proxies:
ne_session_system_proxy(), implemented using libproxy
- ne_session.h: added NE_SESSFLAG_EXPECT100 session flag, SSL
verification failure bits extended by NE_SSL_BADCHAIN and
NE_SSL_REVOKED, better handling of failures within the cert
chain
- ne_utils.h: added feature code NE_FEATURE_SYSPROXY
- ne_socket.h: ne_sock_writev(), ne_sock_set_error(),
ne_iaddr_raw(), ne_iaddr_parse()
- ne_string.h: ne_buffer_qappend(), ne_strnqdup()
- Changes from version 0.28.6:
+ SECURITY (CVE-2009-2473): Fix "billion laughs" attack against
expat;
+ SECURITY (CVE-2009-2474): Fix handling of an embedded NUL byte
in a certificate subject name with OpenSSL;
+ Changes from version 0.28.5:
+ Enable support for X.509v1 CA certificates in GnuTLS.
+ Fix handling of EINTR in connect() calls.
+ Fix use of builds with SOCK_CLOEXEC support on older Linux
kernels.
- Add libproxy-devel BuildRequires
- Clean spec file using spec-cleaner.
- Drop upstream included patches:
+ neon-0.28.4-CVE-2009-2473,2474.patch
+ neon-openssl.patch
- Drop the main package. It avoids the lib from being installed in
different versions and generally only contained coders doc.
=> provide / obsolete neon by libneon-devel.
-------------------------------------------------------------------
Sun Apr 18 19:23:22 UTC 2010 - coolo@novell.com
- take patch from upstream to fix openssl linkage
-------------------------------------------------------------------
Mon Feb 1 12:06:17 UTC 2010 - jengelh@medozas.de