diff options
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 60 |
1 files changed, 54 insertions, 6 deletions
@@ -1,16 +1,55 @@ +Changes in release 0.29.0: +* New interfaces: + - ne_socket.h: ne_sock_writev() (Julien Reichel), ne_sock_set_error(), + ne_iaddr_raw() + - added built-in SOCKS v4/v4a/v5 support: ne_socket.h:ne_sock_proxy(), + and ne_session.h:ne_session_socks_proxy() + - added support for system-default proxies: ne_session_system_proxy(), + implemented using libproxy where available. +* Other changes: + - PKCS#11 now supported with OpenSSL builds + - ne_free() implemented as a function on Win32 (thanks to Helge Hess) + +Changes in release 0.28.3: +* SECURITY (CVE-2008-3746): Fix potential NULL pointer dereference in + Digest domain parameter support; could allow a DoS by a malicious server +* Fix parsing of *-Authenticate response header with LWS after quoted value +* Fix ne_set_progress(, NULL, ) to match pre-0.27 behaviour (and not crash) +* Fix to disable Nagle on Win32 with newer toolchain (thanks to Stefan Küng) +* Fix build on Netware (Guenter Knauf) +* Document existing ne_uri_parse() API postcondition and ne_uri_resolve() + pre/postconditions regarding the ->path field in ne_uri structures +* Mark ne_{,buffer_}concat with sentinel attribute for GCC >= 4. +* Distinguish the error message for an SSL handshake which fails after a + client cert was requested. +* Compile with PIC flags by default even for static library builds + +Changes in release 0.28.2: +* Support "Proxy-Connection: Keep-Alive" for compatibility with HTTP/1.0 + proxies which require persistent connections for NTLM authentication +* Fix an fd leak in ne_ssl_{,cli}cert_read (GnuTLS only) +* Enable fast initialization in GnuTLS. + +Changes in release 0.28.1: +* Fix Win32 build +* Fix build on SCO OpenServer 5.0.x (thanks to Nico Kadel-Garcia) +* Fix handling of Digest domain parameter values without a trailing slash +* Fix build against apr-util's bundled libexpat.la in Subversion +* Add --without-pakchois to configure (Arfrever Frehtes Taifersar Arahesis) +* zh message catalog renamed to zh_CN, translation updated (Dongsheng Song) + Changes in release 0.28.0: * Interface changes: - - ne_acl.h: changed ne_acl_entry struct fields; apply->target, - principal->tname; all principles set via single "principles" - bitfield using NE_ACL_* constants, inverting old logic (Henrik Holst) + - none, API and ABI backwards-compatible with 0.27.x * New interfaces: + - ne_pkcs11.h: added basic PKCS#11 support (requires GnuTLS and pakchois) - ne_auth.h: added NE_AUTH_ALL and NE_AUTH_DEFAULT constants - ne_socket.h: added ne_sock_peer(), ne_sock_prebind(), ne_sock_cipher() - - ne_session.h: NE_SESSFLAG_TLSSNI flag added; ne_set_localaddr() added - - ne_pkcs11.h: added basic PKCS#11 support (requires GnuTLS and pakchois) + - ne_session.h: NE_SESSFLAG_TLSSNI flag added; TLS SNI support is enabled + by default, where supported; ne_set_localaddr() added + - ne_request.h: added close_conn hooks (Robert J. van der Boon) - ne_basic.h: added ne_options2() * Other changes: - - add TLS SNI support and enabled by default (where supported) - add Polish (pl) translation (Arfrever Frehtes Taifersar Arahesis) - add support for the 'domain' parameter in Digest authentication - fix fd leak in ne_sock_connect() error path (Andrew Teirney) @@ -25,6 +64,15 @@ Changes in release 0.28.0: - Win32: fix neon.mak to not double-quote $(MAKE) (Henrik Holst) - improve strength of Digest cnonces in GnuTLS builds +Changes in release 0.27.2: +* Fix crash in GSSAPI Negotiate response header verification (regression + since 0.26.x) + +Changes in release 0.27.1: +* Fix regression in response progress counter for notifier/progress callbacks +* Fix interface description for ne_set_notifier() callback; sr.total + is set to -1 not 0 for an indeterminate response length + Changes in release 0.27.0: * New interfaces: - ne_session.h: ne_fill_proxy_uri() retrieves configured proxy, |