summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS60
1 files changed, 54 insertions, 6 deletions
diff --git a/NEWS b/NEWS
index 220704a..e94d1d9 100644
--- a/NEWS
+++ b/NEWS
@@ -1,16 +1,55 @@
+Changes in release 0.29.0:
+* New interfaces:
+ - ne_socket.h: ne_sock_writev() (Julien Reichel), ne_sock_set_error(),
+ ne_iaddr_raw()
+ - added built-in SOCKS v4/v4a/v5 support: ne_socket.h:ne_sock_proxy(),
+ and ne_session.h:ne_session_socks_proxy()
+ - added support for system-default proxies: ne_session_system_proxy(),
+ implemented using libproxy where available.
+* Other changes:
+ - PKCS#11 now supported with OpenSSL builds
+ - ne_free() implemented as a function on Win32 (thanks to Helge Hess)
+
+Changes in release 0.28.3:
+* SECURITY (CVE-2008-3746): Fix potential NULL pointer dereference in
+ Digest domain parameter support; could allow a DoS by a malicious server
+* Fix parsing of *-Authenticate response header with LWS after quoted value
+* Fix ne_set_progress(, NULL, ) to match pre-0.27 behaviour (and not crash)
+* Fix to disable Nagle on Win32 with newer toolchain (thanks to Stefan Küng)
+* Fix build on Netware (Guenter Knauf)
+* Document existing ne_uri_parse() API postcondition and ne_uri_resolve()
+ pre/postconditions regarding the ->path field in ne_uri structures
+* Mark ne_{,buffer_}concat with sentinel attribute for GCC >= 4.
+* Distinguish the error message for an SSL handshake which fails after a
+ client cert was requested.
+* Compile with PIC flags by default even for static library builds
+
+Changes in release 0.28.2:
+* Support "Proxy-Connection: Keep-Alive" for compatibility with HTTP/1.0
+ proxies which require persistent connections for NTLM authentication
+* Fix an fd leak in ne_ssl_{,cli}cert_read (GnuTLS only)
+* Enable fast initialization in GnuTLS.
+
+Changes in release 0.28.1:
+* Fix Win32 build
+* Fix build on SCO OpenServer 5.0.x (thanks to Nico Kadel-Garcia)
+* Fix handling of Digest domain parameter values without a trailing slash
+* Fix build against apr-util's bundled libexpat.la in Subversion
+* Add --without-pakchois to configure (Arfrever Frehtes Taifersar Arahesis)
+* zh message catalog renamed to zh_CN, translation updated (Dongsheng Song)
+
Changes in release 0.28.0:
* Interface changes:
- - ne_acl.h: changed ne_acl_entry struct fields; apply->target,
- principal->tname; all principles set via single "principles"
- bitfield using NE_ACL_* constants, inverting old logic (Henrik Holst)
+ - none, API and ABI backwards-compatible with 0.27.x
* New interfaces:
+ - ne_pkcs11.h: added basic PKCS#11 support (requires GnuTLS and pakchois)
- ne_auth.h: added NE_AUTH_ALL and NE_AUTH_DEFAULT constants
- ne_socket.h: added ne_sock_peer(), ne_sock_prebind(), ne_sock_cipher()
- - ne_session.h: NE_SESSFLAG_TLSSNI flag added; ne_set_localaddr() added
- - ne_pkcs11.h: added basic PKCS#11 support (requires GnuTLS and pakchois)
+ - ne_session.h: NE_SESSFLAG_TLSSNI flag added; TLS SNI support is enabled
+ by default, where supported; ne_set_localaddr() added
+ - ne_request.h: added close_conn hooks (Robert J. van der Boon)
- ne_basic.h: added ne_options2()
* Other changes:
- - add TLS SNI support and enabled by default (where supported)
- add Polish (pl) translation (Arfrever Frehtes Taifersar Arahesis)
- add support for the 'domain' parameter in Digest authentication
- fix fd leak in ne_sock_connect() error path (Andrew Teirney)
@@ -25,6 +64,15 @@ Changes in release 0.28.0:
- Win32: fix neon.mak to not double-quote $(MAKE) (Henrik Holst)
- improve strength of Digest cnonces in GnuTLS builds
+Changes in release 0.27.2:
+* Fix crash in GSSAPI Negotiate response header verification (regression
+ since 0.26.x)
+
+Changes in release 0.27.1:
+* Fix regression in response progress counter for notifier/progress callbacks
+* Fix interface description for ne_set_notifier() callback; sr.total
+ is set to -1 not 0 for an indeterminate response length
+
Changes in release 0.27.0:
* New interfaces:
- ne_session.h: ne_fill_proxy_uri() retrieves configured proxy,