From 3d55c361ba610771ae923d2bd72319884809da1b Mon Sep 17 00:00:00 2001 From: joe Date: Wed, 20 Aug 2008 19:35:19 +0000 Subject: * NEWS, macros/neon.m4: Prepare for 0.28.3. git-svn-id: http://svn.webdav.org/repos/projects/neon/branches/0.28.x@1536 61a7d7f5-40b7-0310-9c16-bb0ea8cb1845 --- NEWS | 7 ++++++- macros/neon.m4 | 2 +- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/NEWS b/NEWS index e9eda55..e73447e 100644 --- a/NEWS +++ b/NEWS @@ -1,10 +1,15 @@ Changes in release 0.28.3: +* SECURITY (CVE-2008-3746): Fix potential NULL pointer dereference in + Digest domain parameter support; could allow a DoS by a malicious server * Fix parsing of *-Authenticate response header with LWS after quoted value * Fix ne_set_progress(, NULL, ) to match pre-0.27 behaviour (and not crash) * Fix to disable Nagle on Win32 with newer toolchain (thanks to Stefan Küng) * Fix build on Netware (Guenter Knauf) -* Fix issues in testsuite SSL cert setup if using old versions of OpenSSL +* Document existing API ne_uri_parse() postcondition and ne_uri_resolve() + pre/postconditions regarding the ->path field in ne_uri structures * Mark ne_{,buffer_}concat with sentinel attribute for GCC >= 4. +* Distinguish the error message for an SSL handshake which fails after a + client cert was requested. * Compile with PIC flags by default even for static library builds Changes in release 0.28.2: diff --git a/macros/neon.m4 b/macros/neon.m4 index 71f840d..d58288a 100644 --- a/macros/neon.m4 +++ b/macros/neon.m4 @@ -138,7 +138,7 @@ AC_DEFUN([NE_VERSIONS_BUNDLED], [ NE_VERSION_MAJOR=0 NE_VERSION_MINOR=28 NE_VERSION_PATCH=3 -NE_VERSION_TAG=-dev +NE_VERSION_TAG= # 0.28.x is backwards-compatible with 0.27.x, so AGE=1 NE_LIBTOOL_VERSINFO="28:${NE_VERSION_PATCH}:1" -- cgit v1.2.1