Changelog for libsoup-2_4-1-2.24.1-1.19.1.i586.rpm :
Fri Jul 29 14:00:00 2011 vuntzAATTopensuse.org
- Add libsoup-CVE-2011-2524.patch: Fixed a security hole that
caused some SoupServer users to unintentionally allow accessing
the entire local filesystem when they thought they were only
providing access to a single directory. Fix bnc#706630,
CVE-2011-2524.

Wed Oct 22 14:00:00 2008 mbomanAATTsuse.de
- Update to version 2.24.1:
+ Bugs fixed: bgo#533473, bgo##536285, bgo#498509, bgo#553976, bgo#557072
+ Updated generated documentation

Fri Oct 3 14:00:00 2008 mbomanAATTsuse.de
- Update to version 2.24.0.1:
+ Reverted part of the fix for bgo#528882, which caused the DAAP
plugin in rhythmbox to crash. [bgo#553466]

Tue Sep 23 14:00:00 2008 mbomanAATTsuse.de
- Update to version 2.24.0:
+ Cosmetic version bump

Fri Sep 12 14:00:00 2008 mawAATTsuse.de
- Update to version 2.23.92:
+ Fixed the handling of a 302 response to a HEAD request, which
should NOT be treated like a 303 response (bgo#551190).

Tue Sep 2 14:00:00 2008 mbomanAATTnovell.com
- Update to version 2.23.91:
+ Fixed a crash in gvfs [bgo#528882]
+ Added soup_date_to_timeval() for gvfs. [bgo#549006]

Wed Aug 6 14:00:00 2008 mawAATTsuse.de
- Update to version 2.23.6:
+ Fixed use of g_idle_add() so that heavy I/O won\'t end up
blocking libsoup callbacks (bgo#536676)
+ Allow the caller to override the Host header (bgo#539803)
+ Properly handle responses larger than 4G (bgo#539861)
+ Fixed the build when using certain LDFLAGS (bgo#541506)
+ Fixed a small bug in Digest auth handling (bgo#544681).

Mon Jun 16 14:00:00 2008 mawAATTsuse.de
- Update to version 2.23.1:
+ This is the first unstable release leading up to GNOME 2.24;
the large version number bump is so that libsoup\'s version
matches that of GNOME at large, but note that the API version
is still \"2.4\", meaning that it is still referred to as
\"libsoup-2.4\" when using pkg-config
+ Added SoupSessionFeature, an interface type that will be
used for several new features. Ported SoupLogger and
SoupAuthManager to use it
+ Added SoupCookie and SoupCookieJar; this API is already being
used in Epiphany, via WebKit, but it is not yet complete.

Tue Apr 29 14:00:00 2008 cthielAATTsuse.de
- obsolete libsoup- via baselibs.conf

Mon Apr 21 14:00:00 2008 mawAATTsuse.de
- Drop libsoup-2.2.100-r924.patch, because it is now upstream
- Respin libsoup-334021.patch, and rename it to
libsoup-334021-client-ssl-certs.patch.

Thu Apr 10 14:00:00 2008 roAATTsuse.de
- added baselibs.conf file to build xxbit packages
for multilib support

Thu Apr 10 14:00:00 2008 mawAATTsuse.de
- Update to version 2.4.1:
+ Fixed SoupMessage to not downgrade to HTTP/1.0 for the second
attempt when it receives an HTTP/1.0 redirect or 401
(bgo#521848)
+ Fixed Host: header syntax when the host is an IPv6 address
literal
+ Fixed SoupSession to not emit \"authenticate\" multiple times
for messages that have been requeued (bgo#522601); also added
two new signals to SoupSession, request-queued and
request-unqueued, to help simplify certain session-helpers and
avoid bugs like this in the future
+ Fixed soup_server_pause_message() to actually work (rather
than
*un
*pausing the message)
+ Added a property SOUP_SESSION_IDLE_TIMEOUT that can be used
to set a timeout after which idle connections will
automatically be closed (bgo#518214)
+ Implemented RFC 2069-style Digest auth, and fixed SoupAuth
to compare auth scheme names case-insensitively, to fix
authentication against Apple\'s calendar server (bgo#498484)
+ Fixed a crash in SoupAuthDomainDigest if the client provided
an unrecognized username
+ Fixed a few SoupDate bugs (in particular, it was outputting
the wrong day of the week when stringifying dates)
+ Improved the cleanup of idle connections, to fix slow load
times with the libsoup backend of WebKit
+ Added a new SoupMessage signal \"wrote-body-data\" that can be
used for progress information when sending a large request
body; also allow providing the request body in multiple
chunks even when using Content-Length encoding (bgo#525101)
+ libsoup now ignores SIGPIPE globally, instead of
un-thread-safe-ly ignoring it only around network writes; in
particular, this means it is ignored when the SSL code needs
to unexpectedly do a write when we asked it to do a read
(bgo#524397)
+ The discard-body-chunks-once-they\'re-no-longer-needed
behavior, confusingly called SOUP_MESSAGE_OVERWRITE_CHUNKS,
is now controlled by a SoupMessageBody method
(soup_message_body_set_accumulate()), and can be applied to
either the request body or the response body;
(OVERWRITE_CHUNKS is still available for backward compatibility)
(bgo#522146)
+ The DNS cache no longer caches \"no such host\" results, since
some name servers lie to clients outside their firewall,
which could then cause problems for laptops moved between
networks (bgo#523269)

* Added some new regression tests, fixed some small bugs in
the existing ones.

Fri Mar 14 13:00:00 2008 mawAATTsuse.de
- Update to version 2.4.0:
+ Fixed a small memory leak in SoupSession (bgo#518798)
+ Minor fixes to redirect behavior; PROPFINDs can now be
automatically redirected and 302 is treated like 307, not
303; also fixed to make sure that redirect-test actually gets
run by \"make check\"
+ The SoupSocket I/O methods now set nread/nwrote even on
error.

Mon Mar 3 13:00:00 2008 mawAATTsuse.de
- Update to version 2.3.4:
+ Documentation is once again available from devhelp (bgo#518384
and bgo#518317)
+ Tidied up libsoup-2.4.pc file (bgo#517631)
- The shared library subpackage is now called libsoup-2_4-1.

Mon Feb 18 13:00:00 2008 mawAATTsuse.de
- Update to version 2.3.2:
+ API changes / Behavior changes:

* soup_server_add_auth_domain() now refs the auth domain when
adding it. (soup_server_remove_auth_domain() already
unreffed it.) This means existing applications using
SoupAuthDomain will now have a small memory leak. Those
applications should update their libsoup-2.4 requirement to
\">= 2.3.2\" at some point before the final GNOME 2.22.0
release, and then fix the code to unref the auth domain
after adding it to the server.

* SoupSession\'s automatic redirect-handling behavior now obeys
RFC 2616 more closely. In particular, status codes 300 and
304 are no longer mistakenly considered redirects; POSTs
that receive 303 are now redirected into GETs; and POSTs
that receive 301, 302, or 307 are now not redirected.
Applications that were using the SOUP_MESSAGE_NO_REDIRECT
flag to prevent libsoup from redirecting POSTs incorrectly
before should now be able to remove that if they depend on
libsoup-2.4 >= 2.3.2.
+ API additions:

* Added a SOUP_SESSION_USER_AGENT property to SoupSession, and
SOUP_SERVER_SERVER_HEADER to SoupServer, to support
automatically adding \"User-Agent\" and \"Server\" headers to
messages. (The default behavior is to do nothing, as
before.)

* Added several new methods to soup-forms.h. Applications that
are encoding a fixed set of form fields can now just pass
them to soup_form_encode(), rather than needing to construct
a GHashTable or GData list. (Likewise, the new
soup_uri_set_query_from_fields() behaves similarly for
directly updating a URI with form data.) There are also now
soup_form_request_new() and other related methods, to
directly create a GET or POST SoupMessage for submitting a
form query.
The original soup_form_
* methods have all been renamed,
although bgo#defines exist for backward compatibility.

* Added soup_message_set_chunk_allocator() and
soup_buffer_new_with_owner(), to give applications more
control over memory usage/copying when doing streaming HTTP.
[Wouter Cloetens, bgo#513810].

* Added several new methods to soup-value-utils.h for working
with multiple array or hash table values at once:
soup_value_hash_new_with_vals(),
soup_value_hash_insert_vals(),
soup_value_hash_lookup_vals(),
soup_value_array_new_with_vals(), and
soup_value_array_append_vals().
This helps to simplify XML-RPC calls that send or receive
structs or arrays.

* Added soup_date_to_time_t().

* Added SoupMessageHeadersIterator, an iterator type for
SoupMessageHeaders that can be used instead of
soup_message_headers_foreach().
+ Bug fixes:

* Fixed a crash-when-idle in evolution-exchange [bgo#437835] and
rhythmbox [bgo#506552].

* Added the API version to the gtk-doc installation dir, to
prevent parallel-installation problems with libsoup 2.2 and
2.4. [bgo#512810, Daniel Gryniewicz].

* Fixed tests/query-test to compile correctly on Solaris.
[bgo#513602, patch from Jeff Cai]

* Fixed some other minor HTTP conformance issues.

Thu Jan 31 13:00:00 2008 mawAATTsuse.de
- Split out a shared library subpackage
- Build with -fno-strict-aliasing
- s#%run_ldconfig#/sbin/ldconfig#
- Remove libtool archives and static libraries.

Tue Jan 29 13:00:00 2008 rodrigoAATTsuse.de
- Update to version 2.3.0.1:

* SoupURI now correctly handles URIs with complex encoded queries

* It is now possible for a SoupServer to use Digest auth without
needing to have the cleartext password available

* Digest authentication now properly handles \"stale=true\" and
\"nextnonce=...\"

* SoupServer is now subclassible

* soup_server_run_async and soup_server_quit no longer ref and
unref the server, as that doesn\'t match ordinary GObject
conventions

* The test programs no longer use a symbol name that conflicts
with Cygwin

* libsoup can now handle the not-quite-HTTP responses returned
by Shoutcast servers

* If you use libsoup while disconnected from the network, it
no longer caches the failed DNS results

* \"Expect: 100-continue\" processing now works correctly on
both client and server

* SoupSessions are no longer leaked

* The XML-RPC API is improved. The SOAP API is gone...

* Added utility functions for HTML form handling

* Improved message header handling

* SoupServer now automatically adds a \"Date\" header
- Disabled not working patches
- Fixed summaries

Mon Aug 6 14:00:00 2007 jberkmanAATTnovell.com
- export new smartcard functionality from gnutls for evo-exchange (gnome bug
[#334021])

Mon Feb 19 13:00:00 2007 mawAATTsuse.de
- Update to version 2.2.100
- Remove header-parsing.patch which is now upstream.

Tue Feb 13 13:00:00 2007 sbrabecAATTsuse.cz
- Do not build unusable static libraries (#238552#c17).

Wed Jan 17 13:00:00 2007 mawAATTsuse.de
- Add header-parsing.patch (#235084 and CVE-2006-5876).

Mon Jan 8 13:00:00 2007 sbrabecAATTsuse.cz
- Spec file cleanup.

Fri Dec 8 13:00:00 2006 mawAATTsuse.de
- Move to /usr.

Tue Nov 7 13:00:00 2006 cstenderAATTsuse.de
- removed \'rm -rf $RPM_BUILD_ROOT\' from build section
- added ldconfig call

Tue Aug 15 14:00:00 2006 jhargadonAATTsuse.de
- update to version 2.2.96
- SoupServer now works even if you don\'t explicitly set an
encoding for the response.
- WWW-Authenticate and Proxy-Authenticate responses with no
realm parameter are now ignored
- Fixed a bug in soup_mktime_utc()

Wed Jul 5 14:00:00 2006 dgollubAATTsuse.de
- update to 2.2.94:

* Various fixes to the XML-RPC code (which apparently had not
actually ever worked before) from Brent Smith. [343973,
344222, 344458]

* Added client and server API tutorials to the docs

* auth-test now uses a local Apache 2.2 install, if possible,
rather than depending on files that used to be on an old
Ximian web server but haven\'t been anywhere for a long time.
[311825]
- changes from 2.2.92 to 2.2.93

* Fixed outgoing data corruption caused when SoupServer
started writing out a response a second time after already
having started once. [334469]. Also fixed 342640 and another
bug caused by the workaround for 334469 in 2.2.92. Based on
patches and analysis from William Jon McCann and Armin
Bauer.

* Fixed a deadlock when changing a session\'s proxy URI.
[309867 / bnc 174255, based on a patch by Veerapuram
Varadhan].

* Fixed https-via-proxies in the synchronous case. [bnc 174255]

* Fixed a crash in evolution-exchange [342545, fix based on an
analysis by Wang Xin].

* Fixed simple-proxy to not crash at startup. Oops. (Alex
Larsson)
- changes from 2.2.91 to 2.2.92

* Fixed server-side digest auth to return a valid \"algorithm\"
value and client-side to not crash if it sees an invalid one
[328615].

* Fixed the Request-Line parsing code to not hardcode a
maximum URI length (to allow very long DAAP requests from
iTunes in Rhythmbox). [335040]
- changes from 2.2.90 to 2.2.91

* SoupSession, SoupServer, SoupConnection, SoupSocket, and
SoupAddress now have an \"async-context\" property that allows
you to use the async API in a non-default GMainContext.
[Based on patches from Armin Bauer and Jörg Billeter.]

* Fixed some bugs in soup_date_iso8601_parse(). [324671, from
Emmanuele Bassi]