Changelog for libneon27-0.30.2-61.8.x86_64.rpm :
Wed Aug 23 14:00:00 2017 vcizekAATTsuse.com
- Update to 0.30.2
Add support for OpenSSL 1.1.x (Kurt Roeckx).
Fix PKCS#11 support under GnuTLS 3.x.
PKCS#11 API no longer supported with GnuTLS 2.x
- cleaned the .spec

Wed Mar 4 13:00:00 2015 mpluskalAATTsuse.com
- Cleanup spec file with spec-cleaner
- Add gpg signature
- Enable tests
- Use fdupes to remove duplicates
- Update to 0.30.1

* small changes, for details see included ChangeLog

Wed Aug 21 14:00:00 2013 crrodriguezAATTopensuse.org
- version 0.30.0

* drop neon-openssl-version.patch

* API and ABI backwards-compatible with 0.27.x and later

* ne_path_escape: fix excessive memory allocation

* added ne_ssl_clicert_import, ne_ssl_context_get_flag,
ne_set_addrlist2, added ne_addr_canonical..

* support chunked bodies with negative length passed to
ne_set_request_body_provider

Wed Aug 21 14:00:00 2013 crrodriguezAATTopensuse.org
- permanently drop neon-aes-ni.patch which is not applied
and obsolete, bug in openSSL already fixed and the ENGINE
loading issue addressed in a different fashion.

Wed Jun 6 14:00:00 2012 meissnerAATTsuse.de
- disable explicit openssl version check. openssl 1.0 is stable
api wise. [bnc#764906]

Fri May 4 14:00:00 2012 lnusselAATTsuse.de
- don\'t use ca-bundle.pem. neon correctly uses openssl\'s default
instead (ie the /etc/ssl/certs directory)

Mon Jan 30 13:00:00 2012 dmacvicarAATTsuse.de
- build with libproxy
- make expat explicit in configure
- pass ca-bundle.pem to configure

Mon Jan 30 13:00:00 2012 dmacvicarAATTsuse.de
- build with NE_FEATURE_TS_SSL (thread-safe SSL)

Mon Nov 21 13:00:00 2011 jengelhAATTmedozas.de
- Remove redundant/unwanted tags/section (cf. specfile guidelines)

Sun Nov 20 13:00:00 2011 cooloAATTsuse.com
- add libtool as buildrequire to avoid implicit dependency

Tue Oct 18 14:00:00 2011 dmuellerAATTsuse.de
- remove neon-aes-ni.patch temporarily (bnc#720601)

Mon Sep 5 14:00:00 2011 crrodriguezAATTopensuse.org
- test suite hangs or fails in the OBS, but works locally
disable it.

Mon Sep 5 14:00:00 2011 crrodriguezAATTopensuse.org
- Load openssl engines as well, needed to support
AES-NI, fast/hardware provided hash functions and Ivy bridge\'s
RDRAND instruction.

Thu Jul 21 14:00:00 2011 dmuellerAATTsuse.de
- update to 0.29.6:

* Don\'t abort SSL handshake with GnuTLS if a client cert is
requested but none is configured/available

* Fix GnuTLS build with Nettle

* Fix the method string passed to create_request hooks to
have the same lifetime as the request object

* Docs updates.

* Fix GnuTLS handshakes failures with \'TLS warning alert\'

* Fix SNI support

* Fix possible Solaris linker errors if building static library

* Fix error handling when pulling a request body from an file

* Fix ne_request_dispatch() return value for SOCKS proxy failure cases

* Tighten SSL cert ID checks to deny a wildcard match against an IP address

Thu May 12 14:00:00 2011 lnusselAATTsuse.de
- Obsoletes: neon must be in the lib package. Otherwise
libneon-devel gets installed as replacement for neon on distro
upgrade, drawing in lots of other devel stuff.

Sun Aug 22 14:00:00 2010 dimstarAATTopensuse.org
- Update to version 0.29.3
+ Change ne_sock_close() to no longer wait for SSL closure alert
+ Fix memory leak with GnuTLS
+ API clarification in ne_sock_close()
- Changes from version 0.29.2:
+ Fix spurious \'certificate verify failed\' errors with OpenSSL
+ Fix unnecessary re-authentication with SSPI
- Changes from version 0.29.1:
+ Fixes for (Unix) NTLM implementation:
- fix handling of session timeout
- fix possible crash
+ Build fixes for Win32:
+ Fix build with versions of GnuTLS older than 2.8.0.
- Changes from version 0.29.0:
+ New interfaces and features:
- added NTLM auth support for Unix builds
- ne_auth.h: added NE_AUTH_GSSAPI and NE_AUTH_NTLM auth protocol
codes
- added ne_acl3744.h, updated WebDAV ACL support
- added built-in SOCKS v4/v4a/v5 support:
ne_socket.h:ne_sock_proxy(), and
ne_session.h:ne_session_socks_proxy()
- added support for system-default proxies:
ne_session_system_proxy(), implemented using libproxy
- ne_session.h: added NE_SESSFLAG_EXPECT100 session flag, SSL
verification failure bits extended by NE_SSL_BADCHAIN and
NE_SSL_REVOKED, better handling of failures within the cert
chain
- ne_utils.h: added feature code NE_FEATURE_SYSPROXY
- ne_socket.h: ne_sock_writev(), ne_sock_set_error(),
ne_iaddr_raw(), ne_iaddr_parse()
- ne_string.h: ne_buffer_qappend(), ne_strnqdup()
- Changes from version 0.28.6:
+ SECURITY (CVE-2009-2473): Fix \"billion laughs\" attack against
expat;
+ SECURITY (CVE-2009-2474): Fix handling of an embedded NUL byte
in a certificate subject name with OpenSSL;
+ Changes from version 0.28.5:
+ Enable support for X.509v1 CA certificates in GnuTLS.
+ Fix handling of EINTR in connect() calls.
+ Fix use of builds with SOCK_CLOEXEC support on older Linux
kernels.
- Add libproxy-devel BuildRequires
- Clean spec file using spec-cleaner.
- Drop upstream included patches:
+ neon-0.28.4-CVE-2009-2473,2474.patch
+ neon-openssl.patch
- Drop the main package. It avoids the lib from being installed in
different versions and generally only contained coders doc.
=> provide / obsolete neon by libneon-devel.

Sun Apr 18 14:00:00 2010 cooloAATTnovell.com
- take patch from upstream to fix openssl linkage

Mon Feb 1 13:00:00 2010 jengelhAATTmedozas.de
- package baselibs.conf

Thu Sep 10 14:00:00 2009 prusnakAATTsuse.cz
- fixed CVE-2009-2473 and CVE-2009-2474 [bnc#528370]

Thu May 7 14:00:00 2009 prusnakAATTsuse.cz
- updated to 0.28.4

* GnuTLS support fixes:
- fix handling of PKCS#12 client certs with multiple certs or keys
- fix crash with OpenPGP certificate
- use pkg-config data in configure, in preference to libgnutls-config

* Add PKCS#11 support for OpenSSL builds (where pakchois is available)

* Fix small memory leak in PKCS#11 code
- enabled kerberos support (by adding krb5-devel to BuildRequires)