Changelog for libevent-devel-2.0.21-10.1.x86_64.rpm :
Fri Jan 12 13:00:00 2018 kbabiochAATTsuse.com
- libevent-CVE-2016-10195.patch: DNS remote stack overread vulnerability (bnc#1022917 CVE-2016-10195)
- libevent-CVE-2016-10196.patch: stack/buffer overflow in evutil_parse_sockaddr_port() (bnc#1022918 CVE-2016-10196)
- libevent-CVE-2016-10197.patch: out-of-bounds read in search_make_new() (bnc#1022919 CVE-2016-10197)

Mon Sep 22 14:00:00 2014 meissnerAATTsuse.com
- libevent-CVE-2014-6272.patch: fixed buffer overflows in buffer methods
(bnc#897243 CVE-2014-6272)

Sat Jun 29 14:00:00 2013 iAATTmarguerite.su
- update to 2.0.21

* see ChangeLog for details.

Fri Nov 16 13:00:00 2012 andreas.stiegerAATTgmx.de
- update to 2.0.20

* core: Make event_pending() threadsafe

* evhttp: Fix a memory leak on error in evhttp_uriencode

* evbuffer: Avoid possible needless call to writev

* evdns: memset sockaddr_in before using it

* evhttp: Check more setsockopt return values when binding sockets

* evdns: Avoid segfault on weird timeout during name lookup

* bufferevent_ssl: Correctly invoke callbacks when a SSL
bufferevent reads some and then blocks

Mon Jul 30 14:00:00 2012 crrodriguezAATTopensuse.org
- Libevent 2.0.19

* Fix periodic timeout behavior when time jumps forwar

* Avoid certain priority inversions

* More evdns improvements

* lots of other bugfixes, see NEWS for details.
- Provide openssl support.

Wed Feb 1 13:00:00 2012 jengelhAATTmedozas.de
- Remove redundant tags/sections per specfile guideline suggestions
- Use \"pkgconfig\" BR so that the package also works on Redhats.

Wed Aug 3 14:00:00 2011 friseerAATTgmx.de
- spec mods
o libsoname macro
o name macro
- added baselibs.conf
- rpmlint
o fix self obsoletes

Tue Mar 22 13:00:00 2011 dimstarAATTopensuse.org
- Drop autoreconf call from build section. We do not carry any
patches at this time.

Mon Mar 21 13:00:00 2011 dimstarAATTopensuse.org
- Update to version 2.0.10:
+ Bugfixes:
- Minor fix for IOCP shutdown handling fix
- Correctly notify the main thread when activating an event
from a subthread
- Reject overlong http requests early when Expect:100-continue
is set
- EVUTIL_ASSERT: Use sizeof() to avoid \"unused variable\"
warnings with -DNDEBUG.
+ Code cleanups:
- bufferevent-internal.h: Use the new event2/util.h header,
not evutil.h
- Use relative includes instead of system includes consistently
- Make whitespace more consistent
- For all changes between 1.4.14 and 2.0.10, see ChangeLog.
- BuildRequire pkg-config, for proper pkgconfig() provides.
- Change library soname to libevent-2_0-5

Mon Jun 21 14:00:00 2010 alexandreAATTexatati.com.br
- Spec file cleaned with spec-cleaner;
- Changes in 1.4.14b-stable
o Set the VERSION_INFO correctly for 1.4.14
- Changes in 1.4.14-stable
o Add a .gitignore file for the 1.4 branch. (d014edb)
o Backport evbuffer_readln(). (b04cc60 Nicholas Marriott)
o Make the evbuffer_readln backport follow the current API (c545485)
o Valgrind fix: Clear struct kevent before checking for OSX bug. (5713d5d William Ahern)
o Fix a crash when reading badly formatted resolve.conf (5b10d00 Yasuoka Masahiko)
o Fix memory-leak of signal handler array with kqueue. [backport] (01f3775)
o Update sample/signal-test.c to use newer APIs and not leak. (891765c Evan Jones)
o Correct all versions in 1.4 branch (ac0d213)
o Make evutil_make_socket_nonblocking() leave any other flags alone. (81c26ba Jardel Weyrich)
o Adjusted fcntl() retval comparison on evutil_make_socket_nonblocking(). (5f2e250 Jardel Weyrich)
o Correct a debug message in evhttp_parse_request_line (35df59e)
o Merge branch \'readln-backport\' into patches-1.4 (8771d5b)
o Do not send an HTTP error when we\'ve already closed or responded. (4fd2dd9 Pavel Plesov)
o Re-add event_siglcb; some old code _was_ still using it. :( (bd03d06)
o Make Libevent 1.4 build on win32 with Unicode enabled. (bce58d6 Brodie Thiesfield)
o Distribute nmake makefile for 1.4 (20d706d)
o do not fail while sending on http connections the client closed. (5c8b446)
o make evhttp_send() safe against terminated connections, too (01ea0c5)
o Fix a free(NULL) in min_heap.h (2458934)
o Fix memory leak when setting up priorities; reported by Alexander Drozdov (cb1a722)
o Clean up properly when adding a signal handler fails. (ae6ece0 Gilad Benjamini)
o Do not abort HTTP requests missing a reason string. (29d7b32 Pierre Phaneuf)
o Fix compile warning in http.c (906d573)
o Define _REENTRANT as needed on Solaris, elsewhere (6cbea13)
- Changes in 1.4.13-stable:
o If the kernel tells us that there are a negative number of bytes to read from a socket, do not believe it. Fixes bug 2841177; found by Alexander Pronchenkov.
o Do not allocate the maximum event queue and fd array for the epoll backend at startup. Instead, start out accepting 32 events at a time, and double the queue\'s size when it seems that the OS is generating events faster than we\'re requesting them. Saves up to 512K per epoll-based event_base. Resolves bug 2839240.
o Fix compilation on Android, which forgot to define fd_mask in its sys/select.h
o Do not drop data from evbuffer when out of memory; reported by Jacek Masiulaniec
o Rename our replacement compat/sys/_time.h header to avoid build a conflict on HPUX; reported by Kathryn Hogg.
o Build kqueue.c correctly on GNU/kFreeBSD platforms. Patch pulled upstream from Debian.
o Fix a problem with excessive memory allocation when using multiple event priorities.
o When running set[ug]id, don\'t check the environment. Based on a patch from OpenBSD.

Wed Oct 28 13:00:00 2009 crrodriguezAATTopensuse.org
- libevent-devel Requires glibc-devel

Thu Aug 27 14:00:00 2009 meissnerAATTsuse.de
- Changes in 1.4.12-stable:
o Try to contain degree of failure when running on a win32 version so
heavily firewalled that we can\'t fake a socketpair.
o Fix an obscure timing-dependent, allocator-dependent crash in the evdns code.
o Use __VA_ARGS__ syntax for varargs macros in event_rpcgen when compiler
is not GCC.
o Activate fd events in a pseudorandom order with O(N) backends, so
that we don\'t systematically favor low fds (select) or earlier-added fds
(poll, win32).
o Fix another pair of fencepost bugs in epoll.c. [Patch from Adam Langley.]
o Do not break evdns connections to nameservers when our IP changes.
o Set truncated flag correctly in evdns server replies.
o Disable strict aliasing with GCC: our code is not compliant with it.
- Changes in 1.4.11-stable:
o Fix a bug when removing a timeout from the heap. [Patch from Marko Kreen]
o Remove the limit on size of HTTP headers by removing static buffers.
o Fix a nasty dangling pointer bug in epoll.c that could occur after
epoll_recalc(). [Patch from Kevin Springborn]
o Distribute Win32-Code/event-config.h, not ./event-config.h
- Changes in 1.4.10-stable:
o clean up buffered http connection data on reset; reported by Brian O\'Kelley
o bug fix and potential race condition in signal handling; from Alexander Drozdov
o rename the Solaris event ports backend to evport
o support compilation on Haiku
o fix signal processing when a signal callback delivers a signal; from Alexander Drozdov
o const-ify some arguments to evdns functions.
o off-by-one error in epoll_recalc; reported by Victor Goya
o include Doxyfile in tar ball; from Jeff Garzik
o correctly parse queries with encoded \\r, \
or + characters

Mon Mar 16 13:00:00 2009 meissnerAATTsuse.de
- updated to 1.4.9-stable:
o event_add would not return error for some backends; from Dean McNamee
o Clear the timer cache on entering the event loop; reported by Victor Chang
o Only bind the socket on connect when a local address has been provided;
reported by Alejo Sanchez
o Allow setting of local port for evhttp connections to support millions
of connections from a single system; from Richard J ones.
o Clear the timer cache when leaving the event loop; reported by Robin Haberkorn
o Fix a typo in setting the global event base; reported by lance.
o Fix a memory leak when reading multi-line headers
o Fix a memory leak by not running explicit close detection for server connections
- updated to 1.4.8-stable:
o Match the query in DNS replies to the query in the request; from Vsevolod Stakhov.
o Fix a merge problem in which name_from_addr returned pointers to the stack; found by Jiang Hong.
o Do not remove Accept-Encoding header
- updated to 1.4.7-stable:
o Fix a bug where headers arriving in multiple packets were not parsed; fix from Jiang Hong; test by me.
- updated to 1.4.6-stable:
o evutil.h now includes directly
o switch all uses of [v]snprintf over to evutil
o Correct handling of trailing headers in chunked replies; from Scott Lamb.
o Support multi-line HTTP headers; based on a patch from Moshe Litvin
o Reject negative Content-Length headers; anonymous bug report
o Detect CLOCK_MONOTONIC at runtime for evdns; anonymous bug report
o Fix a bug where deleting signals with the kqueue backend would cause subsequent adds to fail
o Support multiple events listening on the same signal; make signals
regular events that go on the same event queue; problem
report by Alexander Drozdov.
o Deal with evbuffer_read() returning -1 on EINTR|EAGAIN; from Adam Langley.
o Fix a bug in which the DNS server would incorrectly set the type of a cname reply to a.
o Fix a bug where setting the timeout on a bufferevent would take not effect if the event was already pending.
o Fix a memory leak when using signals for some event bases; reported by Alexander Drozdov.
o Add libevent.vcproj file to distribution to help with Windows build.
o Fix a problem with epoll() and reinit; problem report by Alexander Drozdov.
o Fix off-by-one errors in devpoll; from Ian Bell
o Make event_add not change any state if it fails; reported by Ian Bell.
o Do not warn on accept when errno is either EAGAIN or EINTR