Changelog for libsoup-lang-3.0.4-150500.1.4.noarch.rpm :

* Fri Jan 07 2022 dimstarAATTopensuse.org- Update to version 3.0.4: + Fix HTTP/2 not properly handling socket timeouts. + Improvements to test reliablity. + Fix cross-compiling to Windows. + Fix tests with development glib-networking. + Expose soup_uri_copy() to Vala.
* Wed Nov 24 2021 bjorn.lieAATTgmail.com- Update to version 3.0.3: + Fix various HTTP/2 issues. + Error when libsoup2 has been loaded before libsoup3. + Fix memory leak when using TLS.
* Fri Nov 05 2021 dimstarAATTopensuse.org- Require libsoup-3_0-0 instead of libsoup by in the devel package: defacto the same package, as the library provides the base name, but more explicit and clearer.
* Sun Oct 24 2021 bjorn.lieAATTgmail.com- Update to version 3.0.2: + Add support for multiple auth challenges in one response. + Fix SoupCache test failures on 32bit + Don\'t treat `-Wincompatible-pointer-types` as error. The `glib-mkenums` tool sometimes triggered this. + Improve `gssapi` dependency handling. + Fix undefined `ssize_t` on Windows. + Updated translations.- No longer ignore test failure on 32-bit arches, fixed upstream.
* Thu Sep 30 2021 guillaume.gardetAATTopensuse.org- Ignore test failure on 32-bit arm, as it is done for 32-bit x86 https://gitlab.gnome.org/GNOME/libsoup/-/issues/236
* Sun Sep 26 2021 bjorn.lieAATTgmail.com- Update to version 3.0.1: + Move python overrides to upstream pygobject. + Fix minor build warnings.- Drop python3-Soup sub-package following upstream changes.
* Mon Sep 20 2021 dimstarAATTopensuse.org- Update to version 3.0.0: + Remove unused dependency on libxml. + Use G_DECLARE_FINAL_TYPE when applicable and bump GLib dependency to 2.69.1. + Add PyGObject overrides for SoupMessageHeaders to behave like a dict. + Fix soup_message_add_status_code_handler() in Vala. + Ensure that all header values are valid UTF-8, other encodings are not supported. + Support Content-Disposition headers missing a disposition-type.- Drop pkgconfig(libxml-2.0) BuildRequires: follow upstream.- Split out new python3-Soup package.
* Thu Sep 16 2021 sbrabecAATTsuse.com- Remove obsolete translation-update-upstream support (jsc#SLE-21105).
* Wed Aug 25 2021 dimstarAATTopensuse.org- Update to version 2.99.9: + Make soup_message_set_method() public API. + Make SoupMessage:http-version read only. + Prevent the same message being queued multiple times. + Allow completing SoupMessage::tls-interaction with NULL certificate. + Replace soup_server_set_ssl_cert_file() with soup_server_set_tls_certificate(). + Add SoupServer support for client certificates. + Fallback to building meson wrap of sqlite if not found. + Add soup_message_get_tls_protocol_version() and soup_message_get_tls_ciphersuite_name() API.- Changes from version 2.99.8: + Enable HTTP/2 by default. The SOUP_FORCE_HTTP1 env var can disable for debugging. + Restrict advertising brotli decoding support to HTTPS. + Add new API to handle client certificate authentication per-message as well as API to PKCS #11 PINs. + Add new build features `http2_tests` and `pkcs11_tests` to more granularly control optional test dependencies.- Changes from version 2.99.7: + Change SoupSession to only support one SoupSessionFeature of a given type. + Remove soup_session_get_features() API. + Numerous HTTP/2 fixes and improvements.- Changes from version 2.99.6: + Added HTTP/2 support. Enable by setting `SOUP_ENABLE_HTTP2` env var.- Changes from version 2.99.5: + Add soup_message_get_remote_address() API. + Fix preconnect stealing a connection. + Fix potential header issues when included in a C++ project. + Disabling tests also disables Autobahn tests by default.- Changes from version 2.99.4: + Rename SoupMessage:tls-certificate and SoupMessage:tls-certificate-errors to tls-peer-certificate and tls-peer-certificate-errors respectively. + Add SoupMessageMetrics API for tracking message events, + Add soup_message_get_connection_id() API. + Add WebSocket fuzzing tests with Autobahn.- Add pkgconfig(gnutls) and pkgconfig(libnghttp2) BuildRequires: new dependencies.- Rename libsoup-2_4-1 subpackage to libsoup-3_0-0: follow upstream library name change.- Pass -Dautobahn=disabled -Dhttp2_tests=disabled to meson: disable some tests, as we do not have all deps available.- Drop libsoup-skip-tls_interaction-test.patch: no longer needed.
* Mon Aug 23 2021 dimstarAATTopensuse.org- Update to version 2.74.0: + IMPORTANT: Enable ssl-use-system-ca-file by default on deprecated Sync and Async sessions. + Fix including headers in C++ projects. + Fix attempting to resolve relative paths with data URIs. + Support Content-Disposition headers without a disposition-type. + Fix building VAPI bindings with latest Vala. + Fix sending a Content-Length header in a response with status code of 1xx or 204. + Updated translations.- Drop libsoup-fix-SSL-test.patch: fixed upstream.
* Fri Feb 26 2021 pmonrealAATTsuse.com- Run the regression tests using GnuTLS NORMAL priority
* Mon Feb 08 2021 pmonrealAATTsuse.com- Disable tls_interaction-test until resolved upstream
* See https://gitlab.gnome.org/GNOME/libsoup/issues/120- Add libsoup-skip-tls_interaction-test.patch
* Mon Feb 08 2021 pmonrealAATTsuse.com- Fix tests: fix SSL test with glib-networking >= 2.65.90
* See https://gitlab.gnome.org/GNOME/libsoup/issues/201- Add libsoup-fix-SSL-test.patch- Remove patches:
* libsoup-disable-ssl-tests.patch
* libsoup-disable-hsts-tests.patch
* Thu Nov 12 2020 dimstarAATTopensuse.org- Disable sysprof integration: this causes a nasty build cycle. + Pass -Dsysprof=disabled to meson. + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4), as well as pkgconfig(sysprof-4) in the devel project.
* Mon Sep 14 2020 dimstarAATTopensuse.org- Update to version 2.72.0: + Fix critical after cancelling a message that failed auth. + Updated translations.
* Sat Sep 05 2020 dimstarAATTopensuse.org- Update to version 2.71.1: + Add support for 308 Premanent Redirect. + Add basic sysprof profiling for HTTP messages. + Various build fixes. + Updated translations.- Add pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4) BuildRequires: new dependencies.
* Fri Sep 04 2020 dimstarAATTopensuse.org- Update to version 2.71.0: + Redesign directory list returned for `file://` requests. + Add `SOUP_COOKIE_JAR_ACCEPT_GRANDFATHERED_THIRD_PARTY` policy. + Add soup_message_is_feature_disabled() API. + Fix potential leak when setting SoupSession:tls-interaction. + Fix building with Visual Studio. + Updated translations.- Drop libsoup-test-utils-fix.patch: fixed upstream.
* Mon May 11 2020 dimstarAATTopensuse.org- Autodetect the location of krb5-config: krb5 adds itself to $PATH.
* Thu Apr 16 2020 bjorn.lieAATTgmail.com- Add libsoup-disable-ssl-tests.patch: Disable ssl tests, as they randomly fail for all arches (glgo#GNOME/libsoup#188).- Rebase/refresh patches.
* Tue Mar 24 2020 bjorn.lieAATTgmail.com- Add libsoup-test-utils-fix.patch: test-utils: Clarify meaning of an environment variable.
* Sat Mar 07 2020 bjorn.lieAATTgmail.com- Update to version 2.70.0: + Deprecate SoupSession:proxy-uri. + Updated translations.
* Wed Feb 26 2020 dimstarAATTopensuse.org- Update to version 2.69.90: + Add new API to expose support for same-site cookies. + Fix TRACE method not being considered safe and idempotent internally. + WebSockets: ensure a new connection is created for WebSocket requests. + WebSockets: do not start the input source when IO is closing. + Deprecate soup_date_to_timeval(). + build: Update glib requirement to 2.58. + Updated translations.
* Wed Feb 26 2020 bjorn.lieAATTgmail.com- Update to version 2.68.4: + WebSockets: - Ensure a new connection is created for WebSocket requests. - Do not start the input source when IO is closing. + build: Update glib requirement to 2.58.
* Sat Jan 25 2020 dimstarAATTopensuse.org- No longer recommend -lang: supplements are in use
* Thu Jan 09 2020 olafAATTaepfle.de- Usage of g_canonicalize_filename requires glib 2.58
* Fri Dec 20 2019 olafAATTaepfle.de- meson >=0.50 is required for building
* Wed Dec 04 2019 bjorn.lieAATTgmail.com- Update to version 2.68.3: + Fixes to testing infrastructure. + Enable GNOME support in mingw. + Allow introspection in cross builds. + Updated translations.
* Tue Oct 15 2019 dimstarAATTopensuse.org- Disable NTLM for the time being (causes build cycle): + Drop samba-winbind BuildRequires. + Pass -Dntlm=disabled to meson.
* Wed Oct 09 2019 bjorn.lieAATTgmail.com- Update to version 2.68.2: + Documentation fixes. + Windows compatibility test fixes. + WebSockets: client_max_window_bits in server must have a value. + build: improve diagnostics when detecting Apache. + NTLM: Make v2 authentication more robust. + Updated translations.
* Thu Sep 12 2019 mgorseAATTsuse.com- Update to version 2.68.1: + Several memory leaks fixed in tests, examples, and parsing code. + SoupServer: Fixes to Windows path handling. + Changes in version 2.68.0: + Updated translations. + Changes in version 2.67.93: + SoupMessage: Handle Transfer-Encoding: identity for compatibility reasons. + WebSockets: Only poll IO stream when needed. + WebSockets: Properly set cookies received during handshake. + WebSockets: Plug a couple of memory leaks and fix a few read-after-free memory errors. + WebSockets: document how web socket extensions should treat buffers in case of error. + SoupSession: Don\'t reset user GCancellable internally. + Tests: Make tests installable. + Remove deprecate GTimeVal internal usage. + CI: increase coverage by enabling all features during testing. + Updated translations.
* Wed Sep 11 2019 mgorseAATTsuse.com- Update to version 2.67.92: + Silence GTimeVal deprecation warnings. + API documentation and annotation fixes. + Plug a couple of NTLM authentication memory leaks. + Meson: Use feature options. + Meson: Do not fallback to system krb5-config for cross-compilation. + NTLM: Fix build with NTLM enabled. + Updated translations.- Changes from version 2.67.91: + HSTS: New API to retrieve information about existing HSTS policies. + Updated translations.- Changes from version 2.67.90: + WebSockets: add support for WebSocket extensions via new SoupWebsocketExtensionManager and SoupWebsocketExtension API. + WebSockets: add support for the permessage-deflate extension, enabled by default in SoupServer and in the client side only if SoupWebsocketExtensionManager is added to a session. + WebSockets: Allow sending close frames with no body. + WebSockets: ignore messages after close has been sent and received. + Meson: tls-check improved. + Meson: improve Apache checks.- Changes from version 2.67.3: + WebSockets: allow sending empty binary data. + WebSockets: fail and load the connection on invalid payload length. + WebSockets: allow NULL characters in text messages data. + WebSockets: Close connection on wrongly masked/unmasked frame as per RFC. + WebSockets: other code fixes. + NTLM: Fix NTLMv2 authentication. + SoupMessage: fix several deprecation warnings related to private data.- Changes from version 2.67.2: + gobject-introspection: Fix annotation for soup_auth_new(). + brotli: Do not advertise the decoder as it\'s failing with some websites. + Meson: Fix xml2 and sqlite fallbacks. + HSTS: Add SoupHSTSEnforcer:hsts-enforced signal. + HSTS: Fixes to the types used to store policies in the SQLite storage. + HSTS: Accept Strict-Transport-Security regardless of casing. + WebSockets: Ensure messages finishes when handshake fails. + WebSockets: Fix critical warnings and test failures.- Changes from version 2.67.1: + Add a brotli decoder. This adds a new dependency on libbrotli. + Add strict secure cookies support. + Add HSTS enforcer SoupSession feature (with both memory and sqlite backends). + meson gtk-doc documentation fixes.- Add libbrotlidec to BuildRequires.- Adjust meson: need \"enabled\" rather than \"true\" in a few places.- Add samba-winbind to BuildRequires: meson checks for ntlm_auth.- Meson: doc option is now gtk_doc.- Add libsoup-disable-hsts-tests.patch: these require
*.localhost to resolve.
* Wed Sep 11 2019 bjorn.lieAATTgmail.com- Update to version 2.66.3: + docs: various gtk-doc fixes. + SoupServer: Fixes to Windows path handling.- Update options passed to meson following upstream changes.
* Thu May 16 2019 bjorn.lieAATTgmail.com- Update to version 2.66.2: + Make gettext optional (might not be available in Windows). + MSVC: set encoding to UTF-8 to avoid errors. + MinGW tests build fix. + Check for TLS support only when external glib dependency is available.
* Wed Apr 10 2019 bjorn.lieAATTgmail.com- Update to version 2.66.1: + Fix dylib versioning in MacOS. + Visual Studio build fixes. + MinGW build fixes. + Meson build system improvements. + Fix random CI failures due to parallel apache tests. + Code cleanups.
* Tue Mar 12 2019 bjorn.lieAATTgmail.com- Update to version 2.66.0: + Fix lookup for libxml2 on Visual Studio builds.- Add meson_test macro in check section, run tests during build.
* Tue Mar 05 2019 bjorn.lieAATTgmail.com- Update to version 2.65.92: + SoupConnection: Fix check for remote disconnectin idle state. + Code cleanups and warnings fixed. + Remove stale .pc.in files. + Updated translations.
* Wed Feb 20 2019 bjorn.lieAATTgmail.com- Update to version 2.65.91: + Remove RFCs from sources.
* Wed Feb 13 2019 bjorn.lieAATTgmail.com- Update to version 2.65.90: + Avoid using threads in SoupRequestFile asynchronous API.
* Wed Feb 06 2019 bjorn.lieAATTgmail.com- Fix translation-update-upstream call, needed after update of translation-update-upstream in distro.
* Mon Jan 21 2019 bjorn.lieAATTgmail.com- Update to version 2.65.2: + Remove autotools build system and change to meson by default. + Many fixes to Meson. + Improvements to the continuous integration infrastructure + Make sure SoupSession features are not disposed until all pending messages are processed. + Updated translations.
* Thu Jan 03 2019 bjorn.lieAATTgmail.com- Update to version 2.65.1: + Added MTLMv2 responses support. + Many fixes to the meson build system. + Remove Visual Studio project files. + Enable VAPI by default. + New strict header field parameter parsing API. + Code cleanups. + Updated translations.- Drop meson and apidocs beconds and conditionals, fixed upstream.
* Wed Oct 24 2018 bjorn.lieAATTgmail.com- Update to version 2.64.2: + TLD tests updated. + Updated translations.
* Wed Sep 26 2018 bjorn.lieAATTgmail.com- Update to version 2.64.1: + Many fixes to the meson build system (which, by the way, is NOT official yet). + Updated translations.- Changes from version 2.64.0: + Many fixes to the meson build system. + Updated translations.
* Sun Sep 02 2018 luc14n0AATTlinuxmail.org- Conditionalize meson use: it\'s currently providing wrong capability leading to every package autodepending on libsoup-2.4.so.1() capability to get \"Unresolvable\" (glgo#GNOME/libsoup#9).
* Wed Aug 29 2018 luc14n0AATTlinuxmail.org- Update to version 2.63.92: + Updated translations.- Add: + meson BuildRequires and replace configure/make/make_install/\\ make_check with meson/meson_build/meson_install/meson_test macros to follow upstream\'s build system port to Meson. + libsoup-add-missing-po-meson_build.patch (glgo#GNOME/libsoup#6).- Drop no longer needed intltool BuildRequires: upstream migrated to Gettext.- Conditionalize build of API docs: they are currently failing (glgo#GNOME/libsoup#8).- Enable tests run to increase QA of package.
* Thu Aug 16 2018 bjorn.lieAATTgmail.com- Update to version 2.63.91: + Simplify soup_hosts_matches_host(). + Add new tests for trailing dots in domain names. + Updated translations.
* Fri Aug 10 2018 bjorn.lieAATTgmail.com- Update to version 2.63.90: + Set default cookie path for NULL origins. + Fixes to GObject-introspection. + Use atomic-refcounting in classes that are not using GObject-refcounting. + Many Coverity-found code fixes. + Bail out on cookie-jar calls with empty hostnames. + Fixes to the simple-httpd example.
* Fri Aug 10 2018 bjorn.lieAATTgmail.com- Update to version 2.62.3: + Check for trailing dots in domains. + Set default cookie path for NULL origins. + Use atomic-refcounting in classes that are not using GObject-refcounting. + Many Coverity-found code fixes. + Bail out on cookie-jar calls with empty hostnames.- Drop libsoup-boo1100097-empty-string.patch: Fixed upstream.
* Fri Jul 20 2018 mgorseAATTsuse.com- Add libsoup-boo1100097-empty-string.patch: fix crash when handling empty hostnames (boo#1100097 CVE-2018-12910).
* Sun Jun 03 2018 luc14n0AATTlinuxmail.org- Update to version 2.63.2: + Fix critical warning in SoupSocket. + Updated translations.
* Sun May 13 2018 luc14n0AATTlinuxmail.org- Update to version 2.63.1: + Fix digest authentication with encoded URIs (bgo#794208). + Avoid unaligned memory accesses in WebSocket implementation (bgo#794421). + Fix crash under soup_socket_new() (bgo#762138). + Use libpsl for the SoupTLD API instead of shipping a copy of the public-suffix list (bgo#769650). + Introspection documentation fixes (bgo#795135). + Minor cleanups and fixes. + Updated translations.- Add: + pkgconfig(libpsl) BuildRequires: new dependency. + pkgconfig(glib-2.0) BuildRequires to avoid implicit dependencies.- Drop: + glib-networking BuildRequires: this is actually a runtime requirement only. + python3-base BuildRequires: aside from being an implicit dependency, this is only required when using apache-httpd configure option for using a python script to get the Apache modules directories. + libsoup-SoupCookie-fix-instrospection-annotation.patch: fixed upstream.
* Tue May 08 2018 bjorn.lieAATTgmail.com- Update to version 2.62.2: + Fixes to instrospection annotation (bgo#795135). + Fixes to the test suite with PHP version >= 7.2 (bgo#795111). + Critical warning fixes to SoupSocket. + Updated translations.- Drop upstream fixed patches: + libsoup-SoupCookie-fix-instrospection-annotation.patch (bgo#795135). + libsoup-xmlrpc-server-dont-count-null.patch (bgo#795111). + libsoup-soup-socket-fix-critical-warning.patch.
* Wed Apr 25 2018 bjorn.lieAATTgmail.com- Add upstream bug fix patches: + libsoup-SoupCookie-fix-instrospection-annotation.patch (bgo#795135). + libsoup-xmlrpc-server-dont-count-null.patch (bgo#795111). + libsoup-soup-socket-fix-critical-warning.patch.
* Mon Apr 09 2018 bjorn.lieAATTgmail.com- Update to version 2.62.1: + Fix digest authentication with encoded URIs (bgo#794208). + Avoid unaligned memory accesses in WebSocket implementation (bgo#794421). + Use base domain to decide if cookies are third-party (bgo#792130). + Fix crash under soup_socket_new() (bgo#762138).
* Tue Mar 20 2018 dimstarAATTopensuse.org- Unconditionally enable translation-update-upstream: on Tumbleweed, this results in a NOP and for Leap in SLE paid translations being used (boo#1086036).
* Mon Mar 12 2018 dimstarAATTopensuse.org- Update to version 2.62.0: + Updated translations.
* Mon Mar 05 2018 dimstarAATTopensuse.org- Update to version 2.61.91: + Add limit to header length to avoid DOS attacks (bgo#792173). + Update the public-suffix list. + Revert \"cookie-jar: use base domain to decide if cookie is third party\" (bgo#792130).
* Wed Feb 28 2018 dimstarAATTopensuse.org- Modernize spec-file by calling spec-cleaner
* Tue Feb 06 2018 luc14n0AATTlinuxmail.org- Update to version 2.61.90: + Various improvements to the WebSocket implementation (bgo#792113). + cookie-jar: use base domain to decide if cookie is third party (bgo#792130). + Add new API to create a new connection from a SoupSession (bgo#792212). + soup-headers: accept any 3 digit number as message status code (bgo#792124).- Remove unneeded %clean section: RPM does this kind of work itself already.- Adopt the use of %make_build macro rather than raw make command, following the best practices.
* Mon Jan 22 2018 dimstarAATTopensuse.org- Update to version 2.61.2: + Session: don\'t request Keep-Alive for upgraded connections (bgo#788723).
* Mon Jan 22 2018 dimstarAATTopensuse.org- Update to version 2.61.1: + tld-parser: use Python 3 (bgo#785735). + Fix heap-buffer-overflow in soup_ntlm_parse_challenge() (bgo#788037). + Fix possibly uninitialized value in ssl-test. + SoupCache: fix the timestamp for responses (bgo#791031).- Drop libsoup-tld-parser-py3.patch: fixed upstream.
* Fri Jan 19 2018 bjorn.lieAATTgmail.com- Update to version 2.60.3: + heap-buffer-overflow in soup_ntlm_parse_challenge() (bgo#788037). + session: don\'t request Keep-Alive for upgraded connections (bgo#788723). + soup-headers: accept any 3 digit number as message status code (bgo#792124).
* Tue Dec 05 2017 dimstarAATTopensuse.org- Use python3 during build: + Add libsoup-tld-parser-py3.patch: Use python3 for tld-parser. + Add python3-base BuildRequires.
* Fri Oct 27 2017 luc14n0AATTlinuxmail.org- Update to version 2.60.2: + Fix documentation typos (bgo#788920). + format-zero-length warning triggered in soup-logger.c (bgo#789096). + Warnings while generating inrospection files (bgo#789099). + Updated translations.- Add conditional use for translation-update-upstream: suse-only requirement.- Update Url to https://wiki.gnome.org/Projects/libsoup: current libsoup\'s project web page.- Run spec-cleaner -p to get respectives pkgconfig(
*): gio-2.0, gobject-2.0, gobject-introspection-1.0, gtk-doc and libxml-2.0.
* Wed Oct 11 2017 luc14n0AATTlinuxmail.org- Update to version 2.60.1: + Fallback to another authentication type if the current failed (bgo#788238). + Fix unbalanced G_GNUC_BEGIN_IGNORE_DEPRECATIONS use in soup-session.c (bgo#787166). + SoupCache: fix setting default value for cache dir (bgo#788452). + Updated translations.- Update Url to https://wiki.gnome.org/LibSoup: current LibSoup\'s web page.
* Tue Sep 12 2017 dimstarAATTopensuse.org- Update to version 2.60.0: + Updated translations.
* Tue Aug 15 2017 zaitorAATTopensuse.org- Update to version 2.59.90.1: + Fixed a chunked decoding buffer overrun that could be exploited against either clients or servers (bgo#785774, CVE-2017-2885).- Changes from version 2.59.90: + Several SoupAuthNegotiate compatibility fixes (bgo#783780, bgo#783781). + Include a payload in SoupWebsocketConnection\'s \"ping\" messages (to avoid problems with certain buggy server implementations), and emit a signal when receiving a \"pong\" (to allow apps to notice when the remote peer has disconnected them) (bgo#785660). + Fix the interpretation of wss:// URIs, which previously mostly didn\'t work (bgo#784766). + Fixed SoupContentSniffer behavior on XML files with no Content-Type (webkit#173923). + Fixed a bug with cancelling async requests (bgo#773257). + Reverted the (undocumented) change in 2.58.0 to call soup_session_abort() after changing SoupSession:proxy-resolver; while this made its behavior more consistent with :proxy-uri, it ended up breaking things (bgo#781590). + Allow HTTP responses that have no trailing CRLF after the response headers (and no body) (bgo#780352). + Fixed an out-of-bounds read in SoupURI parsing (bgo#785042). + Fixed a spurious (debug-level) error message in SoupWebsocketConnection (bgo#784935). + Fixed introspection annotations on soup_message_headers_get_content_range(). + Fixed a flake in tests/header-parsing (bgo#777258). + Update tests/test-cert.pem to use stronger algorithms to avoid problems with newer gnutls (bgo#784949). + Fixed examples/get to not accidentally break https certificate validation (bgo#784259). + Misc updates to apache/php stuff in unit tests.
* Mon Aug 14 2017 zaitorAATTopensuse.org- Update to version 2.58.2 (CVE-2017-2885, boo#1052916): + Fixed a chunked decoding buffer overrun that could be exploited against either clients or servers (bgo#785774, CVE-2017-2885).
* Sat May 20 2017 dimstarAATTopensuse.org- Replace krb5-devel BuildRequires with pkgconfig(krb5): This does not exactly reproduce what configure is looking for (it ignores the .pc file) but it helps OBS in chosing between krb5 and krb5-mini, shortening build cycles.
* Wed May 10 2017 zaitorAATTopensuse.org- Update to version 2.58.1: + Reverts a change to SoupSession to close all open connections when the :proxy-resolver property is changed (bgo#777326). This change was made in 2.58.0 but accidentally left out of the NEWS for that release; although that behavior made :proxy-resolver more consistent with :proxy-uri, it ended up breaking Evolution EWS (bgo#781590). + Fixed undefined behavior in tests/header-parsing that could make the test spuriously fail (bgo#777258). + Updates to the configure tests for Apache for use in tests/: - Dropped support for Apache 2.2. - Changed PHP support from PHP 5 to PHP 7. - mod_unixd can now be either built-in or dynamically loaded (bgo#776478). + Updated translations.
* Tue Apr 25 2017 dimstarAATTopensuse.org- Update to version 2.58.0: + Fix authentication issues when the SOUP_MESSAGE_DO_NOT_USE_AUTH_CACHE flag is used (bgo#778497, bgo#777936). + MSVC build improvements. + Updated translations.
* Tue Dec 13 2016 dimstarAATTopensuse.org- Update to version 2.57.1: + Added SoupWebsocketConnection:keepalive-interval, to make a connection send regular pings (bgo#773253). + Added soup_auth_manager_clear_cached_credentials() and SOUP_MESSAGE_DO_NOT_USE_AUTH_CACHE, to allow greater control over the use of cached HTTP auth credentials (bgo#774031, bgo#774033). + Fixed the use of SoupSession:proxy-uri values containing passwords (bgo#772932). + Various minor WebSocket fixes: - Avoid sending data after we start closing the connection (bgo#774957). - Do not log a critical if the peer sends an invalid close status code. - Log a debug message when a \"pong\" is received. + Fix introspection of soup_message_headers_get_content_range(). + Replaced Vala [Deprecated] annotations with [Version] to avoid build warnings (bgo#773177). + MSVC build improvements. + Updated error/message strings to use Unicode punctuation (bgo#772217). + Updated translations.
* Tue Sep 20 2016 zaitorAATTopensuse.org- Update to version 2.56.0: + Added SoupWebsocketConnection:max-incoming-payload-size property, to override the default maximum incoming payload size (bgo#770022). + Added soup-version.h symbols (in particular soup_check_version()) to introspection (bgo#771439). + Updated the copy of the public suffix list used by SoupTLD (bgo#769650). + Updated translations.
* Tue Aug 16 2016 dimstarAATTopensuse.org- Update to version 2.55.90: + Removed support for SSLv3 fallback; sites that reject TLS 1.x handshakes will now just fail with an error (Firefox and Chrome have both already switched to this behavior) (bgo#765940). + Fixed the parsing of s in the new GVariant-based XMLRPC code (bgo#767707). + Fixed soup_server_set_ssl_cert_file(), which was added in 2.48 but didn\'t actually work. + Added GObject properties to SoupLogger to make it bindings-friendly (bgo#768053). + Fixed build error on FreeBSD (bgo#765376). + Fixed build with certain new versions of glibc that define \"EOF\" as a macro (bgo#768731). + Updated m4/ax_code_coverage.m4 with support for lcov 1.12. + Updated po files for future gettext versions. + Updated translations.- Drop libsoup-Prefix-signal-ID.patch: fixed upstream.
* Tue Jul 26 2016 zaitorAATTopensuse.org- Add libsoup-Prefix-signal-ID.patch: Buildfix commit from upstream git.
* Tue Apr 26 2016 zaitorAATTopensuse.org- Update to version 2.54.1: + Fixed an ABI break in 2.54.0 caused by adding a member to SoupAuthClass; 2.54.1 is ABI-compatible with 2.53.92 and earlier, but NOT with the anomalous 2.54.0. If you built packages against 2.54.0, you will need to rebuild them against 2.54.1. + Fixed NTLM authentication when ntlm_auth from the latest version of Samba is present (bgo#765106). + Updates to MSVC build, including for GSS-API support. + Updated translations.- Drop libsoup-auth-ntlm-fix.patch: Fixed upstream.
* Fri Apr 22 2016 zaitorAATTopensuse.org- Add libsoup-auth-ntlm-fix.patch: Fix NTLM auth failure with latest samba (bgo#765106, boo#976110).
* Fri Mar 25 2016 zaitorAATTopensuse.org- Update to version 2.54.0.1: + Fix a build problem with the 2.54.0 tarball, which would not build if you configured with \"--without-gnome\".
* Tue Mar 22 2016 dimstarAATTopensuse.org- Update to version 2.54.0: + Fixed examples/simple-httpd on Windows (bgo758759).
* Tue Mar 15 2016 dimstarAATTopensuse.org- Update to version 2.53.92: + libsoup now supports HTTP \"Negotiate\"/GSSAPI/Kerberos authentication. It must be enabled specifically by the application and is also subject to certain other restrictions, some of which are not yet controllable through the API (bgo#587145). + Added support for building under MSVC (bgo#758759). + Fixed a problem with the 2.53.90 tarball that caused translations to be mis-installed. + Updated translations.- Remove intltoolize call: the tarball has been corrected.- Add krb5-devel BuildRequires: new dependency for krb5 support.- Pass --with-krb5-config=%{_libexecdir}/mit/bin/krb5-config and - -with-gssapi to configure in order to enable krb5 support.
* Tue Feb 16 2016 dimstarAATTopensuse.org- Update to version 2.53.90: + NUL bytes in headers are now ignored (bgo#760832). + Fixed transfer annotation of soup_form_decode
* functions (bgo#743966). + Updated translations.- Call intltoolize before configure in order to fix up the tarball to work with recent versions of intltool.
* Tue Nov 24 2015 zaitorAATTopensuse.org- Update to version 2.53.2: + Fixed up symbol visibility handling for mingw by copying GLib\'s system (bgo#757146). + Finally marked the old SoupSessionAsync and SoupSessionSync methods as deprecated (bgo#757146). + Added libsoup-2.4.deps for valac. + Make it possible to build from git without gtk-doc being installed. + Updated translations.
* Tue Nov 24 2015 zaitorAATTopensuse.org- Update to version 2.53.1: + Really fixed build under MinGW for sure this time. + Fixed SoupServer Web Sockets code so that the SoupClientContext passed to a SoupServerWebsocketCallback is fully usable (rather than crashing when you try to do most things).
* Tue Nov 10 2015 zaitorAATTopensuse.org- Update to version 2.52.2: + Fixed build under MinGW. + Fix SoupServerWebsocketCallback handling so that the SoupClientContext passed to it is still valid. + Added a .deps file to define dependencies for valac.
* Mon Oct 12 2015 zaitorAATTopensuse.org- Update to version 2.52.1: + Fixed build under MinGW. + Fixed build with --disable-introspection (bgo#755389). + Fixed HTTP authentication protection space handling for files directly under the root directory (bgo#755617). + Fixed a warning when loading data from SoupCache while using an authenticated proxy (bgo#756076). + Updated translations.
* Mon Sep 21 2015 dimstarAATTopensuse.org- Update to version 2.52.0: + Removed duplicate test paths from tests/date so it will pass with glib 2.46.0.
* Wed Sep 16 2015 dimstarAATTopensuse.org- Update to version 2.51.92: + Added g_autoptr() support for all libsoup types (bgo#754721). + Added a missing (allow-none) annotation to soup_uri_normalize() (bgo#754776). + Updated translations.
* Mon Aug 17 2015 zaitorAATTopensuse.org- Update to version 2.51.90: + Added a new GVariant-based XMLRPC API, and deprecated the old GValue-based API (along with the associated GValue-manipulating utilities) (bgo#746495). + Multiple build fixes for Visual Studio (bgo#752952). + Added VAPI generation (bgo#750679). + Fixed the mode bits on soup-cookie.c, which was previously marked executable for some reason (rh#1247285). + Updated translations.- Add pkgconfig(vapigen) BuildRequires: New dependency.
* Fri Jun 26 2015 zaitorAATTopensuse.org- Update to version 2.51.3: + Fixed \"make check\" in non-English locales (rh#1224989, bgo#749397). + Fixed some compiler warnings (bgo#748514). + Updated translations.
* Mon Mar 23 2015 dimstarAATTopensuse.org- Update to version 2.50.0: + Updated translations.
* Tue Mar 17 2015 dimstarAATTopensuse.org- Update to version 2.49.92: + Fixed an NTLM problem that caused spurious \"Authentication Failed\" errors in evolution-ews (bgo#735197). + Updated translations.
* Tue Mar 03 2015 dimstarAATTopensuse.org- Update to version 2.49.91.1: + websockets: minor optimization. + websockets: fix 32-bit build. + docs: fix build. + tests: fix when building without glib-networking available.
* Tue Mar 03 2015 dimstarAATTopensuse.org- Update to version 2.49.91: + Libsoup now has support for WebSockets in both SoupSession and SoupServer (bgo#627738). + Added support for NTLMv2 Session Security to SoupAuthNTLM. (This is transparent to the app/user; if the server supports it, it will be used) (bgo#739192). + Added soup_server_accept_iostream() to allow feeding a non-GSocketConnection GIOStream to SoupServer (eg, when accepting HTTP requests on some other sort of connection) (bgo#744186). + Added soup_session_steal_connection() and soup_client_context_steal_connection(), to allow you to steal a GIOStream from a SoupSession or SoupServer and then use it for non-HTTP purposes (bgo#721343). + Added soup_server_add_early_handler(), for adding SoupServer handlers to run at :got-headers time rather than :got-body (eg, to set up a streaming read of the request body) (bgo#625645). + Added a new SOUP_MESSAGE_IGNORE_CONNECTION_LIMITS flag, which can be used to bypass SoupSession:max-conns and SoupSession:max-conns-per-host on a per-message basis (bgo#744720). + Multiple SoupCache fixes: - Leaked resources are now cleaned up when opening the cache (bgo#667682). - The \"Age\" header is no longer added to cached responses (bgo#741108). - Fixed the interpretation of the \"must-revalidate\" directive to not be stricter than required (bgo#744468). - Messages retrieved from cache now behave slightly more like non-cache messages in terms of SoupSession signals and timing (bgo#744788). Additionally, there is a new SoupMessage::starting signal, which is like SoupSession::request-started, but emitted for cached resources as well (bgo#731153). + Fixed soup_session_cancel_message() to work reliably on paused messages (bgo#745094). + Added code-coverage support to the build (bgo#744744). + Fixed the library symbol check in \"make check\" to work when building with linker options that result in slightly different organization (bgo#741348). + Added a hack to SoupSessionFeature so that people will stop re-reporting an old Eclipse bug against libsoup (bgo#710242). + Miscellaneous bug and leak fixes in the test programs, leak fixes in libsoup, and documentation updates. + Updated translations.
* Wed Dec 17 2014 zaitorAATTopensuse.org- Update to version 2.49.1: + Fixed a bug in the SoupMessage:event signal that broke evolution\'s ability to connect to https hosts with \"bad\" certificates (bgo#739951). + Fixed a case where the async codepaths could potentially block on a synchronous write (bgo#727138). + Fixed the symbol soup_server_set_ssl_cert_file() to get exported, and added soup_server_get_uris() to the documentation. + Improved a bunch of introspection annotations (bgo#729987). + Clarified some documentation. + Fixed Windows build, twice (bgo#738003, bgo#738551). + Updated translations.
* Wed Dec 17 2014 zaitorAATTopensuse.org- Update to version 2.48.1: + Fixed a bug in the SoupMessage:event signal that broke evolution\'s ability to connect to https hosts with \"bad\" certificates (bgo#739951). + Fixed a case where the async codepaths could potentially block on a synchronous write (bgo#727138). + Fixed the symbol soup_server_set_ssl_cert_file() to get exported, and added soup_server_get_uris() to the documentation. + Improved a bunch of introspection annotations (bgo#729987). + Clarified some documentation. + Fixed Windows build, twice (bgo#738003, bgo#738551). + Updated translations.