Changelog for
pound-debugsource-2.8a-lp150.1.16.x86_64.rpm :
* Wed Jan 31 2018 idonmezAATTsuse.com- Depend on openssl 1.0
* Tue Jan 30 2018 jengelhAATTinai.de- Do not ignore errors from useradd- Fix grammar errors in description
* Tue Jan 30 2018 kbabiochAATTsuse.com- Update to version 2.8a
* removed DynScale flag and support
* fixed potential request smuggling via fudged headers (CVE-2016-10711 boo#1078298)
* Mon Aug 01 2016 joeAATTsuse.com- Corrected path in pound.service file from /usr/bin/pound to /usr/sbin/pound.
* Thu Mar 12 2015 p.drouandAATTgmail.com- Update to version 2.7
* added support for larger DH keys + compile-time parameter for DH bits (workaround for OpenSSL limitation)
* added support for elliptical curve encryption
* added protocol version in X-SSL-cipher
* added \"Disable PROTO\" directives (fix for Poodle vulnerability)
* added Cert, Disable and Cipher directives for HTTPS back-ends. The directive HTTPS \"cert\" no longer supported.
* added filtering of \"Expect: 100-continue\" headers
* Add support for PATCH HTTP method
* Anonymise configuration option - show last client address byte as 0
* SSLAllowClientRenegotiation
* SSLHonorCipherOrder
* Certificate alternate names support
* poundctl shows the length of the request queue
* fixed lh_retrieve warning
* fixed potential memory leak on client certificates
* fixed alt names problem
* removed debugging messages
* fixed address comparison for RewriteLocation (IPv4/IPv6 problem)
* re-patched the redirect patch (Frank Schmierler)
* fixed RPC handling
* sanitize URLs for redirection (prevent CSRF)
* SSL disable empty fragments + SSL disable compression (CRIME attack prevention)
* fixed bug in configuration of DISABLED directive
* changed the log level from WARNING to NOTICE if the thread arg is NULL
* fixed testing of gcc options- Add systemd support for openSUSE > 12.3
* Fri Apr 20 2012 bwiedemannAATTsuse.com- upgrade to version 2.6
* Fri Feb 17 2012 cfarrellAATTsuse.com- license update: SUSE-GPL-3.0+-with-openssl-exception Use SUSE- proprietary prefix until SPDX upstream accepts the license
* Thu Apr 22 2010 meissnerAATTsuse.de- fixed openssl 1.0 build with patch from redhat.
* Thu Aug 06 2009 joeAATTnovell.com- update to version 2.4.5 (various bug fixes, enhancements in xHTTP 3 and 4 support)
* Tue Aug 19 2008 joeAATTsuse.de- update to version 2.4.3 (various bug fixes, no new features)
