Changelog for pound-debuginfo-2.8-bp155.2.42.x86_64.rpm :

* Fri Apr 26 2019 mvetterAATTsuse.com- bsc#1130588: Require shadow instead of old pwdutils
* Mon Apr 08 2019 Christophe Giboudeaux - Update to 2.8
* removed DynScale flag and support
* removed support for multi-line headers (both input and output)
* CVE-2018-21245: fixed potential request smuggling via fudged headers (boo#1173075)- Add add-openssl_1.1-support.patch to fix bnc#1116061 (Patch from https://github.com/graygnuorg/pound, mentioned here: http://www.apsis.ch/pound/pound_list/archive/2019/2019-02/1550768278000#1550768278000)- Run spec-cleaner
* Wed Oct 31 2018 olafAATTaepfle.de- Fix libopenssl dependency, add openssl
* Wed Jan 31 2018 idonmezAATTsuse.com- Depend on openssl 1.0
* Tue Jan 30 2018 jengelhAATTinai.de- Do not ignore errors from useradd- Fix grammar errors in description
* Tue Jan 30 2018 kbabiochAATTsuse.com- Update to version 2.8a
* removed DynScale flag and support
* fixed potential request smuggling via fudged headers (CVE-2016-10711 boo#1078298)
* Mon Aug 01 2016 joeAATTsuse.com- Corrected path in pound.service file from /usr/bin/pound to /usr/sbin/pound.
* Thu Mar 12 2015 p.drouandAATTgmail.com- Update to version 2.7
* added support for larger DH keys + compile-time parameter for DH bits (workaround for OpenSSL limitation)
* added support for elliptical curve encryption
* added protocol version in X-SSL-cipher
* added \"Disable PROTO\" directives (fix for Poodle vulnerability)
* added Cert, Disable and Cipher directives for HTTPS back-ends. The directive HTTPS \"cert\" no longer supported.
* added filtering of \"Expect: 100-continue\" headers
* Add support for PATCH HTTP method
* Anonymise configuration option - show last client address byte as 0
* SSLAllowClientRenegotiation
* SSLHonorCipherOrder
* Certificate alternate names support
* poundctl shows the length of the request queue
* fixed lh_retrieve warning
* fixed potential memory leak on client certificates
* fixed alt names problem
* removed debugging messages
* fixed address comparison for RewriteLocation (IPv4/IPv6 problem)
* re-patched the redirect patch (Frank Schmierler)
* fixed RPC handling
* sanitize URLs for redirection (prevent CSRF)
* SSL disable empty fragments + SSL disable compression (CRIME attack prevention)
* fixed bug in configuration of DISABLED directive
* changed the log level from WARNING to NOTICE if the thread arg is NULL
* fixed testing of gcc options- Add systemd support for openSUSE > 12.3
* Fri Apr 20 2012 bwiedemannAATTsuse.com- upgrade to version 2.6
* Fri Feb 17 2012 cfarrellAATTsuse.com- license update: SUSE-GPL-3.0+-with-openssl-exception Use SUSE- proprietary prefix until SPDX upstream accepts the license