commit: r1610 - neon/trunk

[joe at manyfish.co.uk]

Author: joe
Date: Thu Nov 20 12:59:09 2008
New Revision: 1610

Modified:
   neon/trunk/NEWS

Log:
* NEWS: Synch with 0.28.x, update to trunk.


Modified: neon/trunk/NEWS
==============================================================================
--- neon/trunk/NEWS	(original)
+++ neon/trunk/NEWS	Thu Nov 20 12:59:09 2008
@@ -1,16 +1,55 @@
+Changes in release 0.29.0:
+* New interfaces:
+ - ne_socket.h: ne_sock_writev() (Julien Reichel), ne_sock_set_error(),
+   ne_iaddr_raw()
+ - added built-in SOCKS v4/v4a/v5 support: ne_socket.h:ne_sock_proxy(),       
+   and ne_session.h:ne_session_socks_proxy()
+ - added support for system-default proxies: ne_session_system_proxy(),
+   implemented using libproxy where available.
+* Other changes:
+ - PKCS#11 now supported with OpenSSL builds
+ - ne_free() implemented as a function on Win32 (thanks to Helge Hess)
+
+Changes in release 0.28.3:
+* SECURITY (CVE-2008-3746): Fix potential NULL pointer dereference in
+  Digest domain parameter support; could allow a DoS by a malicious server
+* Fix parsing of *-Authenticate response header with LWS after quoted value
+* Fix ne_set_progress(, NULL, ) to match pre-0.27 behaviour (and not crash)
+* Fix to disable Nagle on Win32 with newer toolchain (thanks to Stefan Küng)
+* Fix build on Netware (Guenter Knauf)
+* Document existing ne_uri_parse() API postcondition and ne_uri_resolve()
+  pre/postconditions regarding the ->path field in ne_uri structures 
+* Mark ne_{,buffer_}concat with sentinel attribute for GCC >= 4.
+* Distinguish the error message for an SSL handshake which fails after a 
+ client cert was requested.
+* Compile with PIC flags by default even for static library builds
+
+Changes in release 0.28.2:
+* Support "Proxy-Connection: Keep-Alive" for compatibility with HTTP/1.0
+ proxies which require persistent connections for NTLM authentication
+* Fix an fd leak in ne_ssl_{,cli}cert_read (GnuTLS only)
+* Enable fast initialization in GnuTLS.
+
+Changes in release 0.28.1:
+* Fix Win32 build
+* Fix build on SCO OpenServer 5.0.x (thanks to Nico Kadel-Garcia)
+* Fix handling of Digest domain parameter values without a trailing slash
+* Fix build against apr-util's bundled libexpat.la in Subversion
+* Add --without-pakchois to configure (Arfrever Frehtes Taifersar Arahesis)
+* zh message catalog renamed to zh_CN, translation updated (Dongsheng Song)
+
 Changes in release 0.28.0:
 * Interface changes:
- - ne_acl.h: changed ne_acl_entry struct fields; apply->target,
-   principal->tname; all principles set via single "principles" 
-   bitfield using NE_ACL_* constants, inverting old logic (Henrik Holst)
+ - none, API and ABI backwards-compatible with 0.27.x
 * New interfaces:
+ - ne_pkcs11.h: added basic PKCS#11 support (requires GnuTLS and pakchois)
  - ne_auth.h: added NE_AUTH_ALL and NE_AUTH_DEFAULT constants
  - ne_socket.h: added ne_sock_peer(), ne_sock_prebind(), ne_sock_cipher()
- - ne_session.h: NE_SESSFLAG_TLSSNI flag added; ne_set_localaddr() added
- - ne_pkcs11.h: added basic PKCS#11 support (requires GnuTLS and pakchois)
+ - ne_session.h: NE_SESSFLAG_TLSSNI flag added; TLS SNI support is enabled
+   by default, where supported; ne_set_localaddr() added
+ - ne_request.h: added close_conn hooks (Robert J. van der Boon)
  - ne_basic.h: added ne_options2()
 * Other changes:
- - add TLS SNI support and enabled by default (where supported)
  - add Polish (pl) translation (Arfrever Frehtes Taifersar Arahesis)
  - add support for the 'domain' parameter in Digest authentication
  - fix fd leak in ne_sock_connect() error path (Andrew Teirney)
@@ -25,6 +64,15 @@
  - Win32: fix neon.mak to not double-quote $(MAKE) (Henrik Holst)
  - improve strength of Digest cnonces in GnuTLS builds
 
+Changes in release 0.27.2:
+* Fix crash in GSSAPI Negotiate response header verification (regression
+  since 0.26.x)
+
+Changes in release 0.27.1:
+* Fix regression in response progress counter for notifier/progress callbacks
+* Fix interface description for ne_set_notifier() callback; sr.total
+  is set to -1 not 0 for an indeterminate response length
+
 Changes in release 0.27.0:
 * New interfaces:
  - ne_session.h: ne_fill_proxy_uri() retrieves configured proxy,