File _service:tar_scm:libmicrohttpd.changes of Package libmicrohttpd

Overview Repositories Revisions Requests Users Attributes Meta

File _service:tar_scm:libmicrohttpd.changes of Package libmicrohttpd (Revision e6498c752af1a3a609e39a3a67d8a59a)

Currently displaying revision e6498c752af1a3a609e39a3a67d8a59a , Show latest

-------------------------------------------------------------------
Tue Jan 09 06:13:09 UTC 2024 - obs-service-tar-scm@invalid

- Update to version 0.9.x+git.20240105T135826~bcfdf01:
  * Docs correction as suggested by Aymeric Agon-Rambosson in ML
  * test_upgrade{,_large}{,_tls}: unified code, removed workarounds, added new test
  * MHD_OPTION_CONNECTION_MEMORY_{LIMIT,INCREMENT}: added ignore of zero value
  * test_upgrade: changed the order of send/receive
  * connection.c: muted false-positive compiler warning
  * daemon: one-line comment formatting
  * initialize required_bytes on all code paths to avoid false-positive compiler warning
  * test_digestauth_concurrent: fixed error message
  * configure: implemented setting DAuth defaults by parameters
  * tests: added setting of DAuth max nc value by daemon option

-------------------------------------------------------------------
Tue Feb 28 21:20:34 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>

- libmicrohttpd 0.9.76
  * CVE-2023-27371: Fix potential DoS vector in MHD_PostProcessor
    (boo#1208745)

-------------------------------------------------------------------
Mon Dec 27 09:52:13 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>

- libmicrohttpd 0.9.75:
  * fixes for where "monotonic" clock may jump back

-------------------------------------------------------------------
Mon Dec 20 19:41:33 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>

- libmicrohttpd 0.9.74:
  * new experimental implementation of WebSockets disabled by default
  * improved compliance with the RFC HTTP specifications
  * new implementation of reply header forming
  * new implementation of request chunked encoding parsing
  * new automatic error replies
  * Keep-alive header is omitted by default for HTTP/1.1 connections.
    Use of header can be enforced by response flag.
  * Chunked encoding is used for HTTP/1.1 non-keep-alive connections
    for responses with unknown size. Previously MHD used "indication
    of the end of the response by closing connection" in such cases,
    however it is not correct for HTTP/1.1 connections as per HTTP
    RFC.
  * As required by HTTP RFC, use HTTP/1.1 version instead of HTTP/1.0
    in reply headers when client is HTTP/1.0 . HTTP/1.0 version can
    be enforced by response flag.
  * User response headers are used in replies in the same order as
    was added by application.
  * Allowed tab characters in response header values.
  * All custom "Connection:" response headers are automatically
    combined into single "Connection:" header.
  * "keep-alive" token silently dropped from custom "Connection:"
    response header. "Keep-alive" cannot be enforced and used
    automatically if possible.
  * Allow tab character in custom response header value.
  * Disallow space character in custom response header value.
  * Do not allow responses with 1xx codes for HTTP/1.0 requests.
  * Detected and reported incorrect "Upgrade" responses.

-------------------------------------------------------------------
Tue May 18 09:54:14 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>

- libmicrohttpd 0.9.73:
  * new function for vector-backed responses
  * compatibility with autoconf 2.70+
  * Implement ALPN support

-------------------------------------------------------------------
Tue Dec 29 13:25:29 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>

- libmicrohttpd 0.9.72:
  * improved performance with stay-alive HTTP and HTTPS connections
  * bug fixes
- remove deprecated texinfo macros

-------------------------------------------------------------------
Sat Jul  4 17:40:48 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>

- libmicrohttpd 0.9.71:
  * Fix buffer overflow issue in URL parser [boo#1173718]
  * Fixed PostProcessor bug
  * Documentation and example fixes

-------------------------------------------------------------------
Sun Feb  9 10:15:21 UTC 2020 - Martin Hauke <mardnh@gmx.de>

- Update to 0.9.70:
  * Fixed 100-continue handling for PATCH method
  * Fixed FTBFS from wrong #endif position for certain builds
  * Fixed connection overflow issue when combining
    MHD_USE_NO_LISTEN_SOCKET with MHD_USE_THREAD_PER_CONNECTION
  * Updated m4 script to fix FTBFS when using
    -Werror=unused-but-set-parameter
  * Adding fix for urlencoding of keys without values in
    post-processor logic.
  * Adding patch from Ethan Tuttle with test case for urlencoding
    in post-processor for keys without values.

-------------------------------------------------------------------
Sun Dec 15 18:50:33 UTC 2019 - Martin Hauke <mardnh@gmx.de>

- update to 0.9.69:
  * If application suspends a connection before we could send
    100 CONTINUE, give application another shot at queuing a reply
    before the upload begins.

-------------------------------------------------------------------
Tue Nov  5 08:20:42 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>

- update to 0.9.68:
  * Fix regression where MHD would fail to return an empty response
    when used with HTTPS.
  * Introduce MHD_RF_INSANITY_HEADER_CONTENT_LENGTH
- drop libmicrohttpd-0.9.67-fix-nonvoid-return.patch, in release

-------------------------------------------------------------------
Thu Oct 24 19:45:52 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>

- update to 0.9.67:
  * improvements that eliminate system and C library calls
- drop libmicrohttpd-0.9.66-fix-gnutls-dependency.patch, upstream
- add libmicrohttpd-0.9.67-fix-nonvoid-return.patch from upstream

-------------------------------------------------------------------
Fri Aug  2 13:53:59 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>

- fix build with SLE 12 with older GnuTLS:
  * libmicrohttpd-0.9.66-fix-gnutls-dependency.patch

-------------------------------------------------------------------
Fri Aug  2 10:53:30 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>

- update to 0.9.66:
  * Fix issue with discarding unhandled upload data discovered
  * Fix hanging situation with large transmission over upgraded
    (i.e. Web socket) connection with epoll() and HTTPS enabled
  * Add MHD_OPTION_HTTPS_CERT_CALLBACK2 to allow OCSP stapling
    and MHD_FEATURE_HTTPS_CERT_CALLBACK2 to check for
- clean up build dependency list

-------------------------------------------------------------------
Sat Jul  6 11:02:36 UTC 2019 - Martin Hauke <mardnh@gmx.de>

- Update to versin 0.9.65:
  * Many fixes and improvements for connection-specific memory pool
  * Better handled connection's memory shortage situations:
    + error response could be sent to client even if all buffer
      space was used;
    + if buffer space become low when receiving, do not allocate
      last buffer space and use small receive blocks instead.
  * Improved sending speed by using all available buffer space for
    sending.

-------------------------------------------------------------------
Mon Jun 10 14:06:44 UTC 2019 - Martin Hauke <mardnh@gmx.de>

- Update to version 0.9.64:
  * Updated HTTP headers, methods and status codes from registries,
  * Added scripts to import new headers, methods and status codes
    from registries.
  * Reodered includes in microhttpd.h
  * Fixed compiler warnings
  * Updated and fixed libcurl tests.
  * Added checks for too long TLS parameters strings.
  * Spelling fixes.
  * Fixed example for non-64bits platforms.
  * Optimized and improved processing speed by using precalculated and
    already calculated lengths of strings.
  * Store connection's keys and values with sizes;
  * Speedup keys search be comparing key length first;
  * Added functions for working with keys and values with binary zeros;
  * Fixed test_postprocessor_amp to fail on problems.
  * Reverted change of MHD_KeyValueIterator, implemented
    MHD_KeyValueIteratorN with sizes for connection's key and value to
    get keys and values with binary zeros.
  * Fixed signed/unsigned comparison in example
    http_chunked_compression.c.
  * Bit manipulations moved to separate header file.
  * Improved shell compatibility for 'bootstrap', removed bash-ism.
  * Adding additional "value_length" argument to MHD_KeyValueIterator
    callback to support binary zeros in values.  This is done in a
    backwards-compatible way, but may require adding a cast to
    existing code to avoid a compiler warning.
  * Added example for how to compress a chunked HTTP response.

-------------------------------------------------------------------
Sun Feb 10 22:00:54 UTC 2019 - mardnh@gmx.de

- Update to version 0.9.63:
  * Extended test_get to test URI logging and query string parsing
    to avoid regression fixed in previous patch in the future.
  * Preliminary patch for the raw query string issue, to be tested.
  * Added minimal example for how to compress HTTP response.
  * Check for GNUTLS_E_AGAIN instead of GNUTLS_E_INTERRUPTED when
    giving up on a TLS connection. -LM/CG
  * Fix connection timeout logic if in thread-per-connection mode the
    working thread takes longer than the timeout to queue the response.
  * Add logic to avoid VLA arrays with compilers that do not support them.
  * Fixed missing WSA_FLAG_OVERLAPPED which can cause W32 to block on
    socket races when using threadpool. (See very detailed description
    of the issue in the libmicrohttpd mailinglist post of today.)
  * Added test for RFC 7616 and documented new API.
- Update to version 0.9.62:
  * Added test for RFC 7616 and documented new API.
  * Adding support for RFC 7616, experimental, needs
    testing and documentation still!
  * Add option to build MHD without any threads
    and MHD_FEATURE_THREADS to test for it.
  * Renamed all occurrences from _model(s)_ to _mode(s)_.
  * Optimized the function MHD_create_response_from_callback() for
    Windows by increasing its internal buffer size and allowed to
    customize it via macro MHD_FD_BLOCK_SIZE.
  * Referenced the gnutls_load_file() function in the HTTPs examples.
  * Fix regression causing URLs to be unescaped twice.

-------------------------------------------------------------------
Fri Dec  7 13:28:42 UTC 2018 - malte.kraus@suse.com

- Update to version 0.9.61:
  * parse arguments with (properly) escaped URLs correctly. Replace
    sprintf with snprintf in testcases.
  * Fix build issue with GnuTLS < 3.0.
  * Add MHD_create_response_from_buffer_with_free_callback.
- Update to version 0.9.60:
  * gettext updated to 0.19.8
  * can use epoll() without listen socket now
  * in thread-per-connection mode, socket closure is now
    communicated in a timely fashion to the application
  * added MHD_RF_HTTP_VERSION_1_0_RESPONSE option
  * preventing bogus transfer-encoding values
  * Added MHD_OPTION_GNUTLS_PSK_CRED_HANDLER
  * allow digest authentication with hashed password
  * ensure request completed callback is called from correct thread
    and also for upgraded connections

-------------------------------------------------------------------
Mon Feb 26 19:05:14 UTC 2018 - mardnh@gmx.de

- Update to version 0.9.59:
  * Fix masking operation.
  * Fix deadlock when failing to prepare chunked response
  * Fix __clang_major__ related warnings for non-clang compilers.
  * Fixed tests on platforms with huge number of CPUs.
  * Doxygen configuration was updated.
  * Various doxygen fixes.

- Update to version 0.9.58:
  * Fixed HTTPS tests on modern platforms.
  * Minor documentation installation fixes.
  * Tolerate AF_UNIX when trying to determine our binding port
    from socket.  Use `sockaddr_storage` instead of trying to
    guess the sockaddr type before calling getsockname().

-------------------------------------------------------------------
Fri Dec  1 14:05:56 UTC 2017 - tchvatal@suse.com

- Install copying

-------------------------------------------------------------------
Thu Nov 30 15:01:33 UTC 2017 - mpluskal@suse.com

- Update to version 0.9.57:
  * See provided Changelog for details
- Drop no longer needed patches:
  * libmicrohttpd_test_data.patch
  * disable-stalling-test.patch

-------------------------------------------------------------------
Mon May 29 09:38:20 UTC 2017 - tchvatal@suse.com

- Version update to 0.9.55 bsc#1041216:
  * See provided Changelog for details

-------------------------------------------------------------------
Mon May 15 11:49:20 UTC 2017 - mpluskal@suse.com

- Update licensing information

-------------------------------------------------------------------
Thu May 11 08:15:24 UTC 2017 - mpluskal@suse.com

- Update to version 0.9.54:
  * See provided Changelog for details

-------------------------------------------------------------------
Thu Apr 13 17:02:21 UTC 2017 - mpluskal@suse.com

- Update to version 0.9.53:
  * See provided Changelog for details
- Refresh patch:
  * libmicrohttpd_test_data.patch

-------------------------------------------------------------------
Wed Mar  8 13:17:21 UTC 2017 - tchvatal@suse.com

- Do not abort on failing tests, as they randomly fail quite a lot
  bsc#1012840

-------------------------------------------------------------------
Mon Dec 12 11:03:32 UTC 2016 - tchvatal@suse.com

- Version update to 0.9.52:
  * See provided Changelog for details
- Refresh patch:
  * disable-stalling-test.patch

-------------------------------------------------------------------
Fri Jun  3 08:23:38 UTC 2016 - mpluskal@suse.com

- Update to version 0.9.50:
  * See provided Changelog for details

-------------------------------------------------------------------
Thu Apr 14 18:10:40 UTC 2016 - mpluskal@suse.com

- Update to 0.9.49
  * See provided Changelog for details
- Fix typo in previous changelog entry
- Refresh patches
- Use pkgconfig style dependencies

-------------------------------------------------------------------
Sun Dec 20 09:24:05 UTC 2015 - mpluskal@suse.com

- Update to 0.9.48
  * Improved compatibility with VS2010 and other older compilers.
  * Default backlog size for listen socket was changed from 32 to 
		SOMAXCONN, added new option MHD_OPTION_LISTEN_BACKLOG_SIZE to 
		override default backlog size.
  * If not all connections can be handled by MHD_select() than at 
		least some of connections will be processed instead of failing 
		without any processing.
  * Fixed redefenition of FD_SETSIZE on W32 so select() will work 
		with 2000 connections instead of 64.
  * Better handled redefenition of FD_SETSIZE on all platforms.
  * Close sockets more aggressively in multi-threaded mode 
		(possibly relevant for idle servers).
- Update dependencies

-------------------------------------------------------------------
Sat Dec  5 09:22:32 UTC 2015 - mpluskal@suse.com

- Update to 0.9.47
	* Reworked VS project files. Used x64 build tools by
  	efault, many optimizations, fixes.
  	dded project files for VS 2015. -EG
  * SPDY is dead, killing experimental libmicrospdy. -CG
  * New logic for controlling socket buffer modes.
 		Eliminated delay before last packet in response and before
  	"100 Continue" response on all platforms. Also response
  	header are pushed to client without waiting for response
  	body. -EG
  * Remove 200ms delay observable with keep-alive on Darwin
	  and *BSD platfroms. -EG
  * Fix issue with shutdown if connection was resumed just
  	before shutdown. -FC
- Update dependencies

-------------------------------------------------------------------
Fri Nov 13 14:01:04 UTC 2015 - mpluskal@suse.com

- Enable http2/spdy
- Don't build examples as we don't ship them anyway
- Disable tests as linking fails for them with spdy enabled

-------------------------------------------------------------------
Tue Nov 10 14:23:58 UTC 2015 - mpluskal@suse.com

- Update to 0.9.46
  * Undoing change from Sun Oct 25 15:29:23 CET 2015 as the 
		original code was counter-intuitive but correct, and the new 
		code does break pipelining. Ignore empty lines at the beginning 
		of an HTTP request (more tolerant implementation).

-------------------------------------------------------------------
Sun Nov  1 11:44:58 UTC 2015 - mpluskal@suse.com

- Update to 0.9.45
  * Rework deprecation maros: fix errors with old GCC versions, 
		improved support for old clang and new GCC. -EG
  * Return correct header kind in MHD_get_connection_values()
    even if a bitmask is used for the "kind" argument. -FC/CG
  * Fixing transient resource leak affecting long-lived
    connections with many keep-alives and HTTP request
    pipelining under certain circumstances (which reduced
    the receive window).
  * Fixed assertion failure triggered by a race in
    thread-per-connection mode on shutdown in rare
    circumstances. -CG
  * Deduplicate code between digestauth and connection
    parsing logic for URI arguments, shared code moved
    to new MHD_parse_arguments_ function in internal.c. -CG

-------------------------------------------------------------------
Fri Oct  2 12:33:17 UTC 2015 - mpluskal@suse.com

- Update to 0.9.44
  * Various fixes for W32 VS project files.
  * Fix digest authentication with URL arguments where value-less 
    keys are given before the last argument.
  * Do not use shutdown() on listen socket if 
    MHD_USE_PIPE_FOR_SHUTDOWN is set.

-------------------------------------------------------------------
Sat Sep 19 10:43:28 UTC 2015 - mpluskal@suse.com

- Update to 0.9.43
  * Call resume_suspended_connections() when the user is running
    its own mainloop and calls MHD_run_from_select() to support
    resuming connections with external select. -FC
  * Correct documentation as to when MHD_USE_EPOLL_LINUX_ONLY
    is allowed. -CG
  * Reimplement monotonic clock functions for better
    support various platforms.
    Print more information during configure. -EG
  * Export MHD_get_reason_phrase_for() symbol. -CG
  * Added checks for overflows and buffer overruns, fixed
    possible buffer overrun. Updated md5 implementation.
    Fixed many compiler warning (mostly for VC compiler). -EG
  * Fix failure to properly clean up timed out connections
    if running in external select mode without listen socket,
    which caused busy waiting until new connections arrived.
    (Fixes #3924, thanks to slimp for reporting and testcase). -CG
  * Ignore close() errors on sockets except for EBADF,
    fixes #3926. -CG
  * Make sure to decrement connection counter before
    calling connection notifier so that
    MHD_DAEMON_INFO_CURRENT_CONNECTIONS does not
    present stale information (relevant if this is
    used for termination detection of a daemon
    stopped via MHD_quiesce_daemon()). Thanks to
    Markus Doppelbauer for reporting. -CG
  * Fix (automatic) handling of HEAD requests with
    MHD_create_response_from_callback() and HTTP/1.1
    connection keep-alives. Thanks to Cristian Klein
    for reporting. -CG
  * Add new functions MHD_create_response_from_fd64() and
    MHD_create_response_from_fd_at_offset64(). -EG
  * Fixing memory leak in digest authentication. -AW
  * Add deprecation compiler messages for deprecated functions
    and macros. -EG
  * Fixing digest authentication when used in combination
    with escaped characters in URLs. -CG/AW
- Disable spdy support for now as spdylay is missing  
- Drop libmicrohttpd_test_session.patch as it is fixed now

-------------------------------------------------------------------
Wed Jul 15 16:42:35 UTC 2015 - matwey.kornilov@gmail.com

- fux build for SLES11:
 * explicitly require libgnutls-devel in -devel package

-------------------------------------------------------------------
Mon Jul 13 13:01:26 UTC 2015 - matwey.kornilov@gmail.com

- fix build for SLES11:
 * update disable-stalling-test.patch: Instead of disabling testcase
   in Makefile disable testcases in code, this could be even better
   we can disable only broken test but not the whole testcase.
 * add libmicrohttpd_test_session.patch: Disable test relying on
   available libcurl version
   (see https://gnunet.org/bugs/view.php?id=3893 for details) 
 * wrap libmicrosdpy into macro to disable building on
   systems with openssl < 1.0.1
- update to 0.9.42:
 * fix off-by-one in MHD_start_daemon_va() error handling logic
 * fix #3784: actually implement MHD_CONNECTION_INFO_SOCKET_CONTEXT

-------------------------------------------------------------------
Sun May  3 10:26:32 UTC 2015 - astieger@suse.com

- update to 0.9.41:
 * fix bugs relating to various threading modes
 * fix some HTTP 1.0 tests

-------------------------------------------------------------------
Mon Apr 13 11:39:23 UTC 2015 - meissner@suse.com

- updated to 0.9.40
  - Fix potential deadlock issue in MHD_USE_THREAD_PER_CONNECTION
    mode if shutdown is initiated while connections are active. -CG

- Fix issue in thread-pool mode where a MHD_stop_daemon()
    might not reach threads that stopped listening because
    we hit the maximum number of concurrent connections and
    the option MHD_USE_PIPE_FOR_SHUTDOWN was also not used.
    Testcase added as well. -CG

- Update HTTPS testcases to avoid SSLv3, as SSLv3 is dead.

- Do not enforce FD_SETSIZE-limit on worker control
    pipe when using MHD_USE_EPOLL_LINUX_ONLY (#3751). -MH/CG

- Adding MHD_OPTION_NOTIFY_CONNECTION,
    MHD_CONNECTION_NOTIFY_STARTED,
    MHD_CONNECTION_NOTIFY_CLOSED and
    MHD_CONNECTION_INFO_SOCKET_CONTEXT to allow
    applications to trigger operations when TCP
    connections start or end, instead of just
    exposing HTTP requests starting and ending. -RG/CG

- Fixing bug that prevented MHD_OPTION_HTTPS_MEM_DHPARAMS
    from working within a MHD_OPTION_ARRAY. -DD

- Adding MHD_OPTION_HTTPS_KEY_PASSWORD as proposed by
    Andrew Basile. -CG/AB

- Fix issue where for HTTP/1.0-clients that set
    Connection: Keep-Alive header a response of
    indefinite size was generated with chunked encoding. -CG

- Fix potential infinite loop on shutdown in multi-threaded mode
    under certain conditions. -CG
- fixed info deinstall

-------------------------------------------------------------------
Thu Jan  8 08:48:47 UTC 2015 - meissner@suse.com

- libmicrohttpd.keyring: replaced maintainers keyring by new one with:
  pub  4096R/E29FC3CC 2014-12-09
  uid                            Christian Grothoff <grothoff@gnunet.org>
  uid                            Christian Grothoff <christian@grothoff.org>
  uid                            Christian Grothoff <christian.grothoff@inria.fr>
  sub  4096R/117E1AFB 2014-12-09

-------------------------------------------------------------------
Wed Jan  7 13:44:46 UTC 2015 - prusnak@opensuse.org

- updated to 0.9.39
- dropped libmicrohttpd-0.9.34-spdy-pc.patch (included upstream)

-------------------------------------------------------------------
Thu May  8 14:00:36 UTC 2014 - meissner@suse.com

- do not define test_data before system header inclusion, libgcrypt
  uses this as argument parameters. (libmicrohttpd_test_data.patch)

-------------------------------------------------------------------
Mon Apr 28 07:23:50 UTC 2014 - coolo@suse.com

- disable problematic test case that causes the testsuite to deadlock
  just too often (disable-stalling-test.patch)

-------------------------------------------------------------------
Thu Apr 24 07:32:10 UTC 2014 - dmueller@suse.com

- remove dependency on gpg-offline, source validator already
  does that

-------------------------------------------------------------------
Mon Apr 21 06:44:06 UTC 2014 - tchvatal@suse.com

- Version bump to 0.9.34:
  * Drop tls patch seems to build fine
  * Remove code for other distros we build against 13.1+ anywhere
    within obs and it just clutters the spec.
  * Explicitely name switches in configure to make sure things go
    the desired way.
  * Fix install of libmicrohttpspdy pc file.
  + Added support for TCP FASTOPEN.
  + Removed dependency on plibc for simpler compilation for W32.
  + Added configure option "--disable-pipes" to use socketpairs
    instead of pipes for signalling to child threads. Pipes are
    always disabled on W32.
  + Corrected some uses of 'int' vs. 'size_t'.
  + MHD_USE_DUAL_STACK in libmicrohttpd currently just *inhibits
    setting* the IPV6_V6ONLY socket option, but per Microsoft's
    documentation the default on Windows is that this is enabled, thus
    MHD_USE_DUAL_STACK will not work (since it leaves the
    default). libmicrohttpd should probably just unconditionally set
    IPV6_V6ONLY to the desired value when the option is available.
  + Allow Keep-Alive with HTTP 1.0 (if explicitly requested),
    and automatically set "Connection: Keep-Alive" in response
    in this case as well.
  + Adding explicit annotations to hide symbols that are not for
    export in the C code (gcc 4.0 or higher only).
  + Adding a few lines to avoid warnings from picky compilers.

- Added patches:
  * libmicrohttpd-0.9.34-spdy-pc.patch
- Dropped patches:
  * libmicrohttpd-drop-test_tls_options.patch

-------------------------------------------------------------------
Tue Mar  4 12:42:30 UTC 2014 - coolo@suse.com

- do not run checks in parallel - they deadlock from time to time
- enable make debug to debug the problem on OBS in case it reappears

-------------------------------------------------------------------
Mon Jan 27 19:52:38 UTC 2014 - sleep_walker@suse.cz

- refresh libmicrohttpd-drop-test_tls_options.patch
  - add there also ignoring test_https_sni
- Update to 0.9.33 bsc#854443 CVE-2013-7038 CVE-2013-7039
  + Fixed an issue with a missing argument in the postexample.
  + Fixed issue with bogus offset increment involving sendfile on
    GNU/Linux.  Adding support for SNI.
  + Fix for per-worker daemon pipes enabled with
    MHD_USE_SUSPEND_RESUME that were not closed in MHD_stop_daemon.
  + Fixing warnings and build issue if --disable-https is given to
    configure.
  +
  0.9.32:
  + Security fix: do not read past 0-terminator when unescaping
    strings (thanks to Florian Weimer for reporting).
  + Signaling n times for shutdown works, but for resume we need to
    wake up the correct daemon. Even if we signal n times in
    that case also, there's no guarantee that some daemon can't
    run through its select loop more than once before the
    daemon we want to wake up gets a chance to read.  Thus we
    need a signal pipe per thread in the thread pool IF
    MHD_suspend_connection is used.  This introduces a new flag
    MHD_USE_SUSPEND_RESUME to add those additional pipes and
    only allow MHD_suspend_connection to be used in conjunction
    with this flag.

Also, as MHD_resume_connection() will be called on a
    non-daemon thread, but none of the queue insert/delete
    calls are thread safe, we need to be concerned about (a)
    corrupting the queue, and (b) having to add mutex
    protection around every access to the queues, including
    loops through timer queues, etc. This wasn't a problem
    before adding resume; even suspend should be safe since it
    happens in a callback from the daemon.

I think it's easier to (a) have MHD_suspend_connection() move
    the connection to a suspended queue, (b) have
    MHD_resume_connection() mark the connection as resuming,
    and then (c) do all the actual queue manipulations in
    MHD_select (poll, epoll, etc.) to move the resumed
    connections back to their normal queues, in response to the
    wake up. The changes are simpler & cleaner. There is a cost
    to the basic select loop that is avoided by making
    suspend/resume a startup option. The per-worker pipes can
    then also be enabled only with that option set.
  + Eliminating theoretical stack overflow by limiting length
    of URIs in authentication headers to 32k (only applicable
    if the application explicitly raised the memroy limits,
    and only applies to MHD_digest_auth_check). Issue was
    reported by Florian Weimer.
  + Fix race on shutdown signal with thread pool on non-Linux
    systems by signalling n times for n threads.
  + Introduce state to mark connections in suspended state (with
    epoll); add missing locking operations in MHD_suspend_connection.
  + Fix definition of MHD_TLS_CONNECTION_INIT.
  + Fixing issue in PostProcessor when getting partial boundary
    at the beginning, expanding test suite.
  + Implementing faster processing of upload data in multipart
    encoding (thanks to performance analysis by Adam Homolya).
  + Adding support for connection flow control via
    MHD_suspend_connection and MHD_resume_connection.
  0.9.31:
  + Fixing build issues on OS X with CLOCK_MONOTONIC not being
    implemented on OS X.
  + Make libmicrohttpd play nicely with upcoming libgcrypt 1.6.0.
  + Improved configure checks for cURL.
  + Signal connection termination as OK (and not as ERROR) if the
    stream was terminated by the callback returning
    MHD_CONTENT_READER_END_OF_STREAM. Also, release response
    mutex before calling the termination callback, to avoid
    possible deadlock if the client destroys the response in
    the termination callback (due to non-recursiveness of the
    lock).
  + Adding #define MHD_HTTP_HEADER_ACCESS_CONTROL_ALLOW_ORIGIN.
  + Also pass MHD connection handle in URI log callback.
  + Improved check for proper OpenSSL version for
    libmicrospdy.
  + Set IPV6_V6ONLY socket option correctly when IPv6 is
    enabled (MHD_USE_IPv6) but not dual stack
    (MHD_USE_DUAL_STACK)

-------------------------------------------------------------------
Thu Oct  3 12:59:19 UTC 2013 - mvyskocil@suse.com

- Update to 0.9.30
  + implements the "SHOULD" clause of RFC 2616 section 8.1.4, which
    may reduce bandwidth consumption when clients cancel requests.
  + fixes build errors with various combinations of operating systems,
    libc versions, and configure flags.
  + fixes a use-after-free crash when using epoll() in combination with
     read errors
  0.9.29:
  + epoll can now also be used with SSL connections
  + following recent HTTP/1.1 clarfications, MHD no longer send
    a "Content-length" header in CONNECT responses.
  + the "MHD_add_connection" call now consistently sets an "errno"
    value to indicate the cause of errors.
    Connections added this way are now always processed immediately.
  + fixes a recently-introduced bug which prevented HTTP pipelining
    from working properly in some cases and a build error in
    conjunction with the "--disable-messages" configure option.
- Enable build of (experimental) SPDY support.

-------------------------------------------------------------------
Wed Jul 24 10:18:44 UTC 2013 - mvyskocil@suse.com

- Update to 0.9.28
  + support for epoll-based event loops (Linux-only)
  + various new options:
    - MHD_USE_DUAL_STACK for binding to IPv4 and IPv6 at the same time
    - MHD_USE_PIPE_FOR_SHUTDOWN to cleanly support MHD_quiesce_daemon on
      non-Linux systems
    - MHD_CONNECTION_INFO_CONNECTION_FD to allow COMET applications to
      disable TCP Nagle
    - MHD_OPTION_CONNECTION_MEMORY_INCREMENT for better control over
      buffer size allocations
  + and fixes various minor bugs

-------------------------------------------------------------------
Thu Jun  6 08:15:30 UTC 2013 - mvyskocil@suse.com

- drop test_tls_options if build is in OBS
  libmicrohttpd-drop-test_tls_options.patch

-------------------------------------------------------------------
Wed Jun  5 16:42:38 UTC 2013 - jengelh@inai.de

- More robust make install call
- Remove redundant %clean section
- Requires(pre) is useless without a %pre script

-------------------------------------------------------------------
Thu May 16 07:42:59 UTC 2013 - mvyskocil@suse.com

- Update to 0.9.27
  + performance improvements for POST processing
  + new API call to reduce the number of select calls (if in "external"
    select mode)
  + new function to allow applications to stop MHD from processing new
    incoming connections while finishing ongoing requests
  + fixes an initialization problem on some platforms
  + fixes bug in the postprocessor's URL parser.
  + SSL connections are no longer dropped if the system uptime is less
    than the connection timeout
  + allows creating responses with zero bytes using
    MHD_create_response_from_callback.
  + few "const" statements have been added to allow keeping more static
    strings in ROM.
  + post processor now tolerates uploads which don't contain "\r\n" and
    also returns keys which don't have a matching value
  + fixes the loss of a parameter in processing POST data from IE8 and
    Chrome. It automatically sets a "Connection: close" header if the
    client requests the connection to be closed. Finally, given both
    'chunked' encoding and 'content-length', MHD now ignores the
    'content-length' header as per the RFC
  + adds support for building libmicrohttpd for Android
  + fixes an issue with data in TLS buffers sometimes not being completely
    drained if there was no activity on the socket.
- reenabled tests and moved to %check
- add source verification using gpg

-------------------------------------------------------------------
Wed Oct  3 11:33:35 CEST 2012 - fcrozat@suse.com

- Add copyright header to specfile.

-------------------------------------------------------------------
Fri Sep 28 09:57:40 UTC 2012 - fcrozat@suse.com

- Update to 0.9.22:
  + Allow to configure basic and digest authentication separately
  + Fix URI argument parsing when string contained keys without
    equals sign in middle of the argument.
  + Reduce default size in poft processor buffer.
- Remove --enable-client-side from configure call, it doesn't exist
  anymore.
- Update License tag to new SPDX format.

-------------------------------------------------------------------
Fri Aug 10 21:48:48 UTC 2012 - bitshuffler@opensuse.org

- Updated to 0.9.21

-------------------------------------------------------------------
Sun Feb  5 13:02:18 UTC 2012 - bitshuffler@opensuse.org

- Updated to 0.9.19

-------------------------------------------------------------------
Sun Nov 27 13:23:42 UTC 2011 - bitshuffler@opensuse.org

- Updated to 0.9.17

-------------------------------------------------------------------
Sat Nov 12 20:37:00 UTC 2011 - bitshuffler@opensuse.org

- Updated to 0.9.16

-------------------------------------------------------------------
Sun Oct 16 11:37:43 UTC 2011 - bitshuffler@opensuse.org

- Updated to 0.9.15

-------------------------------------------------------------------
Sat May 21 12:31:02 UTC 2011 - bitshuffler@opensuse.org

- Updated to 0.9.11

-------------------------------------------------------------------
Fri Apr 29 18:06:18 UTC 2011 - bitshuffler@opensuse.org

- Updated to 0.9.10

-------------------------------------------------------------------
Wed Mar 30 16:50:42 UTC 2011 - bitshuffler@opensuse.org

- Updated to 0.9.9

-------------------------------------------------------------------
Sat Mar  5 21:38:11 UTC 2011 - bitshuffler@opensuse.org

- Updated to 0.9.8

-------------------------------------------------------------------
Tue Feb 15 16:54:35 UTC 2011 - bitshuffler@opensuse.org

- Updated to 0.9.7

-------------------------------------------------------------------
Thu Jan 27 02:33:32 UTC 2011 - bitshuffler@opensuse.org

- Updated to 0.9.6

-------------------------------------------------------------------
Sat Jan 15 15:02:29 UTC 2011 - bitshuffler@opensuse.org

- Updated to 0.9.5

-------------------------------------------------------------------
Wed Dec 29 15:15:48 UTC 2010 - bitshuffler@opensuse.org

- Updated to 0.9.4

-------------------------------------------------------------------
Wed Nov 24 16:02:15 UTC 2010 - bitshuffler@opensuse.org

- Updated to 0.9.3

-------------------------------------------------------------------
Thu Oct 21 13:21:06 UTC 2010 - bitshuffler@opensuse.org

- Updated to 0.9.2

-------------------------------------------------------------------
Mon Sep 20 17:17:03 UTC 2010 - bitshuffler@opensuse.org

- Updated to 0.9.1

-------------------------------------------------------------------
Tue Jul 27 07:26:27 UTC 2010 - bitshuffler@opensuse.org

- Updated to 0.9.0

-------------------------------------------------------------------
Mon Mar 15 08:35:12 UTC 2010 - pascal.bleser@opensuse.org

- update to 0.4.6:
  * fixes use of poll causing busy waiting
  * fixes a segfault if inconsistent options were used
  * fixes SSL support on big-endian architectures
  * fixes an issue with error signalling for PUT/POST requests in HTTP 1.1

-------------------------------------------------------------------
Tue Feb  2 13:10:52 UTC 2010 - bitshuffler@opensuse.org

- Updated to 0.4.5.

-------------------------------------------------------------------
Sun Jan 17 19:52:07 UTC 2010 - bitshuffler@opensuse.org

- Initial RPM.

Places

File _service:tar_scm:libmicrohttpd.changes of Package libmicrohttpd (Revision e6498c752af1a3a609e39a3a67d8a59a)

Places