Branches for Lucid

Author: Jamie Strandboge
Revision Date: 2011-07-21 12:54:57 UTC

* SECURITY UPDATE: directory traversal in SoupServer
  - debian/patches/01_CVE-2011-2524.patch: adjust libsoup/soup-server.c
    to properly verify path input
  - CVE-2011-2524
* enable the testsuite in the build:
  - debian/rules: add DEB_MAKE_CHECK_TARGET := check
  - add 02_text-plain-is-ok-for-unknown-mbox-in-test-sniffing.patch to
    let the build succeed, but still catch errors if things regress

Author: Jamie Strandboge
Revision Date: 2011-07-21 12:54:57 UTC

* SECURITY UPDATE: directory traversal in SoupServer
  - debian/patches/01_CVE-2011-2524.patch: adjust libsoup/soup-server.c
    to properly verify path input
  - CVE-2011-2524
* enable the testsuite in the build:
  - debian/rules: add DEB_MAKE_CHECK_TARGET := check
  - add 02_text-plain-is-ok-for-unknown-mbox-in-test-sniffing.patch to
    let the build succeed, but still catch errors if things regress

Author: Sebastien Bacher
Revision Date: 2010-03-30 13:14:16 UTC

* New upstream version:
  - Fixed a crash in the whitespace-stripping code in soup_uri_new()
  - Update content-sniffing algorithm to match Chrome and the
    soon-to-be-updated sniffing spec
  - We now handle "Content-Encoding: x-gzip" as well as "gzip"
   (even though "x-gzip" has been deprecated for more than 10 years).
  - Fixed leaks found by valgrind
  - Make the "make check" programs only bind to 127.0.0.1, not any public
    network interfaces.
  - Add a test to sniffing-test to make sure that
    Content-Type parameters are preserved correctly.

Author: Sebastien Bacher
Revision Date: 2010-06-24 12:39:00 UTC

* New upstream version (lp: #598050):
  - Fixed a problem with SoupSessionAsync that would cause messages to get
    lost if you aborted a previous message while it was still looking up the
    hostname. Fixed several other problems that were discovered
    while adding a regression test for that.
  - SoupSession now only allows a message to be redirected a fixed number of
    times, and returns an error after that.
  - Fixed another connecting-to-lame-https-server problem, and a
    getting-stuck-in-a-loop-reconnecting bug that it revealed.
  - Fixed an invalid read when parsing certain Cookie headers
  - Fixed a memory leak in soup_form_request_from_data
  - Failed SSL connections now include the correct reason_phrase
    ("SSL handshake failed" rather than "SSL support not available").
* debian/libsoup2.4-1.symbols:
  - updated to list the new soup_connection_get_ever_used symbol