Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-15-SP3:GA
libmicrohttpd.28076
libmicrohttpd.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File libmicrohttpd.changes of Package libmicrohttpd.28076
------------------------------------------------------------------- Wed Mar 1 15:30:52 UTC 2023 - Valentin Lefebvre <valentin.lefebvre@suse.com> - Apply patch for bsc#1208745 CVE-2023-27371 fix parser bug that could be used to crash servers using the MHD_PostProcessor * fix-parser-bug-MHD_PostProcessor.patch ------------------------------------------------------------------- Fri Dec 1 14:05:56 UTC 2017 - tchvatal@suse.com - Install copying ------------------------------------------------------------------- Thu Nov 30 15:01:33 UTC 2017 - mpluskal@suse.com - Update to version 0.9.57: * See provided Changelog for details - Drop no longer needed patches: * libmicrohttpd_test_data.patch * disable-stalling-test.patch ------------------------------------------------------------------- Mon May 29 09:38:20 UTC 2017 - tchvatal@suse.com - Version update to 0.9.55 bsc#1041216: * See provided Changelog for details ------------------------------------------------------------------- Mon May 15 11:49:20 UTC 2017 - mpluskal@suse.com - Update licensing information ------------------------------------------------------------------- Thu May 11 08:15:24 UTC 2017 - mpluskal@suse.com - Update to version 0.9.54: * See provided Changelog for details ------------------------------------------------------------------- Thu Apr 13 17:02:21 UTC 2017 - mpluskal@suse.com - Update to version 0.9.53: * See provided Changelog for details - Refresh patch: * libmicrohttpd_test_data.patch ------------------------------------------------------------------- Wed Mar 8 13:17:21 UTC 2017 - tchvatal@suse.com - Do not abort on failing tests, as they randomly fail quite a lot bsc#1012840 ------------------------------------------------------------------- Mon Dec 12 11:03:32 UTC 2016 - tchvatal@suse.com - Version update to 0.9.52: * See provided Changelog for details - Refresh patch: * disable-stalling-test.patch ------------------------------------------------------------------- Fri Jun 3 08:23:38 UTC 2016 - mpluskal@suse.com - Update to version 0.9.50: * See provided Changelog for details ------------------------------------------------------------------- Thu Apr 14 18:10:40 UTC 2016 - mpluskal@suse.com - Update to 0.9.49 * See provided Changelog for details - Fix typo in previous changelog entry - Refresh patches - Use pkgconfig style dependencies ------------------------------------------------------------------- Sun Dec 20 09:24:05 UTC 2015 - mpluskal@suse.com - Update to 0.9.48 * Improved compatibility with VS2010 and other older compilers. * Default backlog size for listen socket was changed from 32 to SOMAXCONN, added new option MHD_OPTION_LISTEN_BACKLOG_SIZE to override default backlog size. * If not all connections can be handled by MHD_select() than at least some of connections will be processed instead of failing without any processing. * Fixed redefenition of FD_SETSIZE on W32 so select() will work with 2000 connections instead of 64. * Better handled redefenition of FD_SETSIZE on all platforms. * Close sockets more aggressively in multi-threaded mode (possibly relevant for idle servers). - Update dependencies ------------------------------------------------------------------- Sat Dec 5 09:22:32 UTC 2015 - mpluskal@suse.com - Update to 0.9.47 * Reworked VS project files. Used x64 build tools by efault, many optimizations, fixes. dded project files for VS 2015. -EG * SPDY is dead, killing experimental libmicrospdy. -CG * New logic for controlling socket buffer modes. Eliminated delay before last packet in response and before "100 Continue" response on all platforms. Also response header are pushed to client without waiting for response body. -EG * Remove 200ms delay observable with keep-alive on Darwin and *BSD platfroms. -EG * Fix issue with shutdown if connection was resumed just before shutdown. -FC - Update dependencies ------------------------------------------------------------------- Fri Nov 13 14:01:04 UTC 2015 - mpluskal@suse.com - Enable http2/spdy - Don't build examples as we don't ship them anyway - Disable tests as linking fails for them with spdy enabled ------------------------------------------------------------------- Tue Nov 10 14:23:58 UTC 2015 - mpluskal@suse.com - Update to 0.9.46 * Undoing change from Sun Oct 25 15:29:23 CET 2015 as the original code was counter-intuitive but correct, and the new code does break pipelining. Ignore empty lines at the beginning of an HTTP request (more tolerant implementation). ------------------------------------------------------------------- Sun Nov 1 11:44:58 UTC 2015 - mpluskal@suse.com - Update to 0.9.45 * Rework deprecation maros: fix errors with old GCC versions, improved support for old clang and new GCC. -EG * Return correct header kind in MHD_get_connection_values() even if a bitmask is used for the "kind" argument. -FC/CG * Fixing transient resource leak affecting long-lived connections with many keep-alives and HTTP request pipelining under certain circumstances (which reduced the receive window). * Fixed assertion failure triggered by a race in thread-per-connection mode on shutdown in rare circumstances. -CG * Deduplicate code between digestauth and connection parsing logic for URI arguments, shared code moved to new MHD_parse_arguments_ function in internal.c. -CG ------------------------------------------------------------------- Fri Oct 2 12:33:17 UTC 2015 - mpluskal@suse.com - Update to 0.9.44 * Various fixes for W32 VS project files. * Fix digest authentication with URL arguments where value-less keys are given before the last argument. * Do not use shutdown() on listen socket if MHD_USE_PIPE_FOR_SHUTDOWN is set. ------------------------------------------------------------------- Sat Sep 19 10:43:28 UTC 2015 - mpluskal@suse.com - Update to 0.9.43 * Call resume_suspended_connections() when the user is running its own mainloop and calls MHD_run_from_select() to support resuming connections with external select. -FC * Correct documentation as to when MHD_USE_EPOLL_LINUX_ONLY is allowed. -CG * Reimplement monotonic clock functions for better support various platforms. Print more information during configure. -EG * Export MHD_get_reason_phrase_for() symbol. -CG * Added checks for overflows and buffer overruns, fixed possible buffer overrun. Updated md5 implementation. Fixed many compiler warning (mostly for VC compiler). -EG * Fix failure to properly clean up timed out connections if running in external select mode without listen socket, which caused busy waiting until new connections arrived. (Fixes #3924, thanks to slimp for reporting and testcase). -CG * Ignore close() errors on sockets except for EBADF, fixes #3926. -CG * Make sure to decrement connection counter before calling connection notifier so that MHD_DAEMON_INFO_CURRENT_CONNECTIONS does not present stale information (relevant if this is used for termination detection of a daemon stopped via MHD_quiesce_daemon()). Thanks to Markus Doppelbauer for reporting. -CG * Fix (automatic) handling of HEAD requests with MHD_create_response_from_callback() and HTTP/1.1 connection keep-alives. Thanks to Cristian Klein for reporting. -CG * Add new functions MHD_create_response_from_fd64() and MHD_create_response_from_fd_at_offset64(). -EG * Fixing memory leak in digest authentication. -AW * Add deprecation compiler messages for deprecated functions and macros. -EG * Fixing digest authentication when used in combination with escaped characters in URLs. -CG/AW - Disable spdy support for now as spdylay is missing - Drop libmicrohttpd_test_session.patch as it is fixed now ------------------------------------------------------------------- Wed Jul 15 16:42:35 UTC 2015 - matwey.kornilov@gmail.com - fux build for SLES11: * explicitly require libgnutls-devel in -devel package ------------------------------------------------------------------- Mon Jul 13 13:01:26 UTC 2015 - matwey.kornilov@gmail.com - fix build for SLES11: * update disable-stalling-test.patch: Instead of disabling testcase in Makefile disable testcases in code, this could be even better we can disable only broken test but not the whole testcase. * add libmicrohttpd_test_session.patch: Disable test relying on available libcurl version (see https://gnunet.org/bugs/view.php?id=3893 for details) * wrap libmicrosdpy into macro to disable building on systems with openssl < 1.0.1 - update to 0.9.42: * fix off-by-one in MHD_start_daemon_va() error handling logic * fix #3784: actually implement MHD_CONNECTION_INFO_SOCKET_CONTEXT ------------------------------------------------------------------- Sun May 3 10:26:32 UTC 2015 - astieger@suse.com - update to 0.9.41: * fix bugs relating to various threading modes * fix some HTTP 1.0 tests ------------------------------------------------------------------- Mon Apr 13 11:39:23 UTC 2015 - meissner@suse.com - updated to 0.9.40 - Fix potential deadlock issue in MHD_USE_THREAD_PER_CONNECTION mode if shutdown is initiated while connections are active. -CG - Fix issue in thread-pool mode where a MHD_stop_daemon() might not reach threads that stopped listening because we hit the maximum number of concurrent connections and the option MHD_USE_PIPE_FOR_SHUTDOWN was also not used. Testcase added as well. -CG - Update HTTPS testcases to avoid SSLv3, as SSLv3 is dead. - Do not enforce FD_SETSIZE-limit on worker control pipe when using MHD_USE_EPOLL_LINUX_ONLY (#3751). -MH/CG - Adding MHD_OPTION_NOTIFY_CONNECTION, MHD_CONNECTION_NOTIFY_STARTED, MHD_CONNECTION_NOTIFY_CLOSED and MHD_CONNECTION_INFO_SOCKET_CONTEXT to allow applications to trigger operations when TCP connections start or end, instead of just exposing HTTP requests starting and ending. -RG/CG - Fixing bug that prevented MHD_OPTION_HTTPS_MEM_DHPARAMS from working within a MHD_OPTION_ARRAY. -DD - Adding MHD_OPTION_HTTPS_KEY_PASSWORD as proposed by Andrew Basile. -CG/AB - Fix issue where for HTTP/1.0-clients that set Connection: Keep-Alive header a response of indefinite size was generated with chunked encoding. -CG - Fix potential infinite loop on shutdown in multi-threaded mode under certain conditions. -CG - fixed info deinstall ------------------------------------------------------------------- Thu Jan 8 08:48:47 UTC 2015 - meissner@suse.com - libmicrohttpd.keyring: replaced maintainers keyring by new one with: pub 4096R/E29FC3CC 2014-12-09 uid Christian Grothoff <grothoff@gnunet.org> uid Christian Grothoff <christian@grothoff.org> uid Christian Grothoff <christian.grothoff@inria.fr> sub 4096R/117E1AFB 2014-12-09 ------------------------------------------------------------------- Wed Jan 7 13:44:46 UTC 2015 - prusnak@opensuse.org - updated to 0.9.39 - dropped libmicrohttpd-0.9.34-spdy-pc.patch (included upstream) ------------------------------------------------------------------- Thu May 8 14:00:36 UTC 2014 - meissner@suse.com - do not define test_data before system header inclusion, libgcrypt uses this as argument parameters. (libmicrohttpd_test_data.patch) ------------------------------------------------------------------- Mon Apr 28 07:23:50 UTC 2014 - coolo@suse.com - disable problematic test case that causes the testsuite to deadlock just too often (disable-stalling-test.patch) ------------------------------------------------------------------- Thu Apr 24 07:32:10 UTC 2014 - dmueller@suse.com - remove dependency on gpg-offline, source validator already does that ------------------------------------------------------------------- Mon Apr 21 06:44:06 UTC 2014 - tchvatal@suse.com - Version bump to 0.9.34: * Drop tls patch seems to build fine * Remove code for other distros we build against 13.1+ anywhere within obs and it just clutters the spec. * Explicitely name switches in configure to make sure things go the desired way. * Fix install of libmicrohttpspdy pc file. + Added support for TCP FASTOPEN. + Removed dependency on plibc for simpler compilation for W32. + Added configure option "--disable-pipes" to use socketpairs instead of pipes for signalling to child threads. Pipes are always disabled on W32. + Corrected some uses of 'int' vs. 'size_t'. + MHD_USE_DUAL_STACK in libmicrohttpd currently just *inhibits setting* the IPV6_V6ONLY socket option, but per Microsoft's documentation the default on Windows is that this is enabled, thus MHD_USE_DUAL_STACK will not work (since it leaves the default). libmicrohttpd should probably just unconditionally set IPV6_V6ONLY to the desired value when the option is available. + Allow Keep-Alive with HTTP 1.0 (if explicitly requested), and automatically set "Connection: Keep-Alive" in response in this case as well. + Adding explicit annotations to hide symbols that are not for export in the C code (gcc 4.0 or higher only). + Adding a few lines to avoid warnings from picky compilers. - Added patches: * libmicrohttpd-0.9.34-spdy-pc.patch - Dropped patches: * libmicrohttpd-drop-test_tls_options.patch ------------------------------------------------------------------- Tue Mar 4 12:42:30 UTC 2014 - coolo@suse.com - do not run checks in parallel - they deadlock from time to time - enable make debug to debug the problem on OBS in case it reappears ------------------------------------------------------------------- Mon Jan 27 19:52:38 UTC 2014 - sleep_walker@suse.cz - refresh libmicrohttpd-drop-test_tls_options.patch - add there also ignoring test_https_sni - Update to 0.9.33 bsc#854443 CVE-2013-7038 CVE-2013-7039 + Fixed an issue with a missing argument in the postexample. + Fixed issue with bogus offset increment involving sendfile on GNU/Linux. Adding support for SNI. + Fix for per-worker daemon pipes enabled with MHD_USE_SUSPEND_RESUME that were not closed in MHD_stop_daemon. + Fixing warnings and build issue if --disable-https is given to configure. + 0.9.32: + Security fix: do not read past 0-terminator when unescaping strings (thanks to Florian Weimer for reporting). + Signaling n times for shutdown works, but for resume we need to wake up the correct daemon. Even if we signal n times in that case also, there's no guarantee that some daemon can't run through its select loop more than once before the daemon we want to wake up gets a chance to read. Thus we need a signal pipe per thread in the thread pool IF MHD_suspend_connection is used. This introduces a new flag MHD_USE_SUSPEND_RESUME to add those additional pipes and only allow MHD_suspend_connection to be used in conjunction with this flag. Also, as MHD_resume_connection() will be called on a non-daemon thread, but none of the queue insert/delete calls are thread safe, we need to be concerned about (a) corrupting the queue, and (b) having to add mutex protection around every access to the queues, including loops through timer queues, etc. This wasn't a problem before adding resume; even suspend should be safe since it happens in a callback from the daemon. I think it's easier to (a) have MHD_suspend_connection() move the connection to a suspended queue, (b) have MHD_resume_connection() mark the connection as resuming, and then (c) do all the actual queue manipulations in MHD_select (poll, epoll, etc.) to move the resumed connections back to their normal queues, in response to the wake up. The changes are simpler & cleaner. There is a cost to the basic select loop that is avoided by making suspend/resume a startup option. The per-worker pipes can then also be enabled only with that option set. + Eliminating theoretical stack overflow by limiting length of URIs in authentication headers to 32k (only applicable if the application explicitly raised the memroy limits, and only applies to MHD_digest_auth_check). Issue was reported by Florian Weimer. + Fix race on shutdown signal with thread pool on non-Linux systems by signalling n times for n threads. + Introduce state to mark connections in suspended state (with epoll); add missing locking operations in MHD_suspend_connection. + Fix definition of MHD_TLS_CONNECTION_INIT. + Fixing issue in PostProcessor when getting partial boundary at the beginning, expanding test suite. + Implementing faster processing of upload data in multipart encoding (thanks to performance analysis by Adam Homolya). + Adding support for connection flow control via MHD_suspend_connection and MHD_resume_connection. 0.9.31: + Fixing build issues on OS X with CLOCK_MONOTONIC not being implemented on OS X. + Make libmicrohttpd play nicely with upcoming libgcrypt 1.6.0. + Improved configure checks for cURL. + Signal connection termination as OK (and not as ERROR) if the stream was terminated by the callback returning MHD_CONTENT_READER_END_OF_STREAM. Also, release response mutex before calling the termination callback, to avoid possible deadlock if the client destroys the response in the termination callback (due to non-recursiveness of the lock). + Adding #define MHD_HTTP_HEADER_ACCESS_CONTROL_ALLOW_ORIGIN. + Also pass MHD connection handle in URI log callback. + Improved check for proper OpenSSL version for libmicrospdy. + Set IPV6_V6ONLY socket option correctly when IPv6 is enabled (MHD_USE_IPv6) but not dual stack (MHD_USE_DUAL_STACK) ------------------------------------------------------------------- Thu Oct 3 12:59:19 UTC 2013 - mvyskocil@suse.com - Update to 0.9.30 + implements the "SHOULD" clause of RFC 2616 section 8.1.4, which may reduce bandwidth consumption when clients cancel requests. + fixes build errors with various combinations of operating systems, libc versions, and configure flags. + fixes a use-after-free crash when using epoll() in combination with read errors 0.9.29: + epoll can now also be used with SSL connections + following recent HTTP/1.1 clarfications, MHD no longer send a "Content-length" header in CONNECT responses. + the "MHD_add_connection" call now consistently sets an "errno" value to indicate the cause of errors. Connections added this way are now always processed immediately. + fixes a recently-introduced bug which prevented HTTP pipelining from working properly in some cases and a build error in conjunction with the "--disable-messages" configure option. - Enable build of (experimental) SPDY support. ------------------------------------------------------------------- Wed Jul 24 10:18:44 UTC 2013 - mvyskocil@suse.com - Update to 0.9.28 + support for epoll-based event loops (Linux-only) + various new options: - MHD_USE_DUAL_STACK for binding to IPv4 and IPv6 at the same time - MHD_USE_PIPE_FOR_SHUTDOWN to cleanly support MHD_quiesce_daemon on non-Linux systems - MHD_CONNECTION_INFO_CONNECTION_FD to allow COMET applications to disable TCP Nagle - MHD_OPTION_CONNECTION_MEMORY_INCREMENT for better control over buffer size allocations + and fixes various minor bugs ------------------------------------------------------------------- Thu Jun 6 08:15:30 UTC 2013 - mvyskocil@suse.com - drop test_tls_options if build is in OBS libmicrohttpd-drop-test_tls_options.patch ------------------------------------------------------------------- Wed Jun 5 16:42:38 UTC 2013 - jengelh@inai.de - More robust make install call - Remove redundant %clean section - Requires(pre) is useless without a %pre script ------------------------------------------------------------------- Thu May 16 07:42:59 UTC 2013 - mvyskocil@suse.com - Update to 0.9.27 + performance improvements for POST processing + new API call to reduce the number of select calls (if in "external" select mode) + new function to allow applications to stop MHD from processing new incoming connections while finishing ongoing requests + fixes an initialization problem on some platforms + fixes bug in the postprocessor's URL parser. + SSL connections are no longer dropped if the system uptime is less than the connection timeout + allows creating responses with zero bytes using MHD_create_response_from_callback. + few "const" statements have been added to allow keeping more static strings in ROM. + post processor now tolerates uploads which don't contain "\r\n" and also returns keys which don't have a matching value + fixes the loss of a parameter in processing POST data from IE8 and Chrome. It automatically sets a "Connection: close" header if the client requests the connection to be closed. Finally, given both 'chunked' encoding and 'content-length', MHD now ignores the 'content-length' header as per the RFC + adds support for building libmicrohttpd for Android + fixes an issue with data in TLS buffers sometimes not being completely drained if there was no activity on the socket. - reenabled tests and moved to %check - add source verification using gpg ------------------------------------------------------------------- Wed Oct 3 11:33:35 CEST 2012 - fcrozat@suse.com - Add copyright header to specfile. ------------------------------------------------------------------- Fri Sep 28 09:57:40 UTC 2012 - fcrozat@suse.com - Update to 0.9.22: + Allow to configure basic and digest authentication separately + Fix URI argument parsing when string contained keys without equals sign in middle of the argument. + Reduce default size in poft processor buffer. - Remove --enable-client-side from configure call, it doesn't exist anymore. - Update License tag to new SPDX format. ------------------------------------------------------------------- Fri Aug 10 21:48:48 UTC 2012 - bitshuffler@opensuse.org - Updated to 0.9.21 ------------------------------------------------------------------- Sun Feb 5 13:02:18 UTC 2012 - bitshuffler@opensuse.org - Updated to 0.9.19 ------------------------------------------------------------------- Sun Nov 27 13:23:42 UTC 2011 - bitshuffler@opensuse.org - Updated to 0.9.17 ------------------------------------------------------------------- Sat Nov 12 20:37:00 UTC 2011 - bitshuffler@opensuse.org - Updated to 0.9.16 ------------------------------------------------------------------- Sun Oct 16 11:37:43 UTC 2011 - bitshuffler@opensuse.org - Updated to 0.9.15 ------------------------------------------------------------------- Sat May 21 12:31:02 UTC 2011 - bitshuffler@opensuse.org - Updated to 0.9.11 ------------------------------------------------------------------- Fri Apr 29 18:06:18 UTC 2011 - bitshuffler@opensuse.org - Updated to 0.9.10 ------------------------------------------------------------------- Wed Mar 30 16:50:42 UTC 2011 - bitshuffler@opensuse.org - Updated to 0.9.9 ------------------------------------------------------------------- Sat Mar 5 21:38:11 UTC 2011 - bitshuffler@opensuse.org - Updated to 0.9.8 ------------------------------------------------------------------- Tue Feb 15 16:54:35 UTC 2011 - bitshuffler@opensuse.org - Updated to 0.9.7 ------------------------------------------------------------------- Thu Jan 27 02:33:32 UTC 2011 - bitshuffler@opensuse.org - Updated to 0.9.6 ------------------------------------------------------------------- Sat Jan 15 15:02:29 UTC 2011 - bitshuffler@opensuse.org - Updated to 0.9.5 ------------------------------------------------------------------- Wed Dec 29 15:15:48 UTC 2010 - bitshuffler@opensuse.org - Updated to 0.9.4 ------------------------------------------------------------------- Wed Nov 24 16:02:15 UTC 2010 - bitshuffler@opensuse.org - Updated to 0.9.3 ------------------------------------------------------------------- Thu Oct 21 13:21:06 UTC 2010 - bitshuffler@opensuse.org - Updated to 0.9.2 ------------------------------------------------------------------- Mon Sep 20 17:17:03 UTC 2010 - bitshuffler@opensuse.org - Updated to 0.9.1 ------------------------------------------------------------------- Tue Jul 27 07:26:27 UTC 2010 - bitshuffler@opensuse.org - Updated to 0.9.0 ------------------------------------------------------------------- Mon Mar 15 08:35:12 UTC 2010 - pascal.bleser@opensuse.org - update to 0.4.6: * fixes use of poll causing busy waiting * fixes a segfault if inconsistent options were used * fixes SSL support on big-endian architectures * fixes an issue with error signalling for PUT/POST requests in HTTP 1.1 ------------------------------------------------------------------- Tue Feb 2 13:10:52 UTC 2010 - bitshuffler@opensuse.org - Updated to 0.4.5. ------------------------------------------------------------------- Sun Jan 17 19:52:07 UTC 2010 - bitshuffler@opensuse.org - Initial RPM.
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
