Subject: CVS commit: pkgsrc/net/libsoup
From: Thomas Klausner
Date: 2017-08-14 22:09:02
Message id: 20170814200902.B1365FAD0@cvs.NetBSD.org

Log Message:
Updated libsoup to 2.58.2.

Changes in libsoup from 2.58.1 to 2.58.2:

	* CVE-2017-2885: Fixed a chunked decoding buffer overrun that
          could be exploited against either clients or servers.
          [#785774]

Changes in libsoup from 2.58.0 to 2.58.1:

	* Reverts a change to SoupSession to close all open
          connections when the :proxy-resolver property is changed
          [#777326; this change was made in 2.58.0 but accidentally
          left out of the NEWS for that release]; although that
          behavior made :proxy-resolver more consistent with
          :proxy-uri, it ended up breaking Evolution EWS. [#781590]

	* Fixed undefined behavior in tests/header-parsing that could
          make the test spuriously fail. [#777258]

	* Updates to the configure tests for Apache for use in tests/:
		* Dropped support for Apache 2.2
		* Changed PHP support from PHP 5 to PHP 7
		* mod_unixd can now be either built-in or dynamically
		  loaded [#776478]

	* Updated translations:
	  Turkish

Changes in libsoup from 2.57.1 to 2.58.0:

	* Fix authentication issues when the SOUP_MESSAGE_DO_NOT_USE_AUTH_CACHE
	  flag is used. [#778497, #777936, Carlos Garcia Campos]

	* MSVC build improvements (Chun-wei Fan)

	* Updated translations:
	  Basque, Belarusian, Brazilian Portuguese, Chinese (Taiwan), Danish,
	  French, Galician, Greek, Indonesian, Italian, Korean, Latvian,
	  Lithuanian, Norwegian bokmål, Russian, Serbian, Slovak, Slovenian,
	  Spanish, zh_CN

Changes in libsoup from 2.56.0 to 2.57.1:

	* Added SoupWebsocketConnection:keepalive-interval, to make a
          connection send regular pings. [#773253, Ignacio Casal
          Quinteiro]

	* Added soup_auth_manager_clear_cached_credentials() and
          SOUP_MESSAGE_DO_NOT_USE_AUTH_CACHE, to allow greater control
          over the use of cached HTTP auth credentials. [#774031,
          #774033, Carlos Garcia Campos]

	* Fixed the use of SoupSession:proxy-uri values containing
          passwords. [#772932, Jonathan Lebon]

	* Various minor WebSocket fixes [Ignacio Casal Quinteiro]:
		* Avoid sending data after we start closing the
		  connection [#774957]
		* Do not log a critical if the peer sends an invalid
		  close status code
		* Log a debug message when a "pong" is received

	* Fixed introspection of
          soup_message_headers_get_content_range() [Jasper St. Pierre]

	* Replaced Vala [Deprecated] annotations with [Version] to
          avoid build warnings [#773177, Evan Nemerson]

	* MSVC build improvements (Chun-wei Fan)

	* Updated error/message strings to use Unicode punctuation.
          [#772217, Piotr Drąg]

	* Updated translations:
	  Czech, Friulian, German, Hebrew, Hungarian,
	  Norwegian bokmål, Polish, Swedish

Changes in libsoup from 2.55.90 to 2.56.0:

	* Added SoupWebsocketConnection:max-incoming-payload-size
          property, to override the default maximum incoming payload
          size. [#770022, Ignacio Casal Quinteiro]

	* Added soup-version.h symbols (in particular
          soup_check_version()) to introspection. [#771439, Rico
          Tzschichholz]

	* Updated the copy of the public suffix list used by SoupTLD
	  [#769650, Michael Catanzaro]

	* Updated translations:
	  British English, Greek, Polish

Changes in libsoup from 2.54.1 to 2.55.90:

	* Removed support for SSLv3 fallback; sites that reject TLS
          1.x handshakes will now just fail with an error. (Firefox
          and Chrome have both already switched to this behavior.)
          [#765940, Dan Winship]

	* Fixed the parsing of <double>s in the new GVariant-based
          XMLRPC code. [#767707, Dan Winship]

	* Fixed soup_server_set_ssl_cert_file(), which was added in
          2.48 but didn't actually work... [patch on libsoup-list from
          Sean DuBois]

	* Added GObject properties to SoupLogger to make it
          bindings-friendly. [#768053, Jonh Wendell]

	* Fixed build error on FreeBSD [#765376, Ting-Wei Lan]

	* Fixed build with certain new versions of glibc that define
          "EOF" as a macro. [#768731, Philip Withnall]

	* Updated m4/ax_code_coverage.m4 with support for lcov 1.12
          [Philip Withnall]

	* Updated po files for future gettext versions [Piotr Drąg]

	* New/updated translations:
	  Occitan, Scottish Gaelic

Files:
RevisionActionfile
1.34modifypkgsrc/net/libsoup/Makefile
1.10modifypkgsrc/net/libsoup/PLIST
1.13modifypkgsrc/net/libsoup/distinfo