From: David Woodhouse <David.Woodhouse@intel.com>
Date: Wed, 13 Feb 2013 21:31:03 +0000 (+0000)
Subject: Merge retrospective 4.08 release into HEAD
X-Git-Tag: v5.00~74
X-Git-Url: https://www.infradead.org/git/?a=commitdiff_plain;h=09c69d7ce896a2e10b3291df91a99e2aa3da9b81;p=users%2Fdwmw2%2Fopenconnect.git

Merge retrospective 4.08 release into HEAD

Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
---

09c69d7ce896a2e10b3291df91a99e2aa3da9b81
diff --cc www/changelog.xml
index fe87c01d,9eba93f4..4abfedf7
--- a/www/changelog.xml
+++ b/www/changelog.xml
@@@ -17,17 -17,15 +17,24 @@@
  <ul>
     <li><b>OpenConnect HEAD</b>
       <ul>
 -       <li><i>No changelog entries yet</i></li>
 +       <li>Use GnuTLS by default instead of OpenSSL.</li>
 +       <li>Avoid using deprecated <tt>gnutls_pubkey_verify_data()</tt> function..</li>
 +     </ul><br/>
 +  </li>
 +  <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.99.tar.gz">OpenConnect v4.99</a></b>
 +     <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.99.tar.gz.asc">PGP signature</a>)</i> &#8212; 2013-02-07
 +     <ul>
 +       <li>Add <tt>--os</tt> switch to report a different OS type to the gateway.</li>
 +       <li>Support new XML POST format.</li>
-        <li>Fix buffer overflow on long <tt>Location:</tt> and <tt>Set-Cookie:</tt> headers sent from server.</li>
 +       <li>Add SecurID token support using <a href="http://stoken.sourceforge.net/">libstoken</a>.</li>
+      </ul><br/>
+   </li>
+   <li><b><a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.08.tar.gz">OpenConnect v4.08</a></b>
+      <i>(<a href="ftp://ftp.infradead.org/pub/openconnect/openconnect-4.08.tar.gz.asc">PGP signature</a>)</i> &#8212; 2013-02-13
+      <ul>
+        <li>Fix overflow on HTTP request buffers (CVE-2012-6128)</li>
+        <li>Fix connection to servers with round-robin DNS with two-stage auth/connect.</li>
+        <li>Impose minimum MTU of 1280 bytes.</li>
         <li>Fix some harmless issues reported by Coverity.</li>
         <li>Improve <tt>"Attempting to connect..."</tt> message to be explicit when it's connecting to a proxy.</li>
       </ul><br/>