Changeset d4c9331 in mod_gnutls

Timestamp:

Nov 29, 2019, 12:49:56 PM (6 days ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

master

Parents:

dcec209

Message:

Release version 0.9.1

Files:

• CHANGELOG (modified) (1 diff)
• configure.ac (modified) (1 diff)

CHANGELOG

@@ +1 @@
+** Version 0.9.1 (2019-11-29)
+- Fix possible segfault (NULL pointer dereference) on failed TLS
+  handshake. Calling ssl_var_lookup() after a failed handshake could
+  lead to GnuTLS session information functions being called on a NULL
+  session pointer, leading to segfault.
+- Remove URLs from expected error responses in the test suite. Apache
+  HTTPD removed request URLs from canned error messages to prevent
+  misleading text/links being displayed via crafted links
+  (CVE-2019-10092). Adjust the expected error responses in our tests
+  so they can pass again.
+- Test suite: Ignore "Content-Length" header of responses. Thanks to
+  Krista Karppinen!
+- Add a section about module dependencies on socache to the handbook
+- Restructure the manpage build and move it to section 5 (config
+  files)
+- Test suite: Restructure certificate directories
+
 ** Version 0.9.0 (2019-01-23)
 - Security fix: Refuse to send or receive any data over a failed TLS

configure.ac

@@ -1 @@
-AC_INIT(mod_gnutls, 0.9.0)
+AC_INIT(mod_gnutls, 0.9.1)
 OOO_CONFIG_NICE(config.nice)
 MOD_GNUTLS_VERSION=AC_PACKAGE_VERSION