libgdata 0.10.2 is now available from: http://download.gnome.org/sources/libgdata/0.10/ 360a953222ad3a2a8364c542d0651cb42c6a26b6d72881486624f1e74e758878 libgdata-0.10.2.news 129f41163b33c52912805eb7e888e31cb10719d21266813957fcdd12726b167f libgdata-0.10.2.changes c028f3f39796fe6cc4841413b95a6c470350166ec8b520d17e6f4ff666f32c4e libgdata-0.10.2.tar.xz This is the third release in the stable 0.10.x series, and contains an important security fix to ensure that libgdata verifies TLS certificates before accepting them. This prevents man-in-the-middle attacks which use spoofed TLS certificates. To enable this feature, libgdata needs to be compiled with the --with-ca-certs configure option to tell it where the system CA certificate file is. About libgdata ============== libgdata is a GLib-based library for accessing online service APIs using the GData protocol — most notably, Google's services. It provides APIs to access the common Google services, and has full asynchronous support. Overview of changes from libgdata 0.10.1 to libgdata 0.10.2 =========================================================== Major changes: * Add a --with-ca-certs configure argument to allow specifying the system CA cert file — an important security fix to allow libgdata to verify all TLS certificates before accepting them Bugs fixed: * Bug 667577 — fix introspection for srcdir != builddir builds * Bug 668365 — libgdata 0.10.x link error because of exported symbols that don't exist * Bug 671535 — Security issue in libgdata Philip Withnall March 12, 2012 http://live.gnome.org/libgdata
Attachment:
signature.asc
Description: This is a digitally signed message part