libgdata 0.11.1 is now available from: http://download.gnome.org/sources/libgdata/0.11/ c94e2050c92246cf7dbda425bb85f638191e4baa029fed0c2c6ef16c290470a3 libgdata-0.11.1.news b4b01adb72d7389b78d5c8a51d4375b294581ce70eff96cf9f55a3ced315e769 libgdata-0.11.1.changes ec96788b641f357745646b5645196787bf002182c95298ae80b84b935c69759b libgdata-0.11.1.tar.xz This is the second release in the unstable 0.11.x series, and contains an important security fix to ensure that libgdata verifies TLS certificates before accepting them. This prevents man-in-the-middle attacks which use spoofed TLS certificates. This feature is enabled automatically, and has bumped libgdata's requirement on libsoup to version 2.37.91. libsoup will now automatically use the system's CA certificate file to verify TLS certificates. About libgdata ============== libgdata is a GLib-based library for accessing online service APIs using the GData protocol — most notably, Google's services. It provides APIs to access the common Google services, and has full asynchronous support. Overview of changes from libgdata 0.11.0 to libgdata 0.11.1 =========================================================== Major changes: * Add a --with-ca-certs configure argument to allow specifying the system CA cert file — an important security fix to allow libgdata to verify all TLS certificates before accepting them Bugs fixed: * Bug 667577 — fix introspection for srcdir != builddir builds * Bug 668365 — libgdata 0.10.x link error because of exported symbols that don't exist * Bug 671535 — Security issue in libgdata Updated translations: * be (Kasia Bondarava) * te (Praveen Illa) * uk (Korostil Daniel) Philip Withnall March 12, 2012 http://live.gnome.org/libgdata
Attachment:
signature.asc
Description: This is a digitally signed message part