libgdata 0.11.1 released



libgdata 0.11.1 is now available from:

  http://download.gnome.org/sources/libgdata/0.11/

c94e2050c92246cf7dbda425bb85f638191e4baa029fed0c2c6ef16c290470a3  libgdata-0.11.1.news
b4b01adb72d7389b78d5c8a51d4375b294581ce70eff96cf9f55a3ced315e769  libgdata-0.11.1.changes
ec96788b641f357745646b5645196787bf002182c95298ae80b84b935c69759b  libgdata-0.11.1.tar.xz

This is the second release in the unstable 0.11.x series, and contains an
important security fix to ensure that libgdata verifies TLS
certificates before accepting them. This prevents man-in-the-middle
attacks which use spoofed TLS certificates.

This feature is enabled automatically, and has bumped libgdata's
requirement on libsoup to version 2.37.91. libsoup will now
automatically use the system's CA certificate file to verify TLS
certificates.

About libgdata
==============

libgdata is a GLib-based library for accessing online service APIs using
the GData protocol — most notably, Google's services. It provides APIs
to access the common Google services, and has full asynchronous support.

Overview of changes from libgdata 0.11.0 to libgdata 0.11.1
===========================================================

Major changes:
* Add a --with-ca-certs configure argument to allow
  specifying the system CA cert file — an important security fix to allow
  libgdata to verify all TLS   certificates before accepting them

Bugs fixed:
* Bug 667577 — fix introspection for srcdir != builddir builds
* Bug 668365 — libgdata 0.10.x link error because of exported symbols
  that don't exist
* Bug 671535 — Security issue in libgdata

Updated translations:
* be (Kasia Bondarava)
* te (Praveen Illa)
* uk (Korostil Daniel)

Philip Withnall
March 12, 2012
http://live.gnome.org/libgdata

Attachment: signature.asc
Description: This is a digitally signed message part



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]