------[ CHANGES ]------

* libprelude-0.9.13:

- Fix a crash with Python bindings upon signal reception (Fix #200).

- New --with-system-ltdl configure switch. The default is now to use the
  system wide ltdl library if it is available, unless specified otherwise
  (Fix #199).

- Prevent NULL pointer dereference if no permission is specified after the
  permission type (Fix #197).

- Upon IDMEFCriteria parsing error, recover from broken parser stater (Fix #195).

- Detailed error reporting on IDMEFCriteria parsing error.

- Fix string and possible criteria leak on IDMEFCriteria syntax error.

- Prefer anonymous authentication rather than SRP. We do this because there
  are compatibility issue with SRP between different GnuTLS version
  (Should fix #187).

- When dumping AdditionalData of type byte-string to string, encode the data using base64.

- Win32 compatibility fixes.

- Cross compilation fixes.



* libprelude-0.9.12.2:

- Fix make installation error when Perl bindings are disabled.



* libprelude-0.9.12.1:

- Ability to debug TLS communication through a new LIBPRELUDE_TLS_DEBUG 
  environment variable.
        
- Prevent binding generation error when using old SWIG version.
        
- Generate bindings for the error handling API.
        
- Small Perl/Python detection improvement. Fix #182. 
        
- Fix bindings compilation when using make -j.
        
- New configure --with-perl-installdirs flags: might be used to override 
  default site perl installation.



* libprelude-0.9.12:

- Correctly pack and unpack float value when sending/receiving.

- More error checking on IDMEF object copy. 
        
- Fix a crash that occured when destroying a copied object.

- Correct registration warning when using AF_UNIX socket.
         
- Compile on systems lacking poll(). 
        
- IpV6 compatibility fixes.
        
- Fix OS X compilation issues.
        
- Various portability fixes.



* libprelude-0.9.11:

- Hook class comparison function. Accept NULL, equal, not equal operator. 

- Introduce better error checking in the idmef-class API, which is now 
  considered public and might be used by external application. Rename 
  error code to reflect the API. 

- Change to the way IDMEF listed element are handled. Specifying negative 
  number as the position of the element from the low level API now allow 
  to position the element at the specified (reversed) index. Using the 
  high level API a negative index permit to address a list of element 
  backward (replace an element). 

- Build fixes for SWIG > 1.3.27.

- Modify idmef_value_match() so that it always unroll listed value 
  (do it for both val1 and val2. Remove assertion, and let 
  idmef_value_type_compare() return an error code in case there is an issue.

- Handle path using IDMEF_LIST_APPEND or IDMEF_LIST_PREPEND as 
  path using an undefined list index on idmef_path_get() call. 

- Make criteria parser accept (*) list index.

- Implement comparison function for all IDMEF object.



* libprelude-0.9.10.2:

- Fix undefined assert() reference.

- Fix FreeBSD warnings.

- Fix possible bindings compilation warnings/problem.



* libprelude-0.9.10.1:

- Fix checking for swig/perl/python when full path to the 
  application is specified.

- Fix OpenBSD getaddrinfo() AI_ADDRCONFIG issue (apply to 
  some other system as well).

- Fix workaround for system with broken libtool, 
  that prevented the use of plugin (#168).



* libprelude-0.9.10:

- Fix memory leak with some specific criteria.

- Fix IDMEF path integrity problem when using listed (*) path.

- Multiple error reporting improvement.

- API improvement: implement copy and clone function for all IDMEF object.

- API improvement: allow overwriting/prepending/appending list of value
  through IDMEF path.

- API improvement: allow refcounting IDMEF Alert and Heartbeat object.

- API improvement: Make idmef-value memory handling more intuitive by
  automating IDMEF object refcounting.



* libprelude-0.9.9:

- Correct IDMEF v16 checksum algorithms letter case.

- Fix FreeBSD build.

- Detailed, verbose error reporting when failing to read IDMEF message.

- Detailed, verbose error reporting for unsupported value operation.



* libprelude-0.9.8:

- Improve idmef-path error reporting.

- Rework configure script so that it use --with[out] in
  place of --(en|dis)able where we deal with external dependencies. 

- Rework configure script so that --with[out] work as expected (enabling and
  disabling the feature, explicit error if "with" feature is explicitly 
  specified but the feature it is unavailable, etc).

- Rework SNMPService class for IDMEF draft 16 compliance.

- Make sure we set alert CreateTime if the caller did not do it for us.

- Fix handling of \r\n terminated line.

- Ignore character that are part of the option value when comparing 
  option specified using --option=value. Fix handling of parent option. 
  (#150).



* libprelude-0.9.7.2:

- Fix regression introduced in prelude-msgbuf.



* libprelude-0.9.7.1:

- Fix Perl/Python bindings uint64 handling on 32 bits machine.

- Handle EAGAIN error from the asynchronous callback.

- Better prelude-message buffer allocation scheme, which might
  prevent some memory fragmentation problem.



* libprelude-0.9.7:

- Fix an issue with system using both IP v4 and v6 interfaces which
  doesn't allow binding both 0.0.0.0 and :: .

- Add autoconf detection for libgcrypt: this fix a build issue for 
  distribution shipping with broken libgnutls-config script.

- Generate Perl and Python bindings for the prelude-timer API.

- Fix for upcoming plugin that doesn't provide an activation option.

- Various bug fixes.



* libprelude-0.9.6.1:
	
- Flex generated file build fix for FreeBSD / NetBSD.



* libprelude-0.9.6:

- Implement workaround for buggy libtool that will fail 
  looking up symbol with preopening enabled in case the 
  libtool archive is missing. Lot of distribution package 
  seem to suffer from this. 

- idmef-path API improvement, allow user to specify negative 
  index to address the list in reverse. Developer are now 
  supposed to use IDMEF_LIST_APPEND (in place of index -1) and 
  IDMEF_LIST_PREPEND (in place of 0) on listed object operation.
	
- idmef-path API improvement: support for (<<) and (>>) listed 
  object index, meaning to prepend the object / to append it,
  as well as (*) meaning to retrieve all object from a list. This 
  deprecate the usage of (-1) previously used for appending. 

- Fix deconnection problem in client reading mode.

- Improve option parsing: option value can now be provided using
  --option=value. This format is now a requirement for option that
  use an optional argument. Provide arguments information in the 
  option help. 

- Fix deadlock on asynchronous prelude-client destruction.

- Definitely fix the problem where prelude-adduser will, on some system, 
  listen to Ipv6 IP address as the default: we now bind every address 
  returned by getaddrinfo(). 

- Fix crash in case of successive call to prelude_init(), prelude_deinit(), 
  then prelude_init() again.

- Introduce --passwd and --passwd-file option for prelude-adduser 
  register and registration-server mode, allowing to specify one shot 
  password on the command line, from a file, or from stdin.

- Verbose error handling for prelude-adduser.

- Fix perl bindings, make them more robust by adding type checking, and fix
  memory leak.

- Fix parsing of string based broken down time criterion. 

- Handle configuration file containing \r.

- Fix prelude_read_multiline2() return value (fix Prelude-Manager
  idmef-criteria-filter plugin).

- Fix a bug in per thread error handling code which resulted in NULL
  error to be returned in case an application thread exited.

- Various bug fixes.



* libprelude-0.9.5:

- More TLS cleanup.

- Application can now report error without using specific prelude_client
  error reporting function.

- More work and improved verbose error reporting.

- Fix compilation problem with prelude_error_is_verbose() (#130).

- Fix OpenBSD compilation problem.



* libprelude-0.9.4:

- Some useful API addition.

- Much improved, verbose error reporting.

- Cleaned up TLS handling, various bugfix.

- In case an error occur when verifying the peer certificate,
  notify the peer about the failure.



* libprelude-0.9.3:

- Implement analyzer revocation in prelude-adduser. This will require an upcoming 
  prelude-manager update so that revoked analyzer are denied to connect.

- Make prelude-adduser use GnuTLS anonymous authentication in case SRP is not 
  available. This is becoming a requirement since some distribution disable SRP 
  support because of patent issue. 
  We keep using SRP by default if both prelude-adduser instance has it.

- Fix 0.9.2 regression, with a crash when providing prelude-adduser with option.

- Fix potential OpenBSD compilation issue due to a missing dependencie in the 
  GnuLib inet_ntop module.



* libprelude-0.9.2:

- Fix FreeBSD and OpenBSD build.

- Avoid modifying the argv array, move unhandled option at the end (#116).

- Handle special '--' option code.	

- Fix license notice, stating clearly that linking from a program
  using a GPL compatible license is allowed. Required for Debian package 
  inclusion.

- Various bugfix.



* libprelude-0.9.1:

- Take care of assigning a default CreateTime field if the caller
  did not already take care of it. 

- Workaround invalid library run path added through MakeMaker generated Makefile.

- Fix Perl bindings Makefile generated with DESTDIR appended twice.

- When compiling against recent GnuTLS version, don't link prelude-adduser to
  libgnutls-extra since, SRP symbols were moved to libgnutls.

- If the user is running a modified GnuTLS version with the SRP API removed
  (namely, this happen on Fedora), warn the user that he should install GnuTLS 
  from source, and that he might want to open a ticket on RedHat bug tracker 
  about it.

- Fix a problem where "MissingFunctionMacros" was reported instead of the function name
  on error.

- Set keepalive option for the Prelude client socket.

- Make option printing buffered.

- Various bugfix.



------[ SUPPORT ] ------

Improving Prelude is costly, but you can help!  We are looking for
organizations that find Prelude useful and wish to contribute back.

Commercial support contracts for Prelude are available, and they help
finance continued maintenance. PreludeIDS Technologies, a privately held
company, is currently funding Prelude maintenance.


------[ DOWNLOAD ]------

http://prelude-ids.org/download/releases/libprelude-0.9.13.tar.gz
http://prelude-ids.org/download/releases/libprelude-0.9.13.tar.gz.sig
http://prelude-ids.org/download/releases/libprelude-0.9.13.tar.gz.md5


------[ MD5SUM ]------

10c356bcd13f9a8ddacddd33eb555aa4  libprelude-0.9.13.tar.gz


------[ OpenPGP key ]------

gpg --keyserver wwwkeys.pgp.net --recv-keys 0x23D2FAC3


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
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=Ias8
-----END PGP SIGNATURE-----
