diff options
author | Daniel Stenberg <daniel@haxx.se> | 2006-03-20 07:32:50 +0000 |
---|---|---|
committer | Daniel Stenberg <daniel@haxx.se> | 2006-03-20 07:32:50 +0000 |
commit | 5975229919b54c0a780bdc8d1bdd5baf6d5959bf (patch) | |
tree | fd144da47bb071213e2957ccff7929d7f530940b /RELEASE-NOTES | |
parent | 38295e8a75c5189fbb382c0bcb5720e47778e61a (diff) |
fixed tftp packet overflow risk
Diffstat (limited to 'RELEASE-NOTES')
-rw-r--r-- | RELEASE-NOTES | 13 |
1 files changed, 9 insertions, 4 deletions
diff --git a/RELEASE-NOTES b/RELEASE-NOTES index 4de87c211..5ce5b8e11 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -11,25 +11,30 @@ Curl and libcurl 7.15.3 This release includes the following changes: - o + o added docs for --ftp-method and CURLOPT_FTP_FILEMETHOD This release includes the following bugfixes: + o TFTP Packet Buffer Overflow Vulnerability: + http://curl.haxx.se/docs/adv_20060320.html + o properly detecting problems with sending the FTP command USER + o wrong error message shown when certificate verification failed o multi-part formpost with multi interface crash o the CURLFTPSSL_CONTROL setting for CURLOPT_FTP_SSL is acknowledged - o "SSL: couldn't set callback" is now a less serious problem + o "SSL: couldn't set callback" is now treated as a less serious problem o Interix build fix - o fixed "hang" when out of file handles at start + o fixed curl "hang" when out of file handles at start o prevent FTP uploads to URLs with trailing slash Other curl-related news since the previous public release: o pycurl-7.15.2 has been released: http://pycurl.sf.net + o http://curl.download.nextag.com/ is a new US curl web mirror! This release would not have looked like this without help, code, reports and advice from friends like these: Gisle Vanem, Dan Fandrich, Thomas Klausner, Todd Vierling, Peter Heuchert, - Markus Koetter + Markus Koetter, David McCreedy, Tor Arntsen Thanks! (and sorry if I forgot to mention someone) |