aboutsummaryrefslogtreecommitdiff
path: root/RELEASE-NOTES
diff options
context:
space:
mode:
Diffstat (limited to 'RELEASE-NOTES')
-rw-r--r--RELEASE-NOTES218
1 files changed, 6 insertions, 212 deletions
diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 339190478..b67c7662d 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -1,136 +1,18 @@
-Curl and libcurl 7.54.0
+Curl and libcurl 7.54.1
- Public curl releases: 165
+ Public curl releases: 166
Command line options: 207
curl_easy_setopt() options: 245
Public functions in libcurl: 61
Contributors: 1538
This release includes the following changes:
- o Add CURL_SSLVERSION_MAX_* constants to CURLOPT_SSLVERSION [19]
- o Add --max-tls [19]
- o Add CURLOPT_SUPPRESS_CONNECT_HEADERS [24]
- o Add --suppress-connect-headers [24]
+
+ o
This release includes the following bugfixes:
- o CVE-2017-7468: switch off SSL session id when client cert is used [68]
- o cmake: Replace invalid UTF-8 byte sequence [1]
- o tests: use consistent environment variables for setting charset
- o proxy: fixed a memory leak on OOM
- o ftp: removed an erroneous free in an OOM path
- o docs: de-duplicate file lists in the Makefiles [2]
- o ftp: fixed a NULL pointer dereference on OOM
- o gopher: fixed detection of an error condition from Curl_urldecode
- o url: fix unix-socket support for proxy-disabled builds [3]
- o test1139: allow for the possibility that the man page is not rebuilt
- o cyassl: get library version string at runtime
- o digest_sspi: fix compilation warning
- o tests: enable HTTP/2 tests to run with non-default port numbers
- o warnless: suppress compiler warning
- o darwinssl: Warn that disabling host verify also disables SNI [4]
- o configure: fix for --enable-pthreads [5]
- o checksrc.bat: Ignore curl_config.h.in, curl_config.h
- o no-keepalive.d: fix typo [6]
- o configure: fix --with-zlib when a path is specified [7]
- o build: fix gcc7 implicit fallthrough warnings [8]
- o fix potential use of uninitialized variables [9]
- o CURLOPT_SSL_CTX_FUNCTION.3: Fix EXAMPLE formatting errors [10]
- o CMake: Reorganize SSL support, separate WinSSL and SSPI [11]
- o CMake: Add DarwinSSL support [12]
- o CMake: Add mbedTLS support [13]
- o ares: return error at once if timed out before name resolve starts [14]
- o BINDINGS: added C++, perl, go and Scilab bindings
- o URL: return error on malformed URLs with junk after port number
- o KNOWN_BUGS: Add DarwinSSL won't import PKCS#12 without a password [15]
- o http2: Fix assertion error on redirect with CL=0 [16]
- o updatemanpages.pl: Update man pages to use current date and versions [17]
- o --insecure: clarify that this option is for server connections [18]
- o mkhelp: simplified the gzip code
- o build: fixed making man page in out-of-tree tarball builds
- o tests: disabled 1903 due to flakiness
- o openssl: add two /* FALLTHROUGH */ to satisfy coverity
- o cmdline-opts: fixed a few typos
- o authneg: clear auth.multi flag at http_done [20]
- o curl_easy_reset: Also reset the authentication state [21]
- o proxy: skip SSL initialization for closed connections [22]
- o http_proxy: ignore TE and CL in CONNECT 2xx responses [23]
- o tool_writeout: fixed a buffer read overrun on --write-out
- o make: regenerate docs/curl.1 by running make in docs [25]
- o winbuild: add basic support for OpenSSL 1.1.x [26]
- o build: removed redundant DEPENDENCIES from makefiles
- o CURLINFO_LOCAL_PORT.3: added example
- o curl: show HTTPS-Proxy options on CURLE_SSL_CACERT [27]
- o tests: strip more options from non-HTTP --libcurl tests
- o tests: fixed the documented test server port numbers
- o runtests.pl: fixed display of the Gopher IPv6 port number
- o multi: fix streamclose() crash in debug mode [28]
- o cmake: build manual pages [29]
- o cmake: add support for building HTML and PDF docs [30]
- o mbedtls: add support for CURLOPT_SSL_CTX_FUNCTION [31]
- o make: introduce 'test-nonflaky' target
- o CURLINFO_PRIMARY_IP.3: add example
- o tests/README: mention nroff for --manual tests [32]
- o mkhelp: disable compression if the perl gzip module is unavailable
- o openssl: fall back on SSL_ERROR_* string when no error detail [33]
- o asiohiper: make sure socket is open in event_cb [34]
- o tests/README: make "Run" section foolproof [35]
- o curl: check for end of input in writeout backslash handling
- o .gitattributes: turn off CRLF for *.am [36]
- o multi: fix MinGW-w64 compiler warnings
- o schannel: fix variable shadowing warning
- o openssl: exclude DSA code when OPENSSL_NO_DSA is defined [37]
- o http: Fix proxy connection reuse with basic-auth [38]
- o pause: handle mixed types of data when paused [39]
- o http: do not treat FTPS over CONNECT as HTTPS
- o conncache: make hashkey avoid malloc [40]
- o make: use the variable MAKE for recursive calls [41]
- o curl: fix callback argument inconsistency [42]
- o NTLM: check for features with #ifdef instead of #if [43]
- o cmake: add several missing files to the dist
- o select: use correct SIZEOF_ constant [44]
- o connect: fix unreferenced parameter warning
- o schannel: fix unused variable warning
- o gcc7: fix ‘*’ in boolean context [45]
- o http2: silence unused parameter warnings
- o ssh: fix narrowing conversion warning
- o telnet: (win32) fix read callback return variable [46]
- o docs: Explain --fail-early does not imply --fail [47]
- o docs: added examples for CURLINFO_FILETIME.3 and CURLOPT_FILETIME.3
- o tests/server/util: remove in6addr_any for recent MinGW [48]
- o multi: make curl_multi_wait avoid malloc in the typical case [49]
- o include: curl/system.h is a run-time version of curlbuild.h [50]
- o easy: silence compiler warning
- o llist: replace Curl_llist_alloc with Curl_llist_init [51]
- o hash: move key into hash struct to reduce mallocs [52]
- o url: don't free postponed data on connection reuse [53]
- o curl_sasl: declare mechtable static
- o curl: fix Windows Unicode build
- o multi: fix queueing of pending easy handles [54]
- o tool_operate: fix MinGW compiler warning [55]
- o low_speed_limit: improved function for longer time periods [56]
- o gtls: fix compiler warning
- o sspi: print out InitializeSecurityContext() error message [57]
- o schannel: fix compiler warnings [58]
- o vtls: fix unreferenced variable warnings
- o INSTALL.md: fix secure transport configure arguments
- o CURLINFO_SCHEME.3: fix variable type
- o libcurl-thread.3: also mention threaded-resolver [59]
- o nss: load CA certificates even with --insecure [60]
- o openssl: fix this statement may fall through [61]
- o poll: prefer <poll.h> over <sys/poll.h> [62]
- o polarssl: unbreak build with versions < 1.3.8 [63]
- o Curl_expire_latest: ignore already expired timers [64]
- o configure: turn implicit function declarations into errors [65]
- o mbedtls: fix memory leak in error path [66]
- o http2: fix handle leak in error path [67]
- o .gitattributes: force shell scripts to LF [69]
- o configure.ac: ignore CR after version numbers [70]
- o extern-scan.pl: strip trailing CR [71]
- o openssl: make SSL_ERROR_to_str more future-proof [72]
- o openssl: fix thread-safety bugs in error-handling [73]
- o openssl: don't try to print nonexistant peer private keys [74]
- o nss: fix MinGW compiler warnings [75]
+ o
This release includes the following known bugs:
@@ -139,97 +21,9 @@ This release includes the following known bugs:
This release would not have looked like this without help, code, reports and
advice from friends like these:
- Ales Mlakar, Alex Bligh, Alexis La Goutte, Anatol Belski, Anders Roxell,
- Andrew Krieger, Antony74 on github, Antti Hätälä, Brian Carpenter,
- Carlo Cannas, Carlo Teubner, Dan Fandrich, Dániel Bakai, Daniel Gustafsson,
- Daniel Stenberg, David Benjamin, Desmond O. Chang, Edward Kimmel,
- Gisle Vanem, Giuseppe Persico, Greg Rowe, Hanno Böck, Isaac Boukris,
- Joel Depooter, Jozef Kralik, Justin Clift, ka7 on github, Kamil Dudka,
- Larry Stefani, lijian996 on github, madblobfish on github,
- Maksim Stsepanenka, Marc-Antoine Perennou, Marcel Raad, Martin Kepplinger,
- mccormickt12 on github, Michael Kaufmann, Michael Maltese, mkzero on github,
- Nehal J Wani, neheb on github, Orange Tsai, Palo Markovic, Paul Harris,
- Peter Pentchev, Peter Wu, Rainer Canavan, Ray Satiro, Simon Warta,
- Stephen Toub, Steve Brokenshire, Sylvestre Ledru, Tatsuhiro Tsujikawa,
- Thomas Glanzmann, zelinchen on github,
- (55 contributors)
Thanks! (and sorry if I forgot to mention someone)
References to bug reports and discussions on issues:
- [1] = https://curl.haxx.se/bug/?i=1275
- [2] = https://curl.haxx.se/bug/?i=1287
- [3] = https://curl.haxx.se/bug/?i=1289
- [4] = https://curl.haxx.se/bug/?i=1240
- [5] = https://curl.haxx.se/bug/?i=1295
- [6] = https://curl.haxx.se/bug/?i=1301
- [7] = https://curl.haxx.se/bug/?i=1292
- [8] = https://curl.haxx.se/bug/?i=1297
- [9] = https://curl.haxx.se/bug/?i=1304
- [10] = https://curl.haxx.se/bug/?i=1290
- [11] = https://curl.haxx.se/bug/?i=1228
- [12] = https://curl.haxx.se/bug/?i=1228
- [13] = https://curl.haxx.se/bug/?i=1228
- [14] = https://curl.haxx.se/mail/lib-2017-03/0004.html
- [15] = https://curl.haxx.se/bug/?i=1308
- [16] = https://curl.haxx.se/bug/?i=1286
- [17] = https://curl.haxx.se/bug/?i=1058
- [18] = https://curl.haxx.se/mail/lib-2017-03/0002.html
- [19] = https://curl.haxx.se/bug/?i=1166
- [20] = https://curl.haxx.se/bug/?i=1095
- [21] = https://curl.haxx.se/bug/?i=1095
- [22] = https://curl.haxx.se/bug/?i=1239
- [23] = https://curl.haxx.se/bug/?i=1317
- [24] = https://curl.haxx.se/bug/?i=783
- [25] = https://curl.haxx.se/mail/lib-2017-03/0017.html
- [26] = https://curl.haxx.se/bug/?i=1322
- [27] = https://curl.haxx.se/bug/?i=1331
- [28] = https://curl.haxx.se/bug/?i=1329
- [29] = https://curl.haxx.se/bug/?i=1288
- [30] = https://curl.haxx.se/bug/?i=1288
- [31] = https://curl.haxx.se/bug/?i=1272
- [32] = https://curl.haxx.se/bug/?i=1342
- [33] = https://curl.haxx.se/bug/?i=1348
- [34] = https://curl.haxx.se/bug/?i=1318
- [35] = https://curl.haxx.se/bug/?i=1352
- [36] = https://curl.haxx.se/bug/?i=1344
- [37] = https://curl.haxx.se/bug/?i=1361
- [38] = https://curl.haxx.se/bug/?i=1350
- [39] = https://curl.haxx.se/bug/?i=1354
- [40] = https://curl.haxx.se/bug/?i=1365
- [41] = https://curl.haxx.se/bug/?i=1366
- [42] = https://curl.haxx.se/mail/lib-2017-03/0116.html
- [43] = https://github.com/curl/curl/pull/1367
- [44] = https://curl.haxx.se/bug/?i=1362
- [45] = https://curl.haxx.se/bug/?i=1371
- [46] = https://github.com/curl/curl/issues/1225#issuecomment-290340890
- [47] = https://curl.haxx.se/bug/?i=1375
- [48] = https://curl.haxx.se/bug/?i=1379
- [49] = https://curl.haxx.se/bug/?i=1377
- [50] = https://curl.haxx.se/bug/?i=1373
- [51] = https://curl.haxx.se/bug/?i=1381
- [52] = https://curl.haxx.se/bug/?i=1376
- [53] = https://curl.haxx.se/bug/?i=1380
- [54] = https://curl.haxx.se/bug/?i=1358
- [55] = https://curl.haxx.se/bug/?i=1378
- [56] = https://curl.haxx.se/bug/?i=1390
- [57] = https://curl.haxx.se/bug/?i=1395
- [58] = https://curl.haxx.se/bug/?i=1394
- [59] = https://curl.haxx.se/mail/lib-2017-04/0044.html
- [60] = https://curl.haxx.se/bug/?i=851
- [61] = https://curl.haxx.se/bug/?i=1402
- [62] = https://curl.haxx.se/bug/?i=1406
- [63] = https://curl.haxx.se/bug/?i=1401
- [64] = https://curl.haxx.se/mail/lib-2017-04/0030.html
- [65] = https://curl.haxx.se/bug/?i=1409
- [66] = https://curl.haxx.se/bug/?i=1417
- [67] = https://curl.haxx.se/bug/?i=1416
- [68] = https://curl.haxx.se/docs/adv_20170419.html
- [69] = https://curl.haxx.se/bug/?i=1422
- [70] = https://curl.haxx.se/bug/?i=1422
- [71] = https://curl.haxx.se/bug/?i=1422
- [72] = https://curl.haxx.se/bug/?i=1424
- [73] = https://curl.haxx.se/bug/?i=1424
- [74] = https://curl.haxx.se/bug/?i=1425
- [75] = https://curl.haxx.se/bug/?i=1393
+ [1] = https://curl.haxx.se/bug/?i=