1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
|
Curl and libcurl 7.61.0
Public curl releases: 175
Command line options: 218
curl_easy_setopt() options: 258
Public functions in libcurl: 74
Contributors: 1766
This release includes the following changes:
o getinfo: add microsecond precise timers for seven intervals [3]
o curl: show headers in bold, switch off with --no-styled-output [10]
o httpauth: add support for Bearer tokens [16]
o Add CURLOPT_TLS13_CIPHERS and CURLOPT_PROXY_TLS13_CIPHERS [30]
o curl: --tls13-ciphers and --proxy-tls13-ciphers [30]
o Add CURLOPT_DISALLOW_USERNAME_IN_URL [32]
o curl: --disallow-username-in-url [32]
This release includes the following bugfixes:
o CVE-2018-0500: smtp: fix SMTP send buffer overflow [82]
o schannel: disable client cert option if APIs not available [1]
o schannel: disable manual verify if APIs not available
o tests/libtest/Makefile: Do not unconditionally add gcc-specific flags [2]
o openssl: acknowledge --tls-max for default version too [4]
o stub_gssapi: fix 'unused parameter' warnings
o examples/progressfunc: make it build on both new and old libcurls [5]
o docs: mention it is HA Proxy protocol "version 1" [6]
o curl_fnmatch: only allow two asterisks for matching [7]
o docs: clarify CURLOPT_HTTPGET [8]
o configure: replace a AC_TRY_RUN with CURL_RUN_IFELSE [9]
o configure: do compile-time SIZEOF checks instead of run-time [9]
o checksrc: make sure sizeof() is used *with* parentheses [11]
o CURLOPT_ACCEPT_ENCODING.3: add brotli and clarify a bit
o schannel: make CAinfo parsing resilient to CR/LF [12]
o tftp: make sure error is zero terminated before printfing it
o http resume: skip body if http code 416 (range error) is ignored [13]
o configure: add basic test of --with-ssl prefix [14]
o cmake: set -d postfix for debug builds [15]
o multi: provide a socket to wait for in Curl_protocol_getsock [17]
o content_encoding: handle zlib versions too old for Z_BLOCK [18]
o winbuild: only delete OUTFILE if it exists [19]
o winbuild: In MakefileBuild.vc fix typo DISTDIR->DIRDIST [20]
o schannel: add failf calls for client certificate failures [21]
o cmake: Fix the test for fsetxattr and strerror_r
o curl.1: Fix cmdline-opts reference errors [22]
o cmdline-opts/gen.pl: warn if mutexes: or see-also: list non-existing options
o cmake: check for getpwuid_r [23]
o configure: fix ssh2 linking when built with a static mbedtls [24]
o psl: use latest psl and refresh it periodically [25]
o fnmatch: insist on escaped bracket to match [26]
o KNOWN_BUGS: restore text regarding #2101 [27]
o INSTALL: LDFLAGS=-Wl,-R/usr/local/ssl/lib [28]
o configure: override AR_FLAGS to silence warning [29]
o os400: implement mime api EBCDIC wrappers
o curl.rc: embed manifest for correct Windows version detection [31]
o strictness: correct {infof, failf} format specifiers [33]
o tests: update .gitignore for libtests [34]
o configure: check for declaration of getpwuid_r [35]
o fnmatch: use the system one if available [36]
o CURLOPT_RESOLVE: always purge old entry first [37]
o multi: remove a potentially bad DEBUGF() [38]
o curl_addrinfo: use same #ifdef conditions in source as header
o build: remove the Borland specific makefiles [39]
o axTLS: not considered fit for use [40]
o cmdline-opts/cert-type.d: mention "p12" as a recognized type
o system.h: add support for IBM xlc C compiler [41]
o tests/libtest: Add lib1521 to nodist_SOURCES [42]
o mk-ca-bundle.pl: leave certificate name untouched [43]
o boringssl + schannel: undef X509_NAME in lib/schannel.h [44]
o openssl: assume engine support in 1.0.1 or later [45]
o cppcheck: fix warnings [46]
o test 46: make test pass after year 2025 [47]
o schannel: support selecting ciphers [48]
o Curl_debug: remove dead printhost code [49]
o test 1455: unflakified [50]
o Curl_init_do: handle NULL connection pointer passed in [51]
o progress: remove a set of unused defines [52]
o mk-ca-bundle.pl: make -u delete certdata.txt if found not changed [53]
o GOVERNANCE.md: explains how this project is run [54]
o configure: use pkg-config for c-ares detection [55]
o configure: enhance ability to build with static openssl [56]
o maketgz: fix sed issues on OSX [57]
o multi: fix memory leak when stopped during name resolve [58]
o CURLOPT_INTERFACE.3: interface names not supported on Windows
o url: fix dangling conn->data pointer [59]
o cmake: allow multiple SSL backends [60]
o system.h: fix for gcc on 32 bit OpenServer [61]
o ConnectionExists: make sure conn->data is set when "taking" a connection [62]
o multi: fix crash due to dangling entry in connect-pending list [63]
o CURLOPT_SSL_VERIFYPEER.3: Add performance note [64]
o netrc: use a larger buffer to support longer passwords [65]
o url: check Curl_conncache_add_conn return code [66]
o configure: Add dependent libraries after crypto [67]
o easy_perform: faster local name resolves by using *multi_timeout() [68]
o getnameinfo: not used, removed all configure checks [69]
o travis: add a build using the synchronous name resolver [70]
o CURLINFO_TLS_SSL_PTR.3: improve the example [71]
o openssl: allow TLS 1.3 by default [72]
o openssl: make the requested TLS version the *minimum* wanted [73]
o openssl: Remove some dead code [74]
o telnet: fix clang warnings [75]
o DEPRECATE: new doc describing planned item removals [76]
o example/crawler.c: simple crawler based on libxml2 [77]
o libssh: goto DISCONNECT state on error, not SESSION_FREE [78]
o CMake: Remove unused functions [79]
o darwinssl: allow High Sierra users to build the code using GCC [80]
o scripts: include _curl as part of CLEANFILES [81]
o examples: fix -Wformat warnings
o curl_setup: include <winerror.h> before <windows.h>
o schannel: make more cipher options conditional [83]
o CMake: remove redundant and old end-of-block syntax [84]
o post303.d: clarify that this is an RFC violation [85]
This release includes the following known bugs:
o see docs/KNOWN_BUGS (https://curl.haxx.se/docs/knownbugs.html)
This release would not have looked like this without help, code, reports and
advice from friends like these:
Adrian Peniak, Alejandro R. Sedeño, Andreas Olsson, Archangel_SDY on github,
Bernhard M. Wiedemann, Bernhard Walle, Björn Stenberg, bsammon on github,
Dagobert Michelsen, Daniel Stenberg, Dario Nieuwenhuis, Dave Reisner,
elephoenix on github, Fabrice Fontaine, Frank Gevaerts, Gaurav Malhotra,
Gisle Vanem, Ithubg on github, Jakub Zakrzewski, Javier Blazquez,
Jeroen Ooms, Johannes Schindelin, Kevin R. Bulgrien, Linus Lewandowski,
Lyman Epp, Mamta Upadhyay, Marcel Raad, Marian Klymov, Matteo Bignotti,
Max Dymond, Max Savenkov, Nick Zitzmann, Oleg Pudeyev, Patrick Monnerat,
Patrick Schlangen, Per Malmberg, Peter Varga, Peter Wu, Philip Prindeville,
pszemus on github, Raphael Gozzo, Ray Satiro, Richard Alcock,
Rikard Falkeborn, Robert Prag, Ruslan Baratov, Sean Miller, Sergei Nikulov,
Stephan Mühlstrasser, Vasiliy Faronov, Viktor Szakats, Vladimir Kotal,
Will Dietz, Yaakov Selkowitz, zzq1015 on github,
(55 contributors)
Thanks! (and sorry if I forgot to mention someone)
References to bug reports and discussions on issues:
[1] = https://curl.haxx.se/bug/?i=2522
[2] = https://curl.haxx.se/bug/?i=2576
[3] = https://curl.haxx.se/bug/?i=2495
[4] = https://curl.haxx.se/bug/?i=2571
[5] = https://curl.haxx.se/bug/?i=2584
[6] = https://curl.haxx.se/bug/?i=2579
[7] = https://curl.haxx.se/bug/?i=2587
[8] = https://curl.haxx.se/bug/?i=2590
[9] = https://curl.haxx.se/bug/?i=2586
[10] = https://curl.haxx.se/bug/?i=2538
[11] = https://curl.haxx.se/bug/?i=2563
[12] = https://curl.haxx.se/bug/?i=2592
[13] = https://curl.haxx.se/bug/?i=1163
[14] = https://curl.haxx.se/bug/?i=2580
[15] = https://curl.haxx.se/bug/?i=2121
[16] = https://curl.haxx.se/bug/?i=2102
[17] = https://curl.haxx.se/mail/lib-2018-05/0062.html
[18] = https://curl.haxx.se/bug/?i=2606
[19] = https://curl.haxx.se/bug/?i=2602
[20] = https://curl.haxx.se/bug/?i=2603
[21] = https://curl.haxx.se/bug/?i=2604
[22] = https://curl.haxx.se/bug/?i=2612
[23] = https://curl.haxx.se/bug/?i=2609
[24] = https://curl.haxx.se/bug/?i=2613
[25] = https://curl.haxx.se/bug/?i=2553
[26] = https://curl.haxx.se/bug/?i=2614
[27] = https://curl.haxx.se/bug/?i=2618
[28] = https://curl.haxx.se/bug/?i=2615
[29] = https://curl.haxx.se/bug/?i=2617
[30] = https://curl.haxx.se/bug/?i=2435
[31] = https://curl.haxx.se/bug/?i=1221
[32] = https://curl.haxx.se/bug/?i=2340
[33] = https://curl.haxx.se/bug/?i=2623
[34] = https://curl.haxx.se/bug/?i=2624
[35] = https://curl.haxx.se/bug/?i=2609
[36] = https://curl.haxx.se/bug/?i=2626
[37] = https://curl.haxx.se/bug/?i=2622
[38] = https://curl.haxx.se/bug/?i=2627
[39] = https://curl.haxx.se/bug/?i=2629
[40] = https://curl.haxx.se/bug/?i=2628
[41] = https://curl.haxx.se/bug/?i=2637
[42] = https://curl.haxx.se/bug/?i=2633
[43] = https://curl.haxx.se/bug/?i=2640
[44] = https://curl.haxx.se/bug/?i=2634
[45] = https://curl.haxx.se/bug/?i=2641
[46] = https://curl.haxx.se/bug/?i=2631
[47] = https://curl.haxx.se/bug/?i=2646
[48] = https://curl.haxx.se/bug/?i=2630
[49] = https://curl.haxx.se/bug/?i=2647
[50] = https://curl.haxx.se/bug/?i=2649
[51] = https://curl.haxx.se/bug/?i=2653
[52] = https://curl.haxx.se/bug/?i=2654
[53] = https://curl.haxx.se/bug/?i=2655
[54] = https://curl.haxx.se/bug/?i=2657
[55] = https://curl.haxx.se/bug/?i=2203
[56] = https://curl.haxx.se/bug/?i=2199
[57] = https://curl.haxx.se/bug/?i=2660
[58] = https://curl.haxx.se/bug/?i=1968
[59] = https://curl.haxx.se/bug/?i=2669
[60] = https://curl.haxx.se/bug/?i=2665
[61] = https://curl.haxx.se/mail/lib-2018-06/0100.html
[62] = https://curl.haxx.se/bug/?i=2674
[63] = https://curl.haxx.se/bug/?i=2677
[64] = https://curl.haxx.se/bug/?i=2673
[65] = https://curl.haxx.se/bug/?i=2676
[66] = https://curl.haxx.se/bug/?i=2681
[67] = https://curl.haxx.se/bug/?i=2684
[68] = https://curl.haxx.se/bug/?i=2685
[69] = https://curl.haxx.se/bug/?i=2687
[70] = https://curl.haxx.se/bug/?i=2689
[71] = https://curl.haxx.se/bug/?i=2690
[72] = https://curl.haxx.se/bug/?i=2692
[73] = https://curl.haxx.se/bug/?i=2691
[74] = https://curl.haxx.se/bug/?i=2698
[75] = https://curl.haxx.se/bug/?i=2696
[76] = https://curl.haxx.se/dev/deprecate.html
[77] = https://curl.haxx.se/bug/?i=2706
[78] = https://curl.haxx.se/bug/?i=2708
[79] = https://curl.haxx.se/bug/?i=2711
[80] = https://curl.haxx.se/bug/?i=2656
[81] = https://curl.haxx.se/bug/?i=2718
[82] = https://curl.haxx.se/docs/adv_2018-70a2.html
[83] = https://curl.haxx.se/bug/?i=2721
[84] = https://curl.haxx.se/bug/?i=2715
[85] = https://curl.haxx.se/bug/?i=2723
|
