curl/RELEASE-NOTES

Curl and libcurl 7.28.1

 Public curl releases:         130
 Command line options:         152
 curl_easy_setopt() options:   199
 Public functions in libcurl:  58
 Known libcurl bindings:       39
 Contributors:                 979

This release includes the following changes:

 o metalink/md5: Use CommonCrypto on Apple operating systems
 o href_extractor: new example code extracting href elements

This release includes the following bugfixes:

 o Fix broken libmetalink-aware OpenSSL build
 o gnutls: fix the error is fatal logic [1]
 o darwinssl: un-broke iOS build, fix error on server disconnect
 o asyn-ares: restore functionality with c-ares < 1.6.1 [2]
 o tlsauthtype: deal with the string case insensitively [3]
 o Fixed MSVC libssh2 static build
 o evhiperfifo: fix the pointer passed to WRITEDATA [6]
 o BUGS: fix the bug tracker URL [4]
 o winbuild: Use machine type of development environment
 o FTP: prevent the multi interface from blocking [5]
 o uniformly use AM_CPPFLAGS, avoid deprecated INCLUDES
 o httpcustomheader.c: free the headers after use
 o fix >2000 bytes POST over NTLM-using proxy [7]
 o redirects to URLs with fragments [8]
 o don't send '#' fragments when using proxy [9]
 o OpenSSL: show full issuer string [10]
 o fix HTTP auth regression [11]
 o CURLOPT_SSL_VERIFYHOST: stop supporting the 1 value [12]
 o build failure when configured with --with-nss --with-libmetalink [13]
 o ftp: EPSV-disable fix over SOCKS [14]
 o Digest: Add microseconds into nounce calculation [15]
 o SCP/SFTP: improve error code used for send failures
 o SSL: Several SSL-backend related fixes
 o removed the notorious "additional stuff not fine" debug output
 o OpenSSL: Disable SSL/TLS compression - avoid the "CRIME" attack
 o FILE: Make upload-writes unbuffered
 o custom memory callbacks failure with HTTP proxy (and more) [16]
 o TFTP: handle resends
 o autoconf: don't force-disable compiler debug option
 o winbuild: Fix PDB file output [17]
 o test2032: spurious failure caused by premature termination [18]

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

 Guenter Knauf, Alessandro Ghedini, Nick Zitzmann, Michal Kowalczyk,
 Jeff Connelly, Oscar Norlander, Guido Berhoerster, Marc Hoersken,
 Dave Reisner, Jan Ehrhardt, John Suprock, Alessandro Ghedini,
 Lars Buitinck, Anton Malov, Sergei Nikulov, Patrick Monnerat,
 Gabriel Sjoberg, Oscar Koeroo, Fabian Keil, Johnny Luong, Cristian Rodríguez,
 Sebastian Rasmussen, Mark Snelling, Christian Vogt, Marcin Adamski,
 Ajit Dhumale

        Thanks! (and sorry if I forgot to mention someone)

References to bug reports and discussions on issues:

 [1] = http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=690551
 [2] = http://curl.haxx.se/bug/view.cgi?id=3577710
 [3] = http://curl.haxx.se/bug/view.cgi?id=3578418
 [4] = http://curl.haxx.se/bug/view.cgi?id=3582408
 [5] = http://curl.haxx.se/bug/view.cgi?id=3579064
 [6] = http://curl.haxx.se/bug/view.cgi?id=3582407
 [7] = http://curl.haxx.se/bug/view.cgi?id=3582321
 [8] = http://curl.haxx.se/bug/view.cgi?id=3581898
 [9] = http://curl.haxx.se/bug/view.cgi?id=3579813
 [10] = http://curl.haxx.se/bug/view.cgi?id=3579286
 [11] = http://curl.haxx.se/bug/view.cgi?id=3582718
 [12] = http://daniel.haxx.se/blog/2012/10/25/libcurl-claimed-to-be-dangerous/
 [13] = http://curl.haxx.se/bug/view.cgi?id=3578163
 [14] = http://curl.haxx.se/bug/view.cgi?id=3586338
 [15] = https://github.com/bagder/curl/pull/50
 [16] = http://curl.haxx.se/mail/lib-2012-11/0125.html
 [17] = http://curl.haxx.se/bug/view.cgi?id=3586741
 [18] = http://curl.haxx.se/mail/lib-2012-11/0095.html