curl/RELEASE-NOTES

Curl and libcurl 7.54.1

 Public curl releases:         166
 Command line options:         207
 curl_easy_setopt() options:   245
 Public functions in libcurl:  61
 Contributors:                 1548

This release includes the following changes:

 o curl: show the libcurl release date in --version output [32]

This release includes the following bugfixes:

 o openssl: fix memory leak in servercert
 o tests: remove the html and PDF versions from the tarball
 o mbedtls: enable NTLM (& SMB) even if MD4 support is unavailable
 o typecheck-gcc: handle function pointers properly [1]
 o llist: no longer uses malloc [2]
 o gnutls: removed some code when --disable-verbose is configured
 o lib: fix maybe-uninitialized warnings
 o multi: clarify condition in curl_multi_wait [3]
 o schannel: Don't treat encrypted partial record as pending data [4]
 o configure: fix the -ldl check for openssl, add -lpthread check [5]
 o configure: accept -Og and -Ofast GCC flags [6]
 o Makefile: avoid use of GNU-specific form of $< [7]
 o if2ip: fix -Wcast-align warning
 o configure: stop prepending to LDFLAGS, CPPFLAGS [8]
 o curl: set a 100K buffer size by default [9]
 o typecheck-gcc: fix _curl_is_slist_info [10]
 o nss: do not leak PKCS #11 slot while loading a key [11]
 o nss: load libnssckbi.so if no other trust is specified [12]
 o examples: ftpuploadfrommem.c [13]
 o url: declare get_protocol_family() static [14]
 o examples/cookie_interface.c: changed to example.com
 o test1443: test --remote-time
 o curl: use utimes instead of obsolescent utime when available
 o url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
 o curl_rtmp: fix missing-variable-declarations warnings
 o tests: fixed OOM handling of unit tests to abort test
 o curl_setup: Ensure no more than one IDN lib is enabled [15]
 o tool: Fix missing prototype warnings for CURL_DOES_CONVERSIONS [16]
 o CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size [17]
 o curl: non-boolean command line args reject --no- prefixes [18]
 o telnet: Write full buffer instead of byte-by-byte [19]
 o typecheck-gcc: add missing string options [20]
 o typecheck-gcc: add support for CURLINFO_SOCKET [21]
 o opt man pages: many more now have examples
 o curl_setup_once: use SEND_QUAL_ARG2 for swrite [22]
 o test557: set a known good numeric locale
 o schannel: return a more specific error code for SEC_E_UNTRUSTED_ROOT
 o tests/server: make string literals const
 o runtests: use -R for random order [23]
 o unit1305: fix compiler warning
 o curl_slist_append.3: clarify a NULL input creates a new list
 o tests/server: run checksrc by default in debug-builds
 o tests: fix -Wcast-qual warnings
 o runtests.pl: simplify the datacheck read section
 o curl: remove --environment and tool_writeenv.c [24]
 o buildconf: fix hang on IRIX [25]
 o tftp: silence bad-function-cast warning
 o asyn-thread: fix unused macro warnings
 o tool_parsecfg: fix -Wcast-qual warning
 o sendrecv: fix MinGW-w64 warning
 o test537: use correct variable type [26]
 o rand: treat fake entropy the same regardless of endianness [27]
 o curl: generate the --help output [28]
 o tests: removed redundant --trace-ascii arguments
 o multi: assign IDs to all timers and make each timer singleton
 o multi: use a fixed array of timers instead of malloc [29]
 o mbedtls: Support server renegotiation request [30]
 o pipeline: fix mistakenly trying to pipeline POSTs [31]
 o lib510: don't write past the end of the buffer if it's too small
 o CURLOPT_HTTPPROXYTUNNEL.3: clarify, add example
 o SecureTransport/DarwinSSL: Implement public key pinning [33]
 o curl.1: clarify --config
 o curl_sasl: fix build error with CURL_DISABLE_CRYPTO_AUTH + USE_NTLM [34]
 o darwinssl: Fix exception when processing a client-side certificate [35]
 o curl.1: mention --oauth2-bearer's <token> argument
 o mkhelp.pl: do not add current time into curl binary [36]
 o asiohiper.cpp / evhiperfifo.c: deal with negative timerfunction input [37]
 o ssh: fix memory leak in disconnect due to timeout [38]
 o tests: stabilize test 1034 [39]
 o cmake: auto detection of CURL_CA_BUNDLE/CURL_CA_PATH [40]
 o assert: avoid, use DEBUGASSERT instead [41]
 o LDAP: using ldap_bind_s on Windows with methods [42]
 o redirect: store the "would redirect to" URL when max redirs is reached [43]
 o winbuild: fix the nghttp2 build [44]
 o examples: fix -Wimplicit-fallthrough warnings
 o time: fix type conversions and compiler warnings [45]

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (https://curl.haxx.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

  Akhil Kedia, Alan Jenkins, Anatol Belski, Bernhard M. Wiedemann,
  Brian Childs, canavan at github, Dan Fandrich, Daniel Stenberg, Gisle Vanem,
  Helmut K. C. Tessarek, Joel Depooter, jonrumsey at github, Kai Engert,
  Kamil Dudka, Kevin Ji, Lloyd Fournier, Marcel Raad, Martin Kepplinger,
  Michael Kaufmann, Nick Zitzmann, Phil Crump, Ray Satiro, Richard Hsu,
  Ron Eldor, Sergei Nikulov, Simon Warta, stootill at github, Thomas Klausner,
  Travis Burtrum, wyattoday at github,
  (30 contributors)

        Thanks! (and sorry if I forgot to mention someone)

References to bug reports and discussions on issues:

 [1] = https://curl.haxx.se/bug/?i=1403
 [2] = https://curl.haxx.se/bug/?i=1435
 [3] = https://curl.haxx.se/bug/?i=1439
 [4] = https://curl.haxx.se/bug/?i=1392
 [5] = https://curl.haxx.se/bug/?i=1427
 [6] = https://curl.haxx.se/bug/?i=1440
 [7] = https://curl.haxx.se/bug/?i=1432
 [8] = https://curl.haxx.se/bug/?i=1420
 [9] = https://curl.haxx.se/bug/?i=1446
 [10] = https://curl.haxx.se/bug/?i=1447
 [11] = https://bugzilla.redhat.com/1444860
 [12] = https://curl.haxx.se/bug/?i=1414
 [13] = https://curl.haxx.se/bug/?i=1451
 [14] = https://curl.haxx.se/mail/lib-2017-04/0127.html
 [15] = https://github.com/curl/curl/issues/1441#issuecomment-297689856
 [16] = https://curl.haxx.se/bug/?i=1460
 [17] = https://curl.haxx.se/bug/?i=1449
 [18] = https://curl.haxx.se/bug/?i=1453
 [19] = https://curl.haxx.se/bug/?i=1389
 [20] = https://curl.haxx.se/bug/?i=1452
 [21] = https://curl.haxx.se/bug/?i=1452
 [22] = https://curl.haxx.se/bug/?i=1464
 [23] = https://curl.haxx.se/bug/?i=1466
 [24] = https://curl.haxx.se/bug/?i=1463
 [25] = https://curl.haxx.se/bug/?i=1471
 [26] = https://curl.haxx.se/bug/?i=1469
 [27] = https://curl.haxx.se/bug/?i=1315
 [28] = https://curl.haxx.se/bug/?i=1465
 [29] = https://curl.haxx.se/bug/?i=1472
 [30] = https://curl.haxx.se/bug/?i=1475
 [31] = https://curl.haxx.se/bug/?i=1481
 [32] = https://curl.haxx.se/bug/?i=1474
 [33] = https://curl.haxx.se/bug/?i=1400
 [34] = https://curl.haxx.se/bug/?i=1487
 [35] = https://curl.haxx.se/bug/?i=1450
 [36] = https://curl.haxx.se/bug/?i=1490
 [37] = https://curl.haxx.se/bug/?i=1253
 [38] = https://curl.haxx.se/bug/?i=1479
 [39] = https://curl.haxx.se/bug/?i=1488
 [40] = https://curl.haxx.se/bug/?i=1461
 [41] = https://curl.haxx.se/bug/?i=1504
 [42] = https://curl.haxx.se/bug/?i=878
 [43] = https://curl.haxx.se/bug/?i=1489
 [44] = https://curl.haxx.se/bug/?i=1321
 [45] = https://curl.haxx.se/bug/?i=1499