curl/RELEASE-NOTES

Curl and libcurl 7.15.3

 Public curl release number:               93
 Releases counted from the very beginning: 120
 Available command line options:           112
 Available curl_easy_setopt() options:     129
 Number of public functions in libcurl:    46
 Amount of public web site mirrors:        31
 Number of known libcurl bindings:         32
 Number of contributors:                   487

This release includes the following changes:

 o added docs for --ftp-method and CURLOPT_FTP_FILEMETHOD

This release includes the following bugfixes:

 o TFTP Packet Buffer Overflow Vulnerability:
   http://curl.haxx.se/docs/adv_20060320.html
 o properly detecting problems with sending the FTP command USER
 o wrong error message shown when certificate verification failed
 o multi-part formpost with multi interface crash
 o the CURLFTPSSL_CONTROL setting for CURLOPT_FTP_SSL is acknowledged
 o "SSL: couldn't set callback" is now treated as a less serious problem
 o Interix build fix
 o fixed curl "hang" when out of file handles at start
 o prevent FTP uploads to URLs with trailing slash

Other curl-related news since the previous public release:

 o pycurl-7.15.2 has been released: http://pycurl.sf.net
 o http://curl.download.nextag.com/ is a new US curl web mirror!

This release would not have looked like this without help, code, reports and
advice from friends like these:

 Gisle Vanem, Dan Fandrich, Thomas Klausner, Todd Vierling, Peter Heuchert,
 Markus Koetter, David McCreedy, Tor Arntsen

        Thanks! (and sorry if I forgot to mention someone)
start over on what might become 7.15.3 2006-02-27 18:14:14 +00:00			`Curl and libcurl 7.15.3`
working draft of the upcoming 7.10.8 release notes 2003-09-22 21:38:52 +00:00
start over on what might become 7.15.3 2006-02-27 18:14:14 +00:00			`Public curl release number: 93`
			`Releases counted from the very beginning: 120`
Peter Su added support for SOCKS4 proxies. Enable this by setting the proxy type to the already provided type CURLPROXY_SOCKS4. I added a --socks4 option that works like the current --socks5 option but instead use the socks4 protocol. 2006-02-21 07:46:41 +00:00			`Available command line options: 112`
Karl M added the CURLOPT_CONNECT_ONLY and CURLINFO_LASTSOCKET options that an app can use to let libcurl only connect to a remote host and then extract the socket from libcurl. libcurl will then not attempt to do any transfer at all after the connect is done. 2006-02-11 22:35:16 +00:00			`Available curl_easy_setopt() options: 129`
with all external functions marked with CURL_EXTERN it is easy to count them and... yes, they are 46! 2004-11-09 14:42:04 +00:00			`Number of public functions in libcurl: 46`
Karl M added the CURLOPT_CONNECT_ONLY and CURLINFO_LASTSOCKET options that an app can use to let libcurl only connect to a remote host and then extract the socket from libcurl. libcurl will then not attempt to do any transfer at all after the connect is done. 2006-02-11 22:35:16 +00:00			`Amount of public web site mirrors: 31`
recent changes 2005-09-16 21:03:26 +00:00			`Number of known libcurl bindings: 32`
Prevent uploading to a URL that has no file name part. 2006-03-03 13:09:30 +00:00			`Number of contributors: 487`
David Hull made the file: URL parser also accept the somewhat sloppy file syntax: file:/path. I added test case 203 to verify this. 2003-10-29 09:53:21 +00:00
working draft of the upcoming 7.10.8 release notes 2003-09-22 21:38:52 +00:00			`This release includes the following changes:`
Adrian Schuur added trailer support in the chunked encoding stream. The trailer is then sent to the normal header callback/stream. 2005-07-12 18:15:34 +00:00
fixed tftp packet overflow risk 2006-03-20 07:32:50 +00:00			`o added docs for --ftp-method and CURLOPT_FTP_FILEMETHOD`
working draft of the upcoming 7.10.8 release notes 2003-09-22 21:38:52 +00:00
			`This release includes the following bugfixes:`

fixed tftp packet overflow risk 2006-03-20 07:32:50 +00:00			`o TFTP Packet Buffer Overflow Vulnerability:`
			`http://curl.haxx.se/docs/adv_20060320.html`
			`o properly detecting problems with sending the FTP command USER`
			`o wrong error message shown when certificate verification failed`
Markus Koetter filed debian bug report #355715 which identified a problem with the multi interface and multi-part formposts. The fix from February 22nd could make the Curl_done() function get called twice on the same connection and it was not designed for that and thus tried to call free() on an already freed memory area! 2006-03-07 23:11:41 +00:00			`o multi-part formpost with multi interface crash`
Peter Heuchert made sure the CURLFTPSSL_CONTROL setting for CURLOPT_FTP_SSL is used properly. 2006-03-07 22:28:08 +00:00			`o the CURLFTPSSL_CONTROL setting for CURLOPT_FTP_SSL is acknowledged`
fixed tftp packet overflow risk 2006-03-20 07:32:50 +00:00			`o "SSL: couldn't set callback" is now treated as a less serious problem`
build fix for Interix 2006-03-04 22:39:31 +00:00			`o Interix build fix`
fixed tftp packet overflow risk 2006-03-20 07:32:50 +00:00			`o fixed curl "hang" when out of file handles at start`
Lots of users on Windows have reported getting the "SSL: couldn't set callback" error message so I've now made the setting of that callback not be as critical as before. The function is only used for additional loggging/ trace anyway so a failure just means slightly less data. It should still be able to proceed and connect fine to the server. 2006-03-06 22:35:51 +00:00			`o prevent FTP uploads to URLs with trailing slash`
working draft of the upcoming 7.10.8 release notes 2003-09-22 21:38:52 +00:00
			`Other curl-related news since the previous public release:`

Lots of users on Windows have reported getting the "SSL: couldn't set callback" error message so I've now made the setting of that callback not be as critical as before. The function is only used for additional loggging/ trace anyway so a failure just means slightly less data. It should still be able to proceed and connect fine to the server. 2006-03-06 22:35:51 +00:00			`o pycurl-7.15.2 has been released: http://pycurl.sf.net`
fixed tftp packet overflow risk 2006-03-20 07:32:50 +00:00			`o http://curl.download.nextag.com/ is a new US curl web mirror!`
working draft of the upcoming 7.10.8 release notes 2003-09-22 21:38:52 +00:00
			`This release would not have looked like this without help, code, reports and`
			`advice from friends like these:`

Markus Koetter filed debian bug report #355715 which identified a problem with the multi interface and multi-part formposts. The fix from February 22nd could make the Curl_done() function get called twice on the same connection and it was not designed for that and thus tried to call free() on an already freed memory area! 2006-03-07 23:11:41 +00:00			`Gisle Vanem, Dan Fandrich, Thomas Klausner, Todd Vierling, Peter Heuchert,`
fixed tftp packet overflow risk 2006-03-20 07:32:50 +00:00			`Markus Koetter, David McCreedy, Tor Arntsen`
check for and use getprotobyname 2006-03-02 11:37:05 +00:00
working draft of the upcoming 7.10.8 release notes 2003-09-22 21:38:52 +00:00			`Thanks! (and sorry if I forgot to mention someone)`