curl/RELEASE-NOTES

Curl and libcurl 7.54.1

 Public curl releases:         166
 Command line options:         207
 curl_easy_setopt() options:   245
 Public functions in libcurl:  61
 Contributors:                 1538

This release includes the following changes:

 o curl: show the libcurl release date in --version output [32]

This release includes the following bugfixes:

 o openssl: fix memory leak in servercert
 o tests: remove the html and PDF versions from the tarball
 o mbedtls: enable NTLM (& SMB) even if MD4 support is unavailable
 o typecheck-gcc: handle function pointers properly [1]
 o llist: no longer uses malloc [2]
 o gnutls: removed some code when --disable-verbose is configured
 o lib: fix maybe-uninitialized warnings
 o multi: clarify condition in curl_multi_wait [3]
 o schannel: Don't treat encrypted partial record as pending data [4]
 o configure: fix the -ldl check for openssl, add -lpthread check [5]
 o configure: accept -Og and -Ofast GCC flags [6]
 o Makefile: avoid use of GNU-specific form of $< [7]
 o if2ip: fix -Wcast-align warning
 o configure: stop prepending to LDFLAGS, CPPFLAGS [8]
 o curl: set a 100K buffer size by default [9]
 o typecheck-gcc: fix _curl_is_slist_info [10]
 o nss: do not leak PKCS #11 slot while loading a key [11]
 o nss: load libnssckbi.so if no other trust is specified [12]
 o examples: ftpuploadfrommem.c [13]
 o url: declare get_protocol_family() static [14]
 o examples/cookie_interface.c: changed to example.com
 o test1443: test --remote-time
 o curl: use utimes instead of obsolescent utime when available
 o url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
 o curl_rtmp: fix missing-variable-declarations warnings
 o tests: fixed OOM handling of unit tests to abort test
 o curl_setup: Ensure no more than one IDN lib is enabled [15]
 o tool: Fix missing prototype warnings for CURL_DOES_CONVERSIONS [16]
 o CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size [17]
 o curl: non-boolean command line args reject --no- prefixes [18]
 o telnet: Write full buffer instead of byte-by-byte [19]
 o typecheck-gcc: add missing string options [20]
 o typecheck-gcc: add support for CURLINFO_SOCKET [21]
 o opt man pages: many more now have examples
 o curl_setup_once: use SEND_QUAL_ARG2 for swrite [22]
 o test557: set a known good numeric locale
 o schannel: return a more specific error code for SEC_E_UNTRUSTED_ROOT
 o tests/server: make string literals const
 o runtests: use -R for random order [23]
 o unit1305: fix compiler warning
 o curl_slist_append.3: clarify a NULL input creates a new list
 o tests/server: run checksrc by default in debug-builds
 o tests: fix -Wcast-qual warnings
 o runtests.pl: simplify the datacheck read section
 o curl: remove --environment and tool_writeenv.c [24]
 o buildconf: fix hang on IRIX [25]
 o tftp: silence bad-function-cast warning
 o asyn-thread: fix unused macro warnings
 o tool_parsecfg: fix -Wcast-qual warning
 o sendrecv: fix MinGW-w64 warning
 o test537: use correct variable type [26]
 o rand: treat fake entropy the same regardless of endianness [27]
 o curl: generate the --help output [28]
 o tests: removed redundant --trace-ascii arguments
 o multi: assign IDs to all timers and make each timer singleton
 o multi: use a fixed array of timers instead of malloc [29]
 o mbedtls: Support server renegotiation request [30]
 o pipeline: fix mistakenly trying to pipeline POSTs [31]
 o lib510: don't write past the end of the buffer if it's too small
 o CURLOPT_HTTPPROXYTUNNEL.3: clarify, add example
 o SecureTransport/DarwinSSL: Implement public key pinning [33]

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (https://curl.haxx.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

  Alan Jenkins, Brian Childs, canavan at github, Dan Fandrich, Daniel Stenberg,
  Gisle Vanem, Helmut K. C. Tessarek, Kai Engert, Kamil Dudka, Kevin Ji,
  Marcel Raad, Martin Kepplinger, Michael Kaufmann, Ray Satiro, Richard Hsu,
  Ron Eldor, stootill at github, Thomas Klausner, Travis Burtrum,
  (19 contributors)

        Thanks! (and sorry if I forgot to mention someone)

References to bug reports and discussions on issues:

 [1] = https://curl.haxx.se/bug/?i=1403
 [2] = https://curl.haxx.se/bug/?i=1435
 [3] = https://curl.haxx.se/bug/?i=1439
 [4] = https://curl.haxx.se/bug/?i=1392
 [5] = https://curl.haxx.se/bug/?i=1427
 [6] = https://curl.haxx.se/bug/?i=1440
 [7] = https://curl.haxx.se/bug/?i=1432
 [8] = https://curl.haxx.se/bug/?i=1420
 [9] = https://curl.haxx.se/bug/?i=1446
 [10] = https://curl.haxx.se/bug/?i=1447
 [11] = https://bugzilla.redhat.com/1444860
 [12] = https://curl.haxx.se/bug/?i=1414
 [13] = https://curl.haxx.se/bug/?i=1451
 [14] = https://curl.haxx.se/mail/lib-2017-04/0127.html
 [15] = https://github.com/curl/curl/issues/1441#issuecomment-297689856
 [16] = https://curl.haxx.se/bug/?i=1460
 [17] = https://curl.haxx.se/bug/?i=1449
 [18] = https://curl.haxx.se/bug/?i=1453
 [19] = https://curl.haxx.se/bug/?i=1389
 [20] = https://curl.haxx.se/bug/?i=1452
 [21] = https://curl.haxx.se/bug/?i=1452
 [22] = https://curl.haxx.se/bug/?i=1464
 [23] = https://curl.haxx.se/bug/?i=1466
 [24] = https://curl.haxx.se/bug/?i=1463
 [25] = https://curl.haxx.se/bug/?i=1471
 [26] = https://curl.haxx.se/bug/?i=1469
 [27] = https://curl.haxx.se/bug/?i=1315
 [28] = https://curl.haxx.se/bug/?i=1465
 [29] = https://curl.haxx.se/bug/?i=1472
 [30] = https://curl.haxx.se/bug/?i=1475
 [31] = https://curl.haxx.se/bug/?i=1481
 [32] = https://curl.haxx.se/bug/?i=1474
 [33] = https://curl.haxx.se/bug/?i=1400