mirror of https://github.com/moparisthebest/curl
RELEASE-NOTES: synced with af8cc7a69
This commit is contained in:
Daniel Stenberg
parent
af8cc7a693
commit
3973ee6a65
152
RELEASE-NOTES
152
RELEASE-NOTES
|
|
@ -1,6 +1,6 @@
|
|||
Curl and libcurl 7.57.0
|
||||
Curl and libcurl 7.57.1
|
||||
|
||||
Public curl releases: 171
|
||||
Public curl releases: 172
|
||||
Command line options: 211
|
||||
curl_easy_setopt() options: 249
|
||||
Public functions in libcurl: 74
|
||||
|
|
@ -8,81 +8,14 @@ Curl and libcurl 7.57.0
|
|||
|
||||
This release includes the following changes:
|
||||
|
||||
o auth: add support for RFC7616 - HTTP Digest access authentication [12]
|
||||
o share: add support for sharing the connection cache [31]
|
||||
o HTTP: implement Brotli content encoding [28]
|
||||
o
|
||||
|
||||
This release includes the following bugfixes:
|
||||
|
||||
o CVE-2017-8816: NTLM buffer overflow via integer overflow [47]
|
||||
o CVE-2017-8817: FTP wildcard out of bounds read [48]
|
||||
o CVE-2017-8818: SSL out of buffer access [49]
|
||||
o curl_mime_filedata.3: fix typos [1]
|
||||
o libtest: Add required test libraries for lib1552 and lib1553 [2]
|
||||
o fix time diffs for systems using unsigned time_t [3]
|
||||
o ftplistparser: memory leak fix: free temporary memory always [4]
|
||||
o multi: allow table handle sizes to be overridden [5]
|
||||
o wildcards: don't use with non-supported protocols [6]
|
||||
o curl_fnmatch: return error on illegal wildcard pattern [7]
|
||||
o transfer: Fix chunked-encoding upload too early exit [8]
|
||||
o curl_setup: Improve detection of CURL_WINDOWS_APP [9]
|
||||
o resolvers: only include anything if needed [10]
|
||||
o setopt: fix CURLOPT_SSH_AUTH_TYPES option read
|
||||
o appveyor: add a win32 build
|
||||
o Curl_timeleft: change return type to timediff_t [11]
|
||||
o cmake: Export libcurl and curl targets to use by other cmake projects [13]
|
||||
o curl: in -F option arg, comma is a delimiter for files only [14]
|
||||
o curl: improved ";type=" handling in -F option arguments
|
||||
o timeval: use mach_absolute_time() on MacOS [15]
|
||||
o curlx: the timeval functions are no longer provided as curlx_* [16]
|
||||
o mkhelp.pl: do not generate comment with current date [17]
|
||||
o memdebug: use send/recv signature for curl_dosend/curl_dorecv [18]
|
||||
o cookie: avoid NULL dereference [19]
|
||||
o url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1 [20]
|
||||
o include: remove conncache.h inclusion from where its not needed
|
||||
o CURLOPT_MAXREDIRS: allow -1 as a value [21]
|
||||
o tests: Fixed torture tests on tests 556 and 650
|
||||
o http2: Fixed OOM handling in upgrade request
|
||||
o url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
|
||||
o CURLOPT_INFILESIZE: accept -1 [22]
|
||||
o curl: pass through [] in URLs instead of calling globbing error [23]
|
||||
o curl: speed up handling of many URLs [24]
|
||||
o ntlm: avoid malloc(0) for zero length passwords [25]
|
||||
o url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES [26]
|
||||
o HTTP: support multiple Content-Encodings [27]
|
||||
o travis: add a job with brotli enabled
|
||||
o url: remove unncessary NULL-check
|
||||
o fnmatch: remove dead code
|
||||
o connect: store IPv6 connection status after valid connection [29]
|
||||
o imap: deal with commands case insensitively [30]
|
||||
o --interface: add support for Linux VRF [32]
|
||||
o content_encoding: fix inflate_stream for no bytes available [33]
|
||||
o cmake: Correctly include curl.rc in Windows builds [34]
|
||||
o cmake: Add missing setmode check [35]
|
||||
o connect.c: remove executable bit on file [36]
|
||||
o SMB: fix uninitialized local variable
|
||||
o zlib/brotli: only include header files in modules needing them [37]
|
||||
o URL: return error on malformed URLs with junk after IPv6 bracket [38]
|
||||
o openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY [39]
|
||||
o macOS: Fix missing connectx function with Xcode version older than 9.0 [40]
|
||||
o --resolve: allow IP address within [] brackets [41]
|
||||
o examples/curlx: Fix code style [42]
|
||||
o ntlm: remove unnecessary NULL-check to please scan-build [43]
|
||||
o Curl_llist_remove: fix potential NULL pointer deref [43]
|
||||
o mime: fix "Value stored to 'sz' is never read" scan-build error [43]
|
||||
o openssl: fix "Value stored to 'rc' is never read" scan-build error [43]
|
||||
o http2: fix "Value stored to 'hdbuf' is never read" scan-build error [43]
|
||||
o http2: fix "Value stored to 'end' is never read" scan-build error [43]
|
||||
o Curl_open: fix OOM return error correctly [43]
|
||||
o url: reject ASCII control characters and space in host names [44]
|
||||
o examples/rtsp: clear RANGE again after use [45]
|
||||
o connect: improve the bind error message [46]
|
||||
o make: fix "make distclean" [50]
|
||||
o connect: add support for new TCP Fast Open API on Linux [51]
|
||||
o metalink: fix memory-leak and NULL pointer dereference [52]
|
||||
o URL: update "file:" URL handling [53]
|
||||
o ssh: remove check for a NULL pointer [54]
|
||||
o global_init: ignore CURL_GLOBAL_SSL's absense [55]
|
||||
o travis: add boringssl build [1]
|
||||
o examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL [2]
|
||||
o SSL: Avoid magic allocation of SSL backend specific data [3]
|
||||
o lib: don't export all symbols, just everything curl_* [4]
|
||||
|
||||
This release includes the following known bugs:
|
||||
|
||||
|
|
@ -91,73 +24,14 @@ This release includes the following known bugs:
|
|||
This release would not have looked like this without help, code, reports and
|
||||
advice from friends like these:
|
||||
|
||||
Alessandro Ghedini, Alex Malinovich, Alex Nichols, Alfonso Martone,
|
||||
Andrew Lambert, arainchik on github, Brian Carpenter, cbartl on github,
|
||||
Dan Fandrich, Daniel Bankhead, Daniel Stenberg, Dirk Feytons,
|
||||
Dmitri Tikhonov, Evgeny Grin, Gisle Vanem, hsiao yi, Jakub Zakrzewski,
|
||||
John Starks, Juro Bystricky, Kamil Dudka, Luca Boccassi, Marcel Raad,
|
||||
Martin Storsjö, Matthew Kerwin, Max Dymond, Michael Felt, Michael Kaufmann,
|
||||
moohoorama on github, omau on github, Orgad Shaneh, Patrick Monnerat,
|
||||
Paul Howarth, Pavel Gushchin, Pavol Markovic, Per Lundberg, Peter Piekarski,
|
||||
Petr Voytsik, Ray Satiro, Rob Cotrone, Viktor Szakáts, youngchopin on github,
|
||||
(41 contributors)
|
||||
Daniel Stenberg, Dima Tisnek, Johannes Schindelin, W. Mark Kubacki,
|
||||
(4 contributors)
|
||||
|
||||
Thanks! (and sorry if I forgot to mention someone)
|
||||
|
||||
References to bug reports and discussions on issues:
|
||||
|
||||
[1] = https://curl.haxx.se/bug/?i=2008
|
||||
[2] = https://curl.haxx.se/bug/?i=2006
|
||||
[3] = https://curl.haxx.se/bug/?i=2004
|
||||
[4] = https://curl.haxx.se/bug/?i=2013
|
||||
[5] = https://curl.haxx.se/bug/?i=1982
|
||||
[6] = https://curl.haxx.se/bug/?i=2016
|
||||
[7] = https://curl.haxx.se/bug/?i=2015
|
||||
[8] = https://curl.haxx.se/bug/?i=2001
|
||||
[9] = https://curl.haxx.se/bug/?i=2025
|
||||
[10] = https://curl.haxx.se/bug/?i=2023
|
||||
[11] = https://curl.haxx.se/bug/?i=2021
|
||||
[12] = https://curl.haxx.se/bug/?i=1934
|
||||
[13] = https://curl.haxx.se/bug/?i=1879
|
||||
[14] = https://curl.haxx.se/bug/?i=2022
|
||||
[15] = https://curl.haxx.se/bug/?i=2033
|
||||
[16] = https://curl.haxx.se/bug/?i=2034
|
||||
[17] = https://curl.haxx.se/bug/?i=2026
|
||||
[18] = https://curl.haxx.se/bug/?i=2031
|
||||
[19] = https://curl.haxx.se/bug/?i=2032
|
||||
[20] = https://curl.haxx.se/mail/lib-2017-11/0000.html
|
||||
[21] = https://curl.haxx.se/bug/?i=2038
|
||||
[22] = https://curl.haxx.se/bug/?i=2047
|
||||
[23] = https://curl.haxx.se/bug/?i=2044
|
||||
[24] = https://curl.haxx.se/bug/?i=1959
|
||||
[25] = https://curl.haxx.se/bug/?i=2054
|
||||
[26] = https://github.com/curl/curl/commit/f121575#commitcomment-25347120
|
||||
[27] = https://curl.haxx.se/bug/?i=2002
|
||||
[28] = https://curl.haxx.se/bug/?i=2045
|
||||
[29] = https://curl.haxx.se/bug/?i=2053
|
||||
[30] = https://curl.haxx.se/bug/?i=2061
|
||||
[31] = https://curl.haxx.se/bug/?i=2043
|
||||
[32] = https://curl.haxx.se/bug/?i=2024
|
||||
[33] = https://curl.haxx.se/bug/?i=2060
|
||||
[34] = https://curl.haxx.se/bug/?i=2064
|
||||
[35] = https://curl.haxx.se/bug/?i=2067
|
||||
[36] = https://curl.haxx.se/bug/?i=2071
|
||||
[37] = https://curl.haxx.se/mail/lib-2017-11/0032.html
|
||||
[38] = https://curl.haxx.se/bug/?i=2072
|
||||
[39] = https://curl.haxx.se/bug/?i=2079
|
||||
[40] = https://curl.haxx.se/bug/?i=2080
|
||||
[41] = https://curl.haxx.se/bug/?i=2087
|
||||
[42] = https://curl.haxx.se/bug/?i=2096
|
||||
[43] = https://curl.haxx.se/bug/?i=2098
|
||||
[44] = https://curl.haxx.se/bug/?i=2073
|
||||
[45] = https://curl.haxx.se/bug/?i=2106
|
||||
[46] = https://curl.haxx.se/bug/?i=2104
|
||||
[47] = https://curl.haxx.se/docs/adv_2017-11e7.html
|
||||
[48] = https://curl.haxx.se/docs/adv_2017-ae72.html
|
||||
[49] = https://curl.haxx.se/docs/adv_2017-af0a.html
|
||||
[50] = https://curl.haxx.se/bug/?i=2097
|
||||
[51] = https://curl.haxx.se/bug/?i=2056
|
||||
[52] = https://curl.haxx.se/bug/?i=2109
|
||||
[53] = https://curl.haxx.se/bug/?i=2110
|
||||
[54] = https://curl.haxx.se/bug/?i=2111
|
||||
[55] = https://curl.haxx.se/bug/?i=2083
|
||||
[1] = https://curl.haxx.se/bug/?i=2118
|
||||
[2] = https://curl.haxx.se/mail/lib-2017-12/0000.html
|
||||
[3] = https://curl.haxx.se/bug/?i=2119
|
||||
[4] = https://curl.haxx.se/bug/?i=2127
|
||||
|
|
|
|||
Loading…
Reference in New Issue