curl/curl
1
1
Fork 0
mirror of https://github.com/curl/curl.git synced 2025-09-24 13:06:50 +03:00
Code Issues Packages Projects Releases Wiki Activity

bump: start the 7.37.0 race

Browse Source
This commit is contained in:
Daniel Stenberg 2014-03-26 08:29:29 +01:00
parent 4f041c9d6e
commit 5a327f39d5
2 changed files with 10 additions and 102 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

106
RELEASE-NOTES
View File

@ -1,86 +1,18 @@
Curl and libcurl 7.36.0 Curl and libcurl 7.37.0
Public curl releases: 138 Public curl releases: 139
Command line options: 161 Command line options: 161
curl_easy_setopt() options: 206 curl_easy_setopt() options: 206
Public functions in libcurl: 58 Public functions in libcurl: 58
Known libcurl bindings: 42 Contributors: 1137
Contributors: 1123
This release includes the following SECURITY ADVISORIES:
o wrong re-use of connections [16]
o IP address wildcard certificate validation [17]
o not verifying certs for TLS to IP address / Darwinssl [18]
o not verifying certs for TLS to IP address / Winssl [19]
This release includes the following changes: This release includes the following changes:
o ntlm: Added support for NTLMv2 [2] o
o tool: Added support for URL specific options [3]
o openssl: add ALPN support
o gtls: add ALPN support
o nss: add ALPN and NPN support
o added CURLOPT_EXPECT_100_TIMEOUT_MS [7]
o tool: add --no-alpn and --no-npn
o added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN
o winssl: enable TLSv1.1 and TLSv1.2 by default
o winssl: TLSv1.2 disables certificate signatures using MD5 hash
o winssl: enable hostname verification of IP address using SAN or CN [11]
o darwinssl: Don't omit CN verification when an IP address is used [12]
o http2: build with current nghttp2 version
o polarssl: dropped support for PolarSSL < 1.3.0
o openssl: info message with SSL version used
This release includes the following bugfixes: This release includes the following bugfixes:
o nss: allow to use ECC ciphers if NSS implements them [1] o
o netrc: Fixed a memory leak in an OOM condition
o ftp: fixed a memory leak on wildcard error path
o pipeline: Fixed a NULL pointer dereference on OOM
o nss: prefer highest available TLS version
o 100-continue: fix timeout condition [4]
o ssh: Fixed a NULL pointer dereference on OOM condition
o formpost: use semicolon in multipart/mixed [5]
o --help: add missing --tlsv1.x options
o formdata: Fixed memory leak on OOM condition
o ConnectionExists: reusing possible HTTP+NTLM connections better [6]
o mingw32: fix compilation
o chunked decoder: track overflows correctly [8]
o curl_easy_setopt.3: add CURL_HTTP_VERSION_2_0
o dict: fix memory leak in OOM exit path
o valgrind: added suppression on optimized code
o curl: output protocol headers using binary mode
o tool: Added URL index to password prompt for multiple operations
o ConnectionExists: re-use non-NTLM connections better [9]
o axtls: call ssl_read repeatedly
o multi: make MAXCONNECTS default 4 x number of easy handles function
o configure: Fix the --disable-crypto-auth option
o multi: ignore SIGPIPE internally
o curl.1: update the description of --tlsv1
o SFTP: skip reading the dir when NOBODY=1 [10]
o easy: Fixed a memory leak on OOM condition
o tool: Fixed incorrect return code when setting HTTP request fails
o configure: Tiny fix to honor POSIX
o tool: Do not output libcurl source for the information only parameters
o Rework Open Watcom make files to use standard Wmake features
o x509asn: moved out Curl_verifyhost from NSS builds
o configure: call it GSS-API
o hostcheck: Curl_cert_hostcheck is not used by NSS builds
o multi_runsingle: move timestamp into INIT [13]
o remote_port: allow connect to port 0
o parse_remote_port: error out on illegal port numbers better
o ssh: Pass errors from libssh2_sftp_read up the stack
o docs: remove documentation on setting up krb4 support
o polarssl: build fixes to work with PolarSSL 1.3.x
o polarssl: fix possible handshake timeout issue in multi
o nss: allow to enable/disable cipher-suites better
o ssh: prevent a logic error that could result in an infinite loop
o http2: free resources on disconnect
o polarssl: avoid extra newlines in debug messages
o rtsp: parse "Session:" header properly [14]
o trynextip: don't store 'ai' on failed connects
o Curl_cert_hostcheck: strip trailing dots in host name and wildcard
This release includes the following known bugs: This release includes the following known bugs:
@ -89,33 +21,9 @@ This release includes the following known bugs:
This release would not have looked like this without help, code, reports and This release would not have looked like this without help, code, reports and
advice from friends like these: advice from friends like these:
Adam Sampson, Arvid Norberg, Brad Spencer, Colin Hogben, Dan Fandrich,
Daniel Stenberg, David Ryskalczyk, Fabian Frank, Gaël PORTAY, Gisle Vanem,
Hubert Kario, Jeff King, Jiri Malak, Kamil Dudka, Maks Naumov, Marc Hoersken,
Michael Osipov, Mike Hasselberg, Nick Zitzmann, Patrick Monnerat, Prash Dush,
Remi Gacogne, Rob Davies, Romulo A. Ceccon, Shao Shuchao, Steve Holme,
Tatsuhiro Tsujikawa, Thomas Braun, Tiit Pikma, Yehezkel Horowitz,
Thanks! (and sorry if I forgot to mention someone) Thanks! (and sorry if I forgot to mention someone)
References to bug reports and discussions on issues: References to bug reports and discussions on issues:
[1] = https://bugzilla.redhat.com/1058776 [1] =
[2] = http://curl.haxx.se/mail/lib-2014-01/0183.html
[3] = http://curl.haxx.se/mail/archive-2013-11/0006.html
[4] = http://curl.haxx.se/bug/view.cgi?id=1334
[5] = http://curl.haxx.se/bug/view.cgi?id=1333
[6] = http://curl.haxx.se/mail/lib-2014-02/0100.html
[7] = http://curl.haxx.se/libcurl/c/curl_easy_setopt.html#CURLOPTEXPECT100TIMEOUTMS
[8] = http://curl.haxx.se/mail/lib-2014-02/0097.html
[9] = http://thread.gmane.org/gmane.comp.version-control.git/242213
[10] = http://curl.haxx.se/mail/lib-2014-02/0155.html
[11] = http://curl.haxx.se/mail/lib-2014-02/0243.html
[12] = https://github.com/bagder/curl/pull/93
[13] = http://curl.haxx.se/mail/lib-2014-02/0036.html
[14] = http://curl.haxx.se/mail/lib-2014-03/0134.html
[15] = http://curl.haxx.se/bug/view.cgi?id=1337
[16] = http://curl.haxx.se/docs/adv_20140326A.html
[17] = http://curl.haxx.se/docs/adv_20140326B.html
[18] = http://curl.haxx.se/docs/adv_20140326C.html
[19] = http://curl.haxx.se/docs/adv_20140326D.html

6
include/curl/curlver.h
View File

@ -30,12 +30,12 @@
/* This is the version number of the libcurl package from which this header /* This is the version number of the libcurl package from which this header
file origins: */ file origins: */
#define LIBCURL_VERSION "7.36.0-DEV" #define LIBCURL_VERSION "7.37.0-DEV"
/* The numeric version number is also available "in parts" by using these /* The numeric version number is also available "in parts" by using these
defines: */ defines: */
#define LIBCURL_VERSION_MAJOR 7 #define LIBCURL_VERSION_MAJOR 7
#define LIBCURL_VERSION_MINOR 36 #define LIBCURL_VERSION_MINOR 37
#define LIBCURL_VERSION_PATCH 0 #define LIBCURL_VERSION_PATCH 0
/* This is the numeric version of the libcurl version number, meant for easier /* This is the numeric version of the libcurl version number, meant for easier
@ -53,7 +53,7 @@
and it is always a greater number in a more recent release. It makes and it is always a greater number in a more recent release. It makes
comparisons with greater than and less than work. comparisons with greater than and less than work.
*/ */
#define LIBCURL_VERSION_NUM 0x072400 #define LIBCURL_VERSION_NUM 0x072500
/* /*
* This is the date and time when the full source package was created. The * This is the date and time when the full source package was created. The