2018-12-14 17:28:59 +08:00
|
|
|
curl and libcurl 7.64.0
|
2003-09-23 05:38:52 +08:00
|
|
|
|
2018-12-14 17:28:59 +08:00
|
|
|
Public curl releases: 179
|
2019-01-10 18:07:45 +08:00
|
|
|
Command line options: 220
|
|
|
|
|
curl_easy_setopt() options: 265
|
2018-09-09 04:45:45 +08:00
|
|
|
Public functions in libcurl: 80
|
2019-01-10 18:07:45 +08:00
|
|
|
Contributors: 1875
|
2017-10-23 19:33:04 +08:00
|
|
|
|
2018-09-05 16:22:54 +08:00
|
|
|
This release includes the following changes:
|
|
|
|
|
|
2018-12-14 17:28:59 +08:00
|
|
|
o cookies: leave secure cookies alone [3]
|
2018-12-27 21:40:33 +08:00
|
|
|
o hostip: support wildcard hosts [23]
|
2018-12-14 17:28:59 +08:00
|
|
|
o http: Implement trailing headers for chunked transfers [7]
|
2018-12-21 20:57:20 +08:00
|
|
|
o http: added options for allowing HTTP/0.9 responses [10]
|
2018-12-27 21:40:33 +08:00
|
|
|
o timeval: Use high resolution timestamps on Windows [19]
|
2018-09-05 16:22:54 +08:00
|
|
|
|
2007-07-22 18:17:52 +08:00
|
|
|
This release includes the following bugfixes:
|
|
|
|
|
|
2019-02-05 22:11:51 +08:00
|
|
|
o CVE-2018-16890: NTLM type-2 out-of-bounds buffer read [67]
|
|
|
|
|
o CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow [68]
|
|
|
|
|
o CVE-2019-3823: SMTP end-of-response out-of-bounds read [66]
|
2018-12-27 21:40:33 +08:00
|
|
|
o FAQ: remove mention of sourceforge for github [22]
|
2018-12-14 17:28:59 +08:00
|
|
|
o OS400: handle memory error in list conversion [4]
|
2018-12-27 21:40:33 +08:00
|
|
|
o OS400: upgrade ILE/RPG binding.
|
2019-01-16 18:33:26 +08:00
|
|
|
o README: add codacy code quality badge
|
2019-01-10 18:07:45 +08:00
|
|
|
o Revert http_negotiate: do not close connection [31]
|
|
|
|
|
o THANKS: added several missing names from year <= 2000
|
2019-01-16 18:33:26 +08:00
|
|
|
o build: make 'tidy' target work for metalink builds
|
|
|
|
|
o cmake: added checks for variadic macros [47]
|
|
|
|
|
o cmake: updated check for HAVE_POLL_FINE to match autotools [39]
|
2018-12-27 21:40:33 +08:00
|
|
|
o cmake: use lowercase for function name like the rest of the code [20]
|
2019-01-16 18:33:26 +08:00
|
|
|
o configure: detect xlclang separately from clang [41]
|
2019-01-22 06:28:33 +08:00
|
|
|
o configure: fix recv/send/select detection on Android [53]
|
2019-02-01 16:42:37 +08:00
|
|
|
o configure: rewrite --enable-code-coverage [61]
|
2018-12-27 21:40:33 +08:00
|
|
|
o conncache_unlock: avoid indirection by changing input argument type
|
2019-01-16 18:33:26 +08:00
|
|
|
o cookie: fix comment typo [44]
|
2019-01-10 18:07:45 +08:00
|
|
|
o cookies: allow secure override when done over HTTPS [34]
|
2018-12-21 20:57:20 +08:00
|
|
|
o cookies: extend domain checks to non psl builds [12]
|
2019-01-10 18:07:45 +08:00
|
|
|
o cookies: skip custom cookies when redirecting cross-site [36]
|
|
|
|
|
o curl --xattr: strip credentials from any URL that is stored [33]
|
2018-12-21 20:57:20 +08:00
|
|
|
o curl -J: refuse to append to the destination file [14]
|
2019-01-10 18:07:45 +08:00
|
|
|
o curl/urlapi.h: include "curl.h" first [30]
|
|
|
|
|
o curl_multi_remove_handle() don't block terminating c-ares requests [32]
|
2018-12-14 17:28:59 +08:00
|
|
|
o darwinssl: accept setting max-tls with default min-tls [6]
|
2018-12-27 21:40:33 +08:00
|
|
|
o disconnect: separate connections and easy handles better [18]
|
|
|
|
|
o disconnect: set conn->data for protocol disconnect
|
2019-01-10 18:07:45 +08:00
|
|
|
o docs/version.d: mention MultiSSL [26]
|
2018-12-21 20:57:20 +08:00
|
|
|
o docs: fix the --tls-max description [2]
|
2019-02-05 22:11:51 +08:00
|
|
|
o docs: use $(INSTALL_DATA) to install man page [64]
|
2019-02-01 16:42:37 +08:00
|
|
|
o docs: use meaningless port number in CURLOPT_LOCALPORT example [58]
|
2018-12-21 20:57:20 +08:00
|
|
|
o gopher: always include the entire gopher-path in request [5]
|
|
|
|
|
o http2: clear pause stream id if it gets closed [8]
|
|
|
|
|
o if2ip: remove unused function Curl_if_is_interface_name [9]
|
2019-02-01 16:42:37 +08:00
|
|
|
o libssh: do not let libssh create socket [63]
|
|
|
|
|
o libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh [62]
|
2018-12-27 21:40:33 +08:00
|
|
|
o libssh: free sftp_canonicalize_path() data correctly [17]
|
2019-01-10 18:07:45 +08:00
|
|
|
o libtest/stub_gssapi: use "real" snprintf [27]
|
2018-12-21 20:57:20 +08:00
|
|
|
o mbedtls: use VERIFYHOST [15]
|
2019-01-10 18:07:45 +08:00
|
|
|
o multi: multiplexing improvements [35]
|
2019-02-01 16:42:37 +08:00
|
|
|
o multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time [57]
|
2019-01-10 18:07:45 +08:00
|
|
|
o ntlm: fix NTMLv2 compliance [25]
|
2019-01-22 06:28:33 +08:00
|
|
|
o ntlm_sspi: add support for channel binding [54]
|
2019-01-16 18:33:26 +08:00
|
|
|
o openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated [46]
|
|
|
|
|
o openssl: fix the SSL_get_tlsext_status_ocsp_resp call [40]
|
2018-12-27 21:40:33 +08:00
|
|
|
o openvms: fix OpenSSL discovery on VAX [21]
|
|
|
|
|
o openvms: fix typos in documentation
|
2019-01-16 18:33:26 +08:00
|
|
|
o os400: add a missing closing bracket [50]
|
|
|
|
|
o os400: fix extra parameter syntax error [50]
|
2018-12-21 20:57:20 +08:00
|
|
|
o pingpong: change default response timeout to 120 seconds
|
|
|
|
|
o pingpong: ignore regular timeout in disconnect phase [16]
|
2019-01-10 18:07:45 +08:00
|
|
|
o printf: fix format specifiers [28]
|
2019-02-05 22:11:51 +08:00
|
|
|
o runtests.pl: Fix perl call to include srcdir [65]
|
2019-01-10 18:07:45 +08:00
|
|
|
o schannel: fix compiler warning [29]
|
2019-01-22 06:28:33 +08:00
|
|
|
o schannel: preserve original certificate path parameter [52]
|
2019-02-01 16:42:37 +08:00
|
|
|
o schannel: stop calling it "winssl" [56]
|
|
|
|
|
o sigpipe: if mbedTLS is used, ignore SIGPIPE [59]
|
2018-12-21 20:57:20 +08:00
|
|
|
o smb: fix incorrect path in request if connection reused [13]
|
2019-01-22 06:28:33 +08:00
|
|
|
o ssh: log the libssh2 error message when ssh session startup fails [55]
|
2019-01-16 18:33:26 +08:00
|
|
|
o test1558: verify CURLINFO_PROTOCOL on file:// transfer [51]
|
2019-01-10 18:07:45 +08:00
|
|
|
o test1561: improve test name
|
2019-02-01 16:42:37 +08:00
|
|
|
o test1653: make it survive torture tests
|
2019-01-10 18:07:45 +08:00
|
|
|
o tests: allow tests to pass by 2037-02-12 [38]
|
2019-01-16 18:33:26 +08:00
|
|
|
o tests: move objnames-* from lib into tests [42]
|
2019-01-10 18:07:45 +08:00
|
|
|
o timediff: fix math for unsigned time_t [37]
|
2019-02-01 16:42:37 +08:00
|
|
|
o timeval: Disable MSVC Analyzer GetTickCount warning [60]
|
2019-01-16 18:33:26 +08:00
|
|
|
o tool_cb_prg: avoid integer overflow [49]
|
|
|
|
|
o travis: added cmake build for osx [43]
|
2018-12-21 20:57:20 +08:00
|
|
|
o urlapi: Fix port parsing of eol colon [1]
|
|
|
|
|
o urlapi: distinguish possibly empty query [5]
|
2019-01-07 21:06:43 +08:00
|
|
|
o urlapi: fix parsing ipv6 with zone index [24]
|
2019-01-16 18:33:26 +08:00
|
|
|
o urldata: rename easy_conn to just conn [48]
|
|
|
|
|
o winbuild: conditionally use /DZLIB_WINAPI [45]
|
2019-01-10 18:07:45 +08:00
|
|
|
o wolfssl: fix memory-leak in threaded use [11]
|
2019-02-05 22:11:51 +08:00
|
|
|
o spnego_sspi: add support for channel binding [69]
|
2016-11-09 16:14:44 +08:00
|
|
|
|
2007-07-22 18:17:52 +08:00
|
|
|
This release includes the following known bugs:
|
|
|
|
|
|
2016-02-03 07:19:02 +08:00
|
|
|
o see docs/KNOWN_BUGS (https://curl.haxx.se/docs/knownbugs.html)
|
2007-07-22 18:17:52 +08:00
|
|
|
|
|
|
|
|
This release would not have looked like this without help, code, reports and
|
|
|
|
|
advice from friends like these:
|
|
|
|
|
|
2019-01-22 06:28:33 +08:00
|
|
|
Alessandro Ghedini, Andrei Neculau, Archangel SDY, Ayoub Boudhar, Ben Kohler,
|
2019-02-05 22:11:51 +08:00
|
|
|
Bernhard M. Wiedemann, Brad Spencer, Brian Carpenter, Claes Jakobsson,
|
|
|
|
|
Daniel Gustafsson, Daniel Stenberg, David Garske, dnivras on github,
|
|
|
|
|
Eric Rosenquist, Etienne Simard, Felix Hädicke, Florian Pritz,
|
|
|
|
|
Frank Gevaerts, Giorgos Oikonomou, Gisle Vanem, GitYuanQu on github,
|
|
|
|
|
Haibo Huang, Harry Sintonen, Helge Klein, Huzaifa Sidhpurwala,
|
|
|
|
|
jasal82 on github, Jeremie Rapin, Jeroen Ooms, Joel Depooter, John Marshall,
|
|
|
|
|
jonrumsey on github, Julian Z, Kamil Dudka, Katsuhiko YOSHIDA, Kees Dekker,
|
|
|
|
|
Ladar Levison, Leonardo Taccari, Marcel Raad, Markus Moeller,
|
|
|
|
|
masbug on github, Matus Uzak, Michael Kujawa, Patrick Monnerat, Pavel Pavlov,
|
|
|
|
|
Peng Li, Ray Satiro, Rikard Falkeborn, Ruslan Baratov, Sergei Nikulov,
|
|
|
|
|
Shlomi Fish, Tobias Lindgren, Tom van der Woerdt, Viktor Szakats,
|
|
|
|
|
Wenxiang Qian, William A. Rowe Jr, Zhao Yisha,
|
|
|
|
|
(56 contributors)
|
2018-09-09 04:45:45 +08:00
|
|
|
|
2003-09-23 05:38:52 +08:00
|
|
|
Thanks! (and sorry if I forgot to mention someone)
|
2011-12-20 03:08:59 +08:00
|
|
|
|
|
|
|
|
References to bug reports and discussions on issues:
|
|
|
|
|
|
2018-12-14 17:28:59 +08:00
|
|
|
[1] = https://curl.haxx.se/bug/?i=3365
|
|
|
|
|
[2] = https://curl.haxx.se/bug/?i=3368
|
|
|
|
|
[3] = https://curl.haxx.se/bug/?i=2956
|
|
|
|
|
[4] = https://curl.haxx.se/bug/?i=3372
|
|
|
|
|
[5] = https://curl.haxx.se/bug/?i=3369
|
|
|
|
|
[6] = https://curl.haxx.se/bug/?i=3367
|
|
|
|
|
[7] = https://curl.haxx.se/bug/?i=3350
|
2018-12-21 20:57:20 +08:00
|
|
|
[8] = https://curl.haxx.se/bug/?i=3392
|
|
|
|
|
[9] = https://curl.haxx.se/bug/?i=3401
|
|
|
|
|
[10] = https://curl.haxx.se/bug/?i=2873
|
|
|
|
|
[11] = https://curl.haxx.se/bug/?i=3395
|
|
|
|
|
[12] = https://curl.haxx.se/bug/?i=2964
|
|
|
|
|
[13] = https://curl.haxx.se/bug/?i=3388
|
|
|
|
|
[14] = https://curl.haxx.se/bug/?i=3380
|
|
|
|
|
[15] = https://curl.haxx.se/bug/?i=3376
|
|
|
|
|
[16] = https://curl.haxx.se/bug/?i=3264
|
2018-12-27 21:40:33 +08:00
|
|
|
[17] = https://curl.haxx.se/bug/?i=3402
|
|
|
|
|
[18] = https://curl.haxx.se/bug/?i=3400
|
|
|
|
|
[19] = https://curl.haxx.se/bug/?i=3318
|
|
|
|
|
[20] = https://curl.haxx.se/bug/?i=3196
|
|
|
|
|
[21] = https://curl.haxx.se/bug/?i=3407
|
|
|
|
|
[22] = https://curl.haxx.se/bug/?i=3410
|
|
|
|
|
[23] = https://curl.haxx.se/bug/?i=3406
|
2019-01-07 21:06:43 +08:00
|
|
|
[24] = https://curl.haxx.se/bug/?i=3411
|
|
|
|
|
[25] = https://curl.haxx.se/bug/?i=3286
|
|
|
|
|
[26] = https://curl.haxx.se/bug/?i=3432
|
|
|
|
|
[27] = https://curl.haxx.se/mail/lib-2019-01/0000.html
|
|
|
|
|
[28] = https://curl.haxx.se/bug/?i=3426
|
|
|
|
|
[29] = https://curl.haxx.se/bug/?i=3435
|
|
|
|
|
[30] = https://curl.haxx.se/bug/?i=3438
|
|
|
|
|
[31] = https://curl.haxx.se/bug/?i=3384
|
|
|
|
|
[32] = https://curl.haxx.se/bug/?i=3371
|
2019-01-10 18:07:45 +08:00
|
|
|
[33] = https://curl.haxx.se/bug/?i=3423
|
|
|
|
|
[34] = https://curl.haxx.se/bug/?i=3445
|
|
|
|
|
[35] = https://curl.haxx.se/bug/?i=3436
|
|
|
|
|
[36] = https://curl.haxx.se/bug/?i=3417
|
|
|
|
|
[37] = https://curl.haxx.se/bug/?i=3449
|
|
|
|
|
[38] = https://curl.haxx.se/bug/?i=3443
|
2019-01-16 18:33:26 +08:00
|
|
|
[39] = https://curl.haxx.se/bug/?i=3292
|
|
|
|
|
[40] = https://curl.haxx.se/bug/?i=3477
|
|
|
|
|
[41] = https://curl.haxx.se/bug/?i=3474
|
|
|
|
|
[42] = https://curl.haxx.se/bug/?i=3470
|
|
|
|
|
[43] = https://curl.haxx.se/bug/?i=3468
|
|
|
|
|
[44] = https://curl.haxx.se/bug/?i=3469
|
|
|
|
|
[45] = https://curl.haxx.se/bug/?i=3133
|
|
|
|
|
[46] = https://curl.haxx.se/bug/?i=3462
|
|
|
|
|
[47] = https://curl.haxx.se/bug/?i=3459
|
|
|
|
|
[48] = https://curl.haxx.se/bug/?i=3442
|
|
|
|
|
[49] = https://curl.haxx.se/bug/?i=3456
|
|
|
|
|
[50] = https://curl.haxx.se/bug/?i=3453
|
|
|
|
|
[51] = https://curl.haxx.se/bug/?i=3447
|
2019-01-22 06:28:33 +08:00
|
|
|
[52] = https://curl.haxx.se/bug/?i=3480
|
|
|
|
|
[53] = https://curl.haxx.se/bug/?i=3484
|
|
|
|
|
[54] = https://curl.haxx.se/bug/?i=3280
|
|
|
|
|
[55] = https://curl.haxx.se/bug/?i=3481
|
2019-02-01 16:42:37 +08:00
|
|
|
[56] = https://curl.haxx.se/bug/?i=3504
|
|
|
|
|
[57] = https://curl.haxx.se/mail/lib-2019-01/0073.html
|
|
|
|
|
[58] = https://curl.haxx.se/bug/?i=3513
|
|
|
|
|
[59] = https://curl.haxx.se/bug/?i=3502
|
|
|
|
|
[60] = https://curl.haxx.se/bug/?i=3437
|
|
|
|
|
[61] = https://curl.haxx.se/bug/?i=3497
|
|
|
|
|
[62] = https://curl.haxx.se/bug/?i=3493
|
|
|
|
|
[63] = https://curl.haxx.se/bug/?i=3491
|
2019-02-05 22:11:51 +08:00
|
|
|
[64] = https://curl.haxx.se/bug/?i=3518
|
|
|
|
|
[65] = https://curl.haxx.se/bug/?i=3496
|
|
|
|
|
[66] = https://curl.haxx.se/docs/CVE-2019-3823.html
|
|
|
|
|
[67] = https://curl.haxx.se/docs/CVE-2018-16890.html
|
|
|
|
|
[68] = https://curl.haxx.se/docs/CVE-2019-3822.html
|
|
|
|
|
[69] = https://curl.haxx.se/bug/?i=3503
|
