diff options
Diffstat (limited to 'libs/libcurl/docs/RELEASE-NOTES')
| -rw-r--r-- | libs/libcurl/docs/RELEASE-NOTES | 319 |
1 files changed, 145 insertions, 174 deletions
diff --git a/libs/libcurl/docs/RELEASE-NOTES b/libs/libcurl/docs/RELEASE-NOTES index 3a3787bb36..334493c8ae 100644 --- a/libs/libcurl/docs/RELEASE-NOTES +++ b/libs/libcurl/docs/RELEASE-NOTES @@ -1,99 +1,85 @@ -curl and libcurl 8.11.1
+curl and libcurl 8.12.1
- Public curl releases: 263
- Command line options: 266
+ Public curl releases: 265
+ Command line options: 267
curl_easy_setopt() options: 306
- Public functions in libcurl: 94
- Contributors: 3298
+ Public functions in libcurl: 96
+ Contributors: 3344
This release includes the following changes:
This release includes the following bugfixes:
- o build: fix ECH to always enable HTTPS RR [35]
- o build: fix MSVC UWP builds [32]
- o build: omit certain deps from `libcurl.pc` unless found via `pkg-config` [27]
- o build: use `_fseeki64()` on Windows, drop detections [41]
- o cmake: do not echo most inherited `LDFLAGS` to config files [55]
- o cmake: drop cmake args list from `buildinfo.txt` [8]
- o cmake: include `wolfssl/options.h` first [53]
- o cmake: remove legacy unused IMMEDIATE keyword [21]
- o cmake: restore cmake args list in `buildinfo.txt` [26]
- o cmake: set `CURL_STATICLIB` for static lib when `SHARE_LIB_OBJECT=OFF` [64]
- o cmake: sync GSS config code with other deps [28]
- o cmake: typo in comment
- o cmake: work around `ios.toolchain.cmake` breaking feature-detections [37]
- o cmakelint: fix to check root `CMakeLists.txt` [36]
- o cmdline/ech.md: formatting cleanups [13]
- o configure: add FIXMEs for disabled pkg-config references
- o configure: do not echo most inherited `LDFLAGS` to config files [31]
- o configure: replace `$#` shell syntax [25]
- o cookie: treat cookie name case sensitively [4]
- o curl-rustls.m4: keep existing `CPPFLAGS`/`LDFLAGS` when detected [40]
- o curl.h: mark two error codes as obsolete [19]
- o curl: --continue-at is mutually exclusive with --no-clobber [51]
- o curl: --continue-at is mutually exclusive with --range [61]
- o curl: --continue-at is mutually exclusive with --remove-on-error [50]
- o curl: --test-duphandle in debug builds runs "duphandled" [6]
- o curl: do more command line parsing in sub functions [71]
- o curl: rename struct var to fix AIX build [24]
- o curl: use realtime in trace timestamps [52]
- o curl_multi_socket_all.md: soften the deprecation warning [56]
- o CURLOPT_PREREQFUNCTION.md: add result code on failure [23]
- o digest: produce a shorter cnonce in Digest headers [70]
- o DISTROS: update Alt Linux links
- o dmaketgz: use --no-cache when building docker image [66]
- o docs: bring back ALTSVC.md and HSTS.md [76]
- o docs: document default `User-Agent` [57]
- o docs: suggest --ssl-reqd instead of --ftp-ssl [62]
- o duphandle: also init netrc [3]
- o ECH: enable support for the AWS-LC backend [5]
- o hostip: don't use the resolver for FQDN localhost [45]
- o http_negotiate: allow for a one byte larger channel binding buffer [63]
- o http_proxy: move dynhds_add_custom here from http.c [18]
- o KNOWN_BUGS: setting a disabled option should return CURLE_NOT_BUILT_IN [74]
- o krb5: fix socket/sockindex confusion, MSVC compiler warnings [22]
- o lib: fixes for wolfSSL OPENSSL_COEXIST [73]
- o libssh: use libssh sftp_aio to upload file [47]
- o libssh: when using IPv6 numerical address, add brackets [43]
- o macos: disable gcc `availability` workaround as needed [7]
- o mbedtls: call psa_crypt_init() in global init [2]
- o mime: fix reader stall on small read lengths [65]
- o mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions [39]
- o mprintf: fix the integer overflow checks [44]
- o multi: add clarifying comment for wakeup_write() [9]
- o multi: fix callback for `CURLMOPT_TIMERFUNCTION` not being called again when... [48]
- o netrc: address several netrc parser flaws [17]
- o netrc: support large file, longer lines, longer tokens [14]
- o nghttp2: use custom memory functions [1]
- o OpenSSL: improvde error message on expired certificate [59]
- o openssl: remove three "Useless Assignments" [72]
- o openssl: stop using SSL_CTX_ function prefix for our functions [20]
- o os400: Fix IBMi builds [33]
- o os400: Fix IBMi EBCDIC conversion of arguments [34]
- o pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS [60]
- o rtsp: check EOS in the RTSP receive and return an error code [49]
- o schannel: remove TLS 1.3 ciphersuite-list support [54]
- o setopt: fix CURLOPT_HTTP_CONTENT_DECODING [15]
- o setopt: fix missing options for builds without HTTP & MQTT [10]
- o show-headers.md: clarify the headers are saved with the data [58]
- o socket: handle binding to "host!<ip>" [16]
- o socketpair: fix enabling `USE_EVENTFD` [30]
- o strtok: use namespaced `strtok_r` macro instead of redefining it [29]
- o tests: add the ending time stamp in testcurl.pl
- o tests: re-enable 2086, and 472, 1299, 1613 for Windows [38]
- o TODO: consider OCSP stapling by default [11]
- o tool_formparse: remove use of sscanf() [68]
- o tool_getparam: parse --localport without using sscanf [67]
- o tool_getpass: fix UWP `-Wnull-dereference` [46]
- o tool_getpass: replace `getch()` call with `_getch()` on Windows [42]
- o tool_urlglob: parse character globbing range without sscanf [69]
- o vtls: fix compile warning when ALPN is not available [12]
+ o all: remove FIXME and TODO comments [55]
+ o asyn-thread: fix build with `CURL_DISABLE_SOCKETPAIR` [47]
+ o asyn-thread: fix HTTPS RR crash [10]
+ o asyn-thread: fix the returned bitmask from Curl_resolver_getsock [18]
+ o asyn-thread: survive a c-ares channel set to NULL [52]
+ o build: add tool_hugehelp.c into IBMi build [40]
+ o checksrc.pl: warn on FIXME/TODO comments
+ o cmake/Find: set `<Modulename>_FOUND` for compatibility when found via `pkg-config` [22]
+ o cmake: add integration tests, run them in CI [21]
+ o cmake: always reference OpenSSL and ZLIB via imported targets [24]
+ o cmake: avoid unnecessary `-L` for implicit link dirs [11]
+ o cmake: drop `LDAP_DEPRECATED=1` macro, to sync with autotools [23]
+ o cmake: fix `HAVE_GETHOSTBYNAME_R_*` detections with `CURL_WERROR=ON` [57]
+ o cmake: fix to detect `HAVE_OPENSSL_SRP` in MSVC UWP builds [62]
+ o cmake: fix/add missing feature detections for Windows/MS-DOS [58]
+ o cmake: initialize variables where missing [27]
+ o cmake: lib order fixes for picky linkers (e.g. binutils `ld`) [26]
+ o cmake: normalize before matching paths with syspaths [30]
+ o cmake: respect `GNUTLS_CFLAGS` when detected via `pkg-config` [38]
+ o cmake: respect `GNUTLS_LIBRARY_DIRS` in `libcurl.pc` and `curl-config` [39]
+ o cmake: save a line with `CMAKE_C_IMPLICIT_LINK_DIRECTORIES` exclusion [32]
+ o cmake: tidy up string append and list prepend syntax [28]
+ o configure/cmake: check for realpath [19]
+ o configure/cmake: set asyn-rr a feature only if httpsrr is enabled [42]
+ o content_encoding: #error on too old zlib [2]
+ o curl_global_sslset.md: Add SSL backend names [50]
+ o CURLOPT_SSH_KNOWNHOSTS.md: strongly recommend using this [41]
+ o CURLSHOPT_SHARE.md: adjust for the new SSL session cache [6]
+ o docs: better explain multi-part byte range behavior [4]
+ o docs: use valid example domain names [54]
+ o generate.bat: remove curl_get_line.c from the curlx file list [20]
+ o header.md: mention `Authorization:` and `Cookie:` special treatment [43]
+ o imap: TLS upgrade fix [14]
+ o INTERNALS: fix c-ares, as we actually support 1.6.0 or later [37]
+ o ldap: drop support for legacy Novell LDAP SDK [25]
+ o lib: include necessary headers for `inet_ntop`/`inet_pton` [8]
+ o lib: silence LibreSSL collision warning on non-MSVC Windows [51]
+ o libssh2: comparison is always true because rc <= -1 [56]
+ o libssh2: raise lowest supported version to 1.2.8 [3]
+ o libssh: drop support for libssh older than 0.9.0 [33]
+ o libssh: silence `-Wconversion` with a cast (Windows 32-bit) [7]
+ o netrc: return code cleanup, fix missing file error [45]
+ o openssl-quic: ignore ciphers for h3 [1]
+ o openssl: fix out of scope variables in goto [12]
+ o pop3: TLS upgrade fix [15]
+ o runtests: fix the disabling of the memory tracking [29]
+ o runtests: quote commands to support paths with spaces [35]
+ o scache: add magic checks [31]
+ o smb: silence `-Warray-bounds` with gcc 13+ [9]
+ o smtp: TLS upgrade fix [16]
+ o SPONSORS.md: clarify that we don't promise goods or services [5]
+ o test1516: avoid failure due to spaces in path [36]
+ o test2080: simplify, avoid the null byte
+ o tests: fix test 558, 1330 for MSVC, allow TrackMemory with MSVC in cmake [53]
+ o tidy-up: make per-file `ARRAYSIZE` macros global as `CURL_ARRAYSIZE` [48]
+ o tool_cfgable: sort struct fields by size, use bitfields for booleans [17]
+ o tool_getparam: add "TLS required" flag for each such option [44]
+ o tool_progress: fix percent output of large parallel transfers [61]
+ o tool_ssls: switch to tool-specific get_line function [34]
+ o verbose.md: mention how carriage-return might occur in headers [49]
+ o vquic: make the "disable GSO" use infof, not failf [65]
+ o vtls: fix multissl-init [60]
+ o vtsl: eliminate 'data->state.ssl_scache' [59]
+ o wakeup_write: make sure the eventfd write sends eight bytes [46]
+ o wolfssl: silence compiler warning (MSVC 2019), simplify existing [13]
This release includes the following known bugs:
- See docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)
+ See https://curl.se/docs/knownbugs.html
For all changes ever done in curl:
@@ -101,101 +87,86 @@ For all changes ever done in curl: Planned upcoming removals include:
+ o Support for the msh3 HTTP/3 backend
+ o The winbuild build system
o TLS libraries not supporting TLS 1.3
- See https://curl.se/dev/deprecate.html for details
+ See https://curl.se/dev/deprecate.html
This release would not have looked like this without help, code, reports and
advice from friends like these:
- Alexis Savin, Andrew Ayer, Andrew Kirillov, Andy Fiddaman, Ben Greear,
- Bo Anderson, Brendon Smith, chemodax, Dan Fandrich, Daniel Engberg,
- Daniel Pouzzner, Daniel Stenberg, Dan Rosser, delogicsreal on github,
- dengjfzh on github, Ethan Everett, Florian Eckert, galen11 on github,
- Harmen Stoppels, Harry Sintonen, henrikjehgmti on github, hiimmat on github,
- Jacob Champion, Jeroen Ooms, Jesus Malo Poyatos, jethrogb on github,
- Kai Pastor, Logan Buth, Maarten Billemont, marcos-ng on github, Moritz,
- newfunction on hackerone, Nicolas F., Peter Kokot, Peter Marko, Ray Satiro,
- renovate[bot], Samuel Henrique, Stefan Eissing, SuperStormer on github,
- Tal Regev, Thomas, tinyboxvk, tkzv on github, tranzystorekk on github,
- Viktor Szakats, Vladislavs Sokurenko, wxiaoguang on github, Wyatt O'Day,
- xiaofeng, Yoshimasa Ohno
- (51 contributors)
+ Aaron Deadman, Andrei Korshikov, Andrew Kirillov, arlt on github,
+ Christian Schmitz, CueXXIII on Github, Dan Fandrich, Daniel Stenberg,
+ deliciouslytyped on github, Fay Stegerman, Jan Engelhardt,
+ jethrogb on github, Kai Pastor, Marcel Raad, Michael Kaufmann,
+ mschroeder-fzj on github, nono303 on github, Philip Heiduck, qhill,
+ Ralf A. Timmermann, Ray Satiro, renovate[bot], Stefan Eissing, Terence Eden,
+ thisisgk on github, Viktor Szakats, zzq1015 on github
+ (27 contributors)
References to bug reports and discussions on issues:
- [1] = https://curl.se/bug/?i=15527
- [2] = https://curl.se/bug/?i=15500
- [3] = https://curl.se/bug/?i=15496
- [4] = https://curl.se/bug/?i=15492
- [5] = https://curl.se/bug/?i=15499
- [6] = https://curl.se/bug/?i=15504
- [7] = https://curl.se/bug/?i=15508
- [8] = https://curl.se/bug/?i=15501
- [9] = https://curl.se/bug/?i=15600
- [10] = https://curl.se/bug/?i=15634
- [11] = https://curl.se/bug/?i=15483
- [12] = https://curl.se/bug/?i=15515
- [13] = https://curl.se/bug/?i=15506
- [14] = https://curl.se/bug/?i=15513
- [15] = https://curl.se/bug/?i=15511
- [16] = https://curl.se/bug/?i=15553
- [17] = https://curl.se/bug/?i=15586
- [18] = https://curl.se/bug/?i=15672
- [19] = https://curl.se/bug/?i=15538
- [20] = https://curl.se/bug/?i=15673
- [21] = https://curl.se/bug/?i=15661
- [22] = https://curl.se/bug/?i=15585
- [23] = https://curl.se/bug/?i=15542
- [24] = https://curl.se/bug/?i=15580
- [25] = https://curl.se/bug/?i=15584
- [26] = https://curl.se/bug/?i=15563
- [27] = https://curl.se/bug/?i=15469
- [28] = https://curl.se/bug/?i=15545
- [29] = https://curl.se/bug/?i=15549
- [30] = https://curl.se/bug/?i=15561
- [31] = https://curl.se/bug/?i=15533
- [32] = https://curl.se/bug/?i=15657
- [33] = https://curl.se/bug/?i=15566
- [34] = https://curl.se/bug/?i=15570
- [35] = https://curl.se/bug/?i=15648
- [36] = https://curl.se/bug/?i=15565
- [37] = https://curl.se/bug/?i=15557
- [38] = https://curl.se/bug/?i=15644
- [39] = https://curl.se/bug/?i=15547
- [40] = https://curl.se/bug/?i=15546
- [41] = https://curl.se/bug/?i=15525
- [42] = https://curl.se/bug/?i=15642
- [43] = https://curl.se/bug/?i=15522
- [44] = https://curl.se/bug/?i=15699
- [45] = https://curl.se/bug/?i=15676
- [46] = https://curl.se/bug/?i=15638
- [47] = https://curl.se/bug/?i=15625
- [48] = https://curl.se/bug/?i=15627
- [49] = https://curl.se/bug/?i=15624
- [50] = https://curl.se/bug/?i=15645
- [51] = https://curl.se/bug/?i=15645
- [52] = https://curl.se/bug/?i=15614
- [53] = https://curl.se/bug/?i=15620
- [54] = https://hackerone.com/reports/2792484
- [55] = https://curl.se/bug/?i=15617
- [56] = https://curl.se/mail/lib-2024-11/0029.html
- [57] = https://curl.se/bug/?i=15608
- [58] = https://curl.se/bug/?i=15605
- [59] = https://curl.se/bug/?i=15612
- [60] = https://curl.se/bug/?i=15494
- [61] = https://curl.se/bug/?i=15646
- [62] = https://curl.se/bug/?i=15658
- [63] = https://curl.se/bug/?i=15685
- [64] = https://curl.se/bug/?i=15695
- [65] = https://curl.se/bug/?i=15688
- [66] = https://curl.se/bug/?i=15689
- [67] = https://curl.se/bug/?i=15681
- [68] = https://curl.se/bug/?i=15683
- [69] = https://curl.se/bug/?i=15682
- [70] = https://curl.se/bug/?i=15653
- [71] = https://curl.se/bug/?i=15680
- [72] = https://curl.se/bug/?i=15679
- [73] = https://curl.se/bug/?i=15650
- [74] = https://curl.se/bug/?i=15472
- [76] = https://curl.se/bug/?i=15705
+ [1] = https://curl.se/bug/?i=16232
+ [2] = https://curl.se/bug/?i=16202
+ [3] = https://curl.se/bug/?i=16199
+ [4] = https://curl.se/bug/?i=16139
+ [5] = https://curl.se/bug/?i=16196
+ [6] = https://curl.se/bug/?i=16245
+ [7] = https://curl.se/bug/?i=16194
+ [8] = https://curl.se/bug/?i=16184
+ [9] = https://curl.se/bug/?i=16187
+ [10] = https://curl.se/bug/?i=16169
+ [11] = https://curl.se/bug/?i=16233
+ [12] = https://curl.se/bug/?i=16246
+ [13] = https://curl.se/bug/?i=16230
+ [14] = https://curl.se/bug/?i=16213
+ [15] = https://curl.se/bug/?i=16208
+ [16] = https://curl.se/bug/?i=16189
+ [17] = https://curl.se/bug/?i=16211
+ [18] = https://curl.se/bug/?i=16227
+ [19] = https://curl.se/bug/?i=16209
+ [20] = https://curl.se/bug/?i=16248
+ [21] = https://curl.se/bug/?i=16126
+ [22] = https://curl.se/bug/?i=16153
+ [23] = https://curl.se/bug/?i=16146
+ [24] = https://curl.se/bug/?i=16207
+ [25] = https://curl.se/bug/?i=16176
+ [26] = https://curl.se/bug/?i=16182
+ [27] = https://curl.se/bug/?i=16198
+ [28] = https://curl.se/bug/?i=16144
+ [29] = https://curl.se/bug/?i=16226
+ [30] = https://curl.se/bug/?i=16191
+ [31] = https://curl.se/bug/?i=16240
+ [32] = https://curl.se/bug/?i=16243
+ [33] = https://curl.se/bug/?i=16200
+ [34] = https://curl.se/bug/?i=16201
+ [35] = https://curl.se/bug/?i=16220
+ [36] = https://curl.se/bug/?i=16223
+ [37] = https://curl.se/bug/?i=16221
+ [38] = https://curl.se/bug/?i=16242
+ [39] = https://curl.se/bug/?i=16190
+ [40] = https://curl.se/bug/?i=16214
+ [41] = https://curl.se/bug/?i=16204
+ [42] = https://curl.se/bug/?i=16183
+ [43] = https://curl.se/bug/?i=16160
+ [44] = https://curl.se/bug/?i=16159
+ [45] = https://curl.se/bug/?i=16163
+ [46] = https://curl.se/bug/?i=16237
+ [47] = https://curl.se/bug/?i=16179
+ [48] = https://curl.se/bug/?i=16111
+ [49] = https://curl.se/bug/?i=16285
+ [50] = https://curl.se/bug/?i=16256
+ [51] = https://curl.se/bug/?i=16273
+ [52] = https://curl.se/bug/?i=16216
+ [53] = https://curl.se/bug/?i=16289
+ [54] = https://curl.se/bug/?i=16269
+ [55] = https://curl.se/bug/?i=16283
+ [56] = https://curl.se/bug/?i=16268
+ [57] = https://curl.se/bug/?i=16282
+ [58] = https://curl.se/bug/?i=16278
+ [59] = https://curl.se/bug/?i=16261
+ [60] = https://curl.se/bug/?i=16253
+ [61] = https://curl.se/bug/?i=16284
+ [62] = https://curl.se/bug/?i=16293
+ [65] = https://curl.se/bug/?i=16294
|
