summaryrefslogtreecommitdiff
path: root/RELEASE-NOTES
blob: 4880ed68d0aa0b904f0b4b325ecbdb3883289ba7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
Curl and libcurl 7.50.3

 Public curl releases:         159
 Command line options:         185
 curl_easy_setopt() options:   224
 Public functions in libcurl:  61
 Contributors:                 1445

This release includes the following bugfixes:

 o CVE-2016-7167: escape and unescape integer overflows [8]
 o mk-ca-bundle.pl: use SHA256 instead of SHA1
 o checksrc: detect strtok() use
 o errors: new alias CURLE_WEIRD_SERVER_REPLY [1]
 o http2: support > 64bit sized uploads [2]
 o openssl: fix bad memory free (regression) [3]
 o CMake: hide private library symbols [4]
 o http: refuse to pass on response body with NO_NODY was set [5]
 o cmake: fix curl-config --static-libs [6]
 o mbedtls: switch off NTLM in build if md4 isn't available [7]
 o curl: --create-dirs on windows groks both forward and backward slashes [9]

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (https://curl.haxx.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

  Daniel Stenberg, Harold Stuart, Jakub Zakrzewski, Peter Wu, Randy Armstrong,
  Ray Satiro, Ryan Scott, Tony Kelman, Viktor Szakáts,
  (9 contributors)

        Thanks! (and sorry if I forgot to mention someone)

References to bug reports and discussions on issues:

 [1] = https://curl.haxx.se/bug/?i=975
 [2] = https://curl.haxx.se/bug/?i=996
 [3] = https://curl.haxx.se/bug/?i=1005
 [4] = https://curl.haxx.se/bug/?i=981
 [5] = https://curl.haxx.se/bug/?i=973
 [6] = https://curl.haxx.se/bug/?i=841
 [7] = https://curl.haxx.se/bug/?i=1004
 [8] = https://curl.haxx.se/docs/adv_20160914.html
 [9] = https://curl.haxx.se/bug/?i=1007