cURL / Mailing Lists / curl-library / Single Mail

curl-library

[RELEASE] curl and libcurl 7.30.0

From: Daniel Stenberg <daniel_at_haxx.se>
Date: Fri, 12 Apr 2013 10:52:09 +0200 (CEST)

Hello world!

I'm happy to present curl and libcurl version 7.30.0, readily available for
download from http://curl.haxx.se/ as usual.

Take note of the security advisory associated with this release. I'll post a
separate mail about it in second.

This time I especially want to say THANK YOU to and highlight the large amount
of contributors who have helped us make this release to what it is. Over 40
names are listed below as having helped out with changes that are included in
this release. See below for the full list of heroes.

Curl and libcurl 7.30.0

  Public curl releases: 132
  Command line options: 152
  curl_easy_setopt() options: 199
  Public functions in libcurl: 58
  Known libcurl bindings: 42
  Contributors: 1005

***
krb4 support is up for removal. If you care about it at all, speak up
on the curl-library list asap!
***

This release includes the following changes:

  o imap: Changed response tag generation to be completely unique
  o imap: Added support for SASL-IR extension
  o imap: Added support for the list command
  o imap: Added support for the append command
  o imap: Added custom request parsing
  o imap: Added support to the fetch command for UID and SECTION properties
  o imap: Added parsing and verification of the UIDVALIDITY mailbox attribute
  o darwinssl: Make certificate errors less techy
  o imap/pop3/smtp: Added support for the STARTTLS capability
  o checksrc: ban use of sprintf, vsprintf, strcat, strncat and gets
  o curl_global_init() now accepts the CURL_GLOBAL_ACK_EINTR flag [10]
  o Added CURLMOPT_MAX_HOST_CONNECTIONS, CURLMOPT_MAX_TOTAL_CONNECTIONS for
    new multi interface connection handling
  o Added CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE,
    CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL and
    CURLMOPT_PIPELINING_SERVER_BL for new pipelining control [15]

This release includes the following bugfixes:

  o SECURITY ADVISORY: cookie tailmatching to avoid cross-domain leakage [25]
  o darwinssl: Fix build under Leopard
  o DONE: consider callback-aborted transfers premature [1]
  o ntlm: Fixed memory leaks
  o smtp: Fixed an issue when processing EHLO failure responses
  o pop3: Fixed incorrect return value from pop3_endofresp()
  o pop3: Fixed SASL authentication capability detection
  o pop3: Fixed blocking SSL connect when connecting via POP3S
  o imap: Fixed memory leak when performing multiple selects
  o nss: fix misplaced code enabling non-blocking socket mode
  o AddFormData: prevent only directories from being posted [2]
  o darwinssl: fix infinite loop if server disconnected abruptly [3]
  o metalink: fix improbable crash parsing metalink filename
  o show proper host name on failed resolve
  o MacOSX-Framework: Make script work in Xcode 4.0 and later
  o strlcat: remove function [4]
  o darwinssl: Fix send glitchiness with data > 32 or so KB [5]
  o polarssl: better 1.1.x and 1.2.x support
  o various documentation improvements
  o multi: NULL pointer reference when closing an unused multi handle [9]
  o SOCKS: fix socks proxy when noproxy matched [7]
  o install-sh: updated to support multiple source files as arguments [6]
  o PolarSSL: added human readable error strings
  o resolver_error: remove wrong error message output
  o docs: updates HTML index and general improvements
  o curlbuild.h.dist: enhance non-configure GCC ABI detection logic
  o sasl: Fixed null pointer reference when decoding empty digest challenge [8]
  o easy: do not ignore poll() failures other than EINTR
  o darwinssl: disable ECC ciphers under Mountain Lion by default
  o CONNECT: count received headers [11]
  o build: fixes for VMS
  o CONNECT: clear 'rewindaftersend' on success [12]
  o HTTP proxy: insert slash in URL if missing [13]
  o hiperfifo: updated to use current libevent API [14]
  o getinmemory.c: abort the transfer nicely if not enough memory
  o improved win32 memorytracking
  o corrected proxy header response headers count [16]
  o FTP quote operations on re-used connection [17]
  o tcpkeepalive on win32 [18]
  o tcpkeepalive on Mac OS X [23]
  o easy: acknowledge the CURLOPT_MAXCONNECTS option properly [19]
  o easy interface: restore default MAXCONNECTS to 5
  o win32: don't set SO_SNDBUF for windows vista or later versions [20]
  o HTTP: made cookie sort function more deterministic
  o winssl: Fixed memory leak if connection was not successful
  o FTP: wait on both connections during active STOR state [21]
  o connect: treat a failed local bind of an interface as a non-fatal error [22]
  o darwinssl: disable insecure ciphers by default
  o FTP: handle "rubbish" in front of directory name in 257 responses [24]
  o mk-ca-bundle: Fixed lost OpenSSL output with "-t"

This release includes the following known bugs:

o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

  Kamil Dudka, Steve Holme, Nick Zitzmann, Patricia Muscalu, Dan Fandrich,
  Gisle Vanem, Guenter Knauf, Yang Tse, Oliver Gond�a, Aki Koskinen,
  Alexander Klauer, Kim Vandry, Willem Sparreboom, Jeremy Huddleston,
  Bruno de Carvalho, Rainer Jung, Jeremy Huddleston, Kim Vandry, Jiri Hruska,
  Alexander Klauer, Saran Neti, Alessandro Ghedini, Linus Nielsen Feltzing,
  Martin Jansen, John E. Malmberg, Tom Grace, Patrick Monnerat,
  Zdenek Pavlas, Myk Taylor, C�dric Deltheil, Robert Wruck, Sam Deane,
  Clemens Gruber, Marc Hoersken, Tomas Mlcoch, Fredrik Thulin, Steven Gu,
  Andrew Kurushin, Christian H�gele, Daniel Theron, Bill Middlecamp,
  Richard Michael, Yamada Yasuharu

Thanks! (and sorry if I forgot to mention someone)

References to bug reports and discussions on issues:

-- 
  / daniel.haxx.se

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2013-04-12

This message: [ Message body ]
Next message: Daniel Stenberg: "[SECURITY ADVISORY] libcurl cookie domain tailmatch"
Previous message: Dima Tisnek: "Re: certificate verification against system cert (?) when custom CAINFO is set"
Next in thread: Guenter: "Re: [RELEASE] curl and libcurl 7.30.0"
Reply: Guenter: "Re: [RELEASE] curl and libcurl 7.30.0"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]