curl/RELEASE-NOTES

Curl and libcurl 7.19.6

 Public curl releases:         112
 Command line options:         132
 curl_easy_setopt() options:   163
 Public functions in libcurl:  58
 Known libcurl bindings:       38
 Contributors:                 715

This release includes the following changes:

 o 

This release includes the following bugfixes:

 o crash on bad socket close with FTP

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

 Kamil Dudka, Caolan McNamara

        Thanks! (and sorry if I forgot to mention someone)
start climbing to 7.19.6 2009-05-18 09:58:00 +02:00			`Curl and libcurl 7.19.6`
working draft of the upcoming 7.10.8 release notes 2003-09-22 23:38:52 +02:00
start climbing to 7.19.6 2009-05-18 09:58:00 +02:00			`Public curl releases: 112`
- Craig A West brought us: libcurl now defaults to do CONNECT with HTTP version 1.1 instead of 1.0 like before. This change also introduces the new proxy type for libcurl called 'CURLPROXY_HTTP_1_0' that then allows apps to switch (back) to CONNECT 1.0 requests. The curl tool also got a --proxy1.0 option that works exactly like --proxy but sets CURLPROXY_HTTP_1_0. I updated all test cases cases that use CONNECT and I tried to do some using --proxy1.0 and some updated to do CONNECT 1.1 to get both versions run. 2009-02-02 17:19:23 +01:00			`Command line options: 132`
- David Kierznowski notified us about a security flaw (http://curl.haxx.se/docs/adv_20090303.html also known as CVE-2009-0037) in which previous libcurl versions (by design) can be tricked to access an arbitrary local/different file instead of a remote one when CURLOPT_FOLLOWLOCATION is enabled. This flaw is now fixed in this release together this the addition of two new setopt options for controlling this new behavior: o CURLOPT_REDIR_PROTOCOLS controls what protocols libcurl is allowed to follow to when CURLOPT_FOLLOWLOCATION is enabled. By default, this option excludes the FILE and SCP protocols and thus you nee to explicitly allow them in your app if you really want that behavior. o CURLOPT_PROTOCOLS controls what protocol(s) libcurl is allowed to fetch using the primary URL option. This is useful if you want to allow a user or other outsiders control what URL to pass to libcurl and yet not allow all protocols libcurl may have been built to support. 2009-03-03 00:05:31 +01:00			`curl_easy_setopt() options: 163`
- Introducing curl_easy_send() and curl_easy_recv(). They can be used to send and receive data over a connection previously setup with curl_easy_perform() and its CURLOPT_CONNECT_ONLY option. The sendrecv.c example was added to show how they can be used. 2008-05-12 23:43:24 +02:00			`Public functions in libcurl: 58`
the Eiffel binding 2009-03-02 10:03:11 +01:00			`Known libcurl bindings: 38`
15 additional contributor from the 7.19.4 RELEASE-NOTES 2009-03-03 11:41:11 +01:00			`Contributors: 715`
David Hull made the file: URL parser also accept the somewhat sloppy file syntax: file:/path. I added test case 203 to verify this. 2003-10-29 10:53:21 +01:00
Armel Asselin made the CURLOPT_PREQUOTE option work fine even when CURLOPT_NOBODY is set true. PREQUOTE is then run roughly at the same place in the command sequence as it would have run if there would've been a transfer. 2006-08-09 00:56:46 +02:00			`This release includes the following changes:`
mention the curl_off_t changes first 2008-09-01 16:27:24 +02:00
start climbing to 7.19.6 2009-05-18 09:58:00 +02:00			`o`
Armel Asselin made the CURLOPT_PREQUOTE option work fine even when CURLOPT_NOBODY is set true. PREQUOTE is then run roughly at the same place in the command sequence as it would have run if there would've been a transfer. 2006-08-09 00:56:46 +02:00
HTTP Digest auth fix on a re-used connection 2007-07-22 12:17:52 +02:00			`This release includes the following bugfixes:`

- Kamil Dudka brought the patch from the Redhat bug entry https://bugzilla.redhat.com/show_bug.cgi?id=427966 which was libcurl closing a bad file descriptor when closing down the FTP data connection. Caolan McNamara seems to be the original author of it. 2009-05-19 22:54:31 +02:00			`o crash on bad socket close with FTP`
HTTP Digest auth fix on a re-used connection 2007-07-22 12:17:52 +02:00
			`This release includes the following known bugs:`

			`o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html)`

			`This release would not have looked like this without help, code, reports and`
			`advice from friends like these:`

- Kamil Dudka brought the patch from the Redhat bug entry https://bugzilla.redhat.com/show_bug.cgi?id=427966 which was libcurl closing a bad file descriptor when closing down the FTP data connection. Caolan McNamara seems to be the original author of it. 2009-05-19 22:54:31 +02:00			`Kamil Dudka, Caolan McNamara`
start over on 7.18.1 2008-01-28 22:19:15 +01:00
working draft of the upcoming 7.10.8 release notes 2003-09-22 23:38:52 +02:00			`Thanks! (and sorry if I forgot to mention someone)`