RELEASE-NOTES: synced
The curl 7.72.0 release
diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index a3d3635..363c7c9 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -1,10 +1,10 @@
curl and libcurl 7.72.0
- Public curl releases: 193
+ Public curl releases: 194
Command line options: 232
curl_easy_setopt() options: 277
Public functions in libcurl: 82
- Contributors: 2233
+ Contributors: 2239
This release includes the following changes:
@@ -14,7 +14,9 @@
This release includes the following bugfixes:
+ o CVE-2020-8231: libcurl: wrong connect-only connection [98]
o appveyor: collect libcurl.dll variants with prefix or suffix [38]
+ o asyn-ares: correct some bad comments [94]
o bearssl: fix build with disabled proxy support [16]
o buildconf: avoid array concatenation in die() [64]
o buildconf: retire ares buildconf invocation
@@ -27,6 +29,7 @@
o CI/macos: unconditionally enable warnings-as-errors with autotools [21]
o CI: Add muse CI analyzer [79]
o cirrus-ci: upgrade 11-STABLE to 11.4 [2]
+ o CMake: don't complain about missing nroff [87]
o CMake: fix test for warning suppressions [17]
o cmake: fix windows xp build [13]
o configure.ac: Sort features name in summary [6]
@@ -34,6 +37,7 @@
o configure: cleanup wolfssl + pkg-config conflicts when cross compiling. [48]
o configure: show zstd "no" in summary when built without it [49]
o connect: remove redundant message about connect failure [66]
+ o curl-config: ignore REQUIRE_LIB_DEPS in --libs output [96]
o curl.1: add a few missing valid exit codes [76]
o curl: add %{method} to the -w variables
o curl: improve the existing file check with -J [43]
@@ -42,6 +46,9 @@
o CURLINFO_CERTINFO.3: fix typo [3]
o CURLOPT_NOBODY.3: clarify what setting to 0 means [46]
o docs: add date of 7.20 to CURLM_CALL_MULTI_PERFORM mentions [18]
+ o docs: Add video link to docs/CONTRIBUTE.md [95]
+ o docs: change "web site" to "website" [86]
+ o docs: clarify MAX_SEND/RECV_SPEED functionality [92]
o docs: Update a few leftover mentions of DarwinSSL [29]
o doh: remove redundant cast [20]
o file2memory: use a define instead of -1 unsigned value [30]
@@ -54,10 +61,12 @@
o http2: close the http2 connection when no more requests may be sent [7]
o http2: fix nghttp2_strerror -> nghttp2_http2_strerror in debug messages [11]
o libssh2: s/ssherr/sftperr/ [78]
+ o libtest/Makefile.am: add -no-undefined for libstubgss for Cygwin [91]
o md(4|5): don't use deprecated macOS functions [23]
o mprintf: Fix dollar string handling [54]
o mprintf: Fix stack overflows [53]
o multi: Condition 'extrawait' is always true [60]
+ o multi: Remove 10-year old out-commented code [97]
o multi: remove two checks always true [36]
o multi: update comment to say easyp list is linear [44]
o multi_remove_handle: close unused connect-only connections [62]
@@ -82,6 +91,7 @@
o strdup: remove the odd strlen check [24]
o test1119: verify stdout in the test [33]
o test1139: make it display the difference on test failures
+ o test1140: compare stdout [93]
o test1908: treat file as text [83]
o tests/FILEFORMAT.md: mention %HTTP2PORT
o tests/sshserver.pl: fix compatibility with OpenSSH for Windows
@@ -112,19 +122,21 @@
This release would not have looked like this without help, code, reports and
advice from friends like these:
- Alessandro Ghedini, Alex Kiernan, Baruch Siach, BrumBrum on hackerone,
- Cameron Cawley, Carlo Marcelo Arenas Belón, causal-agent on github,
- Cherish98 on github, Dan Fandrich, Daniel Gustafsson, Daniel Stenberg,
- Denis Goleshchikhin, divinity76 on github, Ehren Bendler, Emil Engler,
- Erik Johansson, Filip Salomonsson, Gilles Vollant, Gisle Vanem,
- ihsinme on github, Jeremy Maitin-Shepard, joey-l-us on github,
- Jonathan Cardoso Machado, Jonathan Nieder, Kamil Dudka, Laramie Leavitt,
- lilongyan-huawei on github, Marc Aldorasi, Marcel Raad, Marc Hörsken,
- Masaya Suzuki, Matthias Naegler, Nicolas Sterchele, NobodyXu on github,
- Peter Wu, Rasmus Melchior Jacobsen, Ray Satiro, sspiri on github,
- Stefan Yohansson, Tadej Vengust, Tatsuhiro Tsujikawa, tbugfinder on github,
- Thomas M. DuBuisson, Tobias Stoeckmann, Viktor Szakats, xwxbug on github,
- (46 contributors)
+ Alessandro Ghedini, Alex Kiernan, Baruch Siach, Bevan Weiss, Brian Inglis,
+ BrumBrum on hackerone, Cameron Cawley, Carlo Marcelo Arenas Belón,
+ causal-agent on github, Cherish98 on github, Dan Fandrich, Daniel Gustafsson,
+ Daniel Stenberg, Denis Goleshchikhin, divinity76 on github, Ehren Bendler,
+ Emil Engler, Erik Johansson, Filip Salomonsson, Gilles Vollant, Gisle Vanem,
+ H3RSKO on github, ihsinme on github, Jeremy Maitin-Shepard,
+ joey-l-us on github, Jonathan Cardoso Machado, Jonathan Nieder, Kamil Dudka,
+ Ken Brown, Laramie Leavitt, lilongyan-huawei on github, Marc Aldorasi,
+ Marcel Raad, Marc Hörsken, Masaya Suzuki, Matthias Naegler,
+ Nicolas Sterchele, NobodyXu on github, Peter Wu, ramsay-jones on github,
+ Rasmus Melchior Jacobsen, Ray Satiro, sspiri on github, Stefan Yohansson,
+ Tadej Vengust, Tatsuhiro Tsujikawa, tbugfinder on github,
+ Thomas M. DuBuisson, Tobias Stoeckmann, Tomas Berger, Viktor Szakats,
+ xwxbug on github,
+ (52 contributors)
Thanks! (and sorry if I forgot to mention someone)
@@ -215,6 +227,16 @@
[83] = https://curl.haxx.se/bug/?i=5767
[84] = https://curl.haxx.se/bug/?i=5767
[85] = https://curl.haxx.se/bug/?i=5797
+ [86] = https://curl.haxx.se/bug/?i=5822
+ [87] = https://curl.haxx.se/bug/?i=5817
[88] = https://curl.haxx.se/bug/?i=5795
[89] = https://curl.haxx.se/bug/?i=5792
[90] = https://curl.haxx.se/bug/?i=5783
+ [91] = https://curl.haxx.se/bug/?i=5819
+ [92] = https://curl.haxx.se/bug/?i=5788
+ [93] = https://curl.haxx.se/bug/?i=5814
+ [94] = https://curl.haxx.se/bug/?i=5812
+ [95] = https://curl.haxx.se/bug/?i=5811
+ [96] = https://curl.haxx.se/bug/?i=5793
+ [97] = https://curl.haxx.se/bug/?i=5805
+ [98] = https://curl.haxx.se/docs/CVE-2020-8231.html
