summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDaniel Stenberg <daniel@haxx.se>2013-04-12 00:05:39 +0200
committerDaniel Stenberg <daniel@haxx.se>2013-04-12 00:05:39 +0200
commit80d241046e404233537ff35efabb703a0668c7d5 (patch)
tree72fbef66fd2f650a0bce69788700eab94a580c6b
parent5c5e1a1cd206ad8feadaa83a37d0326ba45cf45d (diff)
downloadcurl-7_30_0.tar.gz
RELEASE-NOTES: cleaned up for 7.30 (synced with 5c5e1a1cd20)curl-7_30_0
Most notable the security advisory: http://curl.haxx.se/docs/adv_20130412.html
-rw-r--r--RELEASE-NOTES8
1 files changed, 7 insertions, 1 deletions
diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index d588da7e5..66abd7d86 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -33,6 +33,7 @@ This release includes the following changes:
This release includes the following bugfixes:
+ o SECURITY ADVISORY: cookie tailmatching to avoid cross-domain leakage [25]
o darwinssl: Fix build under Leopard
o DONE: consider callback-aborted transfers premature [1]
o ntlm: Fixed memory leaks
@@ -80,6 +81,8 @@ This release includes the following bugfixes:
o FTP: wait on both connections during active STOR state [21]
o connect: treat a failed local bind of an interface as a non-fatal error [22]
o darwinssl: disable insecure ciphers by default
+ o FTP: handle "rubbish" in front of directory name in 257 responses [24]
+ o mk-ca-bundle: Fixed lost OpenSSL output with "-t"
This release includes the following known bugs:
@@ -96,7 +99,8 @@ advice from friends like these:
Martin Jansen, John E. Malmberg, Tom Grace, Patrick Monnerat,
Zdenek Pavlas, Myk Taylor, Cédric Deltheil, Robert Wruck, Sam Deane,
Clemens Gruber, Marc Hoersken, Tomas Mlcoch, Fredrik Thulin, Steven Gu,
- Andrew Kurushin, Christian Hägele, Daniel Theron
+ Andrew Kurushin, Christian Hägele, Daniel Theron, Bill Middlecamp,
+ Richard Michael, Yamada Yasuharu
Thanks! (and sorry if I forgot to mention someone)
@@ -125,3 +129,5 @@ References to bug reports and discussions on issues:
[21] = http://curl.haxx.se/bug/view.cgi?id=1183
[22] = http://curl.haxx.se/bug/view.cgi?id=1189
[23] = http://curl.haxx.se/bug/view.cgi?id=1214
+ [24] = http://curl.haxx.se/mail/lib-2013-04/0113.html
+ [25] = http://curl.haxx.se/docs/adv_20130412.html