GNU libmicrohttpd 0.9.55 released

[Evgeny Grin]

Dear all,


I'm glad to announce the release of GNU libmicrohttpd 0.9.55.

GNU libmicrohttpd is a small C library that is supposed to make it easy
to run an HTTP server as part of another application. GNU libmicrohttpd
is fully HTTP 1.1 compliant and supports IPv6. Finally, GNU
libmicrohttpd is fast, portable and has a simple API and (without TLS
support and other optional features) a small binary size (~32k).

This is bugfix release.
Most noticeable changes since version 0.9.53:
* Fixed  minor issues uncovered by a security audit sponsored by the
  Secure Open Source Fund, a Mozilla initiative to support key pieces of
  open source software with security audits. For more information see

https://wiki.mozilla.org/MOSS/Secure_Open_Source/Completed#GNU_libmicrohttpd
  SOS is part of Mozilla Open Source Support (MOSS) - read more at
  https://mozilla.org/moss
* Fixed build on GNU/Linux without epoll support
* Improved backward compatibility with applications which use specific
  combination of flags
* Fixed wrong text in HTTP reason strings for HTTP result codes 303-308
* Added new option MHD_OPTION_STRICT_FOR_CLIENT
* Added connection info type MHD_CONNECTION_INFO_REQUEST_HEADER_SIZE

Most noticeable changes since unannounced version 0.9.54:
* Fixed adding unwanted "Transfer-Encoding: chunked" and
  "Transfer-Encoding: chunked" to response headers when "upgrade" is used.
* Fixed null dereference with upgrade response when error sent to client
  instead of response
* Fixed case-sensitive match in MHD_get_response_header(), now used
  case-insensitive match
* Fixed detection of "Connection: " tokens when several tokens are used
  within single header line
* Fixed closing of "upgraded" connection in poll() mode with
  thread-per-connection
* Fixes leak of response when "upgrade" failed
* Fixed build of examples when building with disabled "upgrade"
* Fixed possible null dereference in HTTPS test
* Fixed returned pointer for MHD_CONNECTION_INFO_CONNECTION_SUSPENDED
* Fixed cleanup of suspended connection
* Other minor fixes
* Removed some dead code
* Improved connection processing after resuming in epoll mode.
* Optimized detection of "Keep-Alive/Closed"
* Other minor optimizations


You can download GNU libmicrohttpd from

* ftp://ftp.gnu.org/gnu/libmicrohttpd/ and all GNU FTP mirrors.
* Our git repository at https://gnunet.org/git/libmicrohttpd.git

Please report bugs to our bugtracker at https://gnunet.org/bugs/.

The documentation (including a reference manual and tutorial) can be
found at http://www.gnu.org/software/libmicrohttpd/.


-- 
Wishes,
Evgeny

0xEAC2BAF4.asc
Description: application/pgp-keys

signature.asc
Description: OpenPGP digital signature