Dear all,
We are happy to announce the release of GNU libmicrohttpd 1.0.3.
This is a maintenance release on the v1.0-series, major new developments
are happening thanks to the support of the Sovereign Tech Agency in our
new Git at git://git.gnunet.org/libmicrohttpd2.git, check it out!
About GNU libmicrohttpd
=======================
GNU libmicrohttpd is a small C library that makes it easy to run an
HTTP server as part of another application. GNU Libmicrohttpd is free
software and an official GNU package. Key features that distinguish
GNU libmicrohttpd from other projects are:
* C library: fast and small
* API is expressive and fully reentrant
* Implementation is HTTP 1.1 compliant
* HTTP server can listen on multiple ports
* Various threading modes
* Three different sockets polling modes
* Broad platform support
* Support for IPv4 and IPv6
* Support for incremental processing of POST data
* Support for basic and digest authentication
* Support for TLS (requires libgnutls)
Do not use GNU libmicrohttpd if you are looking for a standalone HTTP
server, there are many other projects out there that provide that kind
of functionality already. However, if you want to be able to serve
HTTP requests from within your C or C++ application, check it out!
GNU libmicrohttpd has been primarily developed by the GNU maintainers
Evgeny Grin and Christian Grothoff over the last 20 years with the
help of a large community contributing features, bug reports and bug
fixes.
Changes
=======
This release fixes various minor problems:
* a list traversal issue that could cause connections to hang,
* tightens parsing rules to:
- reject bare CR in chunk extensions,
- limit HTTP header field names to 'token' character sets as per RFC
* allows applications to handle a binary 0 in the URI path
(but they really need to ask for it)
* fixes compatibility of some tests with curl >= 8.16,
* removes the (vulnerable) experimental ws logic
(that was never built unless you asked for experimental)
Most of the fixes are hardening, but the *rare* connection hang bug
could be, well, annoying if you hit it ;-).
Download
========
You can download GNU libmicrohttpd from:
* https://ftp.gnu.org/gnu/libmicrohttpd/ and all GNU FTP mirrors.
* Our Git repository at git://git.gnunet.org/libmicrohttpd.git
Please report bugs to our bugtracker at
https://bugs.gnunet.org/set_project.php?project_id=10.
The documentation (including a reference manual and tutorial) can be
found at https://gnu.org/s/libmicrohttpd.
Happy hacking!
Evgeny & Christian
