Updated: curl/libcurl4/-devel/-doc, mingw64-x86_64-curl 7.88.1
The following packages have been upgraded in the Cygwin distribution:
* curl 7.88.1
* libcurl4 7.88.1
* libcurl-devel 7.88.1
* libcurl-doc 7.88.1
* mingw64-x86_64-curl 7.88.1
NOTE:
This release has been built with debug options disabled, as they are
strongly discouraged for production use, and displays warning messages.
Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.
For more information see the project home page:
https://curl.se/
As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation;
for complete details of changes since the previous Cygwin release see:
/usr/share/doc/curl/CHANGES
or
https://curl.se/changes.html
curl and libcurl 7.88.1 2023-02-20
* Public curl releases: 214
* Command line options: 250
* curl_easy_setopt() options: 302
* Public functions in libcurl: 91
* Contributors: 2818
The next release is planned and intended to become version 8.
Planned upcoming removals include:
* gskit
* NSS
* support for space-separated NOPROXY patterns
* support for systems without 64 bit data types
See https://curl.se/dev/deprecate.html for details
This release includes the following known bugs:
* see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)
This release includes the following bugfixes:
* build-openssl.bat: keep OpenSSL 3 engine binaries
* cmake: fix Windows check for CryptAcquireContext
* connnect: fix timeout handling to use full duration
* curl: make --silent work stand-alone
* curl_setup: Suppress OpenSSL 3 deprecation warnings
* CURLOPT_WS_OPTIONS.3: fix the availability version
* GHA: update rustls dependency to 0.9.2
* http2: buffer/pausedata and output flush fix.
* http2: set drain on stream end
* http: include stdint.h more readily
* krb5: silence cast-align warning
* lib1560: add IPv6 canonicalization tests
* os400: correct Curl_os400_sendto()
* remote-header-name.d: mention that filename* is not supported
* runtests: fix "uninitialized value $port"
* setopt: allow HTTP3 when HTTP2 is not defined
* socketpair: allow EWOULDBLOCK when reading the pair check bytes
* socks: allow using DoH to resolve host names
* tests-httpd: add proxy tests
* tests: make sure gnuserv-tls has SRP support before using it
* tests: make the telnet server shut down a socket gracefully
* tool_getparam: make --get a true boolean
* tool_operate: allow debug builds to set buffersize
* urlapi: do the port number extraction without using sscanf()
* urldata: remove `now` from struct SingleRequest - not needed
curl and libcurl 7.88.0 2023-02-15
Numbers
the 213th release
5 changes
56 days (total: 9,098)
173 bug-fixes (total: 8,665)
250 commits (total: 29,821)
0 new public libcurl function (total: 91)
0 new curl_easy_setopt() option (total:302)
1 new curl command line option (total:250)
78 contributors, 41 new (total: 2,812)
42 authors, 18 new (total: 1,119)
3 security fixes(total:135)
Security
This time we bring you three security fixes.
All of them covering cases for which we have had problems reported and
fixed before, but these are new subtle variations.
* CVE-2023-23914: HSTS ignored on multiple requests
* CVE-2023-23915: HSTS amnesia with âparallel
* CVE-2023-23916: HTTP multi-header compression denial of service
Changes
* curl.h: add CURL_HTTP_VERSION_3ONLY
* share: add sharing of HSTS cache among handles
* src: add --http3-only
* tool_operate: share HSTS between handles
* urlapi: add CURLU_PUNYCODE
* writeout: add %{certs} and %{num_certs}
Bugfixes
* cf-socket: fix build when not HAVE_GETPEERNAME
* cf-socket: keep sockaddr local in the socket filters
* cfilters:Curl_conn_get_select_socks: use the first non-connected
filter
* CI: add a workflow to automatically label pull requests
* CI: add pytest GHA to CI test/tests-httpd on a HTTP/3 setup
* CI: Retry failed downloads to reduce spurious failures
* CI: update wolfssl / wolfssh to 5.5.4 / 1.4.12
* cmake: bump requirement to 3.7
* cmake: check for sendmsg
* cmake: delete redundant macro definition `SECURITY_WIN32`
* cmake: fix dev warning due to mismatched arg
* cmake: fix the snprintf detection
* cmake: remove deprecated symbols check
* cmake: set SOVERSION also for macOS
* cmake: use list APPEND syntax for CMAKE_REQUIRED_DEFINITIONS
* cmdline-opts/Makefile: on error, do not leave a partial
* CODEOWNERS: remove the peeps mentioned as CI owners
* connect: fix access of pointer b
Updated: libnghttp2{_14,-devel}, {mingw64-x86_64-,}nghttp2 1.52
The following packages have been upgraded in the Cygwin distribution: * nghttp2 1.52 * libnghttp2_14 1.52 * libnghttp2-devel 1.52 * mingw64-x86_64-nghttp21.52 HTTP/2 and its header compression algorithm HPACK implementation. The framing layer of HTTP/2 is implemented as a reusable library. Also included are an HTTP/2 client, server, proxy, load test and benchmarking tool. NOTE: Support for previously deprecated Python bindings, modules, and documentation has been dropped from this release onwards. For more information see the project home page: https://nghttp2.org/ or the repo README: https://github.com/nghttp2/nghttp2#readme See link or text below for recent changes; after installation for complete details of changes read /usr/share/doc/nghttp2/ChangeLog. https://nghttp2.org/blog/ V1.52 2023-02-13 Doc sphinx_rtd_theme has been removed from the repository and archive. Build * The following dependencies have been updated: - ngtcp2 - nghttp3 - OpenSSL(quictls) - BoringSSL - libbpf * CMake build now checks core and extra components to find libevent. Python * The deprecated Python bindings has been removed. Libnghttp2_asio * The deprecated libnghttp2_asio has been removed. Third-party * llhttp and neverbleed have been updated. Nghttpx * This release fixes the bug that stalls TLS connection. Integration * This release adds more http3 integration tests.
Updated: man-pages-linux 6.03
The following package has been upgraded in the Cygwin distribution: * man-pages-linux 6.03 Documents the Linux kernel system calls and C library interfaces used by programs, plus system and administrative utilities, devices, file system, file, and data formats, and related information. For more information, see the project home page: https://kernel.org/doc/man-pages/ You may also search and read the pages online: https://man7.org/linux/man-pages/ although the latest release may not yet be available. A new updated site may be announced in a future release. NOTE: The previous releases named the directory linux, but this was searched before Cygwin man pages, leading to unexpected results in most cases. >From this release the directory used is man-pages-linux, and linux is provided as a convenience backward compatibility symlink. If you prefer to see Linux man pages over Cygwin man pages, then use -m|--systems linux in the examples below, or add -m linux to a command. As Cygwin has its own man pages with some conflicts, these man pages are installed under /usr/share/man/man-pages-linux/, so by default searching or viewing these pages requires the option: $ apropos -m|--systems man-pages-linux ... $ man -m|--systems man-pages-linux ... Cygwin man pages are under the default system "man", so for convenience both systems may be specified separated by comma e.g. $ man -m man,man-pages-linux ... The path or option may also be added explicitly to a users MANPATH or alias e.g. $ export MANPATH=$MANPATH:/usr/share/man/man-pages-linux $ alias apropos='apropos -m man,man-pages-linux' $ alias man='man -m man,man-pages-linux' Add -a to show both Cygwin and Linux (and POSIX if companion package man-pages-posix is also installed) manual pages. Release 6 added some section 2 and 3 pages suffixed by const, head, or type installed in the base section directories. For recent changes, please see below, or after installation read /usr/share/doc/man-pages-linux/Changes: man-pages-6.03 2023-02-12 Global changes * Build system: - Add scripts to produce a book of the Linux man-pages. - Add lint-c-cppcheck to the make(1) targets to run the cppcheck(1) linter. * TH: - Use correct letter case in page titles. This started in 6.02, but there were still many cases left. * SYNOPSIS: - Mark some functions as deprecated. * STANDARDS: - Remove most references to ISO C89. We still document it in standards(7), but it's an ancient language version that this project regards as obsolescent, so in the STANDARDS sections for APIs we only take into account C99 and later and POSIX.1-2001 and later (with few exceptions where older standards are relevant). * ffix: - Change \- to - where appropriate - Improve readability of numbers: - Show BCD magic numbers that are meaningful in hex as hex, rather than weird decimal numbers. - Use IEC multipliers. - Format ranges consistently using interval notation: [min, max]. * srcfix: - Use \[] escapes. Changes to individual pages * timespec.3type Update tv_nsec according to C2x. The manual pages (and other files in the repository) have been improved beyond what this changelog covers. To learn more about changes applied to individual pages, use git(1). New and rewritten pages * man3/ arc4random.3 powerof2.3 roundup.3 * man3head/ printf.h.3head Newly documented interfaces in existing pages * perf_event_open.2 PERF_COUNT_SW_BPF_OUTPUT PERF_COUNT_SW_CGROUP_SWITCHES PERF_FORMAT_LOST PERF_RECORD_MISC_MMAP_BUILD_ID PERF_RECORD_MISC_SWITCH_OUT_PREEMPT PERF_SAMPLE_CODE_PAGE_SIZE PERF_SAMPLE_DATA_PAGE_SIZE PERF_SAMPLE_WEIGHT_STRUCT struct perf_event_attr::build_id struct perf_event_attr::inherit_thread struct perf_event_attr::remove_on_exec struct perf_event_attr::sigtrap struct perf_event_attr::aux_sample_size struct perf_event_attr::sig_data union perf_sample_weight struct read_format::values[]::lost struct::weight struct::data_page_size struct::code_page_size struct::size struct::data struct:: ::build_id_size struct:: ::build_id * prctl.2 PR_SET_VMA PR_SET_VMA_ANON_NAME New and changed links * man3/ arc4random_buf.3(arc4random(3)) arc4random_uniform.3(arc4random(3)) register_printf_modifier.3 (printf.h(3head)) register_printf_specifier.3 (printf.h(3head)) register_printf_type.3 (printf.h(3head)) * man3const/ PA_CHAR.3const (printf.h(3head)) PA_DOUBLE.3const(printf.h(3head)) PA_FLAG_LONG.3const
Updated: mc-4.8.29-1
Version mc-4.8.29-1 of Midnight Commander has been uploaded for cygwin CHANGES This is a upstream bugfix release https://www.midnight-commander.org/wiki/NEWS-4.8.29 DESCRIPTION GNU Midnight Commander is a visual file manager. It's a feature rich full-screen text mode application that allows you to copy, move and delete files and whole directory trees, search for files and run commands in the subshell. Internal viewer and editor are included. HOMEPAGE http://www.midnight-commander.org/ Regards Marco Atzeri If you have questions or comments, please send them to the cygwin mailing list at: cygwin (at) cygwin (dot) com .
Updated: procps-ng 4.0.3-1
The package procps-ng has been updated to its latest upstream version. This package provides command line and full screen utilities for browsing procfs, a pseudo file system dynamically generated by the kernel to provide information about the status of entries in its process table (such as whether the process is running, stopped, or a zombie). It contains free, prockill, pkill, pgrep, pmap, procps, tload, top, uptime, vmstat, w, and watch. -- *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO *** If you want to unsubscribe from the cygwin-announce mailing list, look at the "List-Unsubscribe: " tag in the email header of this message. Send email to the address specified there. It will be in the format: cygwin-announce-unsubscribe-you=yourdomain@cygwin.com If you need more information on unsubscribing, start reading here: http://sourceware.org/lists.html#unsubscribe-simple Please read *all* of the information on unsubscribing that is available starting at this URL.
TEST: bash 5.2.15-2
The following packages have been uploaded to the Cygwin distribution: * bash-5.2.15-2 * bash-devel-5.2.15-2 v2: Make /usr/bin/sh.exe a hardlink to /usr/bin/bash.exe, as required. The v1 installer script accidentally created a symlink. This is a long overdue update of the bash shell. Given the big step in the version, this is a TEST release for now. Please give it a try. This release is based on the Fedora Linux 37 bash release with most patches from Fedora used for the Cygwin release, too. This includes noticably: - A bash-devel package - Real executables for some builtins in /usr/bin. This is actually required per POSIX. For a discussion, see https://bugzilla.redhat.com/show_bug.cgi?id=820192 Bash is an sh-compatible shell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is intended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers functional improvements over sh for both programming and interactive use. In addition, most sh scripts can be run by Bash without modification.
