From d30316fda936111ad5d4f8b1fde7747c289468b6 Mon Sep 17 00:00:00 2001 From: Christian Grothoff Date: Mon, 13 Apr 2026 11:41:30 +0200 Subject: [PATCH] bump version --- ChangeLog | 7 +++++++ NEWS | 8 ++++++++ configure.ac | 2 +- 3 files changed, 16 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 2aa2c08b..c5fc6c26 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,10 @@ +Mon Apr 13 11:39:04 AM CEST 2026 + Fixed bug where additional "Content-Length" headers were + ignored instead of rejecting the request, fixing a + (minor) header smuggling vulnerability discovered + by SySS GmbH. + Releasing GNU libmicrohttpd 1.0.4. -CG + Thu Apr 2 12:13:57 AM CEST 2026 Fixed bug in connection list traversal logic that could cause ready connections to be skipped (possibly indefinitely) diff --git a/NEWS b/NEWS index ef10efd0..91553067 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,11 @@ +Mon Apr 13 11:42:06 AM CEST 2026 +Released GNU libmicrohttpd 1.0.4. + + This is a bugfix release. + It fixes a minor HTTP request smuggling issue (CWE-444). + + -- Christian Grothoff + Thu Apr 2 12:16:28 AM CEST 2026 Released GNU libmicrohttpd 1.0.3. diff --git a/configure.ac b/configure.ac index 74cc6d51..0ad859e6 100644 --- a/configure.ac +++ b/configure.ac @@ -23,7 +23,7 @@ # AC_PREREQ([2.64]) LT_PREREQ([2.4.0]) -AC_INIT([GNU libmicrohttpd],[1.0.3],[libmicrohttpd@gnu.org]) +AC_INIT([GNU libmicrohttpd],[1.0.4],[libmicrohttpd@gnu.org]) AC_CONFIG_AUX_DIR([build-aux]) MHD_AUX_DIR='build-aux' # Must be set to the same value as in the previous line AC_CONFIG_HEADERS([MHD_config.h])