News

YuCurl v1.1.0
- Update to libcurl v8.11.1.
- Add overloaded curl_easy_setopt() for CURL_NETRC_OPTION.
- New websocket demo whoing how to play server ping pong and check the result.
- New HTTP authentication demo showing how to use a .netrc file to login.
- Extend the FTP directory demo to show how to login using a SSH private key file.
- Link against the new YuOpenSSL-3.4.

SQLiteSpy v1.9.28
- Update the built-in database engine to SQLite 3.47.2, DISQLite3 v5.50.2.

YuZip v7.1.4
- Update YuZip to libzip v1.11.2:
  - Stop searching after finding acceptable central directory, even if it contains inconsistencies.
  - Only write Zip64 EOCD if fields don't fit in normal EOCD. Previously libzip also wrote it when any directory entry required Zip64.
  - Allow bytes from 0x00-0x1F as UTF-8.
  - Add new error code ZIP_ER_TRUNCATED_ZIP for files that start with a valid local header signature.
  - zip_file_replace now removes the target's extra field information.
- Compression libraries update:
  - Update YuXz to XZ v5.6.3.
  - Update YuZlibNg to zlib-ng v2.2.2.

SQLiteSpy v1.9.27
- Update the built-in database engine to SQLite 3.47.1, DISQLite3 v5.50.1.

YuOpenSSL-3.4 v1.0.0 New!
- First release of YuOpenSSL-3.4 based on OpenSSL 3.4.0.

DISQLite3 v5.50.0
- Update to SQLite v3.47.0.
- FTS5 improvements: contentless_unindexed=1 option and fts5_tokenizer_v2 API with locale=1 option.
- Performance enhancements.

SQLiteSpy v1.9.26
- Update the built-in database engine to SQLite 3.47.0, DISQLite3 v5.50.0.
- Add the stmtrand() SQL function extension.

YuOpenSSL-3.3 v1.0.0 New!
- First release of YuOpenSSL-3.3 based on OpenSSL 3.3.1.

YuOpenSSL-3.3 v1.0.1
- Update to OpenSSL 3.3.2.
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119).
  - Fixed possible buffer overread in SSL_select_next_proto (CVE-2024-5535).

YuOpenSSL-3.0 v1.3.4
- Update to OpenSSL 3.0.15.
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119).
  - Fixed possible buffer overread in SSL_select_next_proto (CVE-2024-5535).

YuXMLSec v1.0.3
- Update to XMLSec 1.2.37.
  - Migration to OpenSSL 3.0 APIs. Needs YuOpenSSL-3.0 v1.2.6 or later.
  - Several smaller fixes.

YuOpenSSL-3.0 v1.2.5
- Update to OpenSSL 3.0.7 (OpenSSL 3.0.6 was withdrawn by the OpenSSL developers).
  - Fixed two high vulnerability buffer overflows in punycode decoding functions, CVE-2022-3786 and CVE-2022-3602.
  - Added RIPEMD160 to the default provider.
  - Other minor bug fixes.

YuOpenSSL-3.0 v1.2.3
- Update to OpenSSL 3.0.5.
  - Fix BN_gcd() to check return value when calling BN_one().
  - Add a check for the return of i2s_ASN1_INTEGER().
  - Fix X509v3_addr_add_range(), X509v3_addr_canonize(), and X509v3_addr_is_canonical() to return the correct result.
  - Fix memory leak in EC_GROUP_new_from_ecparameters().
  - Add and improve various checks.

YuOpenSSL-3.0 v1.2.3
- Update to OpenSSL 3.0.4.
  - Minor bug fixes.
  - Add some constants and functions, mainly related to EVP_KEYEXCH… and X509v3_addr….