libtorrent-1.2.16

changes since 1.2.15:

• send User-Agent field in anonymous mode
• fix python binding for settings_pack conversion
• fix DHT announce timer issue
• use DSCP_TRAFFIC_TYPE socket option on windows
• update default ToS setting according to RFC 8622
• keep trying to announce to trackers even when all fail
• don't disable announcing from local endpoints because of temporary failures
• fix issue in parsing UPnP XML response with multiple forwarding services

libtorrent-2.0.5

• on windows, explicitly flush memory mapped files periodically
• fix build with WolfSSL
• fix issue where incoming uTP connections were not accepted over SOCKS5
• fix several issues in handling of checking files of v2 torrents, esp. from magnet links
• make the token limit when parsing metadata from magnet files configurable
• fix issue with stalled pieces on disk full errors
• fix missing python binding for file_progress_flags
• fix torrent_file_with_hashes() to fail when we don't have the piece layers
• restore path character encoding conversion for non UTF-8 locales on linux
• fix use-after-free bug in make_magnet_uri
• add write_torrent_file() to produce a .torrent file from add_torrent_params
• allow loading v2 .torrent files without piece layer
• fix issue with adding v2 torrents with invalid file root hash

libtorrent-1.2.15

1.2.15 released

• cache DNS lookups for SOCKS5 proxy
• fix stalled pieces on disk-full errors
• fix build configuration issue on NetBSD, OpenBSD and DragonFly
• make UTF-8 sanitization a bit stricter. This will re-write invalid UTF-8
  code points encoding surrogate pairs
• fix restoring last_seen_complete from resume data
• fix issue on MacOS where the DHT was not restarted on a network-up notification
• make remove_torrent flags be treated as flags (instead of an enum)

libtorrent-2.0.4

• fix piece picker bug causing double-picks with prefer-contiguous enabled
• expose session_params in python bindings
• fix (deprecated) use of add_torrent_params::info_hash
• fix issue creating and loading v2 torrents with empty files. Improves
  conformance to BEP52 reference implementation

fixes merged in from the 1.2.x branch:

• improve handling of seed flag in PEX messages
• fix issue of accruing unlimited DHT node candidates when DHT is disabled
• fix bug in parsing chunked encoding
• fix incorrect reporting of active_duration when entering graceful-pause
• fix python binding for functions taking string_view
• fix python binding for torrent_info constructor overloads
• issue python deprecation warnings for some deprecated functions in the python bindings
• fix python binding for torrent_info::add_url_seed, add_tracker and add_http_seed

libtorrent-1.2.14

• improve handling of seed flag in PEX messages
• fix issue of accruing unlimited DHT node candidates when DHT is disabled
• fix bug in parsing chunked encoding
• fix incorrect reporting of active_duration when entering graceful-pause
• fix python binding for functions taking string_view
• fix python binding for torrent_info constructor overloads
• issue python deprecation warnings for some deprecated functions in the python bindings
• fix python binding for torrent_info::add_url_seed, add_tracker and add_http_seed

libtorrent-2.0.3

With this release there's also a security audit published, done by include security and sponsored by Mozilla. The issues raised in the report were addressed in the previous release and documented here along with the report.

Changes since the previous 2.0.x release:

• add new torrent_file_with_hashes() which includes piece layers for
  creating .torrent files
• add file_prio_alert, posted when file priorities are updated
• fix issue where set_piece_hashes() would not propagate file errors
• add missing python binding for event_t
• add work-around for systems without fseeko() (such as Android)
• add convenience header libtorrent/libtorrent.hpp
• increase default max_allowed_in_request_queue
• fix loading non-ascii filenames on windows with torrent_info constructor (2.0 regression)
• add std::hash<> specialization for info_hash_t
• fix integer overflow in hash_picker and properly restrict max file sizes in torrents
• strengthen SSRF mitigation for web seeds

libtorrent-1.2.13

Changes since the previous 1.2.x release:

• Use /etc/ssl/cert.pem to validate HTTPS connections on MacOS
• allow no-interest timeouts of peer connections before all connections slots are full
• fix issue where a DHT message would count as an incoming connection
• fix issue when failing to parse outgoing_interfaces setting
• fix super-seeding issue that could cause a segfault
• fix data race in python binding of session::get_torrent_status()
• fix need_save_resume_data() for renaming files, share-mode, upload-mode,
  disable- pex, lsd, and dht.
• fix incoming TCP connections when using tracker-only proxy
• fix issue with paths starting with ./
• fix integer overflow when setting a high DHT upload rate limit
• improve Path MTU discovery logic in uTP
• fix overflow issue when rlimit_nofile is set to infinity
• fix issue in python binding interpreting int settings > INT_MAX
• Fix cxxflags and linkflags injection via environment variables

libtorrent-2.0.2

Changes to the 2.0 branch:

• add v1() and v2() functions to torrent_info
• fix piece_layers() to work for single-piece files
• fix python binding regression in session constructor flags
• fix unaligned piece requests in mmap_storage
• improve client_data_t ergonomics
• fix issue with concurrent access to part files

Changes merged from the 1.2 branch:

• fix loading of DHT node ID from previous session on startup
• use getrandom(), when available, and fall back to /dev/urandom
• fix python binding for "value" in dht put alerts
• fix bug in python binding for dht_put_mutable_item
• fix uTP issue acking FIN packets
• validate HTTPS certificates by default (trackers and web seeds)
• load SSL certificates from windows system certificate store, to authenticate trackers
• introduce mitigation for Server Side Request Forgery in tracker and web seed URLs
• fix error handling for pool allocation failure

libtorrent-1.2.12

• fix loading of DHT node ID from previous session on startup
• use getrandom(), when available, and fall back to /dev/urandom
• fix python binding for "value" in dht put alerts
• fix bug in python binding for dht_put_mutable_item
• fix uTP issue acking FIN packets
• validate HTTPS certificates by default (trackers and web seeds)
• load SSL certificates from windows system certificate store, to authenticate trackers
• introduce mitigation for Server Side Request Forgery in tracker and web seed URLs
• fix error handling for pool allocation failure

libtorrent-2.0.1

Fixes since libtorrent 2.0:

• fix attribute in single-file v2 torrent creation
• fix padding for empty files in v2 torrent creation
• add function to ask a file_storage whether it's v2 or not
• fix mtime field when creating single-file v2 torrents
• fix performance regression in checking files
• disable use of SetFileValidData() by default (windows). A new setting
  allows enabling it