[Naviserver-users] [ANNOUNCE] NaviServer 4.99.32 and 5.0.1 Bug-Fix Releases

[Gustaf N. (s. <ne...@wu...>]

Dear all,

We are pleased to announce the availability of two new bug-fix releases of NaviServer: NaviServer 4.99.32 and NaviServer 5.0.1.

Both releases contain backported fixes only. No new features have been added; all ongoing development continues on the main branch. These releases are intended for users who prefer to stay with the 4.99 or 5.0 lines for stability while benefiting from selected improvements and fixes.

Contributors:
 
 - Gustaf Neumann
 - Hector Romojaro
 - Nicky Johnstone
 - Oleg Oleinick

Source Code & Tags

 - GitHub: https://github.com/naviserver-project/naviserver
 - Tags: naviserver-5.0.1, naviserver-4.99.32

Tarball Downloads

 - https://sourceforge.net/projects/naviserver/files/naviserver/4.99.32/
 - https://sourceforge.net/projects/naviserver/files/naviserver/5.0.1/

Docker Images for 4.99.32 and 5.0.1 (alpine | trixie, linux/amd64 | linux/arm64)
 - https://hub.docker.com/repository/docker/gustafn/naviserver

-------------
NaviServer 5.0.1 (released 2025-09-23)

33 files changed, 463 insertions(+), 129 deletions(-)

Bug Fixes

Prevented tail truncation of disk-spooled file uploads under certain conditions

Fixed potentially harmful negative timeout calculation in driver thread

Corrected return type in TLS context initialization error path (TCL_ERROR instead of NS_ERROR)

connchan: fixed potential NULL dereferences with debug mode

Strengthened UTF-8 validation in Ns_Valid_UTF8() with stricter checks, better error reporting

Multiple Windows/MSVC build fixes (stack corruption warnings, _mktemp_s, ns_mkdtemp, Ns_SockConnectUnix, Makefile improvements, EXEEXT, MINGW handling)

Build system fixes: corrected tabs in Makefiles, cross-compilation failures, updated MSVC files

Test suite improvements: skip lmap tests on Tcl 8.5, add UTF-8 regression tests, adapt ns_strcoll tests for macOS Sequoia

Documentation and Configuration

Clarified defaults and meaning of schedsperthread in sample configs and docs

Minor corrections in comments and error messages for platform-specific builds

Notes
This is a bug-fix only release for the 5.0 branch. It includes backports from the head branch to improve robustness, portability (especially Windows/MSVC), and test coverage, without introducing new features.

NaviServer 4.99.32 (released 2025-09-23)

7 files changed, 80 insertions(+), 17 deletions(-)

Bug Fixes

Fixed multipart/form-data parsing in ns_parseformfile to avoid truncated or misaligned parts

Adjusted OpenACS sample config (nslog.checkforproxy) to use $reverseproxymode (was $proxy_mode)

Corrected TLS context setup to return TCL_ERROR instead of NS_ERROR when certificate is missing

Made driver poll timeout handling more robust (safe defaults, rounding, assert against negatives)

Documentation Updates

Refreshed README and manpages to reflect actual version numbers

Clarified ns_return headers argument behavior (accepts setid, defaults to ns_conn outputheaders)

Corrected ns_set examples (ns_set create instead of ns_set new)

Updated ns_issmallint description to reflect unsigned 16-bit semantics

Tests

Added multipart upload tests (small and larger files, spool handling)

Made ns_http.test portable across platforms ($devnull, $contentfile)

Relaxed ns_strcoll expectations for macOS Sequoia collation changes

Notes
This is a bug-fix release for the 4.99 line with no new features. It includes select backports from 5.0 that improve robustness, documentation, and test portability. For Tcl 9 compatibility, please use NaviServer 5.*.