With this release there's also a security audit published, done by include security and sponsored by Mozilla. The issues raised in the report were addressed in the previous release and documented here along with the report.
Changes since the previous 2.0.x release:
- add new torrent_file_with_hashes() which includes piece layers for
creating .torrent files - add file_prio_alert, posted when file priorities are updated
- fix issue where set_piece_hashes() would not propagate file errors
- add missing python binding for event_t
- add work-around for systems without fseeko() (such as Android)
- add convenience header libtorrent/libtorrent.hpp
- increase default max_allowed_in_request_queue
- fix loading non-ascii filenames on windows with torrent_info constructor (2.0 regression)
- add std::hash<> specialization for info_hash_t
- fix integer overflow in hash_picker and properly restrict max file sizes in torrents
- strengthen SSRF mitigation for web seeds