# 16.4. 1.7.x Branch

- Version 1.7.2
- Version 1.7.1
- Version 1.7.0

## 16.4.1. Version 1.7.2

### Security

- CVE 2018-8007

## 16.4.2. Version 1.7.1

### Bug Fix

- #974: Fix access to /db/_all_docs for database members.

## 16.4.3. Version 1.7.0

### Security

- CVE 2017-12635
- CVE 2017-12636

### API Changes

- COUCHDB-1356: Return username on `POST /_session`.
- COUCHDB-1876: Fix duplicated Content-Type for show/update functions.
- COUCHDB-2310: Implement `POST /{db}/_bulk_get`.
- COUCHDB-2375: 400 Bad Request returned when invalid revision specified.
- COUCHDB-2845: 400 Bad Request returned when revs is not a list.

### Build

- COUCHDB-1964: Replace etap test suite with EUnit.
- COUCHDB-2225: Enforce that shared libraries can be built by the system.
- COUCHDB-2761: Support glibc >= 2.20.
- COUCHDB-2747: Support Erlang 18.
- #5b9742c: Support Erlang 19.
- #1545bf4: Remove broken benchmarks.

### Database Core

- COUCHDB-2534: Improve checks for db admin/member.
- COUCHDB-2735: Duplicate document _ids created under high edit load.

### Documentation

- #c3c9588: Improve documentation of cacert_file ssl option.
- #3266f23: Clarify the purpose of tombstones.
- #75887d9: Improve CouchDB Replication Protocol definition.
- #3b1dc0f: Remove mention of group_level=exact.
- #2a11daa: Remove mention of “Test Suite” in Futon.
- #01c60f1: Clarify type of key, startkey and endkey params.

### Futon

- COUCHDB-241: Support document copying.
- COUCHDB-1011: Run replication filtered by document ids from Futon.
- COUCHDB-1275: Unescape database names in Futon recently used list.
- #f18f82a: Update jquery.ui to 1.10.4 with fixes of potential XSS issues.

### HTTP Server

- COUCHDB-2430: Disable Nagle’s algorithm by default.
- COUCHDB-2583: Don’t drop connection by the endpoints which doesn’t require any payload.
- COUCHDB-2673: Properly escape Location: HTTP header.
- COUCHDB-2677: Wrong Expires header weekday.
- COUCHDB-2783: Bind both to IPv4 and IPv6.
- #f30f3dd: Support for user configurable SSL ciphers.

### Query Server

- COUCHDB-1447: Custom response headers from design functions get merged with default ones.
- #7779c11: Upgrade Coffeescript to version 1.10.

### jquery.couch.js

- #f9095e7: Fix document copying.