/
_changes.html
13946 lines (13654 loc) · 966 KB
/
_changes.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
#include "_doctype.html"
<html lang="en">
<head> <title>curl - Changes</title>
#include "css.t"
<style>
.video:before {
content: "🎥 release video for";
padding: 5px 5px 5px 5px;
}
.video:after {
content: "▶";
padding: 5px 5px 5px 5px;
}
.video {
background-color: #e0e0e0;
float: right;
border: 1px solid black;
padding: 5px 5px 5px 5px;
}
</style>
</head>
#define CURL_CHANGES
#define CURL_URL changes.html
#include "_menu.html"
#include "setup.t"
WHERE3(Docs, "/docs/", Releases, "/docs/reldocs.html", Changelog)
<a name="changes"></a>
TITLE(Changelog)
<div class="relatedbox">
<b>Related:</b>
<br><a href="/snapshots/">Daily Snapshots</a>
<br><a href="/source.html">Source repo</a>
<br><a href="/docs/security.html">Security</a>
<br><a href="/docs/vulnerabilities.html">Vulnerabilities</a>
<br><a href="/docs/releases.html">Release log</a>
<br><a href="/dev/release-notes.html">Pending Release Notes</a>
</div>
#if 0
<a name="9_19_19"></a>
SUBTITLE(-- Fixed in 7.20.0 - February 9 2011)
<p> Changes:
<ul class="changes">
CHG change
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF fix
</ul>
#endif
#define CHG <li>
#define BGF <li>
#define RELEASEVIDEO(ver,vid)<div><a class="video" href=vid>ver</a></div>
<a name="8_8_0"></a>
SUBTITLE(Fixed in 8.8.0 - May 22 2024)
<p>
RELEASEVIDEO(8.8.0, "https://youtu.be/QuEcJkjvI_Q")
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.se/bug/?i=13368">curl_version_info: provide librtmp version</a>
CHG <a href="https://curl.se/bug/?i=13137">file: add support for directory listings</a>
CHG <a href="https://curl.se/bug/?i=13246">idn: add native AppleIDN (icucore) support for macOS/iOS</a>
CHG <a href="https://curl.se/bug/?i=13135">lib: add curl_multi_waitfds</a>
CHG <a href="https://curl.se/bug/?i=13442">mbedTLS: implement CURLOPT_SSL_CIPHER_LIST option</a>
CHG <a href="https://curl.se/bug/?i=13249">NTLM_WB: drop support</a>
CHG <a href="https://curl.se/bug/?i=11922">TLS: add support for ECH (Encrypted Client Hello)</a>
CHG <a href="https://curl.se/bug/?i=13396">urlapi: add CURLU_GET_EMPTY for empty queries and fragments</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.se/bug/?i=13707">appveyor: drop unnecessary `--clean-first` cmake option</a>
BGF <a href="https://curl.se/bug/?i=13654">appveyor: guard against crash-build with VS2008</a>
BGF <a href="https://curl.se/bug/?i=13566">appveyor: make gcc 6 mingw64 job build-only</a>
BGF <a href="https://curl.se/bug/?i=13509">asyn-thread: fix curl_global_cleanup crash in Windows</a>
BGF <a href="https://curl.se/bug/?i=13542">asyn-thread: fix Curl_thread_create result check</a>
BGF <a href="https://curl.se/bug/?i=13605">autotools: delete unused functions</a>
BGF <a href="https://curl.se/bug/?i=13579">autotools: fix `HAVE_IOCTLSOCKET_FIONBIO` test for gcc 14</a>
BGF <a href="https://curl.se/bug/?i=13611">autotools: only probe for SGI MIPS compilers on IRIX</a>
BGF <a href="https://curl.se/bug/?i=13290">bearssl: fix compiler warnings</a>
BGF <a href="https://curl.se/bug/?i=13464">bearssl: use common code for cipher suite lookup</a>
BGF <a href="https://curl.se/bug/?i=13554">bufq: remove duplicate word in comment</a>
BGF <a href="https://curl.se/bug/?i=13560">BUG-BOUNTY.md: clarify the third party situation</a>
BGF <a href="https://curl.se/bug/?i=13349">build: prefer `USE_IPV6` macro internally (was: `ENABLE_IPV6`)</a>
BGF <a href="https://curl.se/bug/?i=13313">build: remove MacOSX-Framework script</a>
BGF <a href="https://curl.se/bug/?i=13242">cd2nroff/manage: use UTC when SOURCE_DATE_EPOCH is set</a>
BGF <a href="https://curl.se/bug/?i=13503">cf-https-connect: use timeouts as unsigned ints</a>
BGF <a href="https://curl.se/bug/?i=13577">cf-socket: don't try getting local IP without socket</a>
BGF <a href="https://curl.se/bug/?i=13210">cf-socket: remove references to l_ip, l_port</a>
BGF <a href="https://curl.se/bug/?i=13335">ci: add curl-for-win builds: Linux MUSL, macOS, Windows</a>
BGF <a href="https://curl.se/bug/?i=13491">cmake: add `BUILD_EXAMPLES` option to build examples</a>
BGF <a href="https://curl.se/bug/?i=13373">cmake: add librtmp/rtmpdump option and detection</a>
BGF <a href="https://curl.se/bug/?i=13264">cmake: check fseeko after detecting HAVE_FILE_OFFSET_BITS</a>
BGF <a href="https://curl.se/bug/?i=13697">cmake: do not pass linker flags to the static library tool</a>
BGF <a href="https://curl.se/bug/?i=13286">cmake: enable `-pedantic-errors` for clang when `CURL_WERROR=ON`</a>
BGF <a href="https://curl.se/bug/?i=13495">cmake: FindNGHTTP2 add static lib name to find_library call</a>
BGF <a href="https://curl.se/bug/?i=13282">cmake: fix `CURL_WERROR=ON` for old CMake and use it in GHA/linux-old</a>
BGF <a href="https://curl.se/bug/?i=13578">cmake: fix `HAVE_IOCTLSOCKET_FIONBIO` test with gcc 14</a>
BGF <a href="https://curl.se/bug/?i=13283">cmake: fixup `DEPENDS` filename</a>
BGF <a href="https://curl.se/bug/?i=13364">cmake: forward `USE_LIBRTMP` option to C</a>
BGF <a href="https://curl.se/bug/?i=13197">cmake: generate misc manpages and install `mk-ca-bundle.pl`</a>
BGF <a href="https://curl.se/bug/?i=13668">cmake: initialize `BUILD_TESTING` before first use</a>
BGF <a href="https://curl.se/bug/?i=13207">cmake: speed up libcurl doc building again</a>
BGF <a href="https://curl.se/bug/?i=13206">cmake: tidy-up to use `WORKING_DIRECTORY`</a>
BGF <a href="https://curl.se/bug/?i=13324">cmake: use namespaced custom target names</a>
BGF <a href="https://curl.se/bug/?i=13198">cmdline-docs: fix make install with configure --disable-docs</a>
BGF <a href="https://curl.se/bug/?i=13508">configure: error on missing perl if docs or manual is enabled</a>
BGF <a href="https://curl.se/bug/?i=13191">configure: make --disable-docs imply --disable-manual</a>
BGF <a href="https://curl.se/bug/?i=13209">content_encoding: brotli and others, pass through 0-length writes</a>
BGF <a href="https://curl.se/bug/?i=13451">content_encoding: ignore duplicate chunked encoding</a>
BGF <a href="https://curl.se/bug/?i=13733">content_encoding: reject transfer-encoding after chunked</a>
BGF <a href="https://curl.se/bug/?i=13315">contrithanks: honor `CURLWWW` variable</a>
BGF <a href="https://curl.se/bug/?i=13240">curl-confopts.m4: define CARES_NO_DEPRECATED when c-ares is used</a>
BGF <a href="https://curl.se/bug/?i=13510">curl.h: change CURL_SSLVERSION_* from enum to defines</a>
BGF <a href="https://curl.se/bug/?i=13171">curl: make --help adapt to the terminal width</a>
BGF <a href="https://curl.se/bug/?i=13230">curl: use curl_getenv instead of the curlx_ version</a>
BGF <a href="https://curl.se/bug/?i=13419">Curl_creader_read: init two variables to avoid using them uninited</a>
BGF <a href="https://curl.se/bug/?i=13664">curl_easy_pause.md: use correct defines in example</a>
BGF <a href="https://curl.se/bug/?i=13494">curl_getdate.md: document two-digit year handling</a>
BGF <a href="https://curl.se/bug/?i=13263">curl_global_trace.md: shorten the description</a>
BGF <a href="https://curl.se/bug/?i=13529">curl_multibyte: remove access() function wrapper for Windows</a>
BGF <a href="https://curl.se/bug/?i=13550">curl_path: make Curl_get_pathname use dynbuf</a>
BGF <a href="https://curl.se/bug/?i=13728">curl_setup.h: add support for IAR compiler</a>
BGF <a href="https://curl.se/bug/?i=13355">curl_setup.h: detect 'inline' support</a>
BGF <a href="https://curl.se/bug/?i=13225">curl_sha512_256: do not use workaround for NetBSD when not needed</a>
BGF <a href="https://curl.se/bug/?i=13208">curl_sha512_256: fix detection of OpenSSL 1.1.1 or later</a>
BGF <a href="https://curl.se/bug/?i=13407">curl_url_get.md: clarify queries and fragments and CURLU_GET_EMPTY</a>
BGF <a href="https://curl.se/bug/?i=13269">CURLINFO_REQUEST_SIZE: fixed, add tests for transfer infos reported</a>
BGF <a href="https://curl.se/bug/?i=13681">CURLOPT_WRITEFUNCTION.md: fix the callback proto in the example</a>
BGF <a href="https://curl.se/bug/?i=13337">cw-out: improved error handling</a>
BGF <a href="https://curl.se/bug/?i=13544">DEPRECATE.md: TLS libraries without 1.3 support</a>
BGF <a href="https://curl.se/bug/?i=13586">digest: replace strcpy for empty string with simple assignment</a>
BGF <a href="https://curl.se/bug/?i=13299">dist: `set -eu`, fix shellcheck, make reproducible and smaller tarballs</a>
BGF <a href="https://curl.se/bug/?i=13346">dist: add files missing from release tarball</a>
BGF <a href="https://curl.se/bug/?i=13322">dist: add reproducible dir entries to tarballs</a>
BGF <a href="https://curl.se/bug/?i=13310">dist: do not require Perl in `maketgz`</a>
BGF <a href="https://curl.se/bug/?i=13268">dist: remove the curl-config.1 from the tarball</a>
BGF <a href="https://curl.se/bug/?i=13327">dist: verify tarball reproducibility in CI</a>
BGF <a href="https://curl.se/bug/?i=13499">DISTROS: add patch and issues link for curl-for-win</a>
BGF <a href="https://curl.se/bug/?i=13258">DISTROS: Cygwin updates</a>
BGF <a href="https://curl.se/bug/?i=12327">dllmain: Call OpenSSL thread cleanup for Windows and Cygwin</a>
BGF <a href="https://curl.se/bug/?i=13218">doc: pytest `--repeat` -> `--count`</a>
BGF <a href="https://curl.se/bug/?i=13281">docs/cmdline-opts: invoke managen using a relative path</a>
BGF <a href="https://curl.se/bug/?i=13590">docs/cmdline-opts: mention STARTTLS for --ssl and --ssl-reqd</a>
BGF <a href="https://curl.se/bug/?i=13348">docs: add CURLOPT_NOPROGRESS to CURLOPT_XFERINFOFUNCTION example</a>
BGF <a href="https://curl.se/bug/?i=13372">docs: clarify CURLOPT_MAXFILESIZE and CURLOPT_MAXFILESIZE_LARGE</a>
BGF <a href="https://curl.se/bug/?i=13557">docs: fix some CURLINFO examples</a>
BGF <a href="https://curl.se/bug/?i=13504">doh: fix typo in comment</a>
BGF <a href="https://curl.se/bug/?i=13536">doh: remove unused function prototype</a>
BGF <a href="https://curl.se/bug/?i=13533">dynbuf: fix returncode on memory error</a>
BGF <a href="https://curl.se/bug/?i=13501">examples: fix/silence `-Wsign-conversion`</a>
BGF <a href="https://curl.se/bug/?i=13541">EXPERIMENTAL: add graduation requirements for each feature</a>
BGF <a href="https://curl.se/bug/?i=13425">file: remove useless assignment</a>
BGF <a href="https://curl.se/bug/?i=13580">ftp: add tracing support</a>
BGF ftp: fix build for CURL_DISABLE_VERBOSE_STRINGS
BGF <a href="https://curl.se/bug/?i=13417">ftp: fix socket leak on rare error</a>
BGF <a href="https://curl.se/bug/?i=13583">GHA: add NetBSD, OpenBSD, FreeBSD/arm64 and OmniOS jobs</a>
BGF <a href="https://curl.se/bug/?i=13307">GHA: add shellcheck job and fix warnings, shell tidy-ups</a>
BGF <a href="https://curl.se/bug/?i=13274">GHA: add valgrind to a wolfSSL build</a>
BGF <a href="https://curl.se/bug/?i=13284">GHA: on macOS remove $HOME/.curlrc</a>
BGF <a href="https://curl.se/bug/?i=13628">GHA: pin dependencies</a>
BGF <a href="https://curl.se/bug/?i=13339">gnutls: lazy init the trust settings</a>
BGF <a href="https://curl.se/bug/?i=13562">h3/ngtcp2: improve error handling</a>
BGF <a href="https://curl.se/bug/?i=13502">hash: change 'slots' to size_t from int</a>
BGF <a href="https://curl.se/bug/?i=13729">hash: delete unused debug function</a>
BGF <a href="https://curl.se/bug/?i=13603">hsts: explicitly skip blank lines</a>
BGF <a href="https://curl.se/bug/?i=13604">hsts: remove single-use single-line function</a>
BGF <a href="https://curl.se/bug/?i=13638">http tests: in CI skip test_02_23* for quiche</a>
BGF <a href="https://curl.se/bug/?i=13411">http2 + ngtcp2: pass CURLcode errors from callbacks</a>
BGF <a href="https://curl.se/bug/?i=13204">http2, http3: decouple stream state from easy handle</a>
BGF <a href="https://curl.se/bug/?i=13292">http2: emit RST when client write fails</a>
BGF <a href="https://curl.se/bug/?i=13475">http3: quiche+ngtcp2 improvements</a>
BGF <a href="https://curl.se/bug/?i=13434">http: acknowledge a returned error code</a>
BGF <a href="https://curl.se/bug/?i=13725">http: HEAD response body tolerance</a>
BGF <a href="https://curl.se/bug/?i=13421">http: reject HTTP major version switch mid connection</a>
BGF <a href="https://curl.se/bug/?i=13582">http: remove redundant check</a>
BGF <a href="https://curl.se/bug/?i=13229">http: with chunked POST forced, disable length check on read callback</a>
BGF <a href="https://curl.se/bug/?i=13426">http_aws_sigv4: remove useless assignment</a>
BGF <a href="https://curl.se/bug/?i=13236">idn: make Curl_idnconvert_hostname() use Curl_idn_decode()</a>
BGF <a href="https://curl.se/bug/?i=13505">if2ip: make the buf_size arg a size_t</a>
BGF <a href="https://curl.se/bug/?i=13244">INSTALL-CMAKE.md: explain `cmake -G <generator-name>`</a>
BGF <a href="https://curl.se/bug/?i=13568">krb5: use dynbuf</a>
BGF <a href="https://curl.se/bug/?i=13588">ldap: fix unused variables (seen on OmniOS)</a>
BGF <a href="https://curl.se/bug/?i=13237">lib/cf-h1-proxy: silence compiler warnings (gcc 14)</a>
BGF <a href="https://curl.se/bug/?i=13223">lib: add trace support for client reads and writes</a>
BGF <a href="https://curl.se/bug/?i=13601">lib: bump hash sizes to `size_t`</a>
BGF <a href="https://curl.se/bug/?i=13574">lib: clear the easy handle's saved errno before transfer</a>
BGF <a href="https://curl.se/bug/?i=13643">lib: fix compiler warnings (gcc)</a>
BGF <a href="https://curl.se/bug/?i=13553">lib: make protocol handlers store scheme name lowercase</a>
BGF <a href="https://curl.se/bug/?i=13352">lib: merge `ENABLE_QUIC` C macro into `USE_HTTP3`</a>
BGF <a href="https://curl.se/bug/?i=13551">lib: remove two instances of "only only" messages</a>
BGF <a href="https://curl.se/bug/?i=13467">lib: silence `-Wsign-conversion` in base64, strcase, mprintf</a>
BGF <a href="https://curl.se/bug/?i=13392">lib: silence warnings on comma misuse</a>
BGF <a href="https://curl.se/bug/?i=13287">lib: use `#error` instead of invalid syntax in `curl_setup_once.h`</a>
BGF <a href="https://curl.se/bug/?i=12665">lib: use multi instead of multi_easy for the active multi</a>
BGF <a href="https://curl.se/bug/?i=13254">libcurl-opts: mention pipelining less</a>
BGF <a href="https://curl.se/bug/?i=13537">libssh2: delete redundant feature guard</a>
BGF <a href="https://curl.se/bug/?i=13498">libssh2: replace `access()` with `stat()`</a>
BGF <a href="https://curl.se/bug/?i=13213">libssh2: set length to 0 if strdup failed</a>
BGF <a href="https://curl.se/bug/?i=13200">m4: fix rustls pkg-config codepath</a>
BGF <a href="https://curl.se/bug/?i=13247">MAIL-ETIQUETTE: convert to markdown</a>
BGF <a href="https://curl.se/bug/?i=13294">makefile: remove the sorting from the vc-ide action</a>
BGF <a href="https://curl.se/bug/?i=13239">maketgz: put docs/RELEASE-TOOL.md into the tarball</a>
BGF <a href="https://curl.se/bug/?i=13567">managen: fix the option sort order</a>
BGF <a href="https://curl.se/bug/?i=13314">mbedtls: call mbedtls_ssl_setup() after RNG callback is set</a>
BGF <a href="https://curl.se/bug/?i=13321">mbedtls: cut off trailing newlines from debug logs</a>
BGF <a href="https://curl.se/bug/?i=13377">mbedtls: fix building with v3 in CMake Unity mode</a>
BGF <a href="https://curl.se/bug/?i=13539">mbedtls: support TLS 1.3</a>
BGF <a href="https://curl.se/bug/?i=13497">mime: avoid using access()</a>
BGF <a href="https://curl.se/bug/?i=13344">misc: fix typos</a>
BGF <a href="https://curl.se/bug/?i=13538">misc: fix typos, quoting and spelling</a>
BGF <a href="https://curl.se/bug/?i=13367">mprintf: check fputc error rather than matching returned character</a>
BGF <a href="https://curl.se/bug/?i=13418">mqtt: when Curl_xfer_recv returns error, don't use nread</a>
BGF <a href="https://curl.se/bug/?i=13471">multi: avoid memory-leak risk</a>
BGF <a href="https://curl.se/bug/?i=13371">multi: introduce SETUP state for better timeouts</a>
BGF <a href="https://curl.se/bug/?i=13150">multi: multi_wait improvements</a>
BGF <a href="https://curl.se/bug/?i=13422">multi: remove the unused Curl_preconnect function</a>
BGF <a href="https://curl.se/bug/?i=13500">multi: remove useless assignment</a>
BGF <a href="https://curl.se/bug/?i=13276">multi: timeout handles even without connection</a>
BGF <a href="https://curl.se/bug/?i=13228">openldap: create ldap URLs correctly for IPv6 addresses</a>
BGF <a href="https://curl.se/bug/?i=13203">openssl: do not set SSL_MODE_RELEASE_BUFFERS</a>
BGF <a href="https://curl.se/bug/?i=13672">openssl: revert keylog_callback support for LibreSSL</a>
BGF <a href="https://curl.se/bug/?i=13309">OS400: fix shellcheck warnings in scripts</a>
BGF <a href="https://curl.se/bug/?i=13311">projects: drop MSVC project files for recent versions</a>
BGF <a href="https://curl.se/bug/?i=13679">pytest: add DELETE tests, check server version</a>
BGF <a href="https://curl.se/bug/?i=13661">pytest: fixes for recent python, add FTP tests</a>
BGF <a href="https://curl.se/bug/?i=13332">quic: fixup duplicate static function name (for cmake unity)</a>
BGF <a href="https://curl.se/bug/?i=13439">quiche: expire all active transfers on connection close</a>
BGF <a href="https://curl.se/bug/?i=13581">quiche: trust its timeout handling</a>
BGF <a href="https://curl.se/bug/?i=13216">RELEASE-PROCEDURE: mention an initial working build</a>
BGF <a href="https://curl.se/bug/?i=13423">request: make Curl_req_init return void</a>
BGF <a href="https://curl.se/bug/?i=13260">request: paused upload on completed download, assess connection</a>
BGF <a href="https://curl.se/bug/?i=13245">reuse: add copyright + license info to individual docs/*.md files</a>
BGF ROADMAP: remove completed entries, mention websocket
BGF <a href="https://curl.se/bug/?i=13686">rustls: fix handshake done handling</a>
BGF <a href="https://curl.se/bug/?i=13676">rustls: fix partial send handling</a>
BGF <a href="https://curl.se/bug/?i=13452">rustls: remove incorrect SSLSUPP_TLS13_CIPHERSUITES flag</a>
BGF <a href="https://curl.se/bug/?i=13670">rustsls: fix error code on receive</a>
BGF <a href="https://curl.se/bug/?i=13393">sendf: fix two typos in comments</a>
BGF <a href="https://curl.se/bug/?i=13437">sendf: useless assignment in cr_lc_read()</a>
BGF <a href="https://curl.se/bug/?i=13624">setopt: acknowledge errors proper for CURLOPT_COOKIEJAR</a>
BGF <a href="https://curl.se/bug/?i=13608">setopt: make the setstropt_userpwd args compulsory</a>
BGF <a href="https://curl.se/bug/?i=13619">setopt: remove check for 'option' that is always true</a>
BGF <a href="https://curl.se/bug/?i=13591">setopt: warn on Curl_set*opt() uses not using the return value</a>
BGF <a href="https://curl.se/bug/?i=13398">smtp: result of Curl_bufq_cread was not used</a>
BGF <a href="https://curl.se/bug/?i=13655">socket: remove redundant call to getsockname</a>
BGF <a href="https://curl.se/bug/?i=13666">socketpair: fix compilation when USE_UNIX_SOCKETS is not defined</a>
BGF <a href="https://curl.se/bug/?i=13614">src: tidy up types, add necessary casts</a>
BGF <a href="https://curl.se/bug/?i=13457">telnet: check return code from fileno()</a>
BGF <a href="https://curl.se/bug/?i=13301">tests/http: fix compiler warning</a>
BGF <a href="https://curl.se/bug/?i=13387">tests: add -q as first option when invoking curl for tests</a>
BGF <a href="https://curl.se/bug/?i=13405">tests: check caddy server version to match test expectations</a>
BGF <a href="https://curl.se/bug/?i=13436">tests: enable test 1117 for hyper</a>
BGF <a href="https://curl.se/bug/?i=13445">tests: fix feature case in test1481</a>
BGF <a href="https://curl.se/bug/?i=13634">tests: fix test 1167 to skip digit-only symbols</a>
BGF <a href="https://curl.se/bug/?i=13600">tests: make the unit test result type `CURLcode`</a>
BGF <a href="https://curl.se/bug/?i=13534">tests: Mark tftpd timer function as noreturn</a>
BGF <a href="https://curl.se/bug/?i=13610">tests: tidy up types in server code</a>
BGF <a href="https://curl.se/bug/?i=13450">tls: fix SecureTransport + BearSSL cmake unity builds</a>
BGF <a href="https://curl.se/bug/?i=13540">tls: remove EXAMPLEs from deprecated options</a>
BGF <a href="https://curl.se/bug/?i=13172">tls: use shared init code for TCP+QUIC</a>
BGF <a href="https://curl.se/bug/?i=13458">tool: move tool_ftruncate64 to tool_util.c</a>
BGF <a href="https://curl.se/bug/?i=13174">tool_cb_rea: limit rate unpause for -T . uploads</a>
BGF <a href="https://curl.se/bug/?i=13531">tool_cfgable: free {proxy_}cipher13_list on exit</a>
BGF <a href="https://curl.se/bug/?i=13214">tool_getparam: output warning for leading unicode quote character</a>
BGF <a href="https://curl.se/bug/?i=13576">tool_getparam: remove two redundant conditions</a>
BGF <a href="https://curl.se/bug/?i=13432">tool_operate: don't truncate the etag save file by default</a>
BGF <a href="https://curl.se/bug/?i=13430">tool_operate: init vars unconditionally in post_per_transfer</a>
BGF <a href="https://curl.se/bug/?i=13433">tool_paramhlp: remove duplicate assign</a>
BGF <a href="https://curl.se/bug/?i=13205">tool_xattr: "guess" URL scheme if none is provided</a>
BGF <a href="https://curl.se/bug/?i=13220">tool_xattr: in debug builds, act normally if CURL_FAKE_XATTR is not set</a>
BGF <a href="https://curl.se/bug/?i=13435">transfer: remove useless assignment</a>
BGF <a href="https://curl.se/bug/?i=13265">url: do not URL decode proxy crendentials</a>
BGF <a href="https://curl.se/bug/?i=13399">url: fix use of an uninitialized variable</a>
BGF <a href="https://curl.se/bug/?i=13584">url: make parse_login_details use memdup0</a>
BGF <a href="https://curl.se/bug/?i=13710">url: remove duplicate call to Curl_conncache_remove_conn when pruning</a>
BGF <a href="https://curl.se/bug/?i=13427">urlapi: allow setting port number zero</a>
BGF <a href="https://curl.se/bug/?i=13394">urlapi: fix relative redirects to fragment-only</a>
BGF <a href="https://curl.se/bug/?i=13188">urldata: remove fields not used depending on used features</a>
BGF <a href="https://curl.se/bug/?i=13621">vauth: make two functions void that always just returned OK</a>
BGF <a href="https://curl.se/bug/?i=13549">version: use msnprintf instead of strncpy</a>
BGF <a href="https://curl.se/bug/?i=13487">vquic-tls: use correct cert name check API for wolfSSL</a>
BGF <a href="https://curl.se/bug/?i=13224">vquic: use CURL_FORMAT_CURL_OFF_T for 64 bit printf output</a>
BGF <a href="https://curl.se/bug/?i=13386">vtls: TLS session storage overhaul</a>
BGF <a href="https://curl.se/bug/?i=13618">wakeup_create: use FD_CLOEXEC/SOCK_CLOEXEC</a>
BGF <a href="https://curl.se/bug/?i=13639">warnless: delete orphan declarations</a>
BGF <a href="https://curl.se/bug/?i=13602">websocket: avoid memory leak in error path</a>
BGF <a href="https://curl.se/bug/?i=13232">winbuild: add ENABLE_WEBSOCKETS option</a>
BGF <a href="https://curl.se/bug/?i=13267">winbuild: use $(RC) correctly</a>
BGF <a href="https://curl.se/bug/?i=13272">wolfssl: plug memory leak in wolfssl_connect_step2()</a>
BGF <a href="https://curl.se/bug/?i=13684">x509asn1: return error on missing OID</a>
</ul>
<a name="8_7_1"></a>
SUBTITLE(Fixed in 8.7.1 - March 27 2024)
<p>
RELEASEVIDEO(8.7.1, "https://youtu.be/x6XbvwB_b6Q")
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.se/bug/?i=13195">Fixed empty tool_hugehelp.c file</a>
</ul>
<a name="8_7_0"></a>
SUBTITLE(Fixed in 8.7.0 - March 27 2024)
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.se/bug/?i=12832">configure: add --disable-docs flag</a>
CHG <a href="https://curl.se/bug/?i=12719">CURLINFO_USED_PROXY: return bool whether the proxy was used</a>
CHG <a href="https://curl.se/bug/?i=12897">digest: support SHA-512/256</a>
CHG <a href="https://curl.se/bug/?i=12411">DoH: add trace configuration</a>
CHG <a href="https://curl.se/bug/?i=12719">write-out: add '%{proxy_used}'</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.se/bug/?i=12852">ALTSVC.md: correct a typo</a>
BGF <a href="https://curl.se/bug/?i=13065">asyn-ares: fix data race warning</a>
BGF <a href="https://curl.se/bug/?i=12836">asyn-thread: use wakeup_close to close the read descriptor</a>
BGF <a href="https://curl.se/bug/?i=12888">badwords: use hostname, not host name</a>
BGF <a href="https://curl.se/bug/?i=12962">BINDINGS: add mcurl, the python binding</a>
BGF <a href="https://curl.se/bug/?i=13020">bufq: writing into a softlimit queue cannot be partial</a>
BGF <a href="https://curl.se/bug/?i=12880">c-hyper: add header collection writer in hyper builds</a>
BGF cd2nroff: gen: make `\>` in input to render as plain '>' in output
BGF cd2nroff: remove backticks from titles
BGF <a href="https://curl.se/bug/?i=12924">checksrc.pl: fix handling .checksrc with CRLF</a>
BGF <a href="https://curl.se/bug/?i=13034">cmake: add USE_OPENSSL_QUIC support</a>
BGF <a href="https://curl.se/bug/?i=12900">cmake: add warning for using TLS libraries without 1.3 support</a>
BGF <a href="https://curl.se/bug/?i=13028">cmake: enable `ENABLE_CURL_MANUAL` by default</a>
BGF <a href="https://curl.se/bug/?i=13061">cmake: fix `CURL_WINDOWS_SSPI=ON` with Schannel disabled</a>
BGF <a href="https://curl.se/bug/?i=12879">cmake: fix function description in comment</a>
BGF <a href="https://curl.se/bug/?i=12920">cmake: fix install for older CMake versions</a>
BGF <a href="https://curl.se/bug/?i=6169">cmake: fix libcurl.pc and curl-config library specifications</a>
BGF <a href="https://curl.se/bug/?i=12829">cmdline-docs/Makefile: avoid using a fixed temp file name</a>
BGF <a href="https://curl.se/bug/?i=12884">cmdline-docs: quote and angle bracket cleanup</a>
BGF <a href="https://curl.se/bug/?i=13015">cmdline-opts/_EXITCODES: sync with libcurl-errors</a>
BGF <a href="https://curl.se/bug/?i=13040">cmdline-opts/_VARIABLES.md: improve the description</a>
BGF <a href="https://curl.se/bug/?i=13008">cmdline-opts/_VERSION: provide %VERSION correctly</a>
BGF <a href="https://curl.se/bug/?i=13169">cmdline-opts: shorter help texts</a>
BGF <a href="https://curl.se/bug/?i=13179">configure: add pkg-config support to rustls detection</a>
BGF <a href="https://curl.se/bug/?i=12900">configure: add warning for using TLS libraries without 1.3 support</a>
BGF <a href="https://curl.se/bug/?i=12906">configure: build & install shell completions when enabled</a>
BGF <a href="https://curl.se/bug/?i=12833">configure: do not link with nghttp3 unless necessary</a>
BGF <a href="https://curl.se/bug/?i=13027">configure: Don't build shell completions when disabled</a>
BGF <a href="https://curl.se/bug/?i=13022">configure: Don't make shell completions without perl</a>
BGF <a href="https://curl.se/bug/?i=12947">configure: find libpsl with pkg-config</a>
BGF <a href="https://curl.se/bug/?i=12858">connect.c: fix typo</a>
BGF <a href="https://curl.se/bug/?i=13046">CONTRIBUTE: update the section on documentation format</a>
BGF <a href="https://curl.se/bug/?i=12868">cookie.md: provide an example sending a fixed cookie</a>
BGF <a href="https://curl.se/bug/?i=13033">cookie: if psl fails, reject the cookie</a>
BGF <a href="https://curl.se/mail/archive-2024-02/0008.html">curl: exit on config file parser errors</a>
BGF <a href="https://curl.se/bug/?i=13127">curl: make --libcurl output better CURLOPT_*SSLVERSION</a>
BGF <a href="https://curl.se/bug/?i=12891">curl: when allocating variables, add the name into the struct</a>
BGF curl_setup.h: add curl_uint64_t internal type
BGF <a href="https://curl.se/bug/?i=12997">curldown: fix email address in Copyright</a>
BGF <a href="https://curl.se/bug/?i=13176">CURLMOPT_MAX*: mention what happens if changed mid-transfer</a>
BGF <a href="https://curl.se/bug/?i=13149">CURLOPT_INTERFACE.md: remove spurious amp, add see-also</a>
BGF <a href="https://curl.se/bug/?i=12926">CURLOPT_POSTQUOTE.md: fix typo</a>
BGF <a href="https://curl.se/bug/?i=12999">CURLOPT_SSL_CTX_FUNCTION.md: no promises of lifetime after return</a>
BGF <a href="https://curl.se/bug/?i=12889">CURLOPT_WRITEFUNCTION.md: typo fix</a>
BGF <a href="https://curl.se/bug/?i=13072">digest: add check for hashing error</a>
BGF <a href="https://curl.se/bug/?i=12914">dist: make sure the http tests are in the tarball</a>
BGF <a href="https://curl.se/bug/?i=13178">DISTROS: add document with distro pointers</a>
BGF <a href="https://curl.se/bug/?i=13168">docs/libcurl: add TLS backend info for all TLS options</a>
BGF <a href="https://curl.se/bug/?i=13175">docs/libcurl: generate PROTOCOLS from meta-data</a>
BGF <a href="https://curl.se/bug/?i=12854">docs: add missing slashes to SChannel client certificate documentation</a>
BGF <a href="https://curl.se/bug/?i=12859">docs: add necessary setup for nghttp3</a>
BGF <a href="https://curl.se/bug/?i=13047">docs: ascii version of manpage without nroff</a>
BGF <a href="https://curl.se/bug/?i=12921">docs: dist curl*.1 and install without perl</a>
BGF <a href="https://curl.se/bug/?i=12869">docs: make curldown do angle brackets like markdown</a>
BGF <a href="https://curl.se/bug/?i=13166">docs: make each libcurl man specify protocol(s)</a>
BGF <a href="https://curl.se/bug/?i=12892">docs: make sure curl.1 is included in dist tarballs</a>
BGF docs: update minimal binary size in INSTALL.md
BGF <a href="https://curl.se/bug/?i=13001">docs: use present tense</a>
BGF <a href="https://curl.se/bug/?i=13003">examples: use present tense in comments</a>
BGF <a href="https://curl.se/bug/?i=12750">file: use xfer buf for file:// transfers</a>
BGF <a href="https://curl.se/bug/?i=12998">fopen: fix narrowing conversion warning on 32-bit Android</a>
BGF <a href="https://curl.se/bug/?i=12822">form-string.md: correct the example</a>
BGF <a href="https://curl.se/bug/?i=12878">ftp: do lineend conversions in client writer</a>
BGF <a href="https://curl.se/bug/?i=12901">ftp: fix socket wait activity in ftp_domore_getsock</a>
BGF <a href="https://curl.se/bug/?i=12902">ftp: tracing improvements</a>
BGF <a href="https://curl.se/bug/?i=12823">ftp: treat a 226 arriving before data as a signal to read data</a>
BGF <a href="https://curl.se/bug/?i=13041">gen.pl: make the "manpageification" faster</a>
BGF <a href="https://curl.se/bug/?i=12977">gen: make `\>` in input to render as plain '>' in output</a>
BGF <a href="https://curl.se/bug/?i=13006">getparam: make --ftp-ssl work again</a>
BGF <a href="https://curl.se/bug/?i=13124">GHA/linux: add sysctl trick to work-around GitHub runner issue</a>
BGF <a href="https://curl.se/bug/?i=13074">GIT-INFO: convert to markdown</a>
BGF <a href="https://curl.se/bug/?i=13118">GOVERNANCE: document the core team</a>
BGF <a href="https://curl.se/bug/?i=12877">header.md: remove backslash, make nicer markdown</a>
BGF <a href="https://curl.se/bug/?i=12828">HTTP/2: write response directly</a>
BGF <a href="https://curl.se/bug/?i=13151">http2, http3: return CURLE_PARTIAL_FILE when bytes were received</a>
BGF <a href="https://curl.se/bug/?i=13055">http2: fix push discard</a>
BGF <a href="https://curl.se/bug/?i=13081">http2: memory errors in the push callbacks are fatal</a>
BGF <a href="https://curl.se/bug/?i=13082">http2: minor tweaks to optimize two struct sizes</a>
BGF <a href="https://curl.se/bug/?i=13054">http2: push headers better cleanup</a>
BGF <a href="https://curl.se/bug/?i=13154">http2: remove the third (unused) argument from http2_data_done()</a>
BGF <a href="https://curl.se/bug/?i=12896">HTTP3.md: adjust the OpenSSL QUIC install instructions</a>
BGF <a href="https://curl.se/bug/?i=13045">http: better error message for HTTP/1.x response without status line</a>
BGF <a href="https://curl.se/bug/?i=13143">http: improve response header handling, save cpu cycles</a>
BGF <a href="https://curl.se/bug/?i=12880">http: move headers collecting to writer</a>
BGF <a href="https://curl.se/bug/?i=13187">http: remove stale comment about rewindbeforesend</a>
BGF <a href="https://curl.se/bug/?i=13134">http: separate response parsing from response action</a>
BGF <a href="https://curl.se/bug/?i=12937">http_chunks: fix the accounting of consumed bytes</a>
BGF <a href="https://curl.se/bug/?i=12996">http_chunks: remove unused 'endptr' variable</a>
BGF <a href="https://curl.se/bug/?i=12838">https-proxy: use IP address and cert with ip in alt names</a>
BGF <a href="https://curl.se/bug/?i=13075">hyper: implement unpausing via client reader</a>
BGF <a href="https://curl.se/bug/?i=13112">ipv6.md: mention IPv4 mapped addresses</a>
BGF <a href="https://curl.se/bug/?i=12063">KNOWN_BUGS: POP3 issue when reading small chunks</a>
BGF <a href="https://curl.se/bug/?i=13085">lib1598: fix `CURLOPT_POSTFIELDSIZE` usage</a>
BGF <a href="https://curl.se/bug/?i=12890">lib582: remove code causing warning that is never run</a>
BGF <a href="https://curl.se/bug/?i=13035">lib: add `void *ctx` to reader/writer instances</a>
BGF <a href="https://curl.se/bug/?i=12846">lib: convert Curl_get_line to use dynbuf</a>
BGF <a href="https://curl.se/bug/?i=12964">lib: Curl_read/Curl_write clarifications</a>
BGF <a href="https://curl.se/bug/?i=13026">lib: enhance client reader resume + rewind</a>
BGF <a href="https://curl.se/bug/?i=12995">lib: initialize output pointers to NULL before calling strto[ff,l,ul]</a>
BGF <a href="https://curl.se/bug/?i=13084">lib: keep conn IP information together</a>
BGF <a href="https://curl.se/bug/?i=13096">lib: move 'done' parameter to SingleRequests</a>
BGF <a href="https://curl.se/bug/?i=12948">lib: remove curl_mimepart object when CURL_DISABLE_MIME</a>
BGF libcurl-docs: cleanups
BGF <a href="https://curl.se/bug/?i=12867">libcurl-security.md: Active FTP passes on the local IP address</a>
BGF <a href="https://curl.se/bug/?i=12983">libssh/libssh2: return error on too big range</a>
BGF <a href="https://curl.se/bug/?i=12965">MANUAL.md: fix typo</a>
BGF <a href="https://curl.se/bug/?i=12904">mbedtls: fix building when MBEDTLS_X509_REMOVE_INFO flag is defined</a>
BGF <a href="https://curl.se/bug/?i=13132">mbedtls: fix pytest for newer versions</a>
BGF <a href="https://curl.se/bug/?i=11919">mbedtls: properly cleanup the thread-shared entropy</a>
BGF <a href="https://curl.se/bug/?i=12905">mbedtls: use mbedtls_ssl_conf_{min|max}_tls_version</a>
BGF <a href="https://curl.se/bug/?i=12849">md4: include strdup.h for the memdup proto</a>
BGF <a href="https://curl.se/bug/?i=13039">mime: add client reader</a>
BGF <a href="https://curl.se/bug/?i=13019">misc: fix typos in docs and lib</a>
BGF <a href="https://curl.se/bug/?i=13047">mkhelp: simplify the generated hugehelp program</a>
BGF <a href="https://curl.se/bug/?i=12944">mprintf: fix format prefix I32/I64 for windows compilers</a>
BGF <a href="https://curl.se/bug/?i=12805">multi: add xfer_buf to multi handle</a>
BGF <a href="https://curl.se/bug/?i=12971">multi: fix multi_sock handling of select_bits</a>
BGF <a href="https://curl.se/bug/?i=12992">multi: make add_handle free any multi_easy</a>
BGF <a href="https://curl.se/bug/?i=13073">ngtcp2: no recvbuf for stream</a>
BGF <a href="https://curl.se/bug/?i=12825">ntml_wb: fix buffer type typo</a>
BGF <a href="https://curl.se/bug/?i=12933">OpenSSL QUIC: adapt to v3.3.x</a>
BGF <a href="https://curl.se/bug/?i=12861">openssl-quic: check on Windows that socket conv to int is possible</a>
BGF <a href="https://curl.se/bug/?i=13043">openssl-quic: fix BIO leak and Windows warning</a>
BGF <a href="https://curl.se/bug/?i=13044">openssl-quic: fix unity build, casing, indentation</a>
BGF <a href="https://curl.se/bug/?i=12826">OS400: avoid using awk in the build scripts</a>
BGF <a href="https://curl.se/bug/?i=13063">paramhlp: fix CRLF-stripping files with "-d @file"</a>
BGF <a href="https://curl.se/bug/?i=12856">proxy1.0.md: fix example</a>
BGF <a href="https://curl.se/bug/?i=13037">pytest: adapt to API change</a>
BGF <a href="https://curl.se/bug/?i=13093">request: clarify message when request has been sent off</a>
BGF <a href="https://curl.se/bug/?i=12989">rustls: make curl compile with 0.12.0</a>
BGF <a href="https://curl.se/bug/?i=12894">schannel: fix hang on unexpected server close</a>
BGF scripts: fix cijobs.pl for Azure and GHA
BGF <a href="https://curl.se/mail/lib-2024-02/0000.html">sendf: ignore response body to HEAD</a>
BGF <a href="https://curl.se/bug/?i=12981">setopt: fix check for CURLOPT_PROXY_TLSAUTH_TYPE value</a>
BGF <a href="https://curl.se/bug/?i=13004">setopt: fix disabling all protocols</a>
BGF <a href="https://curl.se/bug/?i=13070">sha512_256: add support for GnuTLS and OpenSSL</a>
BGF <a href="https://curl.se/bug/?i=13048">smtp: fix STARTTLS</a>
BGF <a href="https://curl.se/bug/?i=13119">SPONSORS: describe the basics</a>
BGF <a href="https://curl.se/bug/?i=12990">strtoofft: fix the overflow check</a>
BGF <a href="https://curl.se/bug/?i=13128">test 1541: verify getinfo values on first header callback</a>
BGF <a href="https://curl.se/bug/?i=12903">test1165: improve pattern matching</a>
BGF tests: support setting/using blank content env variables
BGF <a href="https://curl.se/bug/?i=13052">TIMER_STARTTRANSFER: set the same for everyone</a>
BGF <a href="https://curl.se/bug/?i=10290">TLS: start shutdown only when peer did not already close</a>
BGF <a href="https://curl.se/bug/?i=13173">TODO: update 13.11 with more information</a>
BGF <a href="https://curl.se/bug/?i=12866">tool_cb_hdr: only parse etag + content-disposition for 2xx</a>
BGF <a href="https://curl.se/bug/?i=13144">tool_getparam: accept a blank -w ""</a>
BGF <a href="https://curl.se/bug/?i=13101">tool_getparam: handle non-existing (out of range) short-options</a>
BGF <a href="https://curl.se/mail/archive-2024-01/0022.html">tool_operate: change precedence of server Retry-After time</a>
BGF <a href="https://curl.se/bug/?i=12834">tool_operate: do not set CURLOPT_QUICK_EXIT in debug builds</a>
BGF <a href="https://curl.se/bug/?i=13031">trace-config.md: remove the mutexed options list</a>
BGF <a href="https://curl.se/mail/lib-2024-03/0001.html">transfer.c: break receive loop in speed limited transfers</a>
BGF <a href="https://curl.se/bug/?i=12911">transfer: improve Windows SO_SNDBUF update limit</a>
BGF <a href="https://curl.se/bug/?i=12949">urldata: move authneg bit from conn to Curl_easy</a>
BGF <a href="https://curl.se/mail/archive-2024-02/0004.html">version: allow building with ancient libpsl</a>
BGF <a href="https://curl.se/bug/?i=13115">vquic-tls: fix the error code returned for bad CA file</a>
BGF <a href="https://curl.se/bug/?i=12831">vtls: fix tls proxy peer verification</a>
BGF <a href="https://curl.se/bug/?i=12885">vtls: revert "receive max buffer" + add test case</a>
BGF <a href="https://curl.se/bug/?i=13088">VULN-DISCLOSURE-POLICY.md: update detail about CVE requests</a>
BGF <a href="https://curl.se/bug/?i=12945">websocket: fix curl_ws_recv()</a>
BGF <a href="https://curl.se/bug/?i=13164">wolfSSL: do not call the stub function wolfSSL_BIO_set_init()</a>
BGF <a href="https://curl.se/bug/?i=12909">write-out.md: clarify error handling details</a>
</ul>
<a name="8_6_0"></a>
SUBTITLE(Fixed in 8.6.0 - January 31 2024)
<p>
RELEASEVIDEO(8.6.0, "https://youtu.be/x7exfUbjdxQ")
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.se/bug/?i=12269">add CURLE_TOO_LARGE</a>
CHG <a href="https://curl.se/bug/?i=12368">add CURLINFO_QUEUE_TIME_T</a>
CHG <a href="https://curl.se/bug/?i=12369">add CURLOPT_SERVER_RESPONSE_TIMEOUT_MS: add</a>
CHG <a href="https://curl.se/bug/?i=12481">asyn-thread: use GetAddrInfoExW on >= Windows 8</a>
CHG <a href="https://curl.se/bug/?i=12661">configure: make libpsl detection failure cause error</a>
CHG <a href="https://curl.se/bug/?i=12751">docs/cmdline: change to .md for cmdline docs</a>
CHG <a href="https://curl.se/bug/?i=12730">docs: introduce "curldown" for libcurl man page format</a>
CHG <a href="https://curl.se/bug/?i=12547">runtests: support -gl. Like -g but for lldb.</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.se/bug/?i=12570">altsvc: free 'as' when returning error</a>
BGF <a href="https://curl.se/bug/?i=12560">appveyor: replace PowerShell with bash + parallel autotools</a>
BGF <a href="https://curl.se/bug/?i=12550">appveyor: switch to out-of-tree builds</a>
BGF <a href="https://curl.se/bug/?i=12703">asyn-ares: with modern c-ares, use its default timeout</a>
BGF <a href="https://curl.se/bug/?i=12506">build: delete unused `HAVE_{GSSHEIMDAL,GSSMIT,HEIMDAL}`</a>
BGF <a href="https://curl.se/bug/?i=12812">build: delete/replace clang warning pragmas</a>
BGF <a href="https://curl.se/bug/?i=12489">build: enable missing OpenSSF-recommended warnings, with fixes</a>
BGF <a href="https://curl.se/bug/?i=12557">build: fix `-Wconversion`/`-Wsign-conversion` warnings</a>
BGF <a href="https://curl.se/bug/?i=12441">build: fix Windows ADDRESS_FAMILY detection</a>
BGF <a href="https://curl.se/bug/?i=12540">build: more `-Wformat` fixes</a>
BGF <a href="https://curl.se/bug/?i=12502">build: remove redundant `CURL_PULL_*` settings</a>
BGF <a href="https://curl.se/bug/?i=12697">cf-h1-proxy: no CURLOPT_USERAGENT in CONNECT with hyper</a>
BGF <a href="https://curl.se/bug/?i=12726">cf-socket: show errno in tcpkeepalive error messages</a>
BGF <a href="https://curl.se/bug/?i=12503">CI/distcheck: run full tests</a>
BGF cmake: add option to disable building docs
BGF <a href="https://curl.se/bug/?i=12515">cmake: fix generation for system name iOS</a>
BGF <a href="https://curl.se/bug/?i=12464">cmake: fix typo</a>
BGF <a href="https://curl.se/bug/?i=12772">cmake: freshen up docs/INSTALL.cmake</a>
BGF <a href="https://curl.se/bug/?i=12537">cmake: prefill/cache `HAVE_STRUCT_SOCKADDR_STORAGE`</a>
BGF <a href="https://curl.se/bug/?i=12773">cmake: rework options to enable curl and libcurl docs</a>
BGF <a href="https://curl.se/bug/?i=12742">cmake: when USE_MANUAL=YES, build the curl.1 man page</a>
BGF cmdline-opts/write-out.d: remove spurious double quotes
BGF <a href="https://curl.se/bug/?i=12613">cmdline-opts: update availability for the *-ca-native options</a>
BGF <a href="https://curl.se/mail/archive-2023-12/0014.html">cmdline/gen: fix the sorting of the man page options</a>
BGF <a href="https://curl.se/bug/?i=12724">configure: add libngtcp2_crypto_boringssl detection</a>
BGF <a href="https://curl.se/bug/?i=12607">configure: fix no default int compile error in ipv6 detection</a>
BGF <a href="https://curl.se/bug/?i=12683">configure: when enabling QUIC, check that TLS supports QUIC</a>
BGF <a href="https://curl.se/bug/?i=12647">connect: remove margin from eyeballer alloc</a>
BGF <a href="https://curl.se/bug/?i=12618">content_encoding: change return code to typedef'ed enum</a>
BGF <a href="https://curl.se/bug/?i=12643">cookie.d: document use of empty string to enable cookie engine</a>
BGF <a href="https://curl.se/bug/?i=12514">cookie: avoid fopen with empty file name</a>
BGF <a href="https://curl.se/bug/?i=12695">curl.h: CURLOPT_DNS_SERVERS is only available with c-ares</a>
BGF <a href="https://curl.se/mail/archive-2023-12/0026.html">curl: show ipfs and ipns as supported "protocols"</a>
BGF <a href="https://curl.se/bug/?i=12727">curl_easy_getinfo.3: remove the wrong time value count</a>
BGF <a href="https://curl.se/bug/?i=12691">curl_multi_fdset.3: remove mention of null pointer support</a>
BGF <a href="https://curl.se/bug/?i=12605">CURLINFO_REFERER.3: clarify that it is the *request* header</a>
BGF CURLOPT_AUTOREFERER.3: mention CURLINFO_REFERER
BGF <a href="https://curl.se/bug/?i=12588">CURLOPT_POSTFIELDS.3: fix incorrect C string escape in example</a>
BGF <a href="https://curl.se/bug/?i=12554">CURLOPT_SSH_*_KEYFILE: clarify</a>
BGF <a href="https://curl.se/bug/?i=12462">dist: add tests/errorcodes.pl to the tarball</a>
BGF <a href="https://curl.se/bug/?i=12496">docs: clean up Protocols: for cmdline options</a>
BGF <a href="https://curl.se/bug/?i=12687">docs: describe and highlight super cookies</a>
BGF <a href="https://curl.se/bug/?i=12802">docs: do not start lines/sentences with So, But nor And</a>
BGF <a href="https://curl.se/bug/?i=12759">docs: install curl.1 with cmake</a>
BGF <a href="https://curl.se/bug/?i=12711">docs: mention env vars not used by schannel</a>
BGF <a href="https://curl.se/bug/?i=12491">doh: remove unused local variable</a>
BGF <a href="https://curl.se/bug/?i=12671">examples: add four new examples</a>
BGF <a href="https://curl.se/bug/?i=12789">file+ftp: use stack buffers instead of data->state.buffer</a>
BGF <a href="https://curl.se/bug/?i=12456">ftp: handle the PORT parsing without allocation</a>
BGF <a href="https://curl.se/bug/?i=12638">ftp: use dynbuf to store entrypath</a>
BGF <a href="https://curl.se/bug/?i=12639">ftp: use memdup0 to store the OS from a SYST 215 response</a>
BGF ftpserver.pl: send 213 SIZE response without spurious newline
BGF <a href="https://curl.se/bug/?i=12667">gen.pl: support ## for doing .IP in table-like lists</a>
BGF <a href="https://curl.se/bug/?i=12689">gen: do italics/bold for a range of letters, not just single word</a>
BGF <a href="https://curl.se/bug/?i=12764">GHA: add a job scanning for "bad words" in markdown</a>
BGF <a href="https://curl.se/bug/?i=12778">GHA: bump ngtcp2, gnutls, mod_h2, quiche</a>
BGF <a href="https://curl.se/bug/?i=12505">gnutls: fix build with --disable-verbose</a>
BGF <a href="https://curl.se/bug/?i=12611">haproxy-clientip.d: document the arg</a>
BGF <a href="https://curl.se/mail/lib-2024-01/0019.html">headers: make sure the trailing newline is not stored</a>
BGF <a href="https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65839">headers: remove assert from Curl_headers_push</a>
BGF <a href="https://curl.se/bug/?i=12522">hostip: return error immediately when Curl_ip2addr() fails</a>
BGF <a href="https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65661">hsts: remove assert for zero length domain</a>
BGF <a href="https://curl.se/bug/?i=10936">http2: improved on_stream_close/data_done handling</a>
BGF <a href="https://curl.se/bug/?i=12629">http3/quiche: fix result code on a stream reset</a>
BGF <a href="https://curl.se/bug/?i=12734">http3: initial support for OpenSSL 3.2 QUIC stack</a>
BGF <a href="https://curl.se/bug/?i=12632">http: adjust_pollset fix</a>
BGF <a href="https://curl.se/bug/?i=12784">http: check for "Host:" case insensitively</a>
BGF <a href="https://curl.se/bug/?i=12534">http: fix off-by-one error in request method length check</a>
BGF <a href="https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66184">http: only act on 101 responses when they are HTTP/1.1</a>
BGF <a href="https://curl.se/bug/?i=12785">http: remove comment reference to a removed solution</a>
BGF <a href="https://curl.se/bug/?i=12791">http: use stack scratch buffer</a>
BGF <a href="https://curl.se/bug/?i=12680">http_proxy: a blank CURLOPT_USERAGENT should not be used in CONNECT</a>
BGF <a href="https://curl.se/bug/?i=12803">krb5: add prototype to silence clang warnings on mvsnprintf()</a>
BGF <a href="https://curl.se/bug/?i=12658">lib: add debug log outputs for CURLE_BAD_FUNCTION_ARGUMENT</a>
BGF <a href="https://curl.se/bug/?i=12807">lib: error out on multissl + http3</a>
BGF <a href="https://curl.se/bug/?i=12470">lib: fix variable undeclared error caused by `infof` changes</a>
BGF <a href="https://curl.se/bug/?i=12499">lib: reduce use of strncpy</a>
BGF <a href="https://curl.se/bug/?i=12490">lib: rename Curl_strndup to Curl_memdup0 to avoid misunderstanding</a>
BGF <a href="https://curl.se/bug/?i=12480">lib: replace readwrite with write_resp</a>
BGF <a href="https://curl.se/bug/?i=12453">lib: strndup/memdup instead of malloc, memcpy and null-terminate</a>
BGF <a href="https://curl.se/bug/?i=12754">libssh2: use `libssh2_session_callback_set2()` with v1.11.1</a>
BGF <a href="https://curl.se/bug/?i=12519">libssh: improve the deprecation warning dismissal</a>
BGF <a href="https://curl.se/bug/?i=12523">libssh: supress warnings without version check</a>
BGF <a href="https://curl.se/bug/?i=12564">Makefile.am: fix the MSVC project generation</a>
BGF <a href="https://curl.se/bug/?i=12224">Makefile.mk: drop Windows support</a>
BGF <a href="https://curl.se/bug/?i=12720">mbedtls: fix `-Wnull-dereference` and `-Wredundant-decls`</a>
BGF <a href="https://curl.se/bug/?i=12584">mbedtls: free the entropy when threaded</a>
BGF <a href="https://curl.se/bug/?i=12649">mime: use memdup0 instead of malloc + memcpy</a>
BGF mksymbolsmanpage.pl: provide references to where the symbol is used
BGF <a href="https://curl.se/bug/?i=12561">mprintf: overhaul and bugfixes</a>
BGF <a href="https://curl.se/bug/?i=12792">mqtt: use stack scratch buffer for recv+publish</a>
BGF <a href="https://curl.se/bug/?i=12682">multi: remove total timer reset in file_do() while fetching file://</a>
BGF <a href="https://curl.se/bug/?i=12576">ngtcp2: put h3 at the front of alpn</a>
BGF <a href="https://curl.se/bug/?i=12787">ntlm_wb: do not use data->state.buffer any longer</a>
BGF <a href="https://curl.se/bug/?i=12593">openldap: fix an LDAP crash</a>
BGF <a href="https://curl.se/bug/?i=12610">openldap: fix STARTTLS</a>
BGF <a href="https://curl.se/bug/?i=12525">openssl: re-match LibreSSL deinit with init</a>
BGF <a href="https://curl.se/bug/?i=12760">openssl: when verifystatus fails, remove session id from cache</a>
BGF <a href="https://curl.se/bug/?i=12815">OS400: sync ILE/RPG binding</a>
BGF <a href="https://curl.se/bug/?i=12757">pingpong: stop using the download buffer</a>
BGF <a href="https://curl.se/bug/?i=12650">pop3: replace calloc + memcpy with memdup0</a>
BGF <a href="https://curl.se/bug/?i=12765">pytest: scorecard tracking CPU and RSS</a>
BGF <a href="https://curl.se/bug/?i=12590">quiche: return CURLE_HTTP3 on send to invalid stream</a>
BGF <a href="https://curl.se/bug/?i=12504">readwrite_data: loop less</a>
BGF <a href="https://curl.se/bug/?i=12524">Revert "urldata: move async resolver state from easy handle to connectdata"</a>
BGF <a href="https://curl.se/bug/?i=12701">rtsp: deal with borked server responses</a>
BGF <a href="https://curl.se/bug/?i=12612">runtests: for mode="text" on <stdout>, fix newlines on both parts</a>
BGF <a href="https://curl.se/bug/?i=10259">sasl: make login option string override http auth</a>
BGF <a href="https://curl.se/bug/?i=12616">schannel: fix `-Warith-conversion` gcc 13 warning</a>
BGF <a href="https://curl.se/bug/?i=12679">sectransp: do verify_cert without memdup for blobs</a>
BGF <a href="https://curl.se/bug/?i=12474">sectransp_ make TLSCipherNameForNumber() available in non-verbose config</a>
BGF <a href="https://curl.se/bug/?i=12485">sendf: fix compiler warning with CURL_DISABLE_HEADERS_API</a>
BGF <a href="https://curl.se/bug/?i=12608">setopt: clear mimepost when formp is freed</a>
BGF <a href="https://curl.se/bug/?i=12651">setopt: use memdup0 when cloning COPYPOSTFIELDS</a>
BGF <a href="https://curl.se/bug/?i=12797">socks: fix generic output string to say SOCKS instead of SOCKS4</a>
BGF <a href="https://curl.se/bug/?i=12788">socks: use own buffer instead of data->state.buffer</a>
BGF <a href="https://curl.se/bug/?i=12544">ssh: fix namespace of two local macros</a>
BGF <a href="https://curl.se/bug/?i=12794">ssh: use stack scratch buffer for seeks</a>
BGF <a href="https://curl.se/bug/?i=12578">strerror: repair get_winsock_error()</a>
BGF <a href="https://curl.se/bug/?i=12501">system.h: sync mingw `CURL_TYPEOF_CURL_SOCKLEN_T` with other compilers</a>
BGF <a href="https://curl.se/bug/?i=12581">system_win32: fix a function pointer assignment warning</a>
BGF <a href="https://curl.se/bug/?i=12652">telnet: use dynbuf instad of malloc for escape buffer</a>
BGF <a href="https://curl.se/bug/?i=12793">telnet: use stack scratch buffer for do</a>
BGF <a href="https://curl.se/bug/?i=12510">tests/server: delete workaround for old-mingw</a>
BGF <a href="https://curl.se/bug/?i=12768">tests: avoid int/size_t conversion size/sign warnings</a>
BGF <a href="https://curl.se/bug/?i=12545">tests: respect $TMPDIR when creating unix domain sockets</a>
BGF <a href="https://curl.se/bug/?i=12620">tool: make parser reject blank arguments if not supported</a>
BGF <a href="https://curl.se/bug/?i=12614">tool: prepend output_dir in header callback</a>
BGF <a href="https://curl.se/bug/?i=12631">tool_getparam: bsearch cmdline options</a>
BGF <a href="https://curl.se/bug/?i=12565">tool_getparam: do not try to expand without an argument</a>
BGF <a href="https://curl.se/bug/?i=12645">tool_getparam: stop supporting `@filename` style for --cookie</a>
BGF <a href="https://curl.se/bug/?i=12612">tool_listhelp: regenerate after recent .d updates</a>
BGF <a href="https://curl.se/bug/?i=12710">tool_operate: make --remove-on-error only remove "real" files</a>
BGF <a href="https://curl.se/bug/?i=12709">tool_operate: stop setting the file comment on Amiga</a>
BGF <a href="https://curl.se/bug/?i=12640">transfer: adjust_pollset improvements</a>
BGF <a href="https://curl.se/bug/?i=12559">transfer: fix upload rate limiting, add test cases</a>
BGF <a href="https://curl.se/mail/lib-2024-01/0049.html">transfer: make the select_bits_paused condition check both directions</a>
BGF <a href="https://curl.se/bug/?i=12693">transfer: remove warning: Value stored to 'blen' is never read</a>
BGF <a href="https://curl.se/bug/?i=12704">url: don't set default CA paths for Secure Transport backend</a>
BGF <a href="https://curl.se/bug/?i=12466">url: for disabled protocols, mention if found in redirect</a>
BGF <a href="https://curl.se/bug/?i=12775">urlapi: remove assert</a>
BGF <a href="https://curl.se/bug/?i=12589">verify-examples.pl: fail verification on unescaped backslash</a>
BGF <a href="https://curl.se/bug/?i=12700">version: show only the libpsl version, not its dependencies</a>
BGF <a href="https://curl.se/bug/?i=12678">vquic: extract TLS setup into own source</a>
BGF <a href="https://curl.se/bug/?i=12599">vtls: fix missing multissl version info</a>
BGF <a href="https://curl.se/bug/?i=12801">vtls: receive max buffer</a>
BGF <a href="https://curl.se/bug/?i=12459">vtls: remove the Curl_cft_ssl_proxy object if CURL_DISABLE_PROXY</a>
BGF <a href="https://curl.se/bug/?i=12707">websockets: check for negative payload lengths</a>
BGF <a href="https://curl.se/bug/?i=12713">websockets: refactor decode chain</a>
BGF <a href="https://curl.se/bug/?i=12539">windows: delete redundant headers</a>
BGF <a href="https://curl.se/bug/?i=12495">windows: simplify detecting and using system headers</a>
BGF <a href="https://curl.se/bug/?i=12634">wolfssl: load certificate *chain* for PEM client certs</a>
BGF <a href="https://curl.se/bug/?i=12804">x509asn1: remove code for WANT_VERIFYHOST</a>
BGF <a href="https://curl.se/bug/?i=12808">x509asn1: switch from malloc to dynbuf</a>
</ul>
<a name="8_5_0"></a>
SUBTITLE(Fixed in 8.5.0 - December 6 2023)
<p>
RELEASEVIDEO(8.5.0, "https://youtu.be/fWiYbDpFeS4")
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.se/bug/?i=12137">gnutls: support CURLSSLOPT_NATIVE_CA</a>
CHG <a href="https://curl.se/bug/?i=12235">HTTP3: ngtcp2 builds are no longer experimental</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.se/bug/?i=12263">appveyor: make VS2008-built curl tool runnable</a>
BGF <a href="https://curl.se/bug/?i=12146">asyn-thread: use pipe instead of socketpair for IPC when available</a>
BGF <a href="https://curl.se/bug/?i=12312">autotools: accept linker flags via `CURL_LDFLAGS_{LIB,BIN}`</a>
BGF <a href="https://curl.se/bug/?i=12310">autotools: avoid passing `LDFLAGS` twice to libcurl</a>
BGF <a href="https://curl.se/bug/?i=12357">autotools: delete LCC compiler support bits</a>
BGF <a href="https://curl.se/bug/?i=12362">autotools: fix/improve gcc and Apple clang version detection</a>
BGF <a href="https://curl.se/bug/?i=12346">autotools: stop setting `-std=gnu89` with `--enable-warnings`</a>
BGF <a href="https://curl.se/bug/?i=12194">autotools: update references to deleted `crypt-auth` option</a>
BGF <a href="https://curl.se/bug/?i=12182">BINDINGS: add V binding</a>
BGF <a href="https://curl.se/bug/?i=12084">build: add `src/.checksrc` to source tarball</a>
BGF <a href="https://curl.se/bug/?i=12331">build: add more picky warnings and fix them</a>
BGF <a href="https://curl.se/bug/?i=12352">build: always revert `#pragma GCC diagnostic` after use</a>
BGF <a href="https://curl.se/bug/?i=12275">build: delete `HAVE_STDINT_H` and `HAVE_INTTYPES_H`</a>
BGF <a href="https://curl.se/bug/?i=12222">build: delete support bits for obsolete Windows compilers</a>
BGF <a href="https://curl.se/bug/?i=12125">build: fix 'threadsafe' feature detection for older gcc</a>
BGF <a href="https://curl.se/bug/?i=12440">build: fix builds that disable protocols but not digest auth</a>
BGF <a href="https://curl.se/bug/?i=12227">build: fix compiler warning with auths disabled</a>
BGF <a href="https://curl.se/bug/?i=12273">build: fix libssh2 + `CURL_DISABLE_DIGEST_AUTH` + `CURL_DISABLE_AWS`</a>
BGF <a href="https://curl.se/bug/?i=12324">build: picky warning updates</a>
BGF <a href="https://curl.se/bug/?i=12225">build: require Windows XP or newer</a>
BGF <a href="https://curl.se/bug/?i=12207">cfilter: provide call to tell connection to forget a socket</a>
BGF <a href="https://curl.se/bug/?i=12088">CI: add autotools, out-of-tree, debug build to distro check job</a>
BGF <a href="https://curl.se/bug/?i=12040">CI: ignore test 286 on Appveyor gcc 9 build</a>
BGF <a href="https://curl.se/bug/?i=12345">cmake: add `CURL_DISABLE_BINDLOCAL` option</a>
BGF <a href="https://curl.se/bug/?i=12353">cmake: add test for `DISABLE` options, add `CURL_DISABLE_HEADERS_API`</a>
BGF <a href="https://curl.se/bug/?i=12307">cmake: dedupe Windows system libs</a>
BGF <a href="https://curl.se/bug/?i=12093">cmake: fix `HAVE_H_ERRNO_ASSIGNABLE` detection</a>
BGF <a href="https://curl.se/bug/?i=12091">cmake: fix CURL_DISABLE_GETOPTIONS</a>
BGF <a href="https://curl.se/bug/?i=11913">cmake: fix multiple include of CURL package</a>
BGF <a href="https://curl.se/bug/?i=12160">cmake: fix OpenSSL quic detection in quiche builds</a>
BGF <a href="https://curl.se/bug/?i=12287">cmake: option to disable install & drop `curlu` target when unused</a>
BGF <a href="https://curl.se/bug/?i=12044">cmake: pre-fill rest of detection values for Windows</a>
BGF <a href="https://curl.se/bug/?i=11285">cmake: replace `check_library_exists_concat()`</a>
BGF <a href="https://curl.se/bug/?i=12202">cmake: speed up threads setup for Windows</a>
BGF <a href="https://curl.se/bug/?i=12200">cmake: speed up zstd detection</a>
BGF <a href="https://curl.se/bug/?i=12325">config-win32: set `HAVE_SNPRINTF` for mingw-w64</a>
BGF <a href="https://curl.se/bug/?i=12223">configure: better --disable-http</a>
BGF <a href="https://curl.se/bug/?i=12086">configure: check for the fseeko declaration too</a>
BGF <a href="https://curl.se/bug/?i=12367">conncache: use the closure handle when disconnecting surplus connections</a>
BGF <a href="https://curl.se/bug/?i=12289">content_encoding: make Curl_all_content_encodings allocless</a>
BGF <a href="https://curl.se/bug/?i=12387">cookie: lowercase the domain names before PSL checks</a>
BGF <a href="https://curl.se/bug/?i=12378">curl.h: delete Symbian OS references</a>
BGF <a href="https://curl.se/bug/?i=12107">curl.h: on FreeBSD include sys/param.h instead of osreldate.h</a>
BGF <a href="https://curl.se/bug/?i=12403">curl.rc: switch out the copyright symbol for plain ASCII</a>
BGF <a href="https://curl.se/bug/?i=12148">curl: improved IPFS and IPNS URL support</a>
BGF <a href="https://curl.se/bug/?i=12315">curl_easy_duphandle.3: clarify how HSTS and alt-svc are duped</a>
BGF <a href="https://curl.se/bug/?i=12410">Curl_http_body: cleanup properly when Curl_getformdata errors</a>
BGF <a href="https://curl.se/bug/?i=12221">curl_setup: disallow Windows IPv6 builds missing getaddrinfo</a>
BGF <a href="https://curl.se/bug/?i=12239">curl_sspi: support more revocation error names in error messages</a>
BGF <a href="https://curl.se/bug/?i=12431">CURLINFO_PRETRANSFER_TIME_T.3: fix time explanation</a>
BGF <a href="https://curl.se/bug/?i=12382">CURLMOPT_MAX_CONCURRENT_STREAMS: make sure the set value is within range</a>
BGF <a href="https://curl.se/bug/?i=12277">CURLOPT_CAINFO_BLOB.3: explain what CURL_BLOB_COPY does</a>
BGF <a href="https://curl.se/bug/?i=12201">CURLOPT_WRITEFUNCTION.3: clarify libcurl returns for CURL_WRITEFUNC_ERROR</a>
BGF CURPOST_POSTFIELDS.3: add CURLOPT_COPYPOSTFIELDS in SEE ALSO
BGF <a href="https://curl.se/bug/?i=12242">docs/example/keepalive.c: show TCP keep-alive options</a>
BGF <a href="https://curl.se/bug/?i=12230">docs/example/localport.c: show off CURLOPT_LOCALPORT</a>
BGF <a href="https://curl.se/bug/?i=12229">docs/examples/interface.c: show CURLOPT_INTERFACE use</a>
BGF <a href="https://curl.se/bug/?i=12126">docs/libcurl: fix three minor man page format mistakes</a>
BGF <a href="https://curl.se/bug/?i=12402">docs/libcurl: SYNSOPSIS cleanup</a>
BGF <a href="https://curl.se/bug/?i=12266">docs: add supported version for the json write-out</a>
BGF <a href="https://curl.se/bug/?i=12249">docs: clarify that curl passes on input unfiltered</a>
BGF <a href="https://curl.se/bug/?i=12170">docs: fix function typo in curl_easy_option_next.3</a>
BGF docs: KNOWN_BUGS cleanup
BGF <a href="https://curl.se/bug/?i=12199">docs: preserve the modification date when copying the prebuilt man page</a>
BGF <a href="https://curl.se/bug/?i=12267">docs: remove bold from some man page SYNOPSIS sections</a>
BGF <a href="https://curl.se/bug/?i=12092">docs: use SOURCE_DATE_EPOCH for generated manpages</a>
BGF <a href="https://curl.se/bug/?i=12365">doh: provide better return code for responses w/o addresses</a>
BGF <a href="https://curl.se/bug/?i=12214">doh: use PIPEWAIT when HTTP/2 is attempted</a>
BGF <a href="https://curl.se/bug/?i=12329">duphandle: also free 'outcurl->cookies' in error path</a>
BGF <a href="https://curl.se/bug/?i=12337">duphandle: make dupset() not return with pointers to old alloced data</a>
BGF <a href="https://curl.se/bug/?i=12317">duphandle: use strdup to clone *COPYPOSTFIELDS if size is not set</a>
BGF <a href="https://curl.se/bug/?i=12318">easy: in duphandle, init the cookies for the new handle</a>
BGF <a href="https://curl.se/bug/?i=12168">easy: remove duplicate wolfSSH init call</a>
BGF <a href="https://curl.se/bug/?i=12090">easy_lock: add a pthread_mutex_t fallback</a>
BGF <a href="https://curl.se/bug/?i=12299">fopen: create new file using old file's mode</a>
BGF <a href="https://curl.se/bug/?i=12388">fopen: create short(er) temporary file name</a>
BGF <a href="https://curl.se/bug/?i=12140">getenv: PlayStation doesn't have getenv()</a>
BGF <a href="https://curl.se/bug/?i=12157">GHA: move mod_h2 version in CI to v2.0.25</a>
BGF <a href="https://curl.se/bug/?i=12145">hostip: show the list of IPs when resolving is done</a>
BGF <a href="https://curl.se/bug/?i=12215">hostip: silence compiler warning `-Wparentheses-equality`</a>
BGF <a href="https://curl.se/bug/?i=12247">hsts: skip single-dot hostname</a>
BGF <a href="https://curl.se/bug/?i=12356">HTTP/2, HTTP/3: handle detach of onoing transfers</a>
BGF <a href="https://curl.se/bug/?i=12097">http2: header conversion tightening</a>
BGF <a href="https://curl.se/bug/?i=12179">http2: provide an error callback and failf the message</a>
BGF <a href="https://curl.se/bug/?i=12101">http2: safer invocation of populate_binsettings</a>
BGF <a href="https://curl.se/bug/?i=12311">http: allow longer HTTP/2 request method names</a>
BGF <a href="https://curl.se/bug/?i=12022">http: avoid Expect: 100-continue if Upgrade: is used</a>
BGF <a href="https://curl.se/bug/?i=10521">http: consider resume with CURLOPT_FAILONERRROR and 416 to be fine</a>
BGF <a href="https://curl.se/bug/?i=12338">http: fix `-Wunused-parameter` with no auth and no proxy</a>
BGF <a href="https://curl.se/bug/?i=12228">http: fix `-Wunused-variable` compiler warning</a>
BGF <a href="https://curl.se/bug/?i=12262">http: fix empty-body warning</a>
BGF <a href="https://curl.se/bug/?i=8107">http_aws_sigv4: canonicalise valueless query params</a>
BGF <a href="https://curl.se/bug/?i=12191">hyper: temporarily remove HTTP/2 support</a>
BGF INSTALL: update list of ports and CPU archs
BGF <a href="https://curl.se/bug/?i=12152">IPFS: fix IPFS_PATH and file parsing</a>
BGF <a href="https://curl.se/bug/?i=12350">keylog: disable if unused</a>
BGF <a href="https://curl.se/bug/?i=12251">lib: add and use Curl_strndup()</a>
BGF <a href="https://curl.se/bug/?i=12083">lib: apache style infof and trace macros/functions</a>
BGF <a href="https://curl.se/bug/?i=12082">lib: fix gcc warning in printf call</a>
BGF <a href="https://curl.se/bug/?i=12424">libcurl-errors.3: sync with current public headers</a>
BGF <a href="https://curl.se/bug/?i=12233">libcurl-thread.3: simplify the TLS section</a>
BGF <a href="https://curl.se/bug/?i=12288">Makefile.am: drop vc10, vc11 and vc12 projects from dist</a>
BGF Makefile.mk: fix `-rtmp` option for non-Windows
BGF <a href="https://curl.se/bug/?i=12374">mime: store "form escape" as a single bit</a>
BGF <a href="https://curl.se/bug/?i=12292">misc: fix -Walloc-size warnings</a>
BGF <a href="https://curl.se/bug/?i=12213">msh3: error when built with CURL_DISABLE_SOCKETPAIR set</a>
BGF <a href="https://curl.se/bug/?i=12430">multi: during ratelimit multi_getsock should return no sockets</a>
BGF <a href="https://curl.se/bug/?i=12142">multi: use pipe instead of socketpair to *wakeup()</a>
BGF <a href="https://curl.se/bug/?i=12435">ngtcp2: fix races in stream handling</a>
BGF <a href="https://curl.se/bug/?i=12149">ntlm_wb: use pipe instead of socketpair when possible</a>
BGF <a href="https://curl.se/bug/?i=12166">openldap: move the alloc of ldapconninfo to *connect()</a>
BGF <a href="https://curl.se/bug/?i=12166">openldap: set the callback argument in oldap_do</a>
BGF <a href="https://curl.se/bug/?i=12099">openssl: avoid BN_num_bits() NULL pointer derefs</a>
BGF <a href="https://curl.se/bug/?i=12384">openssl: fix building with v3 `no-deprecated` + add CI test</a>
BGF <a href="https://curl.se/bug/?i=12196">openssl: fix infof() to avoid compiler warning for %s with null</a>
BGF <a href="https://curl.se/bug/?i=12270">openssl: identify the "quictls" backend correctly</a>
BGF <a href="https://curl.se/bug/?i=12030">openssl: include SIG and KEM algorithms in verbose</a>
BGF <a href="https://curl.se/bug/?i=12155">openssl: make CURLSSLOPT_NATIVE_CA import Windows intermediate CAs</a>
BGF <a href="https://curl.se/bug/?i=12264">openssl: two multi pointer checks should probably rather be asserts</a>
BGF <a href="https://curl.se/bug/?i=12399">openssl: when a session-ID is reused, skip OCSP stapling</a>
BGF <a href="https://curl.se/bug/?i=12189">page-footer: clarify exit code 25</a>
BGF <a href="https://curl.se/bug/?i=12282">projects: add VC14.20 project files</a>
BGF <a href="https://curl.se/bug/?i=12248">pytest: use lower count in repeat tests</a>
BGF <a href="https://curl.se/bug/?i=12400">quic: make eyeballers connect retries stop at weird replies</a>
BGF <a href="https://curl.se/bug/?i=12064">quic: manage connection idle timeouts</a>
BGF <a href="https://curl.se/bug/?i=12180">quiche: use quiche_conn_peer_transport_params()</a>
BGF <a href="https://curl.se/bug/?i=12257">rand: fix build error with autotools + LibreSSL</a>
BGF <a href="https://curl.se/bug/?i=12294">resolve.d: drop a multi use-sentence</a>
BGF <a href="https://curl.se/bug/?i=12052">RTSP: improved RTP parser</a>
BGF <a href="https://curl.se/bug/?i=12326">sasl: fix `-Wunused-function` compiler warning</a>
BGF <a href="https://curl.se/bug/?i=12261">schannel: add CA cache support for files and memory blobs</a>
BGF <a href="https://curl.se/bug/?i=12374">setopt: check CURLOPT_TFTP_BLKSIZE range on set</a>
BGF <a href="https://curl.se/bug/?i=12206">setopt: remove outdated cookie comment</a>
BGF <a href="https://curl.se/bug/?i=12374">setopt: remove superfluous use of ternary expressions</a>
BGF <a href="https://curl.se/bug/?i=12139">socks: better buffer size checks for socks4a user and hostname</a>
BGF <a href="https://curl.se/bug/?i=11949">socks: make SOCKS5 use the CURLOPT_IPRESOLVE choice</a>
BGF symbols-in-versions: the CLOSEPOLICY options are deprecated
BGF test1683: remove commented-out check alternatives
BGF test3103: add missing quotes around a test tag attribute
BGF test613: stop showing an error on missing output file
BGF <a href="https://curl.se/bug/?i=12195">tests/README: SOCKS tests are not using OpenSSH, it has its own server</a>
BGF <a href="https://curl.se/bug/?i=12117">tests/server: add more SOCKS5 handshake error checking</a>
BGF <a href="https://curl.se/bug/?i=12115">tests: Fix Windows test helper tool search & use it for handle64</a>
BGF <a href="https://curl.se/bug/?i=12351">tidy-up: casing typos, delete unused Windows version aliases</a>
BGF <a href="https://curl.se/bug/?i=12089">tool: fix --capath when proxy support is disabled</a>
BGF <a href="https://curl.se/bug/?i=12321">tool: support bold headers in Windows</a>
BGF <a href="https://curl.se/bug/?i=12320">tool_cb_hdr: add an additional parsing check</a>
BGF <a href="https://curl.se/bug/?i=12407">tool_cb_prg: make the carriage return fit for wide progress bars</a>
BGF <a href="https://curl.se/bug/?i=12131">tool_cb_wrt: fix write output for very old Windows versions</a>
BGF <a href="https://curl.se/bug/?i=12116">tool_getparam: limit --rate to be smaller than number of ms</a>
BGF <a href="https://curl.se/bug/?i=12280">tool_operate: do not mix memory models</a>
BGF <a href="https://curl.se/bug/?i=12133">tool_operate: fix links in ipfs errors</a>
BGF <a href="https://curl.se/bug/?i=12409">tool_parsecfg: make warning output propose double-quoting</a>
BGF <a href="https://curl.se/bug/?i=12124">tool_urlglob: fix build for old gcc versions</a>
BGF <a href="https://curl.se/bug/?i=12102">tool_urlglob: make multiply() bail out on negative values</a>
BGF <a href="https://curl.se/bug/?i=12434">tool_writeout_json: fix JSON encoding of non-ascii bytes</a>
BGF <a href="https://curl.se/bug/?i=12428">transfer: abort pause send when connection is marked for closing</a>
BGF <a href="https://curl.se/mail/lib-2023-11/0017.html">transfer: avoid calling the read callback again after EOF</a>
BGF <a href="https://curl.se/bug/?i=11775">transfer: only reset the FTP wildcard engine in CLEAR state</a>
BGF <a href="https://curl.se/bug/?i=12165">url: don't touch the multi handle when closing internal handles</a>
BGF <a href="https://curl.se/bug/?i=12347">url: find scheme with a "perfect hash"</a>
BGF <a href="https://curl.se/bug/?i=12344">url: fix `-Wzero-length-array` with no protocols</a>
BGF <a href="https://curl.se/bug/?i=12343">url: fix builds with `CURL_DISABLE_HTTP`</a>
BGF <a href="https://curl.se/bug/?i=12216">url: protocol handler lookup tidy-up</a>
BGF <a href="https://curl.se/bug/?i=12255">url: proxy ssl connection reuse fix</a>
BGF <a href="https://curl.se/bug/?i=12240">urlapi: avoid null deref if setting blank host to url encode</a>
BGF <a href="https://curl.se/bug/?i=12240">urlapi: skip appending NULL pointer query</a>
BGF <a href="https://curl.se/bug/?i=12250">urlapi: when URL encoding the fragment, pass in the right length</a>
BGF <a href="https://curl.se/bug/?i=12375">urldata: make maxconnects a 32 bit value</a>
BGF <a href="https://curl.se/bug/?i=12198">urldata: move async resolver state from easy handle to connectdata</a>
BGF <a href="https://curl.se/bug/?i=12323">urldata: move cookielist from UserDefined to UrlState</a>
BGF <a href="https://curl.se/bug/?i=12315">urldata: move hstslist from 'set' to 'state'</a>
BGF <a href="https://curl.se/bug/?i=12165">urldata: move the 'internal' boolean to the state struct</a>
BGF vssh: remove the #ifdef for Curl_ssh_init, use empty macro
BGF <a href="https://curl.se/bug/?i=12204">vtls: cleanup SSL config management</a>
BGF <a href="https://curl.se/bug/?i=12439">vtls: consistently use typedef names for OpenSSL structs</a>
BGF <a href="https://curl.se/bug/?i=12237">vtls: late clone of connection ssl config</a>
BGF <a href="https://curl.se/bug/?i=12259">vtls: use ALPN "http/1.1" for HTTP/1.x, including HTTP/1.0</a>
BGF <a href="https://curl.se/bug/?i=12278">VULN-DISCLOSURE-POLICY: escape sequences are not a security flaw</a>
BGF <a href="https://curl.se/bug/?i=12376">windows: use built-in `_WIN32` macro to detect Windows</a>
BGF <a href="https://curl.se/bug/?i=12381">wolfssh: remove redundant static prototypes</a>
BGF <a href="https://curl.se/bug/?i=12218">wolfssl: add default case for wolfssl_connect_step1 switch</a>
BGF <a href="https://curl.se/bug/?i=12108">wolfssl: require WOLFSSL_SYS_CA_CERTS for loading system CA</a>
</ul>
<a name="8_4_0"></a>
SUBTITLE(Fixed in 8.4.0 - October 11 2023)
<p>
RELEASEVIDEO(8.4.0, "https://youtu.be/-j-_nKmq2aE")
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.se/bug/?i=8805">curl: add support for the IPFS protocols via HTTP gateway</a>
CHG <a href="https://curl.se/bug/?i=11750">curl_multi_get_handles: get easy handles from a multi handle</a>
CHG <a href="https://curl.se/bug/?i=11625">mingw: delete support for legacy mingw.org toolchain</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.se/bug/?i=11985">acinclude.m4: Document proper system truststore on FreeBSD</a>
BGF <a href="https://curl.se/bug/?i=11994">appveyor: fix yamlint issues, indent</a>
BGF <a href="https://curl.se/bug/?i=11999">appveyor: rewrite batch in PowerShell + CI improvements</a>
BGF <a href="https://curl.se/bug/?i=11997">autotools: adjust `CURL_CA_PATH` value to CMake</a>
BGF <a href="https://curl.se/bug/?i=12008">autotools: restore `HAVE_IOCTL_*` detections</a>
BGF <a href="https://curl.se/bug/?i=12010">base64: also build for curl</a>
BGF <a href="https://curl.se/bug/?i=11915">bufq: remove Curl_bufq_skip_and_shift (unused)</a>
BGF <a href="https://curl.se/bug/?i=11940">build: delete checks for C89 standard headers</a>
BGF <a href="https://curl.se/bug/?i=12065">build: do not publish `HAVE_BORINGSSL`, `HAVE_AWSLC` macros</a>
BGF <a href="https://curl.se/bug/?i=12035">cf-socket: simulate slow/blocked receives in debug</a>
BGF <a href="https://curl.se/bug/?i=11893">cmake, configure: also link with CoreServices</a>
BGF <a href="https://curl.se/bug/?i=11977">cmake: add check for suseconds_t</a>
BGF <a href="https://curl.se/bug/?i=11954">cmake: add feature checks for `memrchr` and `getifaddrs`</a>
BGF <a href="https://curl.se/bug/?i=11973">cmake: add missing checks</a>
BGF <a href="https://curl.se/bug/?i=12015">cmake: delete old `HAVE_LDAP_URL_PARSE` logic</a>
BGF <a href="https://curl.se/bug/?i=11981">cmake: detect `HAVE_CLOCK_GETTIME_MONOTONIC_RAW`</a>
BGF <a href="https://curl.se/bug/?i=11979">cmake: detect `HAVE_GETADDRINFO_THREADSAFE`</a>
BGF <a href="https://curl.se/bug/?i=11996">cmake: detect `sys/wait.h` and `netinet/udp.h`</a>
BGF <a href="https://curl.se/bug/?i=11967">cmake: detect TLS-SRP in OpenSSL/wolfSSL/GnuTLS</a>
BGF <a href="https://curl.se/bug/?i=12005">cmake: disable unity mode with Windows Unicode + TrackMemory</a>
BGF <a href="https://curl.se/bug/?i=12006">cmake: fix `HAVE_LDAP_SSL`, `HAVE_LDAP_URL_PARSE` on non-Windows</a>
BGF <a href="https://curl.se/bug/?i=11978">cmake: fix `HAVE_WRITABLE_ARGV` detection</a>
BGF <a href="https://curl.se/bug/?i=11926">cmake: fix duplicate symbols when linking tests</a>
BGF <a href="https://curl.se/bug/?i=11927">cmake: fix missing `zlib.h` when compiling `libcurltool`</a>
BGF <a href="https://curl.se/bug/?i=11929">cmake: fix stderr initialization in unity builds</a>
BGF <a href="https://curl.se/bug/?i=11843">cmake: fix the help text to the static build option in CMakeLists.txt</a>
BGF <a href="https://curl.se/bug/?i=12027">cmake: fix unity builds for more build combinations</a>
BGF <a href="https://curl.se/bug/?i=11912">cmake: fix unity symbol collisions in h2 builds</a>
BGF <a href="https://curl.se/bug/?i=11928">cmake: fix unity with Windows Unicode + TrackMemory</a>
BGF <a href="https://curl.se/bug/?i=12024">cmake: improve OpenLDAP builds</a>
BGF <a href="https://curl.se/bug/?i=11914">cmake: lib `CURL_STATICLIB` fixes (Windows)</a>
BGF <a href="https://curl.se/bug/?i=11951">cmake: move global headers to specific checks</a>
BGF <a href="https://curl.se/bug/?i=11974">cmake: pre-cache `HAVE_BASENAME` for mingw-w64 and MSVC</a>
BGF <a href="https://curl.se/bug/?i=12003">cmake: pre-cache `HAVE_POLL_FINE` on Windows</a>
BGF cmake: tidy-up `NOT_NEED_LBER_H` detection
BGF <a href="https://curl.se/bug/?i=11998">cmake: validate `CURL_DEFAULT_SSL_BACKEND` config value</a>
BGF <a href="https://curl.se/bug/?i=11987">configure: check for the capath by default</a>
BGF <a href="https://curl.se/bug/?i=11973">configure: remove unused checks</a>
BGF <a href="https://curl.se/bug/?i=11988">configure: replace adhoc domain with `localhost` in tests</a>
BGF configure: sort AC_CHECK_FUNCS
BGF <a href="https://curl.se/bug/?i=11920">connect: expire the timeout when trying next</a>
BGF <a href="https://curl.se/bug/?i=11939">connect: only start the happy eyeballs timer when needed</a>
BGF <a href="https://curl.se/bug/?i=11862">cookie: do not store the expire or max-age strings</a>
BGF <a href="https://curl.se/bug/?i=11862">cookie: remove unnecessary struct fields</a>
BGF <a href="https://curl.se/bug/?i=11875">cookie: set ->running in cookie_init even if data is NULL</a>
BGF <a href="https://curl.se/bug/?i=11991">create-dirs.d: clarify it also uses --output-dirs</a>
BGF <a href="https://curl.se/bug/?i=11905">curl.h: mark CURLSSLBACKEND_NSS as deprecated since 8.3.0</a>
BGF <a href="https://curl.se/bug/?i=12045">curl_easy_pause.3: mention h2/h3 buffering</a>
BGF <a href="https://curl.se/mail/lib-2023-10/0010.html">curl_easy_pause.3: mention it works within callbacks</a>
BGF <a href="https://curl.se/bug/?i=12059">curl_easy_pause: set "in callback" true on exit if true</a>
BGF <a href="https://curl.se/bug/?i=12034">CURLOPT_DEBUGFUNCTION.3: warn about internal handles</a>
BGF docs/libcurl/opts/Makefile.inc: add missing manpage files
BGF <a href="https://curl.se/bug/?i=11957">docs: adapt SEE ALSO sections to new requirements</a>
BGF <a href="https://curl.se/bug/?i=2935">docs: explain how PINNEDPUBLICKEY is independent of VERIFYPEER</a>
BGF <a href="https://curl.se/bug/?i=11986">docs: replace made up domains with example.com</a>
BGF <a href="https://curl.se/bug/?i=11963">docs: update curl man page references</a>
BGF <a href="https://curl.se/bug/?i=11909">docs: use CURLSSLBACKEND_NONE</a>
BGF <a href="https://curl.se/bug/?i=11864">doh: inherit DEBUGFUNCTION/DATA</a>
BGF <a href="https://curl.se/bug/?i=11846">escape: replace Curl_isunreserved with ISUNRESERVED</a>
BGF <a href="https://curl.se/bug/?i=11984">FAQ: How do I upgrade curl.exe in Windows?</a>
BGF <a href="https://curl.se/bug/?i=11932">GHA/linux: run singleuse to detect single-use global functions</a>
BGF <a href="https://curl.se/bug/?i=11964">GHA: add workflow to compare configure vs cmake outputs</a>
BGF <a href="https://curl.se/bug/?i=11877">h2-proxy: remove left-over mistake in drain_tunnel()</a>
BGF <a href="https://curl.se/bug/?i=11982">h2: testcase and fix for pausing h2 streams</a>
BGF <a href="https://curl.se/bug/?i=12066">h3: add support for ngtcp2 with AWS-LC builds</a>
BGF <a href="https://curl.se/bug/?i=12054">http2: refused stream handling for retry</a>
BGF <a href="https://curl.se/bug/?i=11892">http: fix CURL_DISABLE_BEARER_AUTH breakage</a>
BGF <a href="https://curl.se/bug/?i=11808">http: h1/h2 proxy unification</a>
BGF <a href="https://curl.se/bug/?i=11941">http: remove wrong comment for http_should_fail</a>
BGF <a href="https://curl.se/bug/?i=11871">http: use per-request counter to check too large headers</a>
BGF <a href="https://curl.se/bug/?i=11855">http_aws_sigv4: fix sorting with empty parts</a>
BGF <a href="https://curl.se/bug/?i=11983">idn: fix WinIDN null ptr deref on bad host</a>
BGF <a href="https://curl.se/bug/?i=11898">idn: if idn2_check_version returns NULL, return error</a>
BGF <a href="https://curl.se/bug/?i=11960">inet_ntop: add typecast to silence Coverity</a>
BGF <a href="https://curl.se/bug/?i=11885">lib: disambiguate Curl_client_write flag semantics</a>
BGF <a href="https://curl.se/bug/?i=11890">lib: enable hmac for digest as well</a>
BGF <a href="https://curl.se/bug/?i=11874">lib: failf/infof compiler warnings</a>
BGF <a href="https://curl.se/bug/?i=11810">lib: let the max filesize option stop too big transfers too</a>
BGF <a href="https://curl.se/bug/?i=11908">lib: move handling of `data->req.writer_stack` into Curl_client_write()</a>
BGF <a href="https://curl.se/bug/?i=11990">lib: provide and use Curl_hexencode</a>
BGF <a href="https://curl.se/bug/?i=11975">lib: remove TIME_WITH_SYS_TIME</a>
BGF <a href="https://curl.se/bug/?i=11882">lib: use wrapper for curl_mime_data fseek callback</a>
BGF <a href="https://curl.se/bug/?i=11837">libssh2: fix error message on failed pubkey-from-file</a>
BGF <a href="https://curl.se/bug/?i=11804">libssh: cap SFTP packet size sent</a>
BGF <a href="https://curl.se/bug/?i=11924">Makefile.mk: always set `CURL_STATICLIB` for lib (Windows)</a>
BGF <a href="https://curl.se/bug/?i=11866">MANUAL.md: change domain to example.com</a>
BGF <a href="https://curl.se/bug/?i=11838">misc: better random strings</a>
BGF <a href="https://curl.se/bug/?i=12071">MQTT: improve receive of ACKs</a>
BGF <a href="https://curl.se/bug/?i=12033">multi: do CURLM_CALL_MULTI_PERFORM at two more places</a>
BGF <a href="https://curl.se/bug/?i=11937">multi: fix small timeouts</a>
BGF <a href="https://curl.se/bug/?i=11931">multi: remove Curl_multi_dump</a>
BGF <a href="https://curl.se/bug/?i=11938">multi: round the timeout up to prevent early wakeups</a>
BGF <a href="https://curl.se/bug/?i=12042">multi: set CURLM_CALL_MULTI_PERFORM after switch to DOING_MORE</a>
BGF <a href="https://curl.se/bug/?i=11858">openssl: improve ssl shutdown handling</a>
BGF <a href="https://curl.se/bug/?i=12038">openssl: use X509_ALGOR_get0 instead of reaching into X509_ALGOR</a>
BGF <a href="https://curl.se/bug/?i=11860">pytest: exclude test_03_goaway in CI runs due to timing dependency</a>
BGF <a href="https://curl.se/bug/?i=11796">quic: set ciphers/curves the same way regular TLS does</a>
BGF <a href="https://curl.se/bug/?i=11850">quiche: fix build error with --with-ca-fallback</a>
BGF RELEASE-PROCEDURE.md: updated coming release dates
BGF <a href="https://curl.se/bug/?i=11980">runtests: display the test status if tests appear hung</a>
BGF runtests: eliminate a warning on old perl versions
BGF <a href="https://curl.se/docs/CVE-2023-38545.html">socks: return error if hostname too long for remote resolve</a>
BGF <a href="https://curl.se/bug/?i=11955">src/mkhelp: make generated code pass `checksrc`</a>
BGF test1056: disable on Windows
BGF <a href="https://curl.se/bug/?i=11888">test1474: disable test on NetBSD, OpenBSD and Solaris 10</a>
BGF test1592: greatly increase the maximum test timeout
BGF <a href="https://curl.se/bug/?i=12041">test1903: actually verify the cookies after the test</a>
BGF <a href="https://curl.se/bug/?i=12036">test1906: set a lower timeout since it's hit on Windows</a>
BGF <a href="https://curl.se/bug/?i=11767">test2600: remove special case handling for USE_ALARM_TIMEOUT</a>
BGF test650: fix an end tag typo
BGF test661: return from test early in case of curl error
BGF test: add missing <feature>s
BGF <a href="https://curl.se/bug/?i=12032">tests: close the shell used to start sshd</a>
BGF <a href="https://curl.se/bug/?i=12002">tests: fix a race condition in ftp server disconnect</a>
BGF <a href="https://curl.se/bug/?i=11925">tests: fix compiler warnings</a>
BGF <a href="https://curl.se/bug/?i=12018">tests: Fix zombie processes left behind by FTP tests.</a>
BGF tests: improve SLOWDOWN test reliability by reducing sent data
BGF <a href="https://curl.se/bug/?i=12013">tests: increase lib571 timeout from 3s to 30s</a>
BGF tests: log the test result code after each libtest
BGF tests: propagate errors in libtests
BGF tests: set --expect100-timeout to improve test reliability
BGF <a href="https://curl.se/bug/?i=11953">tests: show which curl tool `runtests.pl` is using</a>
BGF tests: stop overriding the lock timeout
BGF <a href="https://curl.se/bug/?i=11897">tftpd: always use curl's own tftp.h</a>
BGF <a href="https://curl.se/bug/?i=11958">tool: use our own stderr variable</a>
BGF <a href="https://github.com/curl/curl/commit/af3f4e41#r127212213">tool_cb_wrt: fix debug assertion</a>
BGF <a href="https://curl.se/bug/?i=12048">tool_getparam: accept variable expansion on file names too</a>
BGF <a href="https://curl.se/bug/?i=11943">tool_setopt: remove unused function tool_setopt_flags</a>
BGF <a href="https://curl.se/bug/?i=11911">upload-file.d: describe the file name slash/backslash handling</a>
BGF <a href="https://curl.se/bug/?i=12031">url: fall back to http/https proxy env-variable if ws/wss not set</a>
BGF <a href="https://curl.se/bug/?i=11904">url: fix netrc info message</a>
BGF <a href="https://curl.se/bug/?i=11932">warnless: remove unused functions</a>