curl/RELEASE-NOTES

curl and libcurl 7.77.0

 Public curl releases:         200
 Command line options:         242
 curl_easy_setopt() options:   288
 Public functions in libcurl:  85
 Contributors:                 2383

This release includes the following changes:

 o curl: ignore options asking for SSLv2 or SSLv3 [10]
 o hsts: enable by default [8]
 o vtls: refuse setting any SSL version [9]

This release includes the following bugfixes:

 o c-hyper: fix handling of zero-byte chunk from hyper [39]
 o checksrc: complain on == NULL or != 0 checks in conditions [20]
 o cmake: make libcurl output filename configurable [41]
 o configure: make the TLS library choice(s) explicit [3]
 o configure: provide --with-openssl, deprecate --with-ssl [15]
 o connect: use CURL_SA_FAMILY_T for portability [34]
 o ConnectionExists: respect requests for h1 connections better
 o cookie: CURLOPT_COOKIEFILE set to NULL switches off cookies [1]
 o curl_setup: provide the shutdown flags wider [33]
 o curl_url_set.3: add memory management information [38]
 o CURLOPT_POSTFIELDS.3: clarify how it gets the size of the data [40]
 o docs/HTTP3.md: fix nghttp2's HTTP/3 server port [21]
 o http2: call the handle-closed function correctly on closed stream [37]
 o http2: move the stream error field to the per-transfer storage [36]
 o krb5: don't use 'static' to store PBSZ size response [23]
 o krb5: remove the unused 'overhead' function [35]
 o lib1564.c: enable last wakeup test part on Windows [26]
 o libssh2: fix Value stored to 'sshp' is never read [13]
 o libssh: fix "empty expression statement has no effect" warnings [7]
 o m4: add security frameworks on Mac when compiling rustls [31]
 o multi: don't close connection HTTP_1_1_REQUIRED
 o multi: fix slow write/upload performance on Windows [27]
 o multi: reduce Win32 API calls to improve performance [28]
 o NSS: add ciphers to map [30]
 o openldap: protect SSL-specific code with proper #ifdef [12]
 o openssl: fix build error with OpenSSL < 1.0.2 [4]
 o os400: additional support for options metadata [24]
 o README.md: delete Codacy UTM parameters [5]
 o Revert "Revert 'multi: implement wait using winsock events'" [26]
 o rustls: only return CURLE_AGAIN when TLS session is fully drained [2]
 o schannel: Disable auto credentials; add an option to enable it [18]
 o schannel: Support strong crypto option [44]
 o sectransp: allow cipher name to be specified [29]
 o sws: #ifdef S_IFSOCK use [32]
 o test server: take care of siginterrupt() deprecation [25]
 o tests/disable-scan.pl: also scan all m4 files [17]
 o tool_getparam: replace (in-place) '%20' by '+' according to RFC1866 [14]
 o tool_operate: don't discard failed parallel transfer result [16]
 o tool_writeout: fix the HTTP_CODE json output [11]
 o urlapi: "normalize" numerical IPv4 host names [6]
 o vauth: factor base64 conversions out of authentication procedures [22]
 o version: add gsasl_version to curl_version_info_data [43]
 o vtls: deduplicate some DISABLE_PROXY ifdefs [19]
 o vtls: reset ssl use flag upon negotiation failure [42]

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

  Daniel Stenberg, Emil Engler, Georeth Zhou, Gergely Nagy, Harry Sintonen,
  Illarion Taev, Jacob Hoffman-Andrews, Jakub Zakrzewski, Javier Blazquez,
  Jeroen Ooms, Johann150 on github, Jon Rumsey, Kevin Burke, Kevin R. Bulgrien,
  Marcel Raad, Marc Hörsken, Martin Halle, Michael Kolechkin, Michał Antoniak,
  Michal Rus, Morten Minde Neergaard, Patrick Monnerat, Pontus Lundkvist,
  Ralph Langendam, Ray Satiro, rcombs on github, Rich FitzJohn,
  Stefan Karpinski, tmkk on github, Tommy Odom, Tuomas Siipola, Victor Vieux,
  Viktor Szakats, Wes Hinsley, Yusuke Nakamura,
  (35 contributors)

References to bug reports and discussions on issues:

 [1] = https://curl.se/bug/?i=6889
 [2] = https://curl.se/bug/?i=6894
 [3] = https://curl.se/bug/?i=6897
 [4] = https://curl.se/bug/?i=6920
 [5] = https://curl.se/bug/?i=6919
 [6] = https://curl.se/bug/?i=6863
 [7] = https://curl.se/bug/?i=6847
 [8] = https://curl.se/bug/?i=6700
 [9] = https://curl.se/bug/?i=6773
 [10] = https://curl.se/bug/?i=6772
 [11] = https://curl.se/bug/?i=6905
 [12] = https://curl.se/bug/?i=6901
 [13] = https://curl.se/bug/?i=6900
 [14] = https://curl.se/bug/?i=6895
 [15] = https://curl.se/bug/?i=6887
 [16] = https://curl.se/bug/?i=6921
 [17] = https://curl.se/bug/?i=1165
 [18] = https://curl.se/bug/?i=2262
 [19] = https://curl.se/bug/?i=6660
 [20] = https://curl.se/bug/?i=6912
 [21] = https://curl.se/bug/?i=6964
 [22] = https://curl.se/bug/?i=6654
 [23] = https://curl.se/bug/?i=6963
 [24] = https://curl.se/bug/?i=6574
 [25] = https://curl.se/bug/?i=6529
 [26] = https://curl.se/bug/?i=6245
 [27] = https://curl.se/bug/?i=6146
 [28] = https://curl.se/bug/?i=6146
 [29] = https://curl.se/bug/?i=6464
 [30] = https://curl.se/bug/?i=6670
 [31] = https://curl.se/bug/?i=6955
 [32] = https://curl.se/mail/lib-2021-04/0074.html
 [33] = https://curl.se/mail/lib-2021-04/0073.html
 [34] = https://curl.se/mail/lib-2021-04/0071.html
 [35] = https://curl.se/bug/?i=6947
 [36] = https://curl.se/bug/?i=6910
 [37] = https://curl.se/bug/?i=6862
 [38] = https://curl.se/bug/?i=6953
 [39] = https://curl.se/bug/?i=6951
 [40] = https://curl.se/bug/?i=6943
 [41] = https://curl.se/bug/?i=6933
 [42] = https://curl.se/bug/?i=6934
 [43] = https://curl.se/bug/?i=6843
 [44] = https://curl.se/bug/?i=6734