curl/RELEASE-NOTES

Curl and libcurl 7.63.0

 Public curl releases:         178
 Command line options:         219
 curl_easy_setopt() options:   261
 Public functions in libcurl:  80
 Contributors:                 1808

This release includes the following changes:

 o curl: add %{stderr} and %{stdout} for --write-out [24]
 o curl: add undocumented option --dump-module-paths for win32 [19]
 o setopt: add CURLOPT_CURLU [27]

This release includes the following bugfixes:

 o CURLOPT_HEADERFUNCTION.3: match 'nitems' name in synopsis and description [45]
 o CURLOPT_WRITEFUNCTION.3: spell out that it gets called many times
 o Curl_follow: accept non-supported schemes for "fake" redirects [9]
 o KNOWN_BUGS: add --proxy-any connection issue [28]
 o OS400: add URL API ccsid wrappers and sync ILE/RPG bindings
 o SECURITY-PROCESS: bountygraph shuts down again [50]
 o TODO: Have the URL API offer IDN decoding [22]
 o ares: remove fd from multi fd set when ares is about to close the fd [42]
 o axtls: removed [1]
 o cmake: fix MIT/Heimdal Kerberos detection [53]
 o configure: include all libraries in ssl-libs fetch [55]
 o configure: show CFLAGS, LDFLAGS etc in summary [7]
 o connect: fix building for recent versions of Minix [52]
 o cookies: create the cookiejar even if no cookies to save [48]
 o curl: --local-port range was not "including" [29]
 o curl: fix --local-port integer overflow [25]
 o curl: fix memory leak reading --writeout from file [51]
 o curl: fixed UTF-8 in current console code page (Windows) [16]
 o curl_easy_perform: fix timeout handling [49]
 o curl_multibyte: fix a malloc overcalculation [18]
 o curle: move deprecated error code to ifndef block [40]
 o docs: escape "\n" codes [26]
 o examples/ephiperfifo: report error when epoll_ctl fails
 o ftp: avoid two unsigned int overflows in FTP listing parser [30]
 o host names: allow trailing dot in name resolve, then strip it [46]
 o http_negotiate: do not close connection until negotiation is completed [36]
 o impacket: add LICENSE [39]
 o infof: clearly indicate truncation [14]
 o libcurl: stop reading from paused transfers [20]
 o mprintf: avoid unsigned integer overflow warning [10]
 o netrc: don't ignore the login name specified with "--user" [17]
 o nss: fix fallthrough comment to fix picky compiler warning
 o nss: remove version selecting dead code [33]
 o nss: set default max-tls to 1.3/1.2 [32]
 o ntlm: Remove redundant ifdef USE_OPENSSL [41]
 o openssl: Remove SSLEAY leftovers [37]
 o openssl: do not log excess "TLS app data" lines for TLS 1.3 [34]
 o openssl: support session resume with TLS 1.3 [44]
 o openvms: fix example name [8]
 o os400: Add curl_easy_conn_upkeep() to ILE/RPG binding
 o os400: add CURLOPT_CURLU to ILE/RPG binding
 o os400: fix return type of curl_easy_pause() in ILE/RPG binding
 o pop3: only do APOP with a valid timestamp [35]
 o runtests: use the local curl for verifying [6]
 o schannel: be consistent in Schannel capitalization [23]
 o schannel: better CURLOPT_CERTINFO support [2]
 o schannel: use Curl_ prefix for global private symbols [4]
 o snprintf: renamed and we now only use msnprintf() [47]
 o ssl: fix compilation with OpenSSL 0.9.7 [43]
 o ssl: replace all internal uses of CURLE_SSL_CACERT [40]
 o symbols-in-versions: add missing CURLU_ symbols [15]
 o test328: verify Content-Encoding: none [54]
 o tests: disable SO_EXCLUSIVEADDRUSE for stunnel on Windows
 o tests: drop http_pipe.py script no longer used [5]
 o tool_cb_wrt: Silence function cast compiler warning [31]
 o tool_doswin: Fix uninitialized field warning [38]
 o travis: build with clang sanitizers [3]
 o travis: remove curl before a normal build [11]
 o url: a short host name + port is not a scheme [13]
 o url: fix IPv6 numeral address parser [12]
 o urlapi: only skip encoding the first '=' with APPENDQUERY set [21]

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (https://curl.haxx.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

  Alessandro Ghedini, Alexey Melnichuk, Antoni Villalonga,
  bobmitchell1956 on github, Brad King, Brian Carpenter, daboul on github,
  Daniel Gustafsson, Daniel Stenberg, David Benjamin, Dheeraj Sangamkar,
  Elia Tufarolo, Frank Gevaerts, Gisle Vanem, Hagai Auro, Han Han,
  infinnovation-dev on github, James Knight, Jérémy Rocher, Jim Fuller,
  Kamil Dudka, Konstantin Kushnir, Marcel Raad, Marc Hörsken, Marcos Diazr,
  Michael Kaufmann, NTMan on Github, Patrick Monnerat, Peter Wu, Ray Satiro,
  Romain Fliedel, Sevan Janiyan, Sven Blumenstein, Tim Rühsen, Tobias Hintze,
  Tomas Hoger, tpaukrt on github, Viktor Szakats, Yasuhiro Matsumoto,
  (39 contributors)

        Thanks! (and sorry if I forgot to mention someone)

References to bug reports and discussions on issues:

 [1] = https://curl.haxx.se/bug/?i=3194
 [2] = https://curl.haxx.se/bug/?i=3197
 [3] = https://curl.haxx.se/bug/?i=3190
 [4] = https://curl.haxx.se/bug/?i=3201
 [5] = https://curl.haxx.se/bug/?i=3204
 [6] = https://curl.haxx.se/mail/lib-2018-10/0118.html
 [7] = https://curl.haxx.se/bug/?i=3207
 [8] = https://curl.haxx.se/bug/?i=3217
 [9] = https://curl.haxx.se/bug/?i=3210
 [10] = https://curl.haxx.se/bug/?i=3184
 [11] = https://curl.haxx.se/bug/?i=3198
 [12] = https://curl.haxx.se/bug/?i=3218
 [13] = https://curl.haxx.se/bug/?i=3220
 [14] = https://curl.haxx.se/bug/?i=3216
 [15] = https://curl.haxx.se/bug/?i=3226
 [16] = https://curl.haxx.se/bug/?i=3211
 [17] = https://curl.haxx.se/bug/?i=3213
 [18] = https://curl.haxx.se/bug/?i=3209
 [19] = https://curl.haxx.se/bug/?i=3208
 [20] = https://curl.haxx.se/bug/?i=3240
 [21] = https://curl.haxx.se/bug/?i=3231
 [22] = https://curl.haxx.se/bug/?i=3232
 [23] = https://curl.haxx.se/bug/?i=3243
 [24] = https://curl.haxx.se/bug/?i=3115
 [25] = https://curl.haxx.se/bug/?i=3242
 [26] = https://curl.haxx.se/bug/?i=3246
 [27] = https://curl.haxx.se/bug/?i=3227
 [28] = https://curl.haxx.se/bug/?i=876
 [29] = https://curl.haxx.se/bug/?i=3251
 [30] = https://curl.haxx.se/bug/?i=3225
 [31] = https://curl.haxx.se/bug/?i=3263
 [32] = https://curl.haxx.se/bug/?i=3261
 [33] = https://curl.haxx.se/bug/?i=3262
 [34] = https://curl.haxx.se/bug/?i=3281
 [35] = https://curl.haxx.se/bug/?i=3278
 [36] = https://curl.haxx.se/bug/?i=3275
 [37] = https://curl.haxx.se/bug/?i=3270
 [38] = https://curl.haxx.se/bug/?i=3254
 [39] = https://curl.haxx.se/bug/?i=3276
 [40] = https://curl.haxx.se/bug/?i=3291
 [41] = https://curl.haxx.se/bug/?i=3269
 [42] = https://curl.haxx.se/bug/?i=3238
 [43] = https://curl.haxx.se/bug/?i=3266
 [44] = https://curl.haxx.se/bug/?i=3202
 [45] = https://curl.haxx.se/bug/?i=3295
 [46] = https://curl.haxx.se/bug/?i=3022
 [47] = https://curl.haxx.se/bug/?i=3296
 [48] = https://curl.haxx.se/bug/?i=3299
 [49] = https://curl.haxx.se/bug/?i=3305
 [50] = https://curl.haxx.se/bug/?i=3311
 [51] = https://curl.haxx.se/bug/?i=3322
 [52] = https://curl.haxx.se/bug/?i=3323
 [53] = https://curl.haxx.se/bug/?i=3316
 [54] = https://curl.haxx.se/bug/?i=3317
 [55] = https://curl.haxx.se/bug/?i=3193