diff --git a/RELEASE-NOTES b/RELEASE-NOTES index fd0abde5e..a9ee05c98 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -2,23 +2,26 @@ curl and libcurl 7.77.0 Public curl releases: 200 Command line options: 242 - curl_easy_setopt() options: 288 + curl_easy_setopt() options: 290 Public functions in libcurl: 85 - Contributors: 2383 + Contributors: 2397 This release includes the following changes: + o configure: make the TLS library choice(s) explicit [3] o curl: ignore options asking for SSLv2 or SSLv3 [10] o hsts: enable by default [8] + o SSL: support in-memory CA certs for some backends [85] o vtls: refuse setting any SSL version [9] This release includes the following bugfixes: + o build: fix compilation for Windows UWP platform [82] o c-hyper: don't write to set.writeheader if null [67] o c-hyper: fix handling of zero-byte chunk from hyper [39] o checksrc: complain on == NULL or != 0 checks in conditions [20] + o cmake: check for getppid and utimes [87] o cmake: make libcurl output filename configurable [41] - o configure: make the TLS library choice(s) explicit [3] o configure: provide --with-openssl, deprecate --with-ssl [15] o connect: use CURL_SA_FAMILY_T for portability [34] o ConnectionExists: respect requests for h1 connections better @@ -26,6 +29,7 @@ This release includes the following bugfixes: o Curl_http_header: check for colon when matching Persistent-Auth [51] o Curl_http_input_auth: require valid separator after negotiation type [52] o Curl_input_digest: require space after Digest [50] + o curl_mprintf.3: add description [73] o curl_setup: provide the shutdown flags wider [33] o curl_url_set.3: add memory management information [38] o CURLcode: add CURLE_SSL_CLIENTCERT [47] @@ -34,6 +38,9 @@ This release includes the following bugfixes: o docs: camelcase it like GitHub everywhere [62] o docs: fix typo in fail-with-body doc [63] o easy: ignore sigpipe in curl_easy_send [69] + o FILEFORMAT: mention sectransp as a feature [89] + o GnuTLS: don't allow TLS 1.3 for versions that don't support it [77] + o gnutls: make setting only the MAX TLS allowed version work [83] o gskit: fix CURL_DISABLE_PROXY build [57] o gskit: fix undefined reference to 'conn' [58] o http2: call the handle-closed function correctly on closed stream [37] @@ -41,6 +48,8 @@ This release includes the following bugfixes: o http2: fix resource leaks in set_transfer_url() [55] o http2: move the stream error field to the per-transfer storage [36] o http: fix the check for 'Authorization' with Bearer [53] + o http: reset the header buffer when sending the request [61] + o INSTALL: add IBM i specific quirks [75] o krb5/name_to_level: replace checkprefix with curl_strequal [49] o krb5: don't use 'static' to store PBSZ size response [23] o krb5: remove the unused 'overhead' function [35] @@ -49,19 +58,24 @@ This release includes the following bugfixes: o lib: fix some misuse of curlx_convert_UTF8_to_tchar [64] o libcurl-security.3: be careful of setuid [66] o libcurl-security.3: don't try to filter IPv4 hosts based on the URL [71] + o libcurl.3: mention the URL API [76] o libssh2: fix Value stored to 'sshp' is never read [13] o libssh2: ignore timeout during disconnect [45] o libssh: fix "empty expression statement has no effect" warnings [7] + o libtest: remove lib530.c [88] o m4: add security frameworks on Mac when compiling rustls [31] o multi: don't close connection HTTP_1_1_REQUIRED o multi: fix slow write/upload performance on Windows [27] o multi: reduce Win32 API calls to improve performance [28] + o ngtcp2: fix the cb_acked_stream_data_offset proto [46] o NSS: add ciphers to map [30] o nss_set_blocking: avoid static for sock_opt [72] o ntlm: precaution against super huge type2 offsets [65] o openldap: protect SSL-specific code with proper #ifdef [12] + o openldap: replace ldap_ prefix on private functions [84] o openssl: fix build error with OpenSSL < 1.0.2 [4] o os400: additional support for options metadata [24] + o progress: when possible, calculate transfer speeds with microseconds [48] o README.md: delete Codacy UTM parameters [5] o Revert "Revert 'multi: implement wait using winsock events'" [26] o rustls: only return CURLE_AGAIN when TLS session is fully drained [2] @@ -70,13 +84,18 @@ This release includes the following bugfixes: o schannel: Support strong crypto option [44] o sectransp: allow cipher name to be specified [29] o sigpipe: ignore SIGPIPE when using wolfSSL as well [70] + o sockfilt: avoid getting stuck waiting for writable socket [80] + o sockfilt: fix invalid increment of handles index variable nfd [79] o sws: #ifdef S_IFSOCK use [32] o test server: take care of siginterrupt() deprecation [25] o tests/disable-scan.pl: also scan all m4 files [17] + o tests: ignore case of chunked hex numbers in tests [86] o tls: add USE_HTTP2 define [59] + o tool_getparam: handle failure of curlx_convert_tchar_to_UTF8() [78] o tool_getparam: replace (in-place) '%20' by '+' according to RFC1866 [14] o tool_operate: don't discard failed parallel transfer result [16] o tool_writeout: fix the HTTP_CODE json output [11] + o URL-SYNTAX: update IDNA section for WHATWG spec changes [74] o urlapi: "normalize" numerical IPv4 host names [6] o vauth: factor base64 conversions out of authentication procedures [22] o version: add gsasl_version to curl_version_info_data [43] @@ -91,18 +110,20 @@ This release includes the following known bugs: This release would not have looked like this without help, code, reports and advice from friends like these: - Ayushman Singh Chauhan, Benjamin Riefenstahl, Blake Burkhart, Dan Fandrich, - Daniel Stenberg, ebejan on github, Emil Engler, Georeth Zhou, Gergely Nagy, - Harry Sintonen, Illarion Taev, Jacob Hoffman-Andrews, Jakub Zakrzewski, - Javier Blazquez, Jeroen Ooms, Johann150 on github, Jon Rumsey, Kamil Dudka, - Kevin Burke, Kevin R. Bulgrien, Lucas Servén Marín, MAntoniak on github, - Marcel Raad, Marc Hörsken, Martin Halle, Max Dymond, Michael Kolechkin, - Michał Antoniak, Michal Rus, Morten Minde Neergaard, Patrick Monnerat, - Pontus Lundkvist, Ralph Langendam, Ray Satiro, rcombs on github, - Rich FitzJohn, sergio-nsk on github, Stefan Karpinski, Timo Lange, - tmkk on github, Tobias Gabriel, Tommy Odom, Tuomas Siipola, Victor Vieux, - Viktor Szakats, Wes Hinsley, Yusuke Nakamura, - (47 contributors) + 3eka on github, Ayushman Singh Chauhan, Benjamin Riefenstahl, Blake Burkhart, + Calvin Buckley, Dan Fandrich, Daniel Carpenter, Daniel Stenberg, David Cook, + Dmitry Karpov, Dmitry Kostjuchenko, ebejan on github, Emil Engler, + Georeth Zhou, Gergely Nagy, Gilles Vollant, Harry Sintonen, Illarion Taev, + Jacob Hoffman-Andrews, Jakub Zakrzewski, Javier Blazquez, J. Bromley, + Jeroen Ooms, Johann150 on github, Jon Rumsey, Kamil Dudka, Kevin Burke, + Kevin R. Bulgrien, Lucas Servén Marín, MAntoniak on github, Marcel Raad, + Marc Hörsken, Martin Halle, Max Dymond, Michael Kolechkin, Michał Antoniak, + Michal Rus, Morten Minde Neergaard, Patrick Monnerat, Pontus Lundkvist, + Ralph Langendam, Ray Satiro, rcombs on github, Rich FitzJohn, + sergio-nsk on github, Stefan Karpinski, Timo Lange, Timothy Gu, + tmkk on github, Tobias Gabriel, Tommy Odom, Travis Burtrum on github, + Tuomas Siipola, Victor Vieux, Viktor Szakats, Wes Hinsley, Yusuke Nakamura, + (57 contributors) References to bug reports and discussions on issues: @@ -151,7 +172,9 @@ References to bug reports and discussions on issues: [43] = https://curl.se/bug/?i=6843 [44] = https://curl.se/bug/?i=6734 [45] = https://curl.se/bug/?i=6990 + [46] = https://curl.se/mail/lib-2021-05/0019.html [47] = https://curl.se/bug/?i=6721 + [48] = https://curl.se/bug/?i=7017 [49] = https://curl.se/bug/?i=6993 [50] = https://curl.se/bug/?i=6993 [51] = https://curl.se/bug/?i=6993 @@ -164,6 +187,7 @@ References to bug reports and discussions on issues: [58] = https://curl.se/bug/?i=6980 [59] = https://curl.se/bug/?i=6959 [60] = https://curl.se/bug/?i=6954 + [61] = https://curl.se/bug/?i=7018 [62] = https://curl.se/bug/?i=6979 [63] = https://curl.se/bug/?i=6977 [64] = https://github.com/curl/curl/pull/6602#issuecomment-825236763 @@ -175,3 +199,19 @@ References to bug reports and discussions on issues: [70] = https://curl.se/bug/?i=6966 [71] = https://curl.se/bug/?i=6942 [72] = https://curl.se/bug/?i=6945 + [73] = https://curl.se/bug/?i=7010 + [74] = https://curl.se/bug/?i=7026 + [75] = https://curl.se/bug/?i=6830 + [76] = https://curl.se/bug/?i=7009 + [77] = https://curl.se/bug/?i=7014 + [78] = https://curl.se/bug/?i=7023 + [79] = https://curl.se/bug/?i=6992 + [80] = https://curl.se/bug/?i=6992 + [82] = https://curl.se/bug/?i=7006 + [83] = https://curl.se/bug/?i=6998 + [84] = https://curl.se/bug/?i=7004 + [85] = https://curl.se/bug/?i=6662 + [86] = https://curl.se/bug/?i=6987 + [87] = https://curl.se/bug/?i=6997 + [88] = https://curl.se/bug/?i=6999 + [89] = https://curl.se/bug/?i=7001