From bfbde883af33397943df68a3ae01847a634d33bf Mon Sep 17 00:00:00 2001
From: Daniel Stenberg <daniel@haxx.se>
Date: Mon, 19 Jul 2021 09:18:45 +0200
Subject: [PATCH] RELEASE-NOTES: synced

curl 7.78.0 release
---
 RELEASE-NOTES | 36 +++++++++++++++++++++++++++++-------
 docs/THANKS   | 49 +++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 78 insertions(+), 7 deletions(-)

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 83bbbee09..1dc81810f 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -4,7 +4,7 @@ curl and libcurl 7.78.0
  Command line options:         242
  curl_easy_setopt() options:   290
  Public functions in libcurl:  85
- Contributors:                 2454
+ Contributors:                 2459
 
 This release includes the following changes:
 
@@ -34,11 +34,13 @@ This release includes the following bugfixes:
  o c-hyper: support CURLINFO_STARTTRANSFER_TIME [29]
  o c-hyper: support CURLOPT_HEADER [32]
  o ccsidcurl: fix the compile errors [27]
+ o CI/cirrus: install impacket from PyPI instead of FreeBSD packages [166]
  o CI: add bearssl build [1]
  o CI: add Circle CI [92]
  o CI: add jobs using Zuul [86]
  o CI: delete --enable-hsts option (it is the default now) [2]
  o CI: remove travis details [144]
+ o cleanup: spell DoH with a lowercase o [172]
  o cmake: add CURL_DISABLE_NTLM option [44]
  o cmake: avoid leaking absolute paths into exported config [3]
  o cmake: fix IoctlSocket FIONBIO check [156]
@@ -73,9 +75,11 @@ This release includes the following bugfixes:
  o docs: fix inconsistencies in EGDSOCKET documentation [159]
  o docs: fix incorrect argument name reference [161]
  o docs: Fix typos [146]
+ o docs: make docs for --etag-save match the program behaviour [169]
  o docs: use --max-redirs instead of --max-redir [28]
  o doh: (void)-prefix call to curl_easy_setopt
  o doh: fix wrong DEBUGASSERT for doh private_data [62]
+ o easy: during upkeep, attach Curl_easy to connections in the cache [171]
  o examples/multi-single: fix scan-build warning [150]
  o examples: length-limit two sscanf() uses of %s [96]
  o examples: safer and more proper read callback logic [127]
@@ -104,12 +108,14 @@ This release includes the following bugfixes:
  o idn: fix libidn2 with windows unicode builds [117]
  o infof: remove newline from format strings, always append it [149]
  o lib: don't compare fd to FD_SETSIZE when using poll [61]
+ o lib: fix compiler warnings with CURL_DISABLE_NETRC [168]
  o lib: fix type of len passed to *printf's %*s [133]
  o lib: more %u for port and int for %*s fixes [132]
  o lib: use %u instead of %ld for port number printf [134]
  o libcurl-security.3: mention file descriptors and forks [108]
  o libssh2: limit time a disconnect can take to 1 second [111]
  o mbedtls: make mbedtls_strerror always work [6]
+ o mbedtls: Remove unnecessary include [175]
  o mqtt: detect illegal and too large file size [43]
  o mqtt: extend the error message for no topic [136]
  o msnprintf: return number of printed characters excluding null byte [148]
@@ -134,11 +140,13 @@ This release includes the following bugfixes:
  o rustls: remove native_roots fallback [65]
  o schannel: set ALPN length correctly for HTTP/2 [24]
  o SChannel: Use '_tcsncmp()' instead [164]
+ o sectransp: check for client certs by name first, then file [167]
  o setopt: fix incorrect comments [10]
  o socketpair: fix potential hangs [37]
  o socks4: scan for the IPv4 address in resolve results [124]
  o ssl: read pending close notify alert before closing the connection [9]
  o sws: malloc request struct instead of using stack [60]
+ o telnet: fix option parser to not send uninitialized contents [170]
  o test1116: hyper doesn't pass through "surprise-trailers" [123]
  o test1147: hyper doesn't allow "crazy" request headers like built-in [114]
  o test1151: added missing CRLF to work with hyper [120]
@@ -175,11 +183,13 @@ This release includes the following bugfixes:
  o url: bad CURLOPT_CONNECT_TO syntax now returns error [31]
  o version: turn version number functions into returning void [135]
  o vtls: exit addsessionid if no cache is inited [7]
+ o vtls: fix connection reuse checks for issuer cert and case sensitivity [165]
  o vtls: only store TIMER_APPCONNECT for non-proxy connect [93]
  o vtls: use free() not curl_free() [140]
  o warnless: simplify type size handling [30]
  o Win32: fix build with Watt-32
  o winbuild/README: VC should be set to 6 'or larger' [64]
+ o winbuild: support alternate nghttp2 static lib name [174]
  o wolfssl: failing to set a session id is not reason to error out [151]
  o write-out.d: clarify urlnum is not unique for de-globbed URLs [145]
  o zuul: use the new rustls directory name [141]
@@ -199,16 +209,18 @@ advice from friends like these:
   Fawad Mirza, Francisco Munoz, Gabriel Simmer, Gealber Morales, Gergely Nagy,
   Gerrit Renker, Gisle Vanem, Gregor Jasny, Gregory Muchka, Harry Sintonen,
   Hugh Macdonald, Jacob Hoffman-Andrews, Jishan Shaikh, Joel Depooter,
-  Jonathan Wernberg, Jon Rumsey, Jun-ya Kato, Kevin Burke, Laurent Dufresne,
-  Li Xinwei, Marcel Raad, Marc Hörsken, Mark Swaanenburg, Martin Howarth,
+  Jonathan Wernberg, Jon Rumsey, Josh Soref, Josie Huddleston, Jun-ya Kato,
+  Kevin Burke, Laurent Dufresne, Li Xinwei, MAntoniak on github, Marcel Raad,
+  Marc Hörsken, Mark Swaanenburg, Martin Howarth, Max Zettlmeißl,
   Michael Forney, Michael Kaufmann, Mohammed Naser, nian6324 on github,
-  Nikos Mavrogiannopoulos, Paul Groke, Peter Körner, Phil E. Taylor, Randolf J,
-  Ray Satiro, Red Hat Product Security, Richard Marion, Richard Whitehouse,
-  Sergey Markelov, Shikha Sharma, shithappens2016 on github, sylgal on github,
+  Nikos Mavrogiannopoulos, Paul Groke, Peter Körner, Phil E. Taylor,
+  Pierre Yager, Randolf J, Ray Satiro, Red Hat Product Security,
+  Richard Marion, Richard Whitehouse, Sergey Markelov, Shikha Sharma,
+  shithappens2016 on github, sylgal on github, Timur Artikov, Tobias Nyholm,
   Tommy Chiang, User Sg, Vadim Grinshpun, Valentín Gutiérrez, Viktor Szakats,
   William Desportes, Wyatt OʼDay, Xiang Xiao, Yongkang Huang, Younes El-karama,
   Zhang Xiuhua, Борис Верховский, Коваленко Анатолий Викторович,
-  (76 contributors)
+  (83 contributors)
 
 References to bug reports and discussions on issues:
 
@@ -375,3 +387,13 @@ References to bug reports and discussions on issues:
  [162] = https://curl.se/bug/?i=7378
  [163] = https://curl.se/bug/?i=7397
  [164] = https://curl.se/bug/?i=7398
+ [165] = https://curl.se/docs/CVE-2021-22924.html
+ [166] = https://curl.se/bug/?i=7418
+ [167] = https://curl.se/docs/CVE-2021-22926.html
+ [168] = https://curl.se/bug/?i=7423
+ [169] = https://curl.se/bug/?i=7429
+ [170] = https://curl.se/docs/CVE-2021-22925.html
+ [171] = https://curl.se/bug/?i=7386
+ [172] = https://curl.se/bug/?i=7413
+ [174] = https://curl.se/bug/?i=7446
+ [175] = https://curl.se/bug/?i=7419
diff --git a/docs/THANKS b/docs/THANKS
index 2844ef156..f003461c4 100644
--- a/docs/THANKS
+++ b/docs/THANKS
@@ -45,10 +45,12 @@ Alan Jenkins
 Alan Pinstein
 Albert Chin-A-Young
 Albert Choy
+Albin Vass
 Alejandro Alvarez Ayllon
 Alejandro Colomar
 Alejandro R. Sedeño
 Aleksandar Milivojevic
+Aleksander Mazur
 Aleksey Tulinov
 Ales Mlakar
 Ales Novak
@@ -97,6 +99,7 @@ Alexey Simak
 Alexey Zakhlestin
 Alexis Carvalho
 Alexis La Goutte
+Alexis Vachette
 Alfonso Martone
 Alfred Gebert
 Allen Pulsifer
@@ -118,6 +121,7 @@ Anderson Toshiyuki Sasaki
 Andi Jahja
 Andre Guibert de Bruet
 Andre Heinecke
+Andrea Pappacoda
 Andreas Damm
 Andreas Falkenhahn
 Andreas Farber
@@ -138,6 +142,7 @@ Andrei Cipu
 Andrei Karas
 Andrei Kurushin
 Andrei Neculau
+Andrei Rybak
 Andrei Sedoi
 Andrei Valeriu BICA
 Andrei Virtosu
@@ -216,6 +221,7 @@ Axel Tillequin
 Ayoub Boudhar
 Ayushman Singh Chauhan
 b9a1 on github
+Bachue Zhou
 Balaji Parasuram
 Balaji S Rao
 Balaji Salunke
@@ -227,6 +233,7 @@ Bart Whiteley
 Baruch Siach
 Bas Mevissen
 Bas van Schaik
+Bastian Krause
 Bastien Bouclet
 Basuke Suzuki
 baumanj on github
@@ -269,6 +276,8 @@ Bill Middlecamp
 Bill Nagel
 Bill Pyne
 Billyzou0741326 on github
+Bin Lan
+Bin Meng
 Bjarni Ingi Gislason
 Bjoern Franke
 Bjoern Sikora
@@ -396,6 +405,7 @@ Christopher Reid
 Christopher Stone
 Chungtsun Li
 Ciprian Badescu
+civodul on github
 Claes Jakobsson
 Clarence Gardner
 Claudio Neves
@@ -546,6 +556,7 @@ David Wright
 David Yan
 davidedec on github
 dbrowndan on github
+dEajL3kA on github
 Dengminwen
 Denis Baručić
 Denis Chaplygin
@@ -633,6 +644,7 @@ Dániel Bakai
 Early Ehlinger
 Earnestly on github
 Eason-Yu on github
+Ebe Janchivdorj
 ebejan on github
 Ebenezer Ikonne
 Ed Morley
@@ -717,6 +729,7 @@ Fabrice Fontaine
 Fabrizio Ammollo
 Fahim Chandurwala
 Faizur Rahman
+Fawad Mirza
 fds242 on github
 Federico Bianchi
 Fedor Karpelevitch
@@ -739,6 +752,7 @@ Florian Weimer
 Florin Petriuc
 Forrest Cahoon
 Francisco Moraes
+Francisco Munoz
 Francisco Sedano
 Francois Petitjean
 Francois Rivard
@@ -764,6 +778,7 @@ Fredrik Thulin
 FuccDucc on github
 fullincome on github
 Gabriel Kuri
+Gabriel Simmer
 Gabriel Sjoberg
 Ganesh Kamath
 Garrett Holmstrom
@@ -775,6 +790,7 @@ Gavin Wong
 Gavrie Philipson
 Gaz Iqbal
 Gaël Portay
+Gealber Morales
 Geeknik Labs
 Geoff Beier
 Georeth Zhou
@@ -787,6 +803,7 @@ Gerd v. Egidy
 Gergely Nagy
 Gerhard Herre
 Gerrit Bruchhäuser
+Gerrit Renker
 Ghennadi Procopciuc
 Giancarlo Formicuccia
 Giaslas Georgios
@@ -819,6 +836,7 @@ Greg Rowe
 Greg Zavertnik
 Gregor Jasny
 Gregory Jefferis
+Gregory Muchka
 Gregory Nicholls
 Gregory Szorc
 Griffin Downs
@@ -882,6 +900,7 @@ Howard Chu
 hsiao yi
 htasta on github
 Hubert Kario
+Hugh Macdonald
 Hugo van Kemenade
 Huzaifa Sidhpurwala
 huzunhao on github
@@ -1048,6 +1067,7 @@ Jimmy Gaussen
 Jiri Dvorak
 Jiri Hruska
 Jiri Jaburek
+Jishan Shaikh
 Jiří Malák
 jmdavitt on github
 jnbr on github
@@ -1129,6 +1149,7 @@ Jonathan Hseu
 Jonathan Moerman
 Jonathan Nieder
 Jonathan Watt
+Jonathan Wernberg
 Jongki Suwandi
 Joombalaya on github
 Joonas Kuorilehto
@@ -1139,6 +1160,7 @@ Josef Wolf
 Joseph Chen
 Josh Bialkowski
 Josh Kapell
+Josh Soref
 joshhe on github
 Joshua Kwan
 Joshua Swink
@@ -1280,6 +1302,7 @@ Lars Johannesen
 Lars Nilsson
 Lars Torben Wilson
 Laurent Bonnans
+Laurent Dufresne
 Laurent Rabret
 Lauri Kasanen
 Laurie Clark-Michalek
@@ -1402,6 +1425,7 @@ Mark Lentczner
 Mark Nottingham
 Mark Salisbury
 Mark Snelling
+Mark Swaanenburg
 Mark Tully
 Mark W. Eichin
 Mark Wotton
@@ -1427,6 +1451,7 @@ Martin Gartner
 Martin Hager
 Martin Halle
 Martin Hedenfalk
+Martin Howarth
 Martin Jansen
 Martin Kammerhofer
 Martin Kepplinger
@@ -1479,6 +1504,7 @@ Max Kellermann
 Max Khon
 Max Peal
 Max Savenkov
+Max Zettlmeißl
 Maxim Ivanov
 Maxim Perenesenko
 Maxim Prohorov
@@ -1577,6 +1603,7 @@ Mohamed Lrhazi
 Mohamed Osama
 Mohammad AlSaleh
 Mohammad Hasbini
+Mohammed Naser
 Mohun Biswas
 momala454 on github
 moohoorama on github
@@ -1614,6 +1641,7 @@ Neil Spring
 nevv on HackerOne/curl
 Niall O'Reilly
 niallor on github
+nian6324 on github
 nianxuejie on github
 Nic Roets
 Nicholas Maniscalco
@@ -1785,6 +1813,7 @@ Petr Pisar
 Petr Voytsik
 Phil Blundell
 Phil Crump
+Phil E. Taylor
 Phil Karn
 Phil Lisiecki
 Phil Pellouchoud
@@ -1802,6 +1831,7 @@ Pierre
 Pierre Brico
 Pierre Chapuis
 Pierre Joye
+Pierre Yager
 Pierre Ynard
 Pierre-Yves Bigourdan
 Piotr Dobrogost
@@ -1846,6 +1876,7 @@ Ram Krushna Mishra
 ramsay-jones on github
 Ran Mozes
 Randall S. Becker
+Randolf J
 Randy Armstrong
 Randy McMurchy
 Raphael Gozzo
@@ -1856,6 +1887,7 @@ Ray Pekowski
 Ray Satiro
 Razvan Cojocaru
 rcombs on github
+Red Hat Product Security
 Reed Loden
 Reinhard Max
 Reinout van Schouwen
@@ -1893,11 +1925,13 @@ Richard Gorton
 Richard Gray
 Richard Hosking
 Richard Hsu
+Richard Marion
 Richard Michael
 Richard Moore
 Richard Prescott
 Richard Silverman
 Richard van den Berg
+Richard Whitehouse
 Richy Kim
 Rici Lake
 Rick Deist
@@ -2052,8 +2086,10 @@ Shard
 Shaun Jackman
 Shawn Landden
 Shawn Poulson
+Shikha Sharma
 Shine Fan
 Shiraz Kanga
+shithappens2016 on github
 Shlomi Fish
 Shmulik Regev
 Siddhartha Prakash Jain
@@ -2146,6 +2182,7 @@ Sven Neuhaus
 Sven Wegener
 Svyatoslav Mishyn
 swalkaus at yahoo.com
+sylgal on github
 Sylvestre Ledru
 Symeon Paraschoudis
 Sébastien Willemijns
@@ -2211,6 +2248,7 @@ Timotej Lazar
 Timothe Litt
 Timothy Gu
 Timothy Polich
+Timur Artikov
 Tinus van den Berg
 TJ Saunders
 tmkk on github
@@ -2220,6 +2258,7 @@ Tobias Hieta
 Tobias Hintze
 Tobias Lindgren
 Tobias Markus
+Tobias Nyholm
 Tobias Rundström
 Tobias Stoeckmann
 Toby Peterson
@@ -2255,6 +2294,7 @@ Tomasz Kojm
 Tomasz Lacki
 Tommie Gannert
 tommink[at]post.pl
+Tommy Chiang
 Tommy Odom
 Tommy Petty
 Tommy Tam
@@ -2287,9 +2327,12 @@ Ulrich Doehner
 Ulrich Telle
 Ulrich Zadow
 UrsusArctos on github
+User Sg
 ustcqidi on github
+Vadim Grinshpun
 Valentin David
 Valentyn Korniienko
+Valentín Gutiérrez
 Valerii Zapodovnikov
 vanillajonathan on github
 Varnavas Papaioannou
@@ -2351,12 +2394,14 @@ Will Roberts
 Willem Sparreboom
 William A. Rowe Jr
 William Ahern
+William Desportes
 wmsch on github
 wncboy on github
 Wojciech Zwiefka
 Wouter Van Rooy
 Wu Yongzheng
 Wyatt O'Day
+Wyatt OʼDay
 Xavier Bouchoux
 XhmikosR on github
 XhstormR on github
@@ -2380,6 +2425,8 @@ Yiming Jing
 Yingwei Liu
 Ymir1711 on github
 Yonggang Luo
+Yongkang Huang
+Younes El-karama
 youngchopin on github
 Yousuke Kimoto
 Yu Xin
@@ -2396,6 +2443,7 @@ Zekun Ni
 zelinchen on github
 Zenju on github
 Zero King
+Zhang Xiuhua
 Zhao Yisha
 Zhaoyang Wu
 Zhibiao Wu
@@ -2409,6 +2457,7 @@ zzq1015 on github
 İsmail Dönmez
 Łukasz Domeradzki
 Štefan Kremeň
+Борис Верховский
 Коваленко Анатолий Викторович
 Никита Дорохин
 ウさん