/
_changes.html
13706 lines (13416 loc) · 945 KB
/
_changes.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
#include "_doctype.html"
<html lang="en">
<head> <title>curl - Changes</title>
#include "css.t"
<style>
.video:before {
content: "🎥 release video for";
padding: 5px 5px 5px 5px;
}
.video:after {
content: "▶";
padding: 5px 5px 5px 5px;
}
.video {
background-color: #e0e0e0;
float: right;
border: 1px solid black;
padding: 5px 5px 5px 5px;
}
</style>
</head>
#define CURL_CHANGES
#define CURL_URL changes.html
#include "_menu.html"
#include "setup.t"
WHERE3(Docs, "/docs/", Releases, "/docs/reldocs.html", Changelog)
<a name="changes"></a>
TITLE(Changelog)
<div class="relatedbox">
<b>Related:</b>
<br><a href="/snapshots/">Daily Snapshots</a>
<br><a href="/source.html">Source repo</a>
<br><a href="/docs/security.html">Security</a>
<br><a href="/docs/vulnerabilities.html">Vulnerabilities</a>
<br><a href="/docs/releases.html">Release log</a>
<br><a href="/dev/release-notes.html">Pending Release Notes</a>
</div>
#if 0
<a name="9_19_19"></a>
SUBTITLE(-- Fixed in 7.20.0 - February 9 2011)
<p> Changes:
<ul class="changes">
CHG change
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF fix
</ul>
#endif
#define CHG <li>
#define BGF <li>
#define RELEASEVIDEO(ver,vid)<div><a class="video" href=vid>ver</a></div>
<a name="8_7_1"></a>
SUBTITLE(Fixed in 8.7.1 - March 27 2024)
<p>
RELEASEVIDEO(8.7.1, "https://youtu.be/x6XbvwB_b6Q")
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.se/bug/?i=13195">Fixed empty tool_hugehelp.c file</a>
</ul>
<a name="8_7_0"></a>
SUBTITLE(Fixed in 8.7.0 - March 27 2024)
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.se/bug/?i=12832">configure: add --disable-docs flag</a>
CHG <a href="https://curl.se/bug/?i=12719">CURLINFO_USED_PROXY: return bool whether the proxy was used</a>
CHG <a href="https://curl.se/bug/?i=12897">digest: support SHA-512/256</a>
CHG <a href="https://curl.se/bug/?i=12411">DoH: add trace configuration</a>
CHG <a href="https://curl.se/bug/?i=12719">write-out: add '%{proxy_used}'</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.se/bug/?i=12852">ALTSVC.md: correct a typo</a>
BGF <a href="https://curl.se/bug/?i=13065">asyn-ares: fix data race warning</a>
BGF <a href="https://curl.se/bug/?i=12836">asyn-thread: use wakeup_close to close the read descriptor</a>
BGF <a href="https://curl.se/bug/?i=12888">badwords: use hostname, not host name</a>
BGF <a href="https://curl.se/bug/?i=12962">BINDINGS: add mcurl, the python binding</a>
BGF <a href="https://curl.se/bug/?i=13020">bufq: writing into a softlimit queue cannot be partial</a>
BGF <a href="https://curl.se/bug/?i=12880">c-hyper: add header collection writer in hyper builds</a>
BGF cd2nroff: gen: make `\>` in input to render as plain '>' in output
BGF cd2nroff: remove backticks from titles
BGF <a href="https://curl.se/bug/?i=12924">checksrc.pl: fix handling .checksrc with CRLF</a>
BGF <a href="https://curl.se/bug/?i=13034">cmake: add USE_OPENSSL_QUIC support</a>
BGF <a href="https://curl.se/bug/?i=12900">cmake: add warning for using TLS libraries without 1.3 support</a>
BGF <a href="https://curl.se/bug/?i=13028">cmake: enable `ENABLE_CURL_MANUAL` by default</a>
BGF <a href="https://curl.se/bug/?i=13061">cmake: fix `CURL_WINDOWS_SSPI=ON` with Schannel disabled</a>
BGF <a href="https://curl.se/bug/?i=12879">cmake: fix function description in comment</a>
BGF <a href="https://curl.se/bug/?i=12920">cmake: fix install for older CMake versions</a>
BGF <a href="https://curl.se/bug/?i=6169">cmake: fix libcurl.pc and curl-config library specifications</a>
BGF <a href="https://curl.se/bug/?i=12829">cmdline-docs/Makefile: avoid using a fixed temp file name</a>
BGF <a href="https://curl.se/bug/?i=12884">cmdline-docs: quote and angle bracket cleanup</a>
BGF <a href="https://curl.se/bug/?i=13015">cmdline-opts/_EXITCODES: sync with libcurl-errors</a>
BGF <a href="https://curl.se/bug/?i=13040">cmdline-opts/_VARIABLES.md: improve the description</a>
BGF <a href="https://curl.se/bug/?i=13008">cmdline-opts/_VERSION: provide %VERSION correctly</a>
BGF <a href="https://curl.se/bug/?i=13169">cmdline-opts: shorter help texts</a>
BGF <a href="https://curl.se/bug/?i=13179">configure: add pkg-config support to rustls detection</a>
BGF <a href="https://curl.se/bug/?i=12900">configure: add warning for using TLS libraries without 1.3 support</a>
BGF <a href="https://curl.se/bug/?i=12906">configure: build & install shell completions when enabled</a>
BGF <a href="https://curl.se/bug/?i=12833">configure: do not link with nghttp3 unless necessary</a>
BGF <a href="https://curl.se/bug/?i=13027">configure: Don't build shell completions when disabled</a>
BGF <a href="https://curl.se/bug/?i=13022">configure: Don't make shell completions without perl</a>
BGF <a href="https://curl.se/bug/?i=12947">configure: find libpsl with pkg-config</a>
BGF <a href="https://curl.se/bug/?i=12858">connect.c: fix typo</a>
BGF <a href="https://curl.se/bug/?i=13046">CONTRIBUTE: update the section on documentation format</a>
BGF <a href="https://curl.se/bug/?i=12868">cookie.md: provide an example sending a fixed cookie</a>
BGF <a href="https://curl.se/bug/?i=13033">cookie: if psl fails, reject the cookie</a>
BGF <a href="https://curl.se/mail/archive-2024-02/0008.html">curl: exit on config file parser errors</a>
BGF <a href="https://curl.se/bug/?i=13127">curl: make --libcurl output better CURLOPT_*SSLVERSION</a>
BGF <a href="https://curl.se/bug/?i=12891">curl: when allocating variables, add the name into the struct</a>
BGF curl_setup.h: add curl_uint64_t internal type
BGF <a href="https://curl.se/bug/?i=12997">curldown: fix email address in Copyright</a>
BGF <a href="https://curl.se/bug/?i=13176">CURLMOPT_MAX*: mention what happens if changed mid-transfer</a>
BGF <a href="https://curl.se/bug/?i=13149">CURLOPT_INTERFACE.md: remove spurious amp, add see-also</a>
BGF <a href="https://curl.se/bug/?i=12926">CURLOPT_POSTQUOTE.md: fix typo</a>
BGF <a href="https://curl.se/bug/?i=12999">CURLOPT_SSL_CTX_FUNCTION.md: no promises of lifetime after return</a>
BGF <a href="https://curl.se/bug/?i=12889">CURLOPT_WRITEFUNCTION.md: typo fix</a>
BGF <a href="https://curl.se/bug/?i=13072">digest: add check for hashing error</a>
BGF <a href="https://curl.se/bug/?i=12914">dist: make sure the http tests are in the tarball</a>
BGF <a href="https://curl.se/bug/?i=13178">DISTROS: add document with distro pointers</a>
BGF <a href="https://curl.se/bug/?i=13168">docs/libcurl: add TLS backend info for all TLS options</a>
BGF <a href="https://curl.se/bug/?i=13175">docs/libcurl: generate PROTOCOLS from meta-data</a>
BGF <a href="https://curl.se/bug/?i=12854">docs: add missing slashes to SChannel client certificate documentation</a>
BGF <a href="https://curl.se/bug/?i=12859">docs: add necessary setup for nghttp3</a>
BGF <a href="https://curl.se/bug/?i=13047">docs: ascii version of manpage without nroff</a>
BGF <a href="https://curl.se/bug/?i=12921">docs: dist curl*.1 and install without perl</a>
BGF <a href="https://curl.se/bug/?i=12869">docs: make curldown do angle brackets like markdown</a>
BGF <a href="https://curl.se/bug/?i=13166">docs: make each libcurl man specify protocol(s)</a>
BGF <a href="https://curl.se/bug/?i=12892">docs: make sure curl.1 is included in dist tarballs</a>
BGF docs: update minimal binary size in INSTALL.md
BGF <a href="https://curl.se/bug/?i=13001">docs: use present tense</a>
BGF <a href="https://curl.se/bug/?i=13003">examples: use present tense in comments</a>
BGF <a href="https://curl.se/bug/?i=12750">file: use xfer buf for file:// transfers</a>
BGF <a href="https://curl.se/bug/?i=12998">fopen: fix narrowing conversion warning on 32-bit Android</a>
BGF <a href="https://curl.se/bug/?i=12822">form-string.md: correct the example</a>
BGF <a href="https://curl.se/bug/?i=12878">ftp: do lineend conversions in client writer</a>
BGF <a href="https://curl.se/bug/?i=12901">ftp: fix socket wait activity in ftp_domore_getsock</a>
BGF <a href="https://curl.se/bug/?i=12902">ftp: tracing improvements</a>
BGF <a href="https://curl.se/bug/?i=12823">ftp: treat a 226 arriving before data as a signal to read data</a>
BGF <a href="https://curl.se/bug/?i=13041">gen.pl: make the "manpageification" faster</a>
BGF <a href="https://curl.se/bug/?i=12977">gen: make `\>` in input to render as plain '>' in output</a>
BGF <a href="https://curl.se/bug/?i=13006">getparam: make --ftp-ssl work again</a>
BGF <a href="https://curl.se/bug/?i=13124">GHA/linux: add sysctl trick to work-around GitHub runner issue</a>
BGF <a href="https://curl.se/bug/?i=13074">GIT-INFO: convert to markdown</a>
BGF <a href="https://curl.se/bug/?i=13118">GOVERNANCE: document the core team</a>
BGF <a href="https://curl.se/bug/?i=12877">header.md: remove backslash, make nicer markdown</a>
BGF <a href="https://curl.se/bug/?i=12828">HTTP/2: write response directly</a>
BGF <a href="https://curl.se/bug/?i=13151">http2, http3: return CURLE_PARTIAL_FILE when bytes were received</a>
BGF <a href="https://curl.se/bug/?i=13055">http2: fix push discard</a>
BGF <a href="https://curl.se/bug/?i=13081">http2: memory errors in the push callbacks are fatal</a>
BGF <a href="https://curl.se/bug/?i=13082">http2: minor tweaks to optimize two struct sizes</a>
BGF <a href="https://curl.se/bug/?i=13054">http2: push headers better cleanup</a>
BGF <a href="https://curl.se/bug/?i=13154">http2: remove the third (unused) argument from http2_data_done()</a>
BGF <a href="https://curl.se/bug/?i=12896">HTTP3.md: adjust the OpenSSL QUIC install instructions</a>
BGF <a href="https://curl.se/bug/?i=13045">http: better error message for HTTP/1.x response without status line</a>
BGF <a href="https://curl.se/bug/?i=13143">http: improve response header handling, save cpu cycles</a>
BGF <a href="https://curl.se/bug/?i=12880">http: move headers collecting to writer</a>
BGF <a href="https://curl.se/bug/?i=13187">http: remove stale comment about rewindbeforesend</a>
BGF <a href="https://curl.se/bug/?i=13134">http: separate response parsing from response action</a>
BGF <a href="https://curl.se/bug/?i=12937">http_chunks: fix the accounting of consumed bytes</a>
BGF <a href="https://curl.se/bug/?i=12996">http_chunks: remove unused 'endptr' variable</a>
BGF <a href="https://curl.se/bug/?i=12838">https-proxy: use IP address and cert with ip in alt names</a>
BGF <a href="https://curl.se/bug/?i=13075">hyper: implement unpausing via client reader</a>
BGF <a href="https://curl.se/bug/?i=13112">ipv6.md: mention IPv4 mapped addresses</a>
BGF <a href="https://curl.se/bug/?i=12063">KNOWN_BUGS: POP3 issue when reading small chunks</a>
BGF <a href="https://curl.se/bug/?i=13085">lib1598: fix `CURLOPT_POSTFIELDSIZE` usage</a>
BGF <a href="https://curl.se/bug/?i=12890">lib582: remove code causing warning that is never run</a>
BGF <a href="https://curl.se/bug/?i=13035">lib: add `void *ctx` to reader/writer instances</a>
BGF <a href="https://curl.se/bug/?i=12846">lib: convert Curl_get_line to use dynbuf</a>
BGF <a href="https://curl.se/bug/?i=12964">lib: Curl_read/Curl_write clarifications</a>
BGF <a href="https://curl.se/bug/?i=13026">lib: enhance client reader resume + rewind</a>
BGF <a href="https://curl.se/bug/?i=12995">lib: initialize output pointers to NULL before calling strto[ff,l,ul]</a>
BGF <a href="https://curl.se/bug/?i=13084">lib: keep conn IP information together</a>
BGF <a href="https://curl.se/bug/?i=13096">lib: move 'done' parameter to SingleRequests</a>
BGF <a href="https://curl.se/bug/?i=12948">lib: remove curl_mimepart object when CURL_DISABLE_MIME</a>
BGF libcurl-docs: cleanups
BGF <a href="https://curl.se/bug/?i=12867">libcurl-security.md: Active FTP passes on the local IP address</a>
BGF <a href="https://curl.se/bug/?i=12983">libssh/libssh2: return error on too big range</a>
BGF <a href="https://curl.se/bug/?i=12965">MANUAL.md: fix typo</a>
BGF <a href="https://curl.se/bug/?i=12904">mbedtls: fix building when MBEDTLS_X509_REMOVE_INFO flag is defined</a>
BGF <a href="https://curl.se/bug/?i=13132">mbedtls: fix pytest for newer versions</a>
BGF <a href="https://curl.se/bug/?i=11919">mbedtls: properly cleanup the thread-shared entropy</a>
BGF <a href="https://curl.se/bug/?i=12905">mbedtls: use mbedtls_ssl_conf_{min|max}_tls_version</a>
BGF <a href="https://curl.se/bug/?i=12849">md4: include strdup.h for the memdup proto</a>
BGF <a href="https://curl.se/bug/?i=13039">mime: add client reader</a>
BGF <a href="https://curl.se/bug/?i=13019">misc: fix typos in docs and lib</a>
BGF <a href="https://curl.se/bug/?i=13047">mkhelp: simplify the generated hugehelp program</a>
BGF <a href="https://curl.se/bug/?i=12944">mprintf: fix format prefix I32/I64 for windows compilers</a>
BGF <a href="https://curl.se/bug/?i=12805">multi: add xfer_buf to multi handle</a>
BGF <a href="https://curl.se/bug/?i=12971">multi: fix multi_sock handling of select_bits</a>
BGF <a href="https://curl.se/bug/?i=12992">multi: make add_handle free any multi_easy</a>
BGF <a href="https://curl.se/bug/?i=13073">ngtcp2: no recvbuf for stream</a>
BGF <a href="https://curl.se/bug/?i=12825">ntml_wb: fix buffer type typo</a>
BGF <a href="https://curl.se/bug/?i=12933">OpenSSL QUIC: adapt to v3.3.x</a>
BGF <a href="https://curl.se/bug/?i=12861">openssl-quic: check on Windows that socket conv to int is possible</a>
BGF <a href="https://curl.se/bug/?i=13043">openssl-quic: fix BIO leak and Windows warning</a>
BGF <a href="https://curl.se/bug/?i=13044">openssl-quic: fix unity build, casing, indentation</a>
BGF <a href="https://curl.se/bug/?i=12826">OS400: avoid using awk in the build scripts</a>
BGF <a href="https://curl.se/bug/?i=13063">paramhlp: fix CRLF-stripping files with "-d @file"</a>
BGF <a href="https://curl.se/bug/?i=12856">proxy1.0.md: fix example</a>
BGF <a href="https://curl.se/bug/?i=13037">pytest: adapt to API change</a>
BGF <a href="https://curl.se/bug/?i=13093">request: clarify message when request has been sent off</a>
BGF <a href="https://curl.se/bug/?i=12989">rustls: make curl compile with 0.12.0</a>
BGF <a href="https://curl.se/bug/?i=12894">schannel: fix hang on unexpected server close</a>
BGF scripts: fix cijobs.pl for Azure and GHA
BGF <a href="https://curl.se/mail/lib-2024-02/0000.html">sendf: ignore response body to HEAD</a>
BGF <a href="https://curl.se/bug/?i=12981">setopt: fix check for CURLOPT_PROXY_TLSAUTH_TYPE value</a>
BGF <a href="https://curl.se/bug/?i=13004">setopt: fix disabling all protocols</a>
BGF <a href="https://curl.se/bug/?i=13070">sha512_256: add support for GnuTLS and OpenSSL</a>
BGF <a href="https://curl.se/bug/?i=13048">smtp: fix STARTTLS</a>
BGF <a href="https://curl.se/bug/?i=13119">SPONSORS: describe the basics</a>
BGF <a href="https://curl.se/bug/?i=12990">strtoofft: fix the overflow check</a>
BGF <a href="https://curl.se/bug/?i=13128">test 1541: verify getinfo values on first header callback</a>
BGF <a href="https://curl.se/bug/?i=12903">test1165: improve pattern matching</a>
BGF tests: support setting/using blank content env variables
BGF <a href="https://curl.se/bug/?i=13052">TIMER_STARTTRANSFER: set the same for everyone</a>
BGF <a href="https://curl.se/bug/?i=10290">TLS: start shutdown only when peer did not already close</a>
BGF <a href="https://curl.se/bug/?i=13173">TODO: update 13.11 with more information</a>
BGF <a href="https://curl.se/bug/?i=12866">tool_cb_hdr: only parse etag + content-disposition for 2xx</a>
BGF <a href="https://curl.se/bug/?i=13144">tool_getparam: accept a blank -w ""</a>
BGF <a href="https://curl.se/bug/?i=13101">tool_getparam: handle non-existing (out of range) short-options</a>
BGF <a href="https://curl.se/mail/archive-2024-01/0022.html">tool_operate: change precedence of server Retry-After time</a>
BGF <a href="https://curl.se/bug/?i=12834">tool_operate: do not set CURLOPT_QUICK_EXIT in debug builds</a>
BGF <a href="https://curl.se/bug/?i=13031">trace-config.md: remove the mutexed options list</a>
BGF <a href="https://curl.se/mail/lib-2024-03/0001.html">transfer.c: break receive loop in speed limited transfers</a>
BGF <a href="https://curl.se/bug/?i=12911">transfer: improve Windows SO_SNDBUF update limit</a>
BGF <a href="https://curl.se/bug/?i=12949">urldata: move authneg bit from conn to Curl_easy</a>
BGF <a href="https://curl.se/mail/archive-2024-02/0004.html">version: allow building with ancient libpsl</a>
BGF <a href="https://curl.se/bug/?i=13115">vquic-tls: fix the error code returned for bad CA file</a>
BGF <a href="https://curl.se/bug/?i=12831">vtls: fix tls proxy peer verification</a>
BGF <a href="https://curl.se/bug/?i=12885">vtls: revert "receive max buffer" + add test case</a>
BGF <a href="https://curl.se/bug/?i=13088">VULN-DISCLOSURE-POLICY.md: update detail about CVE requests</a>
BGF <a href="https://curl.se/bug/?i=12945">websocket: fix curl_ws_recv()</a>
BGF <a href="https://curl.se/bug/?i=13164">wolfSSL: do not call the stub function wolfSSL_BIO_set_init()</a>
BGF <a href="https://curl.se/bug/?i=12909">write-out.md: clarify error handling details</a>
</ul>
<a name="8_6_0"></a>
SUBTITLE(Fixed in 8.6.0 - January 31 2024)
<p>
RELEASEVIDEO(8.6.0, "https://youtu.be/x7exfUbjdxQ")
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.se/bug/?i=12269">add CURLE_TOO_LARGE</a>
CHG <a href="https://curl.se/bug/?i=12368">add CURLINFO_QUEUE_TIME_T</a>
CHG <a href="https://curl.se/bug/?i=12369">add CURLOPT_SERVER_RESPONSE_TIMEOUT_MS: add</a>
CHG <a href="https://curl.se/bug/?i=12481">asyn-thread: use GetAddrInfoExW on >= Windows 8</a>
CHG <a href="https://curl.se/bug/?i=12661">configure: make libpsl detection failure cause error</a>
CHG <a href="https://curl.se/bug/?i=12751">docs/cmdline: change to .md for cmdline docs</a>
CHG <a href="https://curl.se/bug/?i=12730">docs: introduce "curldown" for libcurl man page format</a>
CHG <a href="https://curl.se/bug/?i=12547">runtests: support -gl. Like -g but for lldb.</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.se/bug/?i=12570">altsvc: free 'as' when returning error</a>
BGF <a href="https://curl.se/bug/?i=12560">appveyor: replace PowerShell with bash + parallel autotools</a>
BGF <a href="https://curl.se/bug/?i=12550">appveyor: switch to out-of-tree builds</a>
BGF <a href="https://curl.se/bug/?i=12703">asyn-ares: with modern c-ares, use its default timeout</a>
BGF <a href="https://curl.se/bug/?i=12506">build: delete unused `HAVE_{GSSHEIMDAL,GSSMIT,HEIMDAL}`</a>
BGF <a href="https://curl.se/bug/?i=12812">build: delete/replace clang warning pragmas</a>
BGF <a href="https://curl.se/bug/?i=12489">build: enable missing OpenSSF-recommended warnings, with fixes</a>
BGF <a href="https://curl.se/bug/?i=12557">build: fix `-Wconversion`/`-Wsign-conversion` warnings</a>
BGF <a href="https://curl.se/bug/?i=12441">build: fix Windows ADDRESS_FAMILY detection</a>
BGF <a href="https://curl.se/bug/?i=12540">build: more `-Wformat` fixes</a>
BGF <a href="https://curl.se/bug/?i=12502">build: remove redundant `CURL_PULL_*` settings</a>
BGF <a href="https://curl.se/bug/?i=12697">cf-h1-proxy: no CURLOPT_USERAGENT in CONNECT with hyper</a>
BGF <a href="https://curl.se/bug/?i=12726">cf-socket: show errno in tcpkeepalive error messages</a>
BGF <a href="https://curl.se/bug/?i=12503">CI/distcheck: run full tests</a>
BGF cmake: add option to disable building docs
BGF <a href="https://curl.se/bug/?i=12515">cmake: fix generation for system name iOS</a>
BGF <a href="https://curl.se/bug/?i=12464">cmake: fix typo</a>
BGF <a href="https://curl.se/bug/?i=12772">cmake: freshen up docs/INSTALL.cmake</a>
BGF <a href="https://curl.se/bug/?i=12537">cmake: prefill/cache `HAVE_STRUCT_SOCKADDR_STORAGE`</a>
BGF <a href="https://curl.se/bug/?i=12773">cmake: rework options to enable curl and libcurl docs</a>
BGF <a href="https://curl.se/bug/?i=12742">cmake: when USE_MANUAL=YES, build the curl.1 man page</a>
BGF cmdline-opts/write-out.d: remove spurious double quotes
BGF <a href="https://curl.se/bug/?i=12613">cmdline-opts: update availability for the *-ca-native options</a>
BGF <a href="https://curl.se/mail/archive-2023-12/0014.html">cmdline/gen: fix the sorting of the man page options</a>
BGF <a href="https://curl.se/bug/?i=12724">configure: add libngtcp2_crypto_boringssl detection</a>
BGF <a href="https://curl.se/bug/?i=12607">configure: fix no default int compile error in ipv6 detection</a>
BGF <a href="https://curl.se/bug/?i=12683">configure: when enabling QUIC, check that TLS supports QUIC</a>
BGF <a href="https://curl.se/bug/?i=12647">connect: remove margin from eyeballer alloc</a>
BGF <a href="https://curl.se/bug/?i=12618">content_encoding: change return code to typedef'ed enum</a>
BGF <a href="https://curl.se/bug/?i=12643">cookie.d: document use of empty string to enable cookie engine</a>
BGF <a href="https://curl.se/bug/?i=12514">cookie: avoid fopen with empty file name</a>
BGF <a href="https://curl.se/bug/?i=12695">curl.h: CURLOPT_DNS_SERVERS is only available with c-ares</a>
BGF <a href="https://curl.se/mail/archive-2023-12/0026.html">curl: show ipfs and ipns as supported "protocols"</a>
BGF <a href="https://curl.se/bug/?i=12727">curl_easy_getinfo.3: remove the wrong time value count</a>
BGF <a href="https://curl.se/bug/?i=12691">curl_multi_fdset.3: remove mention of null pointer support</a>
BGF <a href="https://curl.se/bug/?i=12605">CURLINFO_REFERER.3: clarify that it is the *request* header</a>
BGF CURLOPT_AUTOREFERER.3: mention CURLINFO_REFERER
BGF <a href="https://curl.se/bug/?i=12588">CURLOPT_POSTFIELDS.3: fix incorrect C string escape in example</a>
BGF <a href="https://curl.se/bug/?i=12554">CURLOPT_SSH_*_KEYFILE: clarify</a>
BGF <a href="https://curl.se/bug/?i=12462">dist: add tests/errorcodes.pl to the tarball</a>
BGF <a href="https://curl.se/bug/?i=12496">docs: clean up Protocols: for cmdline options</a>
BGF <a href="https://curl.se/bug/?i=12687">docs: describe and highlight super cookies</a>
BGF <a href="https://curl.se/bug/?i=12802">docs: do not start lines/sentences with So, But nor And</a>
BGF <a href="https://curl.se/bug/?i=12759">docs: install curl.1 with cmake</a>
BGF <a href="https://curl.se/bug/?i=12711">docs: mention env vars not used by schannel</a>
BGF <a href="https://curl.se/bug/?i=12491">doh: remove unused local variable</a>
BGF <a href="https://curl.se/bug/?i=12671">examples: add four new examples</a>
BGF <a href="https://curl.se/bug/?i=12789">file+ftp: use stack buffers instead of data->state.buffer</a>
BGF <a href="https://curl.se/bug/?i=12456">ftp: handle the PORT parsing without allocation</a>
BGF <a href="https://curl.se/bug/?i=12638">ftp: use dynbuf to store entrypath</a>
BGF <a href="https://curl.se/bug/?i=12639">ftp: use memdup0 to store the OS from a SYST 215 response</a>
BGF ftpserver.pl: send 213 SIZE response without spurious newline
BGF <a href="https://curl.se/bug/?i=12667">gen.pl: support ## for doing .IP in table-like lists</a>
BGF <a href="https://curl.se/bug/?i=12689">gen: do italics/bold for a range of letters, not just single word</a>
BGF <a href="https://curl.se/bug/?i=12764">GHA: add a job scanning for "bad words" in markdown</a>
BGF <a href="https://curl.se/bug/?i=12778">GHA: bump ngtcp2, gnutls, mod_h2, quiche</a>
BGF <a href="https://curl.se/bug/?i=12505">gnutls: fix build with --disable-verbose</a>
BGF <a href="https://curl.se/bug/?i=12611">haproxy-clientip.d: document the arg</a>
BGF <a href="https://curl.se/mail/lib-2024-01/0019.html">headers: make sure the trailing newline is not stored</a>
BGF <a href="https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65839">headers: remove assert from Curl_headers_push</a>
BGF <a href="https://curl.se/bug/?i=12522">hostip: return error immediately when Curl_ip2addr() fails</a>
BGF <a href="https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65661">hsts: remove assert for zero length domain</a>
BGF <a href="https://curl.se/bug/?i=10936">http2: improved on_stream_close/data_done handling</a>
BGF <a href="https://curl.se/bug/?i=12629">http3/quiche: fix result code on a stream reset</a>
BGF <a href="https://curl.se/bug/?i=12734">http3: initial support for OpenSSL 3.2 QUIC stack</a>
BGF <a href="https://curl.se/bug/?i=12632">http: adjust_pollset fix</a>
BGF <a href="https://curl.se/bug/?i=12784">http: check for "Host:" case insensitively</a>
BGF <a href="https://curl.se/bug/?i=12534">http: fix off-by-one error in request method length check</a>
BGF <a href="https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66184">http: only act on 101 responses when they are HTTP/1.1</a>
BGF <a href="https://curl.se/bug/?i=12785">http: remove comment reference to a removed solution</a>
BGF <a href="https://curl.se/bug/?i=12791">http: use stack scratch buffer</a>
BGF <a href="https://curl.se/bug/?i=12680">http_proxy: a blank CURLOPT_USERAGENT should not be used in CONNECT</a>
BGF <a href="https://curl.se/bug/?i=12803">krb5: add prototype to silence clang warnings on mvsnprintf()</a>
BGF <a href="https://curl.se/bug/?i=12658">lib: add debug log outputs for CURLE_BAD_FUNCTION_ARGUMENT</a>
BGF <a href="https://curl.se/bug/?i=12807">lib: error out on multissl + http3</a>
BGF <a href="https://curl.se/bug/?i=12470">lib: fix variable undeclared error caused by `infof` changes</a>
BGF <a href="https://curl.se/bug/?i=12499">lib: reduce use of strncpy</a>
BGF <a href="https://curl.se/bug/?i=12490">lib: rename Curl_strndup to Curl_memdup0 to avoid misunderstanding</a>
BGF <a href="https://curl.se/bug/?i=12480">lib: replace readwrite with write_resp</a>
BGF <a href="https://curl.se/bug/?i=12453">lib: strndup/memdup instead of malloc, memcpy and null-terminate</a>
BGF <a href="https://curl.se/bug/?i=12754">libssh2: use `libssh2_session_callback_set2()` with v1.11.1</a>
BGF <a href="https://curl.se/bug/?i=12519">libssh: improve the deprecation warning dismissal</a>
BGF <a href="https://curl.se/bug/?i=12523">libssh: supress warnings without version check</a>
BGF <a href="https://curl.se/bug/?i=12564">Makefile.am: fix the MSVC project generation</a>
BGF <a href="https://curl.se/bug/?i=12224">Makefile.mk: drop Windows support</a>
BGF <a href="https://curl.se/bug/?i=12720">mbedtls: fix `-Wnull-dereference` and `-Wredundant-decls`</a>
BGF <a href="https://curl.se/bug/?i=12584">mbedtls: free the entropy when threaded</a>
BGF <a href="https://curl.se/bug/?i=12649">mime: use memdup0 instead of malloc + memcpy</a>
BGF mksymbolsmanpage.pl: provide references to where the symbol is used
BGF <a href="https://curl.se/bug/?i=12561">mprintf: overhaul and bugfixes</a>
BGF <a href="https://curl.se/bug/?i=12792">mqtt: use stack scratch buffer for recv+publish</a>
BGF <a href="https://curl.se/bug/?i=12682">multi: remove total timer reset in file_do() while fetching file://</a>
BGF <a href="https://curl.se/bug/?i=12576">ngtcp2: put h3 at the front of alpn</a>
BGF <a href="https://curl.se/bug/?i=12787">ntlm_wb: do not use data->state.buffer any longer</a>
BGF <a href="https://curl.se/bug/?i=12593">openldap: fix an LDAP crash</a>
BGF <a href="https://curl.se/bug/?i=12610">openldap: fix STARTTLS</a>
BGF <a href="https://curl.se/bug/?i=12525">openssl: re-match LibreSSL deinit with init</a>
BGF <a href="https://curl.se/bug/?i=12760">openssl: when verifystatus fails, remove session id from cache</a>
BGF <a href="https://curl.se/bug/?i=12815">OS400: sync ILE/RPG binding</a>
BGF <a href="https://curl.se/bug/?i=12757">pingpong: stop using the download buffer</a>
BGF <a href="https://curl.se/bug/?i=12650">pop3: replace calloc + memcpy with memdup0</a>
BGF <a href="https://curl.se/bug/?i=12765">pytest: scorecard tracking CPU and RSS</a>
BGF <a href="https://curl.se/bug/?i=12590">quiche: return CURLE_HTTP3 on send to invalid stream</a>
BGF <a href="https://curl.se/bug/?i=12504">readwrite_data: loop less</a>
BGF <a href="https://curl.se/bug/?i=12524">Revert "urldata: move async resolver state from easy handle to connectdata"</a>
BGF <a href="https://curl.se/bug/?i=12701">rtsp: deal with borked server responses</a>
BGF <a href="https://curl.se/bug/?i=12612">runtests: for mode="text" on <stdout>, fix newlines on both parts</a>
BGF <a href="https://curl.se/bug/?i=10259">sasl: make login option string override http auth</a>
BGF <a href="https://curl.se/bug/?i=12616">schannel: fix `-Warith-conversion` gcc 13 warning</a>
BGF <a href="https://curl.se/bug/?i=12679">sectransp: do verify_cert without memdup for blobs</a>
BGF <a href="https://curl.se/bug/?i=12474">sectransp_ make TLSCipherNameForNumber() available in non-verbose config</a>
BGF <a href="https://curl.se/bug/?i=12485">sendf: fix compiler warning with CURL_DISABLE_HEADERS_API</a>
BGF <a href="https://curl.se/bug/?i=12608">setopt: clear mimepost when formp is freed</a>
BGF <a href="https://curl.se/bug/?i=12651">setopt: use memdup0 when cloning COPYPOSTFIELDS</a>
BGF <a href="https://curl.se/bug/?i=12797">socks: fix generic output string to say SOCKS instead of SOCKS4</a>
BGF <a href="https://curl.se/bug/?i=12788">socks: use own buffer instead of data->state.buffer</a>
BGF <a href="https://curl.se/bug/?i=12544">ssh: fix namespace of two local macros</a>
BGF <a href="https://curl.se/bug/?i=12794">ssh: use stack scratch buffer for seeks</a>
BGF <a href="https://curl.se/bug/?i=12578">strerror: repair get_winsock_error()</a>
BGF <a href="https://curl.se/bug/?i=12501">system.h: sync mingw `CURL_TYPEOF_CURL_SOCKLEN_T` with other compilers</a>
BGF <a href="https://curl.se/bug/?i=12581">system_win32: fix a function pointer assignment warning</a>
BGF <a href="https://curl.se/bug/?i=12652">telnet: use dynbuf instad of malloc for escape buffer</a>
BGF <a href="https://curl.se/bug/?i=12793">telnet: use stack scratch buffer for do</a>
BGF <a href="https://curl.se/bug/?i=12510">tests/server: delete workaround for old-mingw</a>
BGF <a href="https://curl.se/bug/?i=12768">tests: avoid int/size_t conversion size/sign warnings</a>
BGF <a href="https://curl.se/bug/?i=12545">tests: respect $TMPDIR when creating unix domain sockets</a>
BGF <a href="https://curl.se/bug/?i=12620">tool: make parser reject blank arguments if not supported</a>
BGF <a href="https://curl.se/bug/?i=12614">tool: prepend output_dir in header callback</a>
BGF <a href="https://curl.se/bug/?i=12631">tool_getparam: bsearch cmdline options</a>
BGF <a href="https://curl.se/bug/?i=12565">tool_getparam: do not try to expand without an argument</a>
BGF <a href="https://curl.se/bug/?i=12645">tool_getparam: stop supporting `@filename` style for --cookie</a>
BGF <a href="https://curl.se/bug/?i=12612">tool_listhelp: regenerate after recent .d updates</a>
BGF <a href="https://curl.se/bug/?i=12710">tool_operate: make --remove-on-error only remove "real" files</a>
BGF <a href="https://curl.se/bug/?i=12709">tool_operate: stop setting the file comment on Amiga</a>
BGF <a href="https://curl.se/bug/?i=12640">transfer: adjust_pollset improvements</a>
BGF <a href="https://curl.se/bug/?i=12559">transfer: fix upload rate limiting, add test cases</a>
BGF <a href="https://curl.se/mail/lib-2024-01/0049.html">transfer: make the select_bits_paused condition check both directions</a>
BGF <a href="https://curl.se/bug/?i=12693">transfer: remove warning: Value stored to 'blen' is never read</a>
BGF <a href="https://curl.se/bug/?i=12704">url: don't set default CA paths for Secure Transport backend</a>
BGF <a href="https://curl.se/bug/?i=12466">url: for disabled protocols, mention if found in redirect</a>
BGF <a href="https://curl.se/bug/?i=12775">urlapi: remove assert</a>
BGF <a href="https://curl.se/bug/?i=12589">verify-examples.pl: fail verification on unescaped backslash</a>
BGF <a href="https://curl.se/bug/?i=12700">version: show only the libpsl version, not its dependencies</a>
BGF <a href="https://curl.se/bug/?i=12678">vquic: extract TLS setup into own source</a>
BGF <a href="https://curl.se/bug/?i=12599">vtls: fix missing multissl version info</a>
BGF <a href="https://curl.se/bug/?i=12801">vtls: receive max buffer</a>
BGF <a href="https://curl.se/bug/?i=12459">vtls: remove the Curl_cft_ssl_proxy object if CURL_DISABLE_PROXY</a>
BGF <a href="https://curl.se/bug/?i=12707">websockets: check for negative payload lengths</a>
BGF <a href="https://curl.se/bug/?i=12713">websockets: refactor decode chain</a>
BGF <a href="https://curl.se/bug/?i=12539">windows: delete redundant headers</a>
BGF <a href="https://curl.se/bug/?i=12495">windows: simplify detecting and using system headers</a>
BGF <a href="https://curl.se/bug/?i=12634">wolfssl: load certificate *chain* for PEM client certs</a>
BGF <a href="https://curl.se/bug/?i=12804">x509asn1: remove code for WANT_VERIFYHOST</a>
BGF <a href="https://curl.se/bug/?i=12808">x509asn1: switch from malloc to dynbuf</a>
</ul>
<a name="8_5_0"></a>
SUBTITLE(Fixed in 8.5.0 - December 6 2023)
<p>
RELEASEVIDEO(8.5.0, "https://youtu.be/fWiYbDpFeS4")
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.se/bug/?i=12137">gnutls: support CURLSSLOPT_NATIVE_CA</a>
CHG <a href="https://curl.se/bug/?i=12235">HTTP3: ngtcp2 builds are no longer experimental</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.se/bug/?i=12263">appveyor: make VS2008-built curl tool runnable</a>
BGF <a href="https://curl.se/bug/?i=12146">asyn-thread: use pipe instead of socketpair for IPC when available</a>
BGF <a href="https://curl.se/bug/?i=12312">autotools: accept linker flags via `CURL_LDFLAGS_{LIB,BIN}`</a>
BGF <a href="https://curl.se/bug/?i=12310">autotools: avoid passing `LDFLAGS` twice to libcurl</a>
BGF <a href="https://curl.se/bug/?i=12357">autotools: delete LCC compiler support bits</a>
BGF <a href="https://curl.se/bug/?i=12362">autotools: fix/improve gcc and Apple clang version detection</a>
BGF <a href="https://curl.se/bug/?i=12346">autotools: stop setting `-std=gnu89` with `--enable-warnings`</a>
BGF <a href="https://curl.se/bug/?i=12194">autotools: update references to deleted `crypt-auth` option</a>
BGF <a href="https://curl.se/bug/?i=12182">BINDINGS: add V binding</a>
BGF <a href="https://curl.se/bug/?i=12084">build: add `src/.checksrc` to source tarball</a>
BGF <a href="https://curl.se/bug/?i=12331">build: add more picky warnings and fix them</a>
BGF <a href="https://curl.se/bug/?i=12352">build: always revert `#pragma GCC diagnostic` after use</a>
BGF <a href="https://curl.se/bug/?i=12275">build: delete `HAVE_STDINT_H` and `HAVE_INTTYPES_H`</a>
BGF <a href="https://curl.se/bug/?i=12222">build: delete support bits for obsolete Windows compilers</a>
BGF <a href="https://curl.se/bug/?i=12125">build: fix 'threadsafe' feature detection for older gcc</a>
BGF <a href="https://curl.se/bug/?i=12440">build: fix builds that disable protocols but not digest auth</a>
BGF <a href="https://curl.se/bug/?i=12227">build: fix compiler warning with auths disabled</a>
BGF <a href="https://curl.se/bug/?i=12273">build: fix libssh2 + `CURL_DISABLE_DIGEST_AUTH` + `CURL_DISABLE_AWS`</a>
BGF <a href="https://curl.se/bug/?i=12324">build: picky warning updates</a>
BGF <a href="https://curl.se/bug/?i=12225">build: require Windows XP or newer</a>
BGF <a href="https://curl.se/bug/?i=12207">cfilter: provide call to tell connection to forget a socket</a>
BGF <a href="https://curl.se/bug/?i=12088">CI: add autotools, out-of-tree, debug build to distro check job</a>
BGF <a href="https://curl.se/bug/?i=12040">CI: ignore test 286 on Appveyor gcc 9 build</a>
BGF <a href="https://curl.se/bug/?i=12345">cmake: add `CURL_DISABLE_BINDLOCAL` option</a>
BGF <a href="https://curl.se/bug/?i=12353">cmake: add test for `DISABLE` options, add `CURL_DISABLE_HEADERS_API`</a>
BGF <a href="https://curl.se/bug/?i=12307">cmake: dedupe Windows system libs</a>
BGF <a href="https://curl.se/bug/?i=12093">cmake: fix `HAVE_H_ERRNO_ASSIGNABLE` detection</a>
BGF <a href="https://curl.se/bug/?i=12091">cmake: fix CURL_DISABLE_GETOPTIONS</a>
BGF <a href="https://curl.se/bug/?i=11913">cmake: fix multiple include of CURL package</a>
BGF <a href="https://curl.se/bug/?i=12160">cmake: fix OpenSSL quic detection in quiche builds</a>
BGF <a href="https://curl.se/bug/?i=12287">cmake: option to disable install & drop `curlu` target when unused</a>
BGF <a href="https://curl.se/bug/?i=12044">cmake: pre-fill rest of detection values for Windows</a>
BGF <a href="https://curl.se/bug/?i=11285">cmake: replace `check_library_exists_concat()`</a>
BGF <a href="https://curl.se/bug/?i=12202">cmake: speed up threads setup for Windows</a>
BGF <a href="https://curl.se/bug/?i=12200">cmake: speed up zstd detection</a>
BGF <a href="https://curl.se/bug/?i=12325">config-win32: set `HAVE_SNPRINTF` for mingw-w64</a>
BGF <a href="https://curl.se/bug/?i=12223">configure: better --disable-http</a>
BGF <a href="https://curl.se/bug/?i=12086">configure: check for the fseeko declaration too</a>
BGF <a href="https://curl.se/bug/?i=12367">conncache: use the closure handle when disconnecting surplus connections</a>
BGF <a href="https://curl.se/bug/?i=12289">content_encoding: make Curl_all_content_encodings allocless</a>
BGF <a href="https://curl.se/bug/?i=12387">cookie: lowercase the domain names before PSL checks</a>
BGF <a href="https://curl.se/bug/?i=12378">curl.h: delete Symbian OS references</a>
BGF <a href="https://curl.se/bug/?i=12107">curl.h: on FreeBSD include sys/param.h instead of osreldate.h</a>
BGF <a href="https://curl.se/bug/?i=12403">curl.rc: switch out the copyright symbol for plain ASCII</a>
BGF <a href="https://curl.se/bug/?i=12148">curl: improved IPFS and IPNS URL support</a>
BGF <a href="https://curl.se/bug/?i=12315">curl_easy_duphandle.3: clarify how HSTS and alt-svc are duped</a>
BGF <a href="https://curl.se/bug/?i=12410">Curl_http_body: cleanup properly when Curl_getformdata errors</a>
BGF <a href="https://curl.se/bug/?i=12221">curl_setup: disallow Windows IPv6 builds missing getaddrinfo</a>
BGF <a href="https://curl.se/bug/?i=12239">curl_sspi: support more revocation error names in error messages</a>
BGF <a href="https://curl.se/bug/?i=12431">CURLINFO_PRETRANSFER_TIME_T.3: fix time explanation</a>
BGF <a href="https://curl.se/bug/?i=12382">CURLMOPT_MAX_CONCURRENT_STREAMS: make sure the set value is within range</a>
BGF <a href="https://curl.se/bug/?i=12277">CURLOPT_CAINFO_BLOB.3: explain what CURL_BLOB_COPY does</a>
BGF <a href="https://curl.se/bug/?i=12201">CURLOPT_WRITEFUNCTION.3: clarify libcurl returns for CURL_WRITEFUNC_ERROR</a>
BGF CURPOST_POSTFIELDS.3: add CURLOPT_COPYPOSTFIELDS in SEE ALSO
BGF <a href="https://curl.se/bug/?i=12242">docs/example/keepalive.c: show TCP keep-alive options</a>
BGF <a href="https://curl.se/bug/?i=12230">docs/example/localport.c: show off CURLOPT_LOCALPORT</a>
BGF <a href="https://curl.se/bug/?i=12229">docs/examples/interface.c: show CURLOPT_INTERFACE use</a>
BGF <a href="https://curl.se/bug/?i=12126">docs/libcurl: fix three minor man page format mistakes</a>
BGF <a href="https://curl.se/bug/?i=12402">docs/libcurl: SYNSOPSIS cleanup</a>
BGF <a href="https://curl.se/bug/?i=12266">docs: add supported version for the json write-out</a>
BGF <a href="https://curl.se/bug/?i=12249">docs: clarify that curl passes on input unfiltered</a>
BGF <a href="https://curl.se/bug/?i=12170">docs: fix function typo in curl_easy_option_next.3</a>
BGF docs: KNOWN_BUGS cleanup
BGF <a href="https://curl.se/bug/?i=12199">docs: preserve the modification date when copying the prebuilt man page</a>
BGF <a href="https://curl.se/bug/?i=12267">docs: remove bold from some man page SYNOPSIS sections</a>
BGF <a href="https://curl.se/bug/?i=12092">docs: use SOURCE_DATE_EPOCH for generated manpages</a>
BGF <a href="https://curl.se/bug/?i=12365">doh: provide better return code for responses w/o addresses</a>
BGF <a href="https://curl.se/bug/?i=12214">doh: use PIPEWAIT when HTTP/2 is attempted</a>
BGF <a href="https://curl.se/bug/?i=12329">duphandle: also free 'outcurl->cookies' in error path</a>
BGF <a href="https://curl.se/bug/?i=12337">duphandle: make dupset() not return with pointers to old alloced data</a>
BGF <a href="https://curl.se/bug/?i=12317">duphandle: use strdup to clone *COPYPOSTFIELDS if size is not set</a>
BGF <a href="https://curl.se/bug/?i=12318">easy: in duphandle, init the cookies for the new handle</a>
BGF <a href="https://curl.se/bug/?i=12168">easy: remove duplicate wolfSSH init call</a>
BGF <a href="https://curl.se/bug/?i=12090">easy_lock: add a pthread_mutex_t fallback</a>
BGF <a href="https://curl.se/bug/?i=12299">fopen: create new file using old file's mode</a>
BGF <a href="https://curl.se/bug/?i=12388">fopen: create short(er) temporary file name</a>
BGF <a href="https://curl.se/bug/?i=12140">getenv: PlayStation doesn't have getenv()</a>
BGF <a href="https://curl.se/bug/?i=12157">GHA: move mod_h2 version in CI to v2.0.25</a>
BGF <a href="https://curl.se/bug/?i=12145">hostip: show the list of IPs when resolving is done</a>
BGF <a href="https://curl.se/bug/?i=12215">hostip: silence compiler warning `-Wparentheses-equality`</a>
BGF <a href="https://curl.se/bug/?i=12247">hsts: skip single-dot hostname</a>
BGF <a href="https://curl.se/bug/?i=12356">HTTP/2, HTTP/3: handle detach of onoing transfers</a>
BGF <a href="https://curl.se/bug/?i=12097">http2: header conversion tightening</a>
BGF <a href="https://curl.se/bug/?i=12179">http2: provide an error callback and failf the message</a>
BGF <a href="https://curl.se/bug/?i=12101">http2: safer invocation of populate_binsettings</a>
BGF <a href="https://curl.se/bug/?i=12311">http: allow longer HTTP/2 request method names</a>
BGF <a href="https://curl.se/bug/?i=12022">http: avoid Expect: 100-continue if Upgrade: is used</a>
BGF <a href="https://curl.se/bug/?i=10521">http: consider resume with CURLOPT_FAILONERRROR and 416 to be fine</a>
BGF <a href="https://curl.se/bug/?i=12338">http: fix `-Wunused-parameter` with no auth and no proxy</a>
BGF <a href="https://curl.se/bug/?i=12228">http: fix `-Wunused-variable` compiler warning</a>
BGF <a href="https://curl.se/bug/?i=12262">http: fix empty-body warning</a>
BGF <a href="https://curl.se/bug/?i=8107">http_aws_sigv4: canonicalise valueless query params</a>
BGF <a href="https://curl.se/bug/?i=12191">hyper: temporarily remove HTTP/2 support</a>
BGF INSTALL: update list of ports and CPU archs
BGF <a href="https://curl.se/bug/?i=12152">IPFS: fix IPFS_PATH and file parsing</a>
BGF <a href="https://curl.se/bug/?i=12350">keylog: disable if unused</a>
BGF <a href="https://curl.se/bug/?i=12251">lib: add and use Curl_strndup()</a>
BGF <a href="https://curl.se/bug/?i=12083">lib: apache style infof and trace macros/functions</a>
BGF <a href="https://curl.se/bug/?i=12082">lib: fix gcc warning in printf call</a>
BGF <a href="https://curl.se/bug/?i=12424">libcurl-errors.3: sync with current public headers</a>
BGF <a href="https://curl.se/bug/?i=12233">libcurl-thread.3: simplify the TLS section</a>
BGF <a href="https://curl.se/bug/?i=12288">Makefile.am: drop vc10, vc11 and vc12 projects from dist</a>
BGF Makefile.mk: fix `-rtmp` option for non-Windows
BGF <a href="https://curl.se/bug/?i=12374">mime: store "form escape" as a single bit</a>
BGF <a href="https://curl.se/bug/?i=12292">misc: fix -Walloc-size warnings</a>
BGF <a href="https://curl.se/bug/?i=12213">msh3: error when built with CURL_DISABLE_SOCKETPAIR set</a>
BGF <a href="https://curl.se/bug/?i=12430">multi: during ratelimit multi_getsock should return no sockets</a>
BGF <a href="https://curl.se/bug/?i=12142">multi: use pipe instead of socketpair to *wakeup()</a>
BGF <a href="https://curl.se/bug/?i=12435">ngtcp2: fix races in stream handling</a>
BGF <a href="https://curl.se/bug/?i=12149">ntlm_wb: use pipe instead of socketpair when possible</a>
BGF <a href="https://curl.se/bug/?i=12166">openldap: move the alloc of ldapconninfo to *connect()</a>
BGF <a href="https://curl.se/bug/?i=12166">openldap: set the callback argument in oldap_do</a>
BGF <a href="https://curl.se/bug/?i=12099">openssl: avoid BN_num_bits() NULL pointer derefs</a>
BGF <a href="https://curl.se/bug/?i=12384">openssl: fix building with v3 `no-deprecated` + add CI test</a>
BGF <a href="https://curl.se/bug/?i=12196">openssl: fix infof() to avoid compiler warning for %s with null</a>
BGF <a href="https://curl.se/bug/?i=12270">openssl: identify the "quictls" backend correctly</a>
BGF <a href="https://curl.se/bug/?i=12030">openssl: include SIG and KEM algorithms in verbose</a>
BGF <a href="https://curl.se/bug/?i=12155">openssl: make CURLSSLOPT_NATIVE_CA import Windows intermediate CAs</a>
BGF <a href="https://curl.se/bug/?i=12264">openssl: two multi pointer checks should probably rather be asserts</a>
BGF <a href="https://curl.se/bug/?i=12399">openssl: when a session-ID is reused, skip OCSP stapling</a>
BGF <a href="https://curl.se/bug/?i=12189">page-footer: clarify exit code 25</a>
BGF <a href="https://curl.se/bug/?i=12282">projects: add VC14.20 project files</a>
BGF <a href="https://curl.se/bug/?i=12248">pytest: use lower count in repeat tests</a>
BGF <a href="https://curl.se/bug/?i=12400">quic: make eyeballers connect retries stop at weird replies</a>
BGF <a href="https://curl.se/bug/?i=12064">quic: manage connection idle timeouts</a>
BGF <a href="https://curl.se/bug/?i=12180">quiche: use quiche_conn_peer_transport_params()</a>
BGF <a href="https://curl.se/bug/?i=12257">rand: fix build error with autotools + LibreSSL</a>
BGF <a href="https://curl.se/bug/?i=12294">resolve.d: drop a multi use-sentence</a>
BGF <a href="https://curl.se/bug/?i=12052">RTSP: improved RTP parser</a>
BGF <a href="https://curl.se/bug/?i=12326">sasl: fix `-Wunused-function` compiler warning</a>
BGF <a href="https://curl.se/bug/?i=12261">schannel: add CA cache support for files and memory blobs</a>
BGF <a href="https://curl.se/bug/?i=12374">setopt: check CURLOPT_TFTP_BLKSIZE range on set</a>
BGF <a href="https://curl.se/bug/?i=12206">setopt: remove outdated cookie comment</a>
BGF <a href="https://curl.se/bug/?i=12374">setopt: remove superfluous use of ternary expressions</a>
BGF <a href="https://curl.se/bug/?i=12139">socks: better buffer size checks for socks4a user and hostname</a>
BGF <a href="https://curl.se/bug/?i=11949">socks: make SOCKS5 use the CURLOPT_IPRESOLVE choice</a>
BGF symbols-in-versions: the CLOSEPOLICY options are deprecated
BGF test1683: remove commented-out check alternatives
BGF test3103: add missing quotes around a test tag attribute
BGF test613: stop showing an error on missing output file
BGF <a href="https://curl.se/bug/?i=12195">tests/README: SOCKS tests are not using OpenSSH, it has its own server</a>
BGF <a href="https://curl.se/bug/?i=12117">tests/server: add more SOCKS5 handshake error checking</a>
BGF <a href="https://curl.se/bug/?i=12115">tests: Fix Windows test helper tool search & use it for handle64</a>
BGF <a href="https://curl.se/bug/?i=12351">tidy-up: casing typos, delete unused Windows version aliases</a>
BGF <a href="https://curl.se/bug/?i=12089">tool: fix --capath when proxy support is disabled</a>
BGF <a href="https://curl.se/bug/?i=12321">tool: support bold headers in Windows</a>
BGF <a href="https://curl.se/bug/?i=12320">tool_cb_hdr: add an additional parsing check</a>
BGF <a href="https://curl.se/bug/?i=12407">tool_cb_prg: make the carriage return fit for wide progress bars</a>
BGF <a href="https://curl.se/bug/?i=12131">tool_cb_wrt: fix write output for very old Windows versions</a>
BGF <a href="https://curl.se/bug/?i=12116">tool_getparam: limit --rate to be smaller than number of ms</a>
BGF <a href="https://curl.se/bug/?i=12280">tool_operate: do not mix memory models</a>
BGF <a href="https://curl.se/bug/?i=12133">tool_operate: fix links in ipfs errors</a>
BGF <a href="https://curl.se/bug/?i=12409">tool_parsecfg: make warning output propose double-quoting</a>
BGF <a href="https://curl.se/bug/?i=12124">tool_urlglob: fix build for old gcc versions</a>
BGF <a href="https://curl.se/bug/?i=12102">tool_urlglob: make multiply() bail out on negative values</a>
BGF <a href="https://curl.se/bug/?i=12434">tool_writeout_json: fix JSON encoding of non-ascii bytes</a>
BGF <a href="https://curl.se/bug/?i=12428">transfer: abort pause send when connection is marked for closing</a>
BGF <a href="https://curl.se/mail/lib-2023-11/0017.html">transfer: avoid calling the read callback again after EOF</a>
BGF <a href="https://curl.se/bug/?i=11775">transfer: only reset the FTP wildcard engine in CLEAR state</a>
BGF <a href="https://curl.se/bug/?i=12165">url: don't touch the multi handle when closing internal handles</a>
BGF <a href="https://curl.se/bug/?i=12347">url: find scheme with a "perfect hash"</a>
BGF <a href="https://curl.se/bug/?i=12344">url: fix `-Wzero-length-array` with no protocols</a>
BGF <a href="https://curl.se/bug/?i=12343">url: fix builds with `CURL_DISABLE_HTTP`</a>
BGF <a href="https://curl.se/bug/?i=12216">url: protocol handler lookup tidy-up</a>
BGF <a href="https://curl.se/bug/?i=12255">url: proxy ssl connection reuse fix</a>
BGF <a href="https://curl.se/bug/?i=12240">urlapi: avoid null deref if setting blank host to url encode</a>
BGF <a href="https://curl.se/bug/?i=12240">urlapi: skip appending NULL pointer query</a>
BGF <a href="https://curl.se/bug/?i=12250">urlapi: when URL encoding the fragment, pass in the right length</a>
BGF <a href="https://curl.se/bug/?i=12375">urldata: make maxconnects a 32 bit value</a>
BGF <a href="https://curl.se/bug/?i=12198">urldata: move async resolver state from easy handle to connectdata</a>
BGF <a href="https://curl.se/bug/?i=12323">urldata: move cookielist from UserDefined to UrlState</a>
BGF <a href="https://curl.se/bug/?i=12315">urldata: move hstslist from 'set' to 'state'</a>
BGF <a href="https://curl.se/bug/?i=12165">urldata: move the 'internal' boolean to the state struct</a>
BGF vssh: remove the #ifdef for Curl_ssh_init, use empty macro
BGF <a href="https://curl.se/bug/?i=12204">vtls: cleanup SSL config management</a>
BGF <a href="https://curl.se/bug/?i=12439">vtls: consistently use typedef names for OpenSSL structs</a>
BGF <a href="https://curl.se/bug/?i=12237">vtls: late clone of connection ssl config</a>
BGF <a href="https://curl.se/bug/?i=12259">vtls: use ALPN "http/1.1" for HTTP/1.x, including HTTP/1.0</a>
BGF <a href="https://curl.se/bug/?i=12278">VULN-DISCLOSURE-POLICY: escape sequences are not a security flaw</a>
BGF <a href="https://curl.se/bug/?i=12376">windows: use built-in `_WIN32` macro to detect Windows</a>
BGF <a href="https://curl.se/bug/?i=12381">wolfssh: remove redundant static prototypes</a>
BGF <a href="https://curl.se/bug/?i=12218">wolfssl: add default case for wolfssl_connect_step1 switch</a>
BGF <a href="https://curl.se/bug/?i=12108">wolfssl: require WOLFSSL_SYS_CA_CERTS for loading system CA</a>
</ul>
<a name="8_4_0"></a>
SUBTITLE(Fixed in 8.4.0 - October 11 2023)
<p>
RELEASEVIDEO(8.4.0, "https://youtu.be/-j-_nKmq2aE")
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.se/bug/?i=8805">curl: add support for the IPFS protocols via HTTP gateway</a>
CHG <a href="https://curl.se/bug/?i=11750">curl_multi_get_handles: get easy handles from a multi handle</a>
CHG <a href="https://curl.se/bug/?i=11625">mingw: delete support for legacy mingw.org toolchain</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.se/bug/?i=11985">acinclude.m4: Document proper system truststore on FreeBSD</a>
BGF <a href="https://curl.se/bug/?i=11994">appveyor: fix yamlint issues, indent</a>
BGF <a href="https://curl.se/bug/?i=11999">appveyor: rewrite batch in PowerShell + CI improvements</a>
BGF <a href="https://curl.se/bug/?i=11997">autotools: adjust `CURL_CA_PATH` value to CMake</a>
BGF <a href="https://curl.se/bug/?i=12008">autotools: restore `HAVE_IOCTL_*` detections</a>
BGF <a href="https://curl.se/bug/?i=12010">base64: also build for curl</a>
BGF <a href="https://curl.se/bug/?i=11915">bufq: remove Curl_bufq_skip_and_shift (unused)</a>
BGF <a href="https://curl.se/bug/?i=11940">build: delete checks for C89 standard headers</a>
BGF <a href="https://curl.se/bug/?i=12065">build: do not publish `HAVE_BORINGSSL`, `HAVE_AWSLC` macros</a>
BGF <a href="https://curl.se/bug/?i=12035">cf-socket: simulate slow/blocked receives in debug</a>
BGF <a href="https://curl.se/bug/?i=11893">cmake, configure: also link with CoreServices</a>
BGF <a href="https://curl.se/bug/?i=11977">cmake: add check for suseconds_t</a>
BGF <a href="https://curl.se/bug/?i=11954">cmake: add feature checks for `memrchr` and `getifaddrs`</a>
BGF <a href="https://curl.se/bug/?i=11973">cmake: add missing checks</a>
BGF <a href="https://curl.se/bug/?i=12015">cmake: delete old `HAVE_LDAP_URL_PARSE` logic</a>
BGF <a href="https://curl.se/bug/?i=11981">cmake: detect `HAVE_CLOCK_GETTIME_MONOTONIC_RAW`</a>
BGF <a href="https://curl.se/bug/?i=11979">cmake: detect `HAVE_GETADDRINFO_THREADSAFE`</a>
BGF <a href="https://curl.se/bug/?i=11996">cmake: detect `sys/wait.h` and `netinet/udp.h`</a>
BGF <a href="https://curl.se/bug/?i=11967">cmake: detect TLS-SRP in OpenSSL/wolfSSL/GnuTLS</a>
BGF <a href="https://curl.se/bug/?i=12005">cmake: disable unity mode with Windows Unicode + TrackMemory</a>
BGF <a href="https://curl.se/bug/?i=12006">cmake: fix `HAVE_LDAP_SSL`, `HAVE_LDAP_URL_PARSE` on non-Windows</a>
BGF <a href="https://curl.se/bug/?i=11978">cmake: fix `HAVE_WRITABLE_ARGV` detection</a>
BGF <a href="https://curl.se/bug/?i=11926">cmake: fix duplicate symbols when linking tests</a>
BGF <a href="https://curl.se/bug/?i=11927">cmake: fix missing `zlib.h` when compiling `libcurltool`</a>
BGF <a href="https://curl.se/bug/?i=11929">cmake: fix stderr initialization in unity builds</a>
BGF <a href="https://curl.se/bug/?i=11843">cmake: fix the help text to the static build option in CMakeLists.txt</a>
BGF <a href="https://curl.se/bug/?i=12027">cmake: fix unity builds for more build combinations</a>
BGF <a href="https://curl.se/bug/?i=11912">cmake: fix unity symbol collisions in h2 builds</a>
BGF <a href="https://curl.se/bug/?i=11928">cmake: fix unity with Windows Unicode + TrackMemory</a>
BGF <a href="https://curl.se/bug/?i=12024">cmake: improve OpenLDAP builds</a>
BGF <a href="https://curl.se/bug/?i=11914">cmake: lib `CURL_STATICLIB` fixes (Windows)</a>
BGF <a href="https://curl.se/bug/?i=11951">cmake: move global headers to specific checks</a>
BGF <a href="https://curl.se/bug/?i=11974">cmake: pre-cache `HAVE_BASENAME` for mingw-w64 and MSVC</a>
BGF <a href="https://curl.se/bug/?i=12003">cmake: pre-cache `HAVE_POLL_FINE` on Windows</a>
BGF cmake: tidy-up `NOT_NEED_LBER_H` detection
BGF <a href="https://curl.se/bug/?i=11998">cmake: validate `CURL_DEFAULT_SSL_BACKEND` config value</a>
BGF <a href="https://curl.se/bug/?i=11987">configure: check for the capath by default</a>
BGF <a href="https://curl.se/bug/?i=11973">configure: remove unused checks</a>
BGF <a href="https://curl.se/bug/?i=11988">configure: replace adhoc domain with `localhost` in tests</a>
BGF configure: sort AC_CHECK_FUNCS
BGF <a href="https://curl.se/bug/?i=11920">connect: expire the timeout when trying next</a>
BGF <a href="https://curl.se/bug/?i=11939">connect: only start the happy eyeballs timer when needed</a>
BGF <a href="https://curl.se/bug/?i=11862">cookie: do not store the expire or max-age strings</a>
BGF <a href="https://curl.se/bug/?i=11862">cookie: remove unnecessary struct fields</a>
BGF <a href="https://curl.se/bug/?i=11875">cookie: set ->running in cookie_init even if data is NULL</a>
BGF <a href="https://curl.se/bug/?i=11991">create-dirs.d: clarify it also uses --output-dirs</a>
BGF <a href="https://curl.se/bug/?i=11905">curl.h: mark CURLSSLBACKEND_NSS as deprecated since 8.3.0</a>
BGF <a href="https://curl.se/bug/?i=12045">curl_easy_pause.3: mention h2/h3 buffering</a>
BGF <a href="https://curl.se/mail/lib-2023-10/0010.html">curl_easy_pause.3: mention it works within callbacks</a>
BGF <a href="https://curl.se/bug/?i=12059">curl_easy_pause: set "in callback" true on exit if true</a>
BGF <a href="https://curl.se/bug/?i=12034">CURLOPT_DEBUGFUNCTION.3: warn about internal handles</a>
BGF docs/libcurl/opts/Makefile.inc: add missing manpage files
BGF <a href="https://curl.se/bug/?i=11957">docs: adapt SEE ALSO sections to new requirements</a>
BGF <a href="https://curl.se/bug/?i=2935">docs: explain how PINNEDPUBLICKEY is independent of VERIFYPEER</a>
BGF <a href="https://curl.se/bug/?i=11986">docs: replace made up domains with example.com</a>
BGF <a href="https://curl.se/bug/?i=11963">docs: update curl man page references</a>
BGF <a href="https://curl.se/bug/?i=11909">docs: use CURLSSLBACKEND_NONE</a>
BGF <a href="https://curl.se/bug/?i=11864">doh: inherit DEBUGFUNCTION/DATA</a>
BGF <a href="https://curl.se/bug/?i=11846">escape: replace Curl_isunreserved with ISUNRESERVED</a>
BGF <a href="https://curl.se/bug/?i=11984">FAQ: How do I upgrade curl.exe in Windows?</a>
BGF <a href="https://curl.se/bug/?i=11932">GHA/linux: run singleuse to detect single-use global functions</a>
BGF <a href="https://curl.se/bug/?i=11964">GHA: add workflow to compare configure vs cmake outputs</a>
BGF <a href="https://curl.se/bug/?i=11877">h2-proxy: remove left-over mistake in drain_tunnel()</a>
BGF <a href="https://curl.se/bug/?i=11982">h2: testcase and fix for pausing h2 streams</a>
BGF <a href="https://curl.se/bug/?i=12066">h3: add support for ngtcp2 with AWS-LC builds</a>
BGF <a href="https://curl.se/bug/?i=12054">http2: refused stream handling for retry</a>
BGF <a href="https://curl.se/bug/?i=11892">http: fix CURL_DISABLE_BEARER_AUTH breakage</a>
BGF <a href="https://curl.se/bug/?i=11808">http: h1/h2 proxy unification</a>
BGF <a href="https://curl.se/bug/?i=11941">http: remove wrong comment for http_should_fail</a>
BGF <a href="https://curl.se/bug/?i=11871">http: use per-request counter to check too large headers</a>
BGF <a href="https://curl.se/bug/?i=11855">http_aws_sigv4: fix sorting with empty parts</a>
BGF <a href="https://curl.se/bug/?i=11983">idn: fix WinIDN null ptr deref on bad host</a>
BGF <a href="https://curl.se/bug/?i=11898">idn: if idn2_check_version returns NULL, return error</a>
BGF <a href="https://curl.se/bug/?i=11960">inet_ntop: add typecast to silence Coverity</a>
BGF <a href="https://curl.se/bug/?i=11885">lib: disambiguate Curl_client_write flag semantics</a>
BGF <a href="https://curl.se/bug/?i=11890">lib: enable hmac for digest as well</a>
BGF <a href="https://curl.se/bug/?i=11874">lib: failf/infof compiler warnings</a>
BGF <a href="https://curl.se/bug/?i=11810">lib: let the max filesize option stop too big transfers too</a>
BGF <a href="https://curl.se/bug/?i=11908">lib: move handling of `data->req.writer_stack` into Curl_client_write()</a>
BGF <a href="https://curl.se/bug/?i=11990">lib: provide and use Curl_hexencode</a>
BGF <a href="https://curl.se/bug/?i=11975">lib: remove TIME_WITH_SYS_TIME</a>
BGF <a href="https://curl.se/bug/?i=11882">lib: use wrapper for curl_mime_data fseek callback</a>
BGF <a href="https://curl.se/bug/?i=11837">libssh2: fix error message on failed pubkey-from-file</a>
BGF <a href="https://curl.se/bug/?i=11804">libssh: cap SFTP packet size sent</a>
BGF <a href="https://curl.se/bug/?i=11924">Makefile.mk: always set `CURL_STATICLIB` for lib (Windows)</a>
BGF <a href="https://curl.se/bug/?i=11866">MANUAL.md: change domain to example.com</a>
BGF <a href="https://curl.se/bug/?i=11838">misc: better random strings</a>
BGF <a href="https://curl.se/bug/?i=12071">MQTT: improve receive of ACKs</a>
BGF <a href="https://curl.se/bug/?i=12033">multi: do CURLM_CALL_MULTI_PERFORM at two more places</a>
BGF <a href="https://curl.se/bug/?i=11937">multi: fix small timeouts</a>
BGF <a href="https://curl.se/bug/?i=11931">multi: remove Curl_multi_dump</a>
BGF <a href="https://curl.se/bug/?i=11938">multi: round the timeout up to prevent early wakeups</a>
BGF <a href="https://curl.se/bug/?i=12042">multi: set CURLM_CALL_MULTI_PERFORM after switch to DOING_MORE</a>
BGF <a href="https://curl.se/bug/?i=11858">openssl: improve ssl shutdown handling</a>
BGF <a href="https://curl.se/bug/?i=12038">openssl: use X509_ALGOR_get0 instead of reaching into X509_ALGOR</a>
BGF <a href="https://curl.se/bug/?i=11860">pytest: exclude test_03_goaway in CI runs due to timing dependency</a>
BGF <a href="https://curl.se/bug/?i=11796">quic: set ciphers/curves the same way regular TLS does</a>
BGF <a href="https://curl.se/bug/?i=11850">quiche: fix build error with --with-ca-fallback</a>
BGF RELEASE-PROCEDURE.md: updated coming release dates
BGF <a href="https://curl.se/bug/?i=11980">runtests: display the test status if tests appear hung</a>
BGF runtests: eliminate a warning on old perl versions
BGF <a href="https://curl.se/docs/CVE-2023-38545.html">socks: return error if hostname too long for remote resolve</a>
BGF <a href="https://curl.se/bug/?i=11955">src/mkhelp: make generated code pass `checksrc`</a>
BGF test1056: disable on Windows
BGF <a href="https://curl.se/bug/?i=11888">test1474: disable test on NetBSD, OpenBSD and Solaris 10</a>
BGF test1592: greatly increase the maximum test timeout
BGF <a href="https://curl.se/bug/?i=12041">test1903: actually verify the cookies after the test</a>
BGF <a href="https://curl.se/bug/?i=12036">test1906: set a lower timeout since it's hit on Windows</a>
BGF <a href="https://curl.se/bug/?i=11767">test2600: remove special case handling for USE_ALARM_TIMEOUT</a>
BGF test650: fix an end tag typo
BGF test661: return from test early in case of curl error
BGF test: add missing <feature>s
BGF <a href="https://curl.se/bug/?i=12032">tests: close the shell used to start sshd</a>
BGF <a href="https://curl.se/bug/?i=12002">tests: fix a race condition in ftp server disconnect</a>
BGF <a href="https://curl.se/bug/?i=11925">tests: fix compiler warnings</a>
BGF <a href="https://curl.se/bug/?i=12018">tests: Fix zombie processes left behind by FTP tests.</a>
BGF tests: improve SLOWDOWN test reliability by reducing sent data
BGF <a href="https://curl.se/bug/?i=12013">tests: increase lib571 timeout from 3s to 30s</a>
BGF tests: log the test result code after each libtest
BGF tests: propagate errors in libtests
BGF tests: set --expect100-timeout to improve test reliability
BGF <a href="https://curl.se/bug/?i=11953">tests: show which curl tool `runtests.pl` is using</a>
BGF tests: stop overriding the lock timeout
BGF <a href="https://curl.se/bug/?i=11897">tftpd: always use curl's own tftp.h</a>
BGF <a href="https://curl.se/bug/?i=11958">tool: use our own stderr variable</a>
BGF <a href="https://github.com/curl/curl/commit/af3f4e41#r127212213">tool_cb_wrt: fix debug assertion</a>
BGF <a href="https://curl.se/bug/?i=12048">tool_getparam: accept variable expansion on file names too</a>
BGF <a href="https://curl.se/bug/?i=11943">tool_setopt: remove unused function tool_setopt_flags</a>
BGF <a href="https://curl.se/bug/?i=11911">upload-file.d: describe the file name slash/backslash handling</a>
BGF <a href="https://curl.se/bug/?i=12031">url: fall back to http/https proxy env-variable if ws/wss not set</a>
BGF <a href="https://curl.se/bug/?i=11904">url: fix netrc info message</a>
BGF <a href="https://curl.se/bug/?i=11932">warnless: remove unused functions</a>
BGF <a href="https://curl.se/bug/?i=11921">wolfssh: do cleanup in Curl_ssh_cleanup</a>
BGF <a href="https://curl.se/bug/?i=11886">wolfssl: allow capath with CURLOPT_CAINFO_BLOB</a>
BGF <a href="https://curl.se/bug/?i=11884">wolfssl: if CURLOPT_CAINFO_BLOB is set, ignore the CA files</a>
BGF <a href="https://curl.se/bug/?i=11987">wolfssl: ignore errors in CA path</a>
</ul>
<a name="8_3_0"></a>
SUBTITLE(Fixed in 8.3.0 - September 13 2023)
<p>
RELEASEVIDEO(8.3.0, "https://youtu.be/DmyuEV8cUaU?si=tmYuZzMK8_hlCT31")
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.se/bug/?i=11416">curl: make %output{} in -w specify a file to write to</a>
CHG <a href="https://curl.se/bug/?i=11460">gskit: remove</a>
CHG lib: --disable-bindlocal builds curl without local binding support
CHG <a href="https://curl.se/bug/?i=11459">nss: remove support for this TLS library</a>
CHG <a href="https://curl.se/bug/?i=11346">tool: add "variable" support</a>
CHG <a href="https://curl.se/bug/?i=11421">trace: make tracing available in non-debug builds</a>
CHG <a href="https://curl.se/bug/?i=11581">url: change default value for CURLOPT_MAXREDIRS to 30</a>
CHG <a href="https://curl.se/bug/?i=11655">urlapi: CURLU_PUNY2IDN - convert from punycode to IDN name</a>
CHG <a href="https://curl.se/bug/?i=11452">wolfssl: support loading system CA certificates</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.se/bug/?i=11737">altsvc: accept and parse IPv6 addresses in response headers</a>
BGF <a href="https://curl.se/bug/?i=11753">asyn-ares: reduce timeout to 2000ms</a>
BGF <a href="https://curl.se/bug/?i=11794">aws-sigv4: canonicalize the query</a>
BGF <a href="https://curl.se/bug/?i=11738">aws-sigv4: fix having date header twice in some cases</a>
BGF <a href="https://curl.se/bug/?i=11664">aws-sigv4: handle no-value user header entries</a>
BGF <a href="https://curl.se/bug/?i=11457">bearssl: don't load CA certs when peer verification is disabled</a>
BGF <a href="https://curl.se/bug/?i=11675">bearssl: handshake fix, provide proper get_select_socks() implementation</a>
BGF build: fix portability of mancheck and checksrc targets
BGF <a href="https://curl.se/bug/?i=11657">build: streamline non-UWP wincrypt detections</a>
BGF <a href="https://curl.se/bug/?i=11621">c-hyper: adjust the hyper to curlcode conversion</a>
BGF <a href="https://curl.se/bug/?i=11729">c-hyper: fix memory leaks in `Curl_http`</a>
BGF <a href="https://curl.se/bug/?i=11619">cf-haproxy: make CURLOPT_HAPROXY_CLIENT_IP set the *source* IP</a>
BGF <a href="https://curl.se/bug/?i=11608">cf-socket: log successful interface bind</a>
BGF <a href="https://curl.se/bug/?i=11705">CI/cirrus: disable python install on FreeBSD</a>
BGF <a href="https://curl.se/bug/?i=11799">CI: add a 32-bit i686 Linux build</a>
BGF <a href="https://curl.se/bug/?i=11532">CI: add caching to many jobs</a>
BGF <a href="https://curl.se/bug/?i=11809">CI: move on to ngtcp2 v0.19.1</a>
BGF CI: move the Alpine build from Cirrus to GHA
BGF <a href="https://curl.se/bug/?i=11766">CI: ngtcp2-linux: use separate caches for tls libraries</a>
BGF <a href="https://curl.se/bug/?i=11771">CI: remove Windows builds from Cirrus, without replacement</a>
BGF CI: switch macOS ARM build from Cirrus to Circle CI
BGF CI: use master again for wolfssl
BGF <a href="https://curl.se/bug/?i=11711">cirrus: install everthing with pkg, avoid pip</a>
BGF <a href="https://curl.se/bug/?i=11685">cmake: add GnuTLS option</a>
BGF <a href="https://curl.se/bug/?i=11774">cmake: add support for `CURL_DEFAULT_SSL_BACKEND`</a>
BGF <a href="https://curl.se/bug/?i=11546">cmake: add support for single libcurl compilation pass</a>
BGF <a href="https://curl.se/bug/?i=11627">cmake: allow `SHARE_LIB_OBJECT=ON` on all platforms</a>
BGF <a href="https://curl.se/bug/?i=11624">cmake: assume `wldap32` availability on Windows</a>
BGF <a href="https://curl.se/bug/?i=11551">cmake: cache more config and delete unused ones</a>
BGF <a href="https://curl.se/bug/?i=11555">cmake: detect `SSL_set0_wbio` in OpenSSL</a>
BGF <a href="https://curl.se/bug/?i=11612">cmake: drop `HAVE_LIBWINMM` and `HAVE_LIBWS2_32` feature checks</a>
BGF <a href="https://curl.se/bug/?i=11629">cmake: fix to use variable for the curl namespace</a>
BGF <a href="https://curl.se/bug/?i=11550">cmake: fixup H2 duplicate symbols for unity builds</a>
BGF <a href="https://curl.se/bug/?i=11839">cmake: set SIZEOF_LONG_LONG in curl_config.h</a>
BGF <a href="https://curl.se/bug/?i=11505">cmake: support building static and shared libcurl in one go</a>
BGF <a href="https://curl.se/bug/?i=11821">cmdline-docs: make sure to phrase it as "added in ...."</a>
BGF <a href="https://curl.se/bug/?i=11821">cmdline-docs: use present tense, not future</a>
BGF <a href="https://curl.se/bug/?i=11695">cmdline-opts/docs: mention the negative option part</a>
BGF <a href="https://curl.se/bug/?i=11734">cmdline-opts/page-header: clarify stronger that !opt == URL</a>
BGF <a href="https://curl.se/bug/?i=11638">cmdline-opts/page-header: reorder, clean up</a>
BGF <a href="https://curl.se/bug/?i=9621">configure, cmake, lib: more form api deprecation</a>
BGF <a href="https://curl.se/bug/?i=11825">configure: fix `HAVE_TIME_T_UNSIGNED` check</a>
BGF <a href="https://curl.se/mail/lib-2023-08/0081.html">configure: trust pkg-config when it's used for zlib</a>
BGF <a href="https://curl.se/bug/?i=11538">configure: use the pkg-config --libs-only-l flag for libssh2</a>
BGF <a href="https://curl.se/bug/?i=11693">connect: stop halving the remaining timeout when less than 600 ms left</a>
BGF <a href="https://curl.se/bug/?i=11661">cookie-jar.d: emphasize that this option is ONLY writing cookies</a>
BGF <a href="https://curl.se/bug/?i=11614">crypto: ensure crypto initialization works</a>
BGF curl_url_get/set.3: add missing semicolon in SYNOPSIS
BGF <a href="https://curl.se/bug/?i=11666">CURLINFO_CERTINFO.3: better explain curl_certinfo struct</a>
BGF <a href="https://curl.se/bug/?i=11665">CURLINFO_TLS_SSL_PTR.3: clarify a recommendation</a>
BGF <a href="https://curl.se/bug/?i=11686">CURLOPT_*TIMEOUT*: extend and clarify</a>
BGF <a href="https://curl.se/bug/?i=11606">CURLOPT_SSL_VERIFYPEER.3: mention it does not load CA certs when disabled</a>
BGF CURLOPT_URL.3: add two URL API calls in the see-also section
BGF CURLOPT_URL.3: explain curl_url_set() uses the same parser
BGF <a href="https://curl.se/bug/?i=11395">digest: Use hostname to generate spn instead of realm</a>
BGF <a href="https://curl.se/bug/?i=11710">disable.d: explain --disable not implemented prior to 7.50.0</a>
BGF <a href="https://curl.se/bug/?i=11651">docs/cmdline-opts/gen.pl: hide "added in" before 7.50.0</a>
BGF <a href="https://curl.se/bug/?i=11723">docs/cmdline-opts: match the current output</a>
BGF <a href="https://curl.se/bug/?i=11562">docs/cmdline-opts: spellfixes, typos and polish</a>
BGF <a href="https://curl.se/bug/?i=11596">docs/cmdline: add small "warning" to verbose options</a>
BGF <a href="https://curl.se/bug/?i=11597">docs/cmdline: remove repeated working for negotiate + ntlm</a>
BGF <a href="https://curl.se/bug/?i=11653">docs/HYPER.md: document a workaround for a link error</a>
BGF <a href="https://curl.se/bug/?i=11791">docs: add curl_global_trace to some SEE ALSO sections</a>
BGF <a href="https://github.com/curl/curl-www/issues/272">docs: link to the website versions instead of markdowns</a>
BGF <a href="https://curl.se/bug/?i=11760">docs: mark --ssl-revoke-best-effort as Schannel specific</a>
BGF <a href="https://curl.se/bug/?i=11530">docs: mention critical files in same directories as curl saves</a>
BGF <a href="https://curl.se/bug/?i=11764">docs: removing "pausing transfers" from HYPER.md.</a>
BGF <a href="https://curl.se/bug/?i=11713">docs: rewrite to present tense</a>
BGF <a href="https://curl.se/bug/?i=11525">easy: remove #ifdefs to make code easier on the eye</a>
BGF <a href="https://curl.se/bug/?i=11556">egd: delete feature detection and related source code</a>
BGF <a href="https://curl.se/bug/?i=11747">ftp: fix temp write of ipv6 address</a>
BGF <a href="https://curl.se/bug/?i=11635">gen.pl: escape all dashes (ascii minus) to avoid unicode hyphens</a>
BGF <a href="https://curl.se/bug/?i=11645">gen.pl: replace all single quotes with aq</a>
BGF <a href="https://curl.se/bug/?i=11517">GHA: adding quiche workflow</a>
BGF <a href="https://curl.se/bug/?i=11605">headers: accept leading whitespaces on first response header</a>
BGF <a href="https://curl.se/mail/lib-2023-07/0045.html">http2: avoid too early connection re-use/multiplexing</a>
BGF <a href="https://curl.se/bug/?i=11592">http2: cleanup trace messages</a>
BGF <a href="https://curl.se/bug/?i=11500">http2: disable asssertion blocking OSSFuzz testing</a>
BGF <a href="https://curl.se/bug/?i=11527">http2: fix in h2 proxy tunnel: progress in ingress on sending</a>
BGF <a href="https://curl.se/bug/?i=11756">http2: polish things around POST</a>
BGF <a href="https://curl.se/bug/?i=11563">http2: upgrade tests and add fix for non-existing stream</a>
BGF <a href="https://curl.se/bug/?i=11609">http3/ngtcp2: shorten handshake, trace cleanup</a>
BGF <a href="https://curl.se/bug/?i=11618">http3: quiche, handshake optimization, trace cleanup</a>
BGF <a href="https://curl.se/bug/?i=11678">http: close the connection after a late 417 is received</a>
BGF <a href="https://sourceforge.net/p/curl/bugs/440/">http: do not require a user name when using CURLAUTH_NEGOTIATE</a>
BGF <a href="https://curl.se/bug/?i=11342">http: fix sending of large requests</a>
BGF <a href="https://curl.se/bug/?i=11681">http: remove the p_pragma struct field</a>
BGF <a href="https://curl.se/bug/?i=11582">http: return error when receiving too large header set</a>
BGF <a href="https://curl.se/bug/?i=11780">hyper: fix a progress upload counter bug</a>
BGF <a href="https://curl.se/bug/?i=11745">hyper: fix ownership problems</a>
BGF <a href="https://curl.se/bug/?i=11779">hyper: remove `hyptransfer->endtask`</a>
BGF imap: add a check for failing strdup()
BGF <a href="https://curl.se/bug/?i=11673">imap: remove the only sscanf() call in the IMAP code</a>
BGF <a href="https://curl.se/bug/?i=11822">include.d: explain headers not printed with --fail before 7.75.0</a>
BGF <a href="https://curl.se/bug/?i=11589">include/curl/mprintf.h: add __attribute__ for the prototypes</a>
BGF <a href="https://curl.se/bug/?i=11814">krb5: fix "implicit conversion loses integer precision" warnings</a>
BGF <a href="https://curl.se/bug/?i=11490">lib: add ability to disable auths individually</a>
BGF <a href="https://curl.se/bug/?i=11687">lib: build fixups when built with most things disabled</a>
BGF <a href="https://curl.se/bug/?i=11579">lib: fix a few *printf() flag mistakes</a>
BGF <a href="https://curl.se/bug/?i=11739">lib: fix null ptr derefs and uninitialized vars (h2/h3)</a>
BGF <a href="https://curl.se/bug/?i=11680">lib: move mimepost data from ->req.p.http to ->state</a>
BGF <a href="https://curl.se/bug/?i=11746">libtest: use curl_free() to free libcurl allocated data</a>
BGF <a href="https://curl.se/bug/?i=11628">list-only.d: mention SFTP as supported protocol</a>
BGF <a href="https://curl.se/bug/?i=11502">macOS: fix target detection more</a>
BGF <a href="https://curl.se/bug/?i=11561">misc: fix various typos</a>
BGF <a href="https://curl.se/bug/?i=11749">multi.h: the 'revents' field of curl_waitfd is supported</a>
BGF <a href="https://curl.se/bug/?i=11792">multi: more efficient pollfd count for poll</a>
BGF <a href="https://curl.se/bug/?i=11759">multi: remove 'processing: <url>' debug message</a>
BGF <a href="https://curl.se/bug/?i=11815">ngtcp2: fix handling of large requests</a>
BGF <a href="https://curl.se/bug/?i=11617">openssl: auto-detect `SSL_R_TLSV13_ALERT_CERTIFICATE_REQUIRED`</a>
BGF <a href="https://curl.se/bug/?i=11736">openssl: clear error queue after SSL_shutdown</a>
BGF <a href="https://curl.se/bug/?i=11568">openssl: make aws-lc version support OCSP</a>
BGF <a href="https://curl.se/bug/?i=11499">openssl: Support async cert verify callback</a>
BGF <a href="https://curl.se/bug/?i=11611">openssl: switch to modern init for LibreSSL 2.7.0+</a>
BGF <a href="https://curl.se/bug/?i=11616">openssl: use `SSL_CTX_set_ciphersuites` with LibreSSL 3.4.1</a>
BGF <a href="https://curl.se/bug/?i=11615">openssl: use `SSL_CTX_set_keylog_callback` with LibreSSL 3.5.0</a>
BGF <a href="https://curl.se/bug/?i=11800">openssl: when CURLOPT_SSL_CTX_FUNCTION is registered, init x509 store before</a>
BGF <a href="https://curl.se/bug/?i=11547">os400: build test servers</a>
BGF <a href="https://curl.se/bug/?i=11650">os400: do not check translatable options at build time</a>
BGF <a href="https://curl.se/bug/?i=11547">os400: implement CLI tool</a>
BGF <a href="https://curl.se/bug/?i=11631">page-footer: QLOGDIR works with ngtcp2 and quiche</a>
BGF page-header: move up a URL paragraph from GLOBBING to URL
BGF <a href="https://curl.se/bug/?i=11801">pytest: fix check for slow_network skips to only apply when intended</a>
BGF <a href="https://curl.se/bug/?i=11827">quic: don't set SNI if hostname is an IP address</a>
BGF quiche: adjust quiche `QUIC_IDLE_TIMEOUT` to 60s
BGF <a href="https://curl.se/bug/?i=11654">quiche: enable quiche to handle timeout events</a>
BGF <a href="https://curl.se/bug/?i=11564">resolve: use PF_INET6 family lookups when CURL_IPRESOLVE_V6 is set</a>
BGF <a href="https://curl.se/bug/?i=11536">revert "schannel: reverse the order of certinfo insertions"</a>
BGF <a href="https://curl.se/bug/?i=11632">schannel: fix ordering of cert chain info</a>
BGF <a href="https://curl.se/bug/?i=10741">schannel: fix user-set legacy algorithms in Windows 10 & 11</a>
BGF <a href="https://curl.haxx.se/mail/lib-2018-10/0113.html">schannel: verify hostname independent of verify cert</a>
BGF <a href="https://curl.se/bug/?i=11773">sectransp: fix compiler warnings</a>
BGF <a href="https://curl.se/bug/?i=9194">sectransp: prevent CFRelease() of NULL</a>
BGF <a href="https://curl.se/bug/?i=11721">secureserver.pl: fix stunnel path quoting</a>
BGF <a href="https://curl.se/bug/?i=11722">secureserver.pl: fix stunnel version parsing</a>
BGF <a href="https://curl.se/bug/?i=11757">SECURITY-PROCESS.md: not a sec issue: Tricking user to run a cmdline</a>
BGF <a href="https://curl.se/bug/?i=11718">system.h: add CURL_OFF_T definitions on HP-UX with HP aCC</a>
BGF test1304: build and skip without netrc support
BGF <a href="https://curl.se/bug/?i=11650">test1554: check translatable string options in OS400 wrapper</a>
BGF test1608: make it build and get skipped without shuffle DNS support
BGF <a href="https://curl.se/bug/?i=11697">test687/688: two more basic --xattr tests</a>
BGF <a href="https://curl.se/bug/?i=11594">tests/tftpd+mqttd: make variables static to silence picky warnings</a>
BGF <a href="https://curl.se/bug/?i=11696">tests: add 'large-time' as a testable feature</a>
BGF <a href="https://curl.se/bug/?i=11728">tests: add support for nested %if conditions</a>
BGF tests: don't call HTTP errors OK in test cases
BGF <a href="https://curl.se/bug/?i=11570">tests: ensure `libcurl.def` contains all exports</a>
BGF <a href="https://curl.se/bug/?i=11553">tests: fix h3 server check and parallel instances</a>
BGF <a href="https://curl.se/bug/?i=11675">tests: TLS session sharing test</a>
BGF <a href="https://curl.se/bug/?i=11576">tests: update cookie expiry dates to far in the future</a>
BGF <a href="https://curl.se/bug/?i=11727">time-cond.d: mention what happens on a missing file</a>
BGF <a href="https://curl.se/bug/?i=11735">tool: avoid including leading spaces in the Location hyperlink</a>
BGF <a href="https://curl.se/bug/?i=11677">tool: change some fopen failures from warnings to errors</a>
BGF <a href="https://curl.se/bug/?i=11578">tool: make the length argument an int for printf()-.* flags</a>
BGF <a href="https://curl.se/bug/?i=9841">tool_cb_wrt: fix invalid unicode for windows console</a>
BGF <a href="https://curl.se/bug/?i=11785">tool_filetime: make -z work with file dates before 1970</a>
BGF <a href="https://curl.se/bug/?i=11325">tool_operate: allow both SSL_CERT_FILE and SSL_CERT_DIR</a>
BGF tool_operate: make aws-sigv4 not require TLS to be used
BGF <a href="https://curl.se/bug/?i=11742">tool_paramhlp: improve str2num(): avoid unnecessary call to strlen()</a>
BGF <a href="https://curl.se/bug/?i=11698">tool_urlglob: use the correct format specifier for curl_off_t in msnprintf</a>
BGF <a href="https://curl.se/bug/?i=11769">transfer: also stop the sending on closed connection</a>
BGF <a href="https://curl.se/bug/?i=11669">transfer: don't set TIMER_STARTTRANSFER on first send</a>
BGF unit2600: fix build warning if built without verbose messages
BGF <a href="https://curl.se/bug/?i=11394">url: remove infof() output for "still name resolving"</a>
BGF <a href="https://curl.se/bug/?i=11560">urlapi: fix heap buffer overflow</a>
BGF <a href="https://curl.se/mail/lib-2023-07/0047.html">urlapi: make sure zoneid is also duplicated in curl_url_dup</a>
BGF <a href="https://curl.se/bug/?i=11674">urlapi: return CURLUE_BAD_HOSTNAME if puny2idn encoding fails</a>
BGF <a href="https://curl.se/bug/?i=11714">urlapi: setting a blank URL ("") is not an ok URL</a>
BGF <a href="https://curl.se/bug/?i=11584">vquic: show stringified messages for errno</a>
BGF <a href="https://curl.se/mail/lib-2023-07/0041.html">vtls: clarify "ALPN: offers" message</a>
BGF <a href="https://curl.se/bug/?i=11521">winbuild: improve check for static zlib</a>
BGF <a href="https://curl.se/bug/?i=11752">wolfSSL: avoid the OpenSSL compat API when not needed</a>
BGF <a href="https://curl.se/bug/?i=11683">workflows/macos.yml: disable zstd and alt-svc in the http-only build</a>
BGF write-out.d: clarify %{time_starttransfer}
BGF <a href="https://curl.se/bug/?i=11784">ws: fix spelling mistakes in examples and tests</a>
</ul>
<a name="8_2_1"></a>
SUBTITLE(Fixed in 8.2.1 - July 26 2023)
<p>
RELEASEVIDEO(8.2.1, "https://youtu.be/gxuisBdfXmI")
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.se/bug/?i=11479">amigaos: fix sys/mbuf.h m_len macro clash</a>
BGF <a href="https://curl.se/bug/?i=11478">amissl: add missing signal.h include</a>
BGF <a href="https://curl.se/bug/?i=11477">amissl: fix AmiSSL v5 detection</a>
BGF <a href="https://curl.se/bug/?i=11491">cfilters: rename close/connect functions to avoid clashes</a>
BGF <a href="https://curl.se/bug/?i=11464">ciphers.d: put URL in first column</a>
BGF <a href="https://curl.se/bug/?i=11446">cmake: add `libcurlu`/`libcurltool` for unit tests</a>
BGF <a href="https://curl.se/bug/?i=11508">cmake: update ngtcp2 detection</a>
BGF <a href="https://curl.se/bug/?i=11470">configure: check for nghttp2_session_get_stream_local_window_size</a>
BGF <a href="https://curl.se/bug/?i=11504">CONTRIBUTE: drop mention of copyright year ranges</a>
BGF <a href="https://curl.se/bug/?i=11504">CONTRIBUTE: fix syntax in commit message description</a>
BGF <a href="https://curl.se/bug/?i=11511">curl_multi_wait.3: fix arg quoting to doc macro .BR</a>
BGF <a href="https://curl.se/bug/?i=11514">docs: mark two TLS options for TLS, not SSL</a>
BGF <a href="https://curl.se/bug/?i=11513">docs: provide more see also for cipher options</a>
BGF <a href="https://curl.se/bug/?i=11465">hostip: return IPv6 first for localhost resolves</a>
BGF <a href="https://curl.se/bug/?i=11485">http2: fix regression on upload EOF handling</a>
BGF <a href="https://curl.se/bug/?i=11509">http: VLH, very large header test and fixes</a>
BGF <a href="https://curl.se/bug/?i=11488">libcurl-errors.3: add CURLUE_OK</a>
BGF <a href="https://curl.se/bug/?i=11476">os400: correct EXPECTED_STRING_LASTZEROTERMINATED</a>
BGF <a href="https://curl.se/bug/?i=11462">quiche: fix lookup of transfer at multi</a>
BGF <a href="https://curl.se/bug/?i=11449">quiche: fix segfault and other things</a>
BGF <a href="https://curl.se/bug/?i=10865">rustls: update rustls-ffi 0.10.0</a>
BGF <a href="https://curl.se/bug/?i=11483">socks: print ipv6 address within brackets</a>
BGF <a href="https://curl.se/bug/?i=11501">src/mkhelp: strip off escape sequences</a>
BGF <a href="https://curl.se/bug/?i=11468">tool: fix tool_seek_cb build when SIZEOF_CURL_OFF_T > SIZEOF_OFF_T</a>
BGF <a href="https://curl.se/bug/?i=11486">transfer: do not clear the credentials on redirect to absolute URL</a>
BGF <a href="https://curl.se/bug/?i=11494">unittest: remove unneeded *_LDADD</a>
BGF <a href="https://curl.se/bug/?i=11493">websocket: rename arguments/variables to match docs</a>
</ul>
<a name="8_2_0"></a>
SUBTITLE(Fixed in 8.2.0 - July 19 2023)
<p>
RELEASEVIDEO(8.2.0, "https://youtu.be/eMSD1GOCABc")
<p> Changes:
<ul class="changes">