forked from curl/curl-www
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy path_changes.html
More file actions
6757 lines (6582 loc) · 398 KB
/
_changes.html
File metadata and controls
6757 lines (6582 loc) · 398 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
#include "_doctype.html"
<html lang="en">
<head> <title>curl - Changes</title>
#include "css.t"
</HEAD>
#define CURL_CHANGES
#define CURL_URL changes.html
#include "_menu.html"
#include "setup.t"
WHERE1(Changes)
<a name="changes"></a>
TITLE(Changelog)
<div class="relatedbox" style="width:30%">
<b>Related:</b>
<br><a href="/snapshots/">Daily Snapshots</a>
<br><a href="/source.html">Source repo</a>
<br><a href="/docs/security.html">Security</a>
<br><a href="/docs/vulnerabilities.html">Vulnerabilities</a>
<br><a href="/docs/releases.html">Releaselog</a>
<br><a href="/dev/sourceactivity.html">Source activity</a>
<br><a href="/dev/release-notes.html">Pending Release Notes</a>
</div>
#if 0
<a name="9_19_19"></a>
SUBTITLE(-- Fixed in 7.20.0 - February 9 2011)
<p> Changes:
<ul class="changes">
CHG change
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF fix
</ul>
#endif
#define CHG <li>
#define BGF <li>
<a name="7_60_0"></a>
SUBTITLE(Fixed in 7.60.0 - May 16 2018)
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.haxx.se/bug/?i=2162">Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol</a>
CHG <a href="https://curl.haxx.se/bug/?i=2162">Add --haproxy-protocol for the command line tool</a>
CHG <a href="https://curl.haxx.se/bug/?i=1694">Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.haxx.se/docs/adv_2018-82c2.html">FTP: shutdown response buffer overflow CVE-2018-1000300</a>
BGF <a href="https://curl.haxx.se/docs/adv_2018-b138.html">RTSP: bad headers buffer over-read CVE-2018-1000301</a>
BGF <a href="https://curl.haxx.se/bug/?i=2380">FTP: fix typo in recursive callback detection for seeking</a>
BGF test1208: marked flaky
BGF <a href="https://curl.haxx.se/bug/?i=2382">HTTP: make header-less responses still count correct body size</a>
BGF <a href="https://curl.haxx.se/bug/?i=2381">user-agent.d:: mention --proxy-header as well</a>
BGF <a href="https://curl.haxx.se/bug/?i=2387">http2: fixes typo</a>
BGF <a href="https://curl.haxx.se/bug/?i=2389">cleanup: misc typos in strings and comments</a>
BGF <a href="https://curl.haxx.se/bug/?i=2386">rate-limit: use three second window to better handle high speeds</a>
BGF examples/hiperfifo.c: improved
BGF <a href="https://curl.haxx.se/mail/lib-2018-03/0048.html">pause: when changing pause state, update socket state</a>
BGF <a href="https://curl.haxx.se/bug/?i=2369">multi: improved pending transfers handling => improved performance</a>
BGF <a href="https://curl.haxx.se/bug/?i=2364">curl_version_info.3: fix ssl_version description</a>
BGF <a href="https://curl.haxx.se/bug/?i=2190">add_handle/easy_perform: clear errorbuffer on start if set</a>
BGF <a href="https://curl.haxx.se/bug/?i=2397">darwinssl: fix iOS build</a>
BGF <a href="https://curl.haxx.se/bug/?i=2392">cmake: add support for brotli</a>
BGF <a href="https://curl.haxx.se/bug/?i=2401">parsedate: support UT timezone</a>
BGF vauth/ntlm.h: fix the #ifdef header guard
BGF lib/curl_path.h: added #ifdef header guard
BGF <a href="https://curl.haxx.se/bug/?i=2408">vauth/cleartext: fix integer overflow check</a>
BGF CURLINFO_COOKIELIST.3: made the example not leak memory
BGF <a href="https://curl.haxx.se/bug/?i=2410">cookie.d: mention that "-" as filename means stdin</a>
BGF <a href="https://curl.haxx.se/bug/?i=2400">CURLINFO_SSL_VERIFYRESULT.3: fixed the example</a>
BGF <a href="https://curl.haxx.se/bug/?i=1967">http2: read pending frames (including GOAWAY) in connection-check</a>
BGF <a href="https://curl.haxx.se/bug/?i=2358">timeval: remove compilation warning by casting</a>
BGF <a href="https://curl.haxx.se/bug/?i=2358">cmake: avoid warn-as-error during config checks</a>
BGF <a href="https://curl.haxx.se/bug/?i=2418">travis-ci: enable -Werror for CMake builds</a>
BGF <a href="https://curl.haxx.se/bug/?i=2399">openldap: fix for NULL return from ldap_get_attribute_ber()</a>
BGF <a href="https://curl.haxx.se/bug/?i=2419">threaded resolver: track resolver time and set suitable timeout values</a>
BGF <a href="https://curl.haxx.se/bug/?i=2363">cmake: Add advapi32 as explicit link library for win32</a>
BGF <a href="https://curl.haxx.se/mail/lib-2018-03/0140.html">docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T</a>
BGF <a href="https://curl.haxx.se/bug/?i=2436">test1148: set a fixed locale for the test</a>
BGF <a href="https://curl.haxx.se/bug/?i=2441">cookies: when reading from a file, only remove_expired once</a>
BGF <a href="https://curl.haxx.se/bug/?i=2440">cookie: store cookies per top-level-domain-specific hash table</a>
BGF <a href="https://curl.haxx.se/bug/?i=2319">openssl: fix build with LibreSSL 2.7</a>
BGF <a href="https://curl.haxx.se/bug/?i=2453">tls: fix mbedTLS 2.7.0 build + handle sha256 failures</a>
BGF <a href="https://curl.haxx.se/bug/?i=2451">openssl: RESTORED verify locations when verifypeer==0</a>
BGF <a href="https://curl.haxx.se/bug/?i=2438">file: restore old behavior for file:////foo/bar URLs</a>
BGF <a href="https://curl.haxx.se/bug/?i=2432">FTP: allow PASV on IPv6 connections when a proxy is being used</a>
BGF <a href="https://curl.haxx.se/bug/?i=2430">build-openssl.bat: allow custom paths for VS and perl</a>
BGF <a href="https://curl.haxx.se/bug/?i=2455">winbuild: make the clean target work without build-type</a>
BGF <a href="https://curl.haxx.se/bug/?i=2189">build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15</a>
BGF <a href="https://curl.haxx.se/bug/?i=2462">curl: retry on FTP 4xx, ignore other protocols</a>
BGF <a href="https://curl.haxx.se/bug/?i=2463">configure: detect (and use) sa_family_t</a>
BGF examples/sftpuploadresume: Fix Windows large file seek
BGF <a href="https://curl.haxx.se/bug/?i=2466">build: cleanup to fix clang warnings/errors</a>
BGF <a href="https://curl.haxx.se/bug/?i=2472">winbuild: updated the documentation</a>
BGF <a href="https://curl.haxx.se/bug/?i=2463">lib: silence null-dereference warnings</a>
BGF <a href="https://curl.haxx.se/bug/?i=2478">travis: bump to clang 6 and gcc 7</a>
BGF <a href="https://curl.haxx.se/bug/?i=2471">travis: build libpsl and make builds use it</a>
BGF <a href="https://curl.haxx.se/bug/?i=2480">proxy: show getenv proxy use in verbose output</a>
BGF <a href="https://curl.haxx.se/bug/?i=2485">duphandle: make sure CURLOPT_RESOLVE is duplicated</a>
BGF <a href="https://curl.haxx.se/bug/?i=2497">all: Refactor malloc+memset to use calloc</a>
BGF <a href="https://curl.haxx.se/bug/?i=2498">checksrc: Fix typo</a>
BGF <a href="https://curl.haxx.se/bug/?i=2491">system.h: Add sparcv8plus to oracle/sunpro 32-bit detection</a>
BGF <a href="https://curl.haxx.se/bug/?i=2496">vauth: Fix typo</a>
BGF <a href="https://curl.haxx.se/bug/?i=2500">ssh: show libSSH2 error code when closing fails</a>
BGF <a href="https://curl.haxx.se/bug/?i=2446">test1148: tolerate progress updates better</a>
BGF <a href="https://curl.haxx.se/bug/?i=2479">urldata: make service names unconditional</a>
BGF <a href="https://curl.haxx.se/bug/?i=2490">configure: keep LD_LIBRARY_PATH changes local</a>
BGF <a href="https://curl.haxx.se/bug/?i=1622">ntlm_sspi: fix authentication using Credential Manager</a>
BGF <a href="https://curl.haxx.se/bug/?i=2376">schannel: add client certificate authentication</a>
BGF <a href="https://curl.haxx.se/bug/?i=2474">winbuild: Support custom devel paths for each dependency</a>
BGF <a href="https://curl.haxx.se/bug/?i=1325">schannel: add support for CURLOPT_CAINFO</a>
BGF <a href="https://curl.haxx.se/bug/?i=2507">http2: handle on_begin_headers() called more than once</a>
BGF <a href="https://curl.haxx.se/bug/?i=2403">openssl: support OpenSSL 1.1.1 verbose-mode trace messages</a>
BGF <a href="https://curl.haxx.se/bug/?i=2493">openssl: fix subjectAltName check on non-ASCII platforms</a>
BGF <a href="https://curl.haxx.se/bug/?i=2513">http2: avoid strstr() on data not zero terminated</a>
BGF <a href="https://curl.haxx.se/bug/?i=1680">http2: clear the "drain counter" when a stream is closed</a>
BGF <a href="https://curl.haxx.se/bug/?i=2416">http2: handle GOAWAY properly</a>
BGF tool_help: clarify --max-time unit of time is seconds
BGF <a href="https://curl.haxx.se/bug/?i=2515">curl.1: clarify that options and URLs can be mixed</a>
BGF <a href="https://curl.haxx.se/bug/?i=2514">http2: convert an assert to run-time check</a>
BGF <a href="https://curl.haxx.se/bug/?i=2499">curl_global_sslset: always provide available backends</a>
BGF <a href="https://curl.haxx.se/bug/?i=2445">ftplistparser: keep state between invokes</a>
BGF Curl_memchr: zero length input can't match
BGF examples/sftpuploadresume: typecast fseek argument to long
BGF examples/http2-upload: expand buffer to avoid silly warning
BGF <a href="https://curl.haxx.se/bug/?i=2494">ctype: restore character classification for non-ASCII platforms</a>
BGF <a href="https://curl.haxx.se/bug/?i=2527">mime: avoid NULL pointer dereference risk</a>
BGF <a href="https://curl.haxx.se/bug/?i=2529">cookies: ensure that we have cookies before writing jar</a>
BGF <a href="https://curl.haxx.se/bug/?i=2525">os400.c: fix checksrc warnings</a>
BGF configure: provide --with-wolfssl as an alias for --with-cyassl
BGF cyassl: adapt to libraries without TLS 1.0 support built-in
BGF <a href="https://curl.haxx.se/bug/?i=2534">http2: get rid of another strstr</a>
BGF <a href="https://curl.haxx.se/bug/?i=2532">checksrc: force indentation of lines after an else</a>
BGF <a href="https://curl.haxx.se/bug/?i=2537">cookies: remove unused macro</a>
BGF CURLINFO_PROTOCOL.3: mention the existing defined names
BGF <a href="https://curl.haxx.se/bug/?i=2533">tests: provide 'manual' as a feature to optionally require</a>
BGF <a href="https://curl.haxx.se/bug/?i=2541">travis: enable libssh2 on both macos and Linux</a>
BGF CURLOPT_URL.3: added ENCODING section
BGF <a href="https://curl.haxx.se/bug/?i=2542">wolfssl: Fix non-blocking connect</a>
BGF vtls: don't define MD5_DIGEST_LENGTH for wolfssl
BGF <a href="https://curl.haxx.se/bug/?i=2544">docs: remove extraneous commas in man pages</a>
BGF <a href="https://curl.haxx.se/bug/?i=2535">URL: fix ASCII dependency in strcpy_url and strlen_url</a>
BGF ssh-libssh.c: fix left shift compiler warning
BGF <a href="https://curl.haxx.se/bug/?i=2180">configure: only check for CA bundle for file-using SSL backends</a>
BGF <a href="https://curl.haxx.se/bug/?i=2531">travis: add an mbedtls build</a>
BGF <a href="https://curl.haxx.se/bug/?i=2546">http: don't set the "rewind" flag when not uploading anything</a>
BGF <a href="https://curl.haxx.se/bug/?i=2548">configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h</a>
BGF <a href="https://curl.haxx.se/bug/?i=2520">transfer: don't unset writesockfd on setup of multiplexed conns</a>
BGF <a href="https://curl.haxx.se/bug/?i=2547">vtls: use unified "supports" bitfield member in backends</a>
BGF <a href="https://curl.haxx.se/bug/?i=2550">URLs: fix one more http url</a>
BGF <a href="https://curl.haxx.se/bug/?i=2528">travis: add a build using WolfSSL</a>
BGF <a href="https://curl.haxx.se/bug/?i=2512">openssl: change FILE ops to BIO ops</a>
BGF <a href="https://curl.haxx.se/bug/?i=2558">travis: add build using NSS</a>
BGF <a href="https://curl.haxx.se/bug/?i=2558">smb: reject negative file sizes</a>
BGF <a href="https://curl.haxx.se/bug/?i=2564">cookies: accept parameter names as cookie name</a>
BGF <a href="https://curl.haxx.se/bug/?i=2520">http2: getsock fix for uploads</a>
BGF <a href="https://curl.haxx.se/bug/?i=2561">all over: fixed format specifiers</a>
BGF <a href="https://curl.haxx.se/bug/?i=2560">http2: use the correct function pointer typedef</a>
</ul>
<a name="7_59_0"></a>
SUBTITLE(Fixed in 7.59.0 - March 14 2018)
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.haxx.se/bug/?i=2268">curl: add --proxy-pinnedpubkey</a>
CHG <a href="https://curl.haxx.se/bug/?i=2238">added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T</a>
CHG <a href="https://curl.haxx.se/bug/?i=2260">CURLOPT_RESOLVE: Add support for multiple IP addresses per entry</a>
CHG <a href="https://curl.haxx.se/bug/?i=2260">Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS</a>
CHG <a href="https://curl.haxx.se/bug/?i=2260">Add new tool option --happy-eyeballs-timeout-ms</a>
CHG <a href="https://curl.haxx.se/bug/?i=2311">Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.haxx.se/docs/adv_2018-97a2.html">openldap: check ldap_get_attribute_ber() results for NULL before using</a>
BGF <a href="https://curl.haxx.se/docs/adv_2018-9cd6.html">FTP: reject path components with control codes</a>
BGF <a href="https://curl.haxx.se/docs/adv_2018-b047.html">readwrite: make sure excess reads don't go beyond buffer end</a>
BGF <a href="https://curl.haxx.se/bug/?i=1872">lib555: drop text conversion and encode data as ascii codes</a>
BGF lib517: make variable static to avoid compiler warning
BGF <a href="https://curl.haxx.se/bug/?i=1872">lib544: sync ascii code data with textual data</a>
BGF <a href="https://curl.haxx.se/bug/?i=2263">GSKit: restore pinnedpubkey functionality</a>
BGF <a href="https://curl.haxx.se/bug/?i=2085">darwinssl: Don't import client certificates into Keychain on macOS</a>
BGF <a href="https://curl.haxx.se/bug/?i=2250">parsedate: fix date parsing for systems with 32 bit long</a>
BGF <a href="https://curl.haxx.se/bug/?i=2258">openssl: fix pinned public key build error in FIPS mode</a>
BGF <a href="https://curl.haxx.se/bug/?i=1429">SChannel/WinSSL: Implement public key pinning</a>
BGF cookies: remove verbose "cookie size:" output
BGF <a href="https://github.com/curl/curl/commit/993dd5651a6c853bfe3870f6a69c7b329fa4e8ce#commitcomment-27070080">progress-bar: don't use stderr explicitly, use bar->out</a>
BGF Fixes for MSDOS
BGF build: open VC15 projects with VS 2017
BGF <a href="https://curl.haxx.se/bug/?i=2269">curl_ctype: private is*() type macros and functions</a>
BGF <a href="https://curl.haxx.se/bug/?i=2202">configure: set PATH_SEPARATOR to colon for PATH w/o separator</a>
BGF <a href="https://curl.haxx.se/bug/?i=2274">winbuild: make linker generate proper PDB</a>
BGF <a href="https://curl.haxx.se/mail/lib-2018-01/0074.html">curl_easy_reset: clear digest auth state</a>
BGF <a href="https://curl.haxx.se/bug/?i=2275">curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6</a>
BGF <a href="https://curl.haxx.se/bug/?i=2205">range: commonize FTP and FILE range handling</a>
BGF <a href="https://curl.haxx.se/bug/?i=2271">progress-bar docs: update to match implementation</a>
BGF fnmatch: do not match the empty string with a character set
BGF <a href="https://curl.haxx.se/mail/lib-2018-01/0114.html">fnmatch: accept an alphanum to be followed by a non-alphanum in char set</a>
BGF <a href="https://curl.haxx.se/mail/lib-2018-01/0122.html">build: fix termios issue on android cross-compile</a>
BGF <a href="https://curl.haxx.se/bug/?i=2278">getdate: return -1 for out of range</a>
BGF <a href="https://curl.haxx.se/bug/?i=2282">formdata: use the mime-content type function</a>
BGF <a href="https://curl.haxx.se/bug/?i=2164">time-cond: fix reading the file modification time on Windows</a>
BGF build-openssl.bat: Extend VC15 support to include Enterprise and Professional
BGF build-wolfssl.bat: Extend VC15 support to include Enterprise and Professional
BGF openssl: Don't add verify locations when verifypeer==0
BGF <a href="https://curl.haxx.se/bug/?i=2291">fnmatch: optimize processing of consecutive *s and ?s pattern characters</a>
BGF <a href="https://curl.haxx.se/bug/?i=2296">schannel: fix compiler warnings</a>
BGF <a href="https://curl.haxx.se/bug/?i=2298">content_encoding: Add "none" alias to "identity"</a>
BGF get_posix_time: only check for overflows if they can happen
BGF <a href="https://curl.haxx.se/bug/?i=2303">http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING</a>
BGF <a href="https://curl.haxx.se/bug/?i=2300">README: language fix</a>
BGF <a href="https://curl.haxx.se/bug/?i=2305">sha256: build with OpenSSL < 0.9.8</a>
BGF <a href="https://curl.haxx.se/bug/?i=2304">smtp: fix processing of initial dot in data</a>
BGF <a href="https://bugzilla.redhat.com/1542256">--tlsauthtype: works only if libcurl is built with TLS-SRP support</a>
BGF <a href="https://curl.haxx.se/bug/?i=2303">tests: new tests for http raw mode</a>
BGF libcurl-security.3: man page discussion security concerns when using libcurl
BGF curl_gssapi: make sure this file too uses our *printf()
BGF BINDINGS: fix curb link (and remove ruby-curl-multi)
BGF <a href="https://bugzilla.redhat.com/1510247">nss: use PK11_CreateManagedGenericObject() if available</a>
BGF <a href="https://curl.haxx.se/bug/?i=1872">travis: add build with iconv enabled</a>
BGF <a href="https://curl.haxx.se/bug/?i=2312">ssh: add two missing state names</a>
BGF CURLOPT_HEADERFUNCTION.3: mention folded headers
BGF <a href="https://curl.haxx.se/mail/lib-2018-02/0056.html">http: fix the max header length detection logic</a>
BGF <a href="https://curl.haxx.se/bug/?i=2314">header callback: don't chop headers into smaller pieces</a>
BGF CURLOPT_HEADER.3: clarify problems with different data sizes
BGF curl --version: show PSL if the run-time lib has it enabled
BGF <a href="https://curl.haxx.se/mail/lib-2018-02/0072.html">examples/sftpuploadresume: resume upload via CURLOPT_APPEND</a>
BGF <a href="https://curl.haxx.se/bug/?i=2302">Return error if called recursively from within callbacks</a>
BGF sasl: prefer PLAIN mechanism over LOGIN
BGF <a href="https://curl.haxx.se/bug/?i=2330">winbuild: Use CALL to run batch scripts</a>
BGF curl_share_setopt.3: connection cache is shared within multi handles
BGF <a href="https://curl.haxx.se/bug/?i=2329">winbuild: Use macros for the names of some build utilities</a>
BGF <a href="https://curl.haxx.se/bug/?i=2325">projects/README: remove reference to dead IDN link/package</a>
BGF <a href="https://curl.haxx.se/bug/?i=2335">lib655: silence compiler warning</a>
BGF configure: Fix version check for OpenSSL 1.1.1
BGF <a href="https://curl.haxx.se/bug/?i=2342">docs/MANUAL: formfind.pl is not accessible on the site anymore</a>
BGF <a href="https://curl.haxx.se/bug/?i=2341">unit1309: fix warning on Windows x64</a>
BGF unit1307: proper cleanup on OOM to fix torture tests
BGF curl_ctype: fix macro redefinition warnings
BGF <a href="https://curl.haxx.se/bug/?i=2337">build: get CFLAGS (including -werror) used for examples and tests</a>
BGF <a href="https://curl.haxx.se/bug/?i=2353">NO_PROXY: fix for IPv6 numericals in the URL</a>
BGF <a href="https://curl.haxx.se/bug/?i=2356">krb5: use nondeprecated functions</a>
BGF <a href="https://curl.haxx.se/bug/?i=2354">winbuild: prefer documented zlib library names</a>
BGF <a href="https://curl.haxx.se/bug/?i=2365">http2: mark the connection for close on GOAWAY</a>
BGF <a href="https://curl.haxx.se/bug/?i=2371">limit-rate: kick in even before "limit" data has been received</a>
BGF <a href="https://curl.haxx.se/bug/?i=2357">HTTP: allow "header;" to replace an internal header with a blank one</a>
BGF http2: verbose output new MAX_CONCURRENT_STREAMS values
BGF SECURITY: distros' max embargo time is 14 days
BGF curl tool: accept --compressed also if Brotli is enabled and zlib is not
BGF <a href="https://curl.haxx.se/bug/?i=2349">WolfSSL: adding TLSv1.3</a>
BGF checksrc.pl: add -i and -m options
BGF CURLOPT_COOKIEFILE.3: "-" as file name means stdin
</ul>
<a name="7_58_0"></a>
SUBTITLE(Fixed in 7.58.0 - January 24 2018)
<p> Changes:
<ul class="changes">
CHG new libssh-powered SSH SCP/SFTP back-end
CHG <a href="https://curl.haxx.se/bug/?i=2128">curl-config: add --ssl-backends</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.haxx.se/docs/adv_2018-824a.html">http2: fix incorrect trailer buffer size</a>
BGF <a href="https://curl.haxx.se/docs/adv_2018-b3bf.html">http: prevent custom Authorization headers in redirects</a>
BGF <a href="https://curl.haxx.se/bug/?i=2118">travis: add boringssl build</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-12/0000.html">examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL</a>
BGF <a href="https://curl.haxx.se/bug/?i=2119">SSL: Avoid magic allocation of SSL backend specific data</a>
BGF <a href="https://curl.haxx.se/bug/?i=2127">lib: don't export all symbols, just everything curl_*</a>
BGF libssh2: send the correct CURLE error code on scp file not found
BGF libssh2: return CURLE_UPLOAD_FAILED on failure to upload
BGF <a href="https://curl.haxx.se/bug/?i=2134">openssl: enable pkcs12 in boringssl builds</a>
BGF <a href="https://curl.haxx.se/bug/?i=2143">libssh2: remove dead code from SSH_SFTP_QUOTE</a>
BGF <a href="https://curl.haxx.se/bug/?i=2150">sasl_getmesssage: make sure we have a long enough string to pass</a>
BGF <a href="https://curl.haxx.se/bug/?i=2132">conncache: fix several lock issues</a>
BGF threaded-shared-conn.c: new example
BGF <a href="https://curl.haxx.se/bug/?i=2152">conncache: only allow multiplexing within same multi handle</a>
BGF <a href="https://curl.haxx.se/bug/?i=2146">configure: check for netinet/in6.h</a>
BGF <a href="https://curl.haxx.se/bug/?i=2154">URL: tolerate backslash after drive letter for FILE:</a>
BGF <a href="https://curl.haxx.se/bug/?i=2159">openldap: add commented out debug possibilities</a>
BGF <a href="https://curl.haxx.se/bug/?i=2160">include: get netinet/in.h before linux/tcp.h</a>
BGF <a href="https://curl.haxx.se/bug/?i=2088">CONNECT: keep close connection flag in http_connect_state struct</a>
BGF BINDINGS: another PostgreSQL client
BGF <a href="https://curl.haxx.se/bug/?i=2158">curl: limit -# update frequency for unknown total size</a>
BGF <a href="https://curl.haxx.se/bug/?i=2076">configure: add AX_CODE_COVERAGE only if using gcc</a>
BGF curl.h: remove incorrect comment about ERRORBUFFER
BGF <a href="https://curl.haxx.se/bug/?i=1916">openssl: improve data-pending check for https proxy</a>
BGF <a href="https://curl.haxx.se/bug/?i=2166">curl: remove __EMX__ #ifdefs</a>
BGF <a href="https://curl.haxx.se/bug/?i=2168">CURLOPT_PRIVATE.3: fix grammar</a>
BGF <a href="https://curl.haxx.se/bug/?i=1900">sftp: allow quoted commands to use relative paths</a>
BGF CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
BGF RESOLVE: output verbose text when trying to set a duplicate name
BGF <a href="https://github.com/curl/curl/pull/1346#issuecomment-350530901">openssl: Disable file buffering for Win32 SSLKEYLOGFILE</a>
BGF <a href="https://curl.haxx.se/bug/?i=2169">multi_done: prune DNS cache</a>
BGF tests: update .gitignore for libtests
BGF tests: mark data files as non-executable in git
BGF CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
BGF curl.1: documented two missing valid exit codes
BGF curl.1: mention http:// and https:// as valid proxy prefixes
BGF <a href="https://curl.haxx.se/bug/?i=2171">vtls: replaced getenv() with curl_getenv()</a>
BGF <a href="https://curl.haxx.se/bug/?i=2173">setopt: less *or equal* than INT_MAX/1000 should be fine</a>
BGF examples/smtp-mail.c: use separate defines for options and mail
BGF <a href="https://curl.haxx.se/bug/?i=2174">curl: support >256 bytes warning messsages</a>
BGF conncache: fix a return code
BGF krb5: fix a potential access of uninitialized memory
BGF rand: add a clang-analyzer work-around
BGF <a href="https://curl.haxx.se/bug/?i=2175">CURLOPT_READFUNCTION.3: refer to argument with correct name</a>
BGF brotli: allow compiling with version 0.6.0
BGF <a href="https://curl.haxx.se/bug/?i=2068">content_encoding: rework zlib_inflate</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-12/0060.html">curl_easy_reset: release mime-related data</a>
BGF <a href="https://curl.haxx.se/bug/?i=2185">examples/rtsp: fix error handling macros</a>
BGF build-openssl.bat: Added support for VC15
BGF build-wolfssl.bat: Added support for VC15
BGF build: Added Visual Studio 2017 project files
BGF winbuild: Added support for VC15
BGF <a href="https://curl.haxx.se/bug/?i=2179">curl: Support size modifiers for --max-filesize</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-12/0057.html">examples/cacertinmem: ignore cert-already-exists error</a>
BGF <a href="https://curl.haxx.se/bug/?i=2194">brotli: data at the end of content can be lost</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-12/0074.html">curl_version_info.3: call the argument 'age'</a>
BGF openssl: fix memory leak of SSLKEYLOGFILE filename
BGF <a href="https://curl.haxx.se/bug/?i=2215">build: remove HAVE_LIMITS_H check</a>
BGF --mail-rcpt: fix short-text description
BGF <a href="https://curl.haxx.se/bug/?i=2222">scripts: allow all perl scripts to be run directly</a>
BGF <a href="https://curl.haxx.se/bug/?i=2200">progress: calculate transfer speed on milliseconds if possible</a>
BGF <a href="https://curl.haxx.se/bug/?i=2216">system.h: check __LONG_MAX__ for defining curl_off_t</a>
BGF <a href="https://curl.haxx.se/bug/?i=2217">easy: fix connection ownership in curl_easy_pause</a>
BGF <a href="https://curl.haxx.se/bug/?i=2230">setopt: reintroduce non-static Curl_vsetopt() for OS400 support</a>
BGF <a href="https://curl.haxx.se/bug/?i=2225">setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values</a>
BGF <a href="https://curl.haxx.se/bug/?i=2234">configure.ac: append extra linker flags instead of prepending them</a>
BGF <a href="https://curl.haxx.se/bug/?i=2212">HTTP: bail out on negative Content-Length: values</a>
BGF docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
BGF <a href="https://curl.haxx.se/bug/?i=2235">mime: clone mime tree upon easy handle duplication</a>
BGF <a href="https://curl.haxx.se/bug/?i=2210">openssl: enable SSLKEYLOGFILE support by default</a>
BGF <a href="https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5206">smtp/pop3/imap_get_message: decrease the data length too...</a>
BGF <a href="https://curl.haxx.se/bug/?i=2239">CURLOPT_TCP_NODELAY.3: fix typo</a>
BGF <a href="https://curl.haxx.se/bug/?i=2211">SMB: fix numeric constant suffix and variable types</a>
BGF <a href="https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5251">ftp-wildcard: fix matching an empty string with "*[^a]"</a>
BGF curl_fnmatch: only allow 5 '*' sections in a single pattern
BGF openssl: fix potential memory leak in SSLKEYLOGFILE logic
BGF <a href="https://curl.haxx.se/bug/?i=2248">SSH: Fix state machine for ssh-agent authentication</a>
BGF <a href="https://curl.haxx.se/bug/?i=2245">examples/url2file.c: add missing curl_global_cleanup() call</a>
BGF <a href="https://curl.haxx.se/bug/?i=2237">http2: don't close connection when single transfer is stopped</a>
BGF libcurl-env.3: first version
BGF <a href="https://curl.haxx.se/bug/?i=2242">curl: progress bar refresh, get width using ioctl()</a>
BGF <a href="https://curl.haxx.se/mail/lib-2018-01/0087.html">CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</a>
</ul>
<a name="7_57_0"></a>
SUBTITLE(Fixed in 7.57.0 - November 29 2017)
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.haxx.se/bug/?i=1934">auth: add support for RFC7616 - HTTP Digest access authentication</a>
CHG <a href="https://curl.haxx.se/bug/?i=2043">share: add support for sharing the connection cache</a>
CHG <a href="https://curl.haxx.se/bug/?i=2045">HTTP: implement Brotli content encoding</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.haxx.se/docs/adv_2017-12e7.html">CVE-2017-8816: NTLM buffer overflow via integer overflow</a>
BGF <a href="https://curl.haxx.se/docs/adv_2017-ae72.html">CVE-2017-8817: FTP wildcard out of bounds read</a>
BGF <a href="https://curl.haxx.se/docs/adv_2017-af0a.html">CVE-2017-8818: SSL out of buffer access</a>
BGF <a href="https://curl.haxx.se/bug/?i=2008">curl_mime_filedata.3: fix typos</a>
BGF <a href="https://curl.haxx.se/bug/?i=2006">libtest: Add required test libraries for lib1552 and lib1553</a>
BGF <a href="https://curl.haxx.se/bug/?i=2004">fix time diffs for systems using unsigned time_t</a>
BGF <a href="https://curl.haxx.se/bug/?i=2013">ftplistparser: memory leak fix: free temporary memory always</a>
BGF <a href="https://curl.haxx.se/bug/?i=1982">multi: allow table handle sizes to be overridden</a>
BGF <a href="https://curl.haxx.se/bug/?i=2016">wildcards: don't use with non-supported protocols</a>
BGF <a href="https://curl.haxx.se/bug/?i=2015">curl_fnmatch: return error on illegal wildcard pattern</a>
BGF <a href="https://curl.haxx.se/bug/?i=2001">transfer: Fix chunked-encoding upload too early exit</a>
BGF <a href="https://curl.haxx.se/bug/?i=2025">curl_setup: Improve detection of CURL_WINDOWS_APP</a>
BGF <a href="https://curl.haxx.se/bug/?i=2023">resolvers: only include anything if needed</a>
BGF setopt: fix CURLOPT_SSH_AUTH_TYPES option read
BGF appveyor: add a win32 build
BGF <a href="https://curl.haxx.se/bug/?i=2021">Curl_timeleft: change return type to timediff_t</a>
BGF <a href="https://curl.haxx.se/bug/?i=1879">cmake: Export libcurl and curl targets to use by other cmake projects</a>
BGF <a href="https://curl.haxx.se/bug/?i=2022">curl: in -F option arg, comma is a delimiter for files only</a>
BGF curl: improved ";type=" handling in -F option arguments
BGF <a href="https://curl.haxx.se/bug/?i=2033">timeval: use mach_absolute_time() on MacOS</a>
BGF <a href="https://curl.haxx.se/bug/?i=2034">curlx: the timeval functions are no longer provided as curlx_*</a>
BGF <a href="https://curl.haxx.se/bug/?i=2026">mkhelp.pl: do not generate comment with current date</a>
BGF <a href="https://curl.haxx.se/bug/?i=2031">memdebug: use send/recv signature for curl_dosend/curl_dorecv</a>
BGF <a href="https://curl.haxx.se/bug/?i=2032">cookie: avoid NULL dereference</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-11/0000.html">url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1</a>
BGF include: remove conncache.h inclusion from where its not needed
BGF <a href="https://curl.haxx.se/bug/?i=2038">CURLOPT_MAXREDIRS: allow -1 as a value</a>
BGF tests: Fixed torture tests on tests 556 and 650
BGF http2: Fixed OOM handling in upgrade request
BGF url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
BGF <a href="https://curl.haxx.se/bug/?i=2047">CURLOPT_INFILESIZE: accept -1</a>
BGF <a href="https://curl.haxx.se/bug/?i=2044">curl: pass through [] in URLs instead of calling globbing error</a>
BGF <a href="https://curl.haxx.se/bug/?i=1959">curl: speed up handling of many URLs</a>
BGF <a href="https://curl.haxx.se/bug/?i=2054">ntlm: avoid malloc(0) for zero length passwords</a>
BGF <a href="https://github.com/curl/curl/commit/f121575#commitcomment-25347120">url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES</a>
BGF <a href="https://curl.haxx.se/bug/?i=2002">HTTP: support multiple Content-Encodings</a>
BGF travis: add a job with brotli enabled
BGF url: remove unncessary NULL-check
BGF fnmatch: remove dead code
BGF <a href="https://curl.haxx.se/bug/?i=2053">connect: store IPv6 connection status after valid connection</a>
BGF <a href="https://curl.haxx.se/bug/?i=2061">imap: deal with commands case insensitively</a>
BGF <a href="https://curl.haxx.se/bug/?i=2024">--interface: add support for Linux VRF</a>
BGF <a href="https://curl.haxx.se/bug/?i=2060">content_encoding: fix inflate_stream for no bytes available</a>
BGF <a href="https://curl.haxx.se/bug/?i=2064">cmake: Correctly include curl.rc in Windows builds</a>
BGF <a href="https://curl.haxx.se/bug/?i=2067">cmake: Add missing setmode check</a>
BGF <a href="https://curl.haxx.se/bug/?i=2071">connect.c: remove executable bit on file</a>
BGF SMB: fix uninitialized local variable
BGF <a href="https://curl.haxx.se/mail/lib-2017-11/0032.html">zlib/brotli: only include header files in modules needing them</a>
BGF <a href="https://curl.haxx.se/bug/?i=2072">URL: return error on malformed URLs with junk after IPv6 bracket</a>
BGF <a href="https://curl.haxx.se/bug/?i=2079">openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY</a>
BGF <a href="https://curl.haxx.se/bug/?i=2080">macOS: Fix missing connectx function with Xcode version older than 9.0</a>
BGF <a href="https://curl.haxx.se/bug/?i=2087">--resolve: allow IP address within [] brackets</a>
BGF <a href="https://curl.haxx.se/bug/?i=2096">examples/curlx: Fix code style</a>
BGF <a href="https://curl.haxx.se/bug/?i=2098">ntlm: remove unnecessary NULL-check to please scan-build</a>
BGF <a href="https://curl.haxx.se/bug/?i=2098">Curl_llist_remove: fix potential NULL pointer deref</a>
BGF <a href="https://curl.haxx.se/bug/?i=2098">mime: fix "Value stored to 'sz' is never read" scan-build error</a>
BGF <a href="https://curl.haxx.se/bug/?i=2098">openssl: fix "Value stored to 'rc' is never read" scan-build error</a>
BGF <a href="https://curl.haxx.se/bug/?i=2098">http2: fix "Value stored to 'hdbuf' is never read" scan-build error</a>
BGF <a href="https://curl.haxx.se/bug/?i=2098">http2: fix "Value stored to 'end' is never read" scan-build error</a>
BGF <a href="https://curl.haxx.se/bug/?i=2098">Curl_open: fix OOM return error correctly</a>
BGF <a href="https://curl.haxx.se/bug/?i=2073">url: reject ASCII control characters and space in host names</a>
BGF <a href="https://curl.haxx.se/bug/?i=2106">examples/rtsp: clear RANGE again after use</a>
BGF <a href="https://curl.haxx.se/bug/?i=2104">connect: improve the bind error message</a>
BGF <a href="https://curl.haxx.se/bug/?i=2097">make: fix "make distclean"</a>
BGF <a href="https://curl.haxx.se/bug/?i=2056">connect: add support for new TCP Fast Open API on Linux</a>
BGF <a href="https://curl.haxx.se/bug/?i=2109">metalink: fix memory-leak and NULL pointer dereference</a>
BGF <a href="https://curl.haxx.se/bug/?i=2110">URL: update "file:" URL handling</a>
BGF <a href="https://curl.haxx.se/bug/?i=2111">ssh: remove check for a NULL pointer</a>
BGF <a href="https://curl.haxx.se/bug/?i=2083">global_init: ignore CURL_GLOBAL_SSL's absense</a>
</ul>
<a name="7_56_1"></a>
SUBTITLE(Fixed in 7.56.1 - October 23 2017)
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.haxx.se/docs/adv_20171023.html">imap: if a FETCH response has no size, don't call write callback</a>
BGF <a href="https://curl.haxx.se/bug/?i=1939">ftp: UBsan fixup 'pointer index expression overflowed</a>
BGF <a href="https://curl.haxx.se/bug/?i=1936">failf: skip the sprintf() if there are no consumers</a>
BGF <a href="https://curl.haxx.se/bug/?i=1923">fuzzer: move to using external curl-fuzzer</a>
BGF <a href="https://curl.haxx.se/bug/?i=1942">lib/Makefile.m32: allow customizing dll suffixes</a>
BGF <a href="https://curl.haxx.se/bug/?i=1946">docs: fix typo in curl_mime_data_cb man page</a>
BGF <a href="https://curl.haxx.se/bug/?i=1794">darwinssl: add support for TLSv1.3</a>
BGF <a href="https://curl.haxx.se/bug/?i=1945">build: fix --disable-crypto-auth</a>
BGF <a href="https://curl.haxx.se/bug/?i=1943">lib/config-win32.h: let SMB/SMBS be enabled with OpenSSL/NSS</a>
BGF <a href="https://curl.haxx.se/bug/?i=1955">openssl: fix build without HAVE_OPAQUE_EVP_PKEY</a>
BGF <a href="https://curl.haxx.se/bug/?i=1950">strtoofft: Remove extraneous null check</a>
BGF <a href="https://curl.haxx.se/bug/?i=1954">multi_cleanup: call DONE on handles that never got that</a>
BGF tests: added flaky keyword to tests 587 and 644
BGF <a href="https://curl.haxx.se/bug/?i=1953">pingpong: return error when trying to send without connection</a>
BGF <a href="https://curl.haxx.se/bug/?i=1960">remove_handle: call multi_done() first, then clear dns cache pointer</a>
BGF mime: be tolerant about setting the same header list twice in a part
BGF mime: improve unbinding top multipart from easy handle
BGF mime: avoid resetting a part's encoder when part's contents change
BGF <a href="https://curl.haxx.se/bug/?i=1962">mime: refuse to add subparts to one of their own descendants</a>
BGF <a href="https://curl.haxx.se/bug/?i=1969">RTSP: avoid integer overflow on funny RTSP responses</a>
BGF <a href="https://curl.haxx.se/bug/?i=1964">curl: don't pass semicolons when parsing Content-Disposition</a>
BGF <a href="https://curl.haxx.se/bug/?i=1948">openssl: enable PKCS12 support for !BoringSSL</a>
BGF FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
BGF CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
BGF CURLOPT_XFERINFODATA.3: fix duplicate see also
BGF <a href="https://curl.haxx.se/bug/?i=1974">test298: verify --ftp-method nowcwd with URL encoded path</a>
BGF <a href="https://curl.haxx.se/bug/?i=1974">FTP: URL decode path for dir listing in nocwd mode</a>
BGF <a href="https://curl.haxx.se/bug/?i=1977">smtp_done: fix memory leak on send failure</a>
BGF ftpserver: support case insensitive commands
BGF test950; verify SMTP with custom request
BGF <a href="https://curl.haxx.se/bug/?i=1979">openssl: don't use old BORINGSSL_YYYYMM macros</a>
BGF <a href="https://curl.haxx.se/bug/?i=1941">setopt: update current connection SSL verify params</a>
BGF winbuild/BUILD.WINDOWS.txt: mention WITH_NGHTTP2
BGF <a href="https://curl.haxx.se/bug/?i=1985">curl: reimplement stdin buffering in -F option</a>
BGF <a href="https://curl.haxx.se/bug/?i=1986">mime: keep "text/plain" content type if user-specified</a>
BGF <a href="https://curl.haxx.se/bug/?i=1988">mime: fix the content reader to handle >16K data properly</a>
BGF <a href="https://curl.haxx.se/bug/?i=1990">configure: remove the C++ compiler check</a>
BGF <a href="https://curl.haxx.se/bug/?i=1980">memdebug: trace send, recv and socket</a>
BGF runtests: use valgrind for torture as well
BGF <a href="https://curl.haxx.se/bug/?i=1992">ldap: silence clang warning</a>
BGF <a href="https://curl.haxx.se/bug/?i=1993">makefile.m32: allow to override gcc, ar and ranlib</a>
BGF <a href="https://curl.haxx.se/bug/?i=1938">setopt: avoid integer overflows when setting millsecond values</a>
BGF <a href="https://curl.haxx.se/bug/?i=1938">setopt: range check most long options</a>
BGF <a href="https://curl.haxx.se/bug/?i=1997">ftp: reject illegal IP/port in PASV 227 response</a>
BGF <a href="https://curl.haxx.se/bug/?i=1999">mime: do not reuse previously computed multipart size</a>
BGF vtls: change struct Curl_ssl `close' field name to `close_one'
BGF os400: add missing symbols in config file
BGF mime: limit bas64-encoded lines length to 76 characters
BGF <a href="https://curl.haxx.se/bug/?i=1998">mk-ca-bundle: Remove URL for aurora</a>
BGF <a href="https://curl.haxx.se/bug/?i=1998">mk-ca-bundle: Fix URL for NSS</a>
</ul>
<a name="7_56_0"></a>
SUBTITLE(Fixed in 7.56.0 - October 4 2017)
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.haxx.se/bug/?i=1735">curl: enable compression for SCP/SFTP with --compressed-ssh</a>
CHG <a href="https://curl.haxx.se/bug/?i=1735">libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION</a>
CHG <a href="https://curl.haxx.se/libcurl/c/curl_global_sslset.html">vtls: added dynamic changing SSL backend with curl_global_sslset()</a>
CHG <a href="https://curl.haxx.se/bug/?i=1839">new MIME API, curl_mime_init() and friends</a>
CHG <a href="https://curl.haxx.se/bug/?i=1866">openssl: initial SSLKEYLOGFILE implementation</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.haxx.se/docs/adv_20171004.html">FTP: zero terminate the entry path even on bad input</a>
BGF examples/ftpuploadresume.c: use portable code
BGF runtests: match keywords case insensitively
BGF <a href="https://curl.haxx.se/bug/?i=1777">travis: build the examples too</a>
BGF <a href="https://curl.haxx.se/bug/?i=1758">strtoofft: reduce integer overflow risks globally</a>
BGF <a href="https://curl.haxx.se/bug/?i=1779">zsh.pl: produce a working completion script again</a>
BGF <a href="https://curl.haxx.se/bug/?i=1785">cmake: remove dead code for CURL_DISABLE_RTMP</a>
BGF <a href="https://curl.haxx.se/bug/?i=1602">progress: Track total times following redirects</a>
BGF <a href="https://curl.haxx.se/bug/?i=1784">configure: fix --disable-threaded-resolver</a>
BGF <a href="https://curl.haxx.se/bug/?i=1786">cmake: remove dead code for DISABLED_THREADSAFE</a>
BGF configure: fix clang version detection
BGF darwinssi: fix error: variable length array used
BGF <a href="https://curl.haxx.se/bug/?i=1790">travis: add metalink to some osx builds</a>
BGF <a href="https://curl.haxx.se/bug/?i=1788">configure: check for __builtin_available() availability</a>
BGF <a href="https://curl.haxx.se/bug/?i=1793">http_proxy: fix build error for CURL_DOES_CONVERSIONS</a>
BGF examples/ftpuploadresume: checksrc compliance
BGF <a href="https://curl.haxx.se/bug/?i=1782">ftp: fix CWD when doing multicwd then nocwd on same connection</a>
BGF <a href="https://curl.haxx.se/bug/?i=1767">system.h: remove all CURL_SIZEOF_* defines</a>
BGF <a href="https://curl.haxx.se/bug/?i=1803">http: Don't wait on CONNECT when there is no proxy</a>
BGF <a href="https://curl.haxx.se/bug/?i=1797">system.h: check for __ppc__ as well</a>
BGF <a href="https://curl.haxx.se/bug/?i=1021">http2_recv: return error better on fatal h2 errors</a>
BGF scripts/contri*sh: use "git log --use-mailmap"
BGF <a href="https://curl.haxx.se/bug/?i=1808">tftp: fix memory leak on too long filename</a>
BGF <a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=872502#10">system.h: fix build for hppa</a>
BGF <a href="https://curl.haxx.se/bug/?i=1799">cmake: enable picky compiler options with clang and gcc</a>
BGF <a href="https://curl.haxx.se/bug/?i=1815">makefile.m32: add support for libidn2</a>
BGF <a href="https://curl.haxx.se/bug/?i=1751">curl: turn off MinGW CRT's globbing</a>
BGF request-target.d: mention added in 7.55.0
BGF <a href="https://curl.haxx.se/bug/?i=1810">curl: shorten and clean up CA cert verification error message</a>
BGF <a href="https://curl.haxx.se/bug/?i=1818">imap: support PREAUTH</a>
BGF CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
BGF examples/threaded-ssl: mention that this is for openssl before 1.1
BGF <a href="https://curl.haxx.se/bug/?i=1832">winbuild: fix embedded manifest option</a>
BGF tests: Make sure libtests & unittests call curl_global_cleanup()
BGF <a href="https://curl.haxx.se/bug/?i=1828">system.h: include sys/poll.h for AIX</a>
BGF <a href="https://curl.haxx.se/bug/?i=1823">darwinssl: handle long strings in TLS certs</a>
BGF <a href="https://curl.haxx.se/bug/?i=1829">strtooff: fix build for systems with long long but no strtoll</a>
BGF asyn-thread: Improved cleanup after OOM situations
BGF <a href="https://curl.haxx.se/bug/?i=1837">HELP-US.md: "How to get started helping out in the curl project"</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-08/0120.html">curl.h: CURLSSLBACKEND_WOLFSSL used wrong value</a>
BGF unit1301: fix error message on first test
BGF <a href="https://curl.haxx.se/bug/?i=1842">ossfuzz: moving towards the ideal integration</a>
BGF http: fix a memory leakage in checkrtspprefix()
BGF examples/post-callback: stop returning one byte at a time
BGF <a href="https://curl.haxx.se/bug/?i=1858">schannel: return CURLE_SSL_CACERT on failed verification</a>
BGF MAIL-ETIQUETTE: added "1.9 Your emails are public"
BGF <a href="https://curl.haxx.se/bug/?i=1859">http-proxy: treat all 2xx as CONNECT success</a>
BGF <a href="https://curl.haxx.se/bug/?i=1846">openssl: use OpenSSL's default ciphers by default</a>
BGF runtests.pl: support attribute "nonewline" in part verify/upload
BGF <a href="https://curl.haxx.se/bug/?i=1861">configure: remove --enable-soname-bump and SONAME_BUMP</a>
BGF <a href="https://curl.haxx.se/bug/?i=1868">travis: add c-ares enabled builds linux + osx</a>
BGF <a href="https://curl.haxx.se/bug/?i=1865">vtls: fix WolfSSL 3.12 build problems</a>
BGF <a href="https://curl.haxx.se/bug/?i=1853">http-proxy: when not doing CONNECT, that phase is done immediately</a>
BGF <a href="https://curl.haxx.se/bug/?i=1870">configure: fix curl_off_t check's include order</a>
BGF configure: use -Wno-varargs on clang 3.9[.X] debug builds
BGF <a href="https://curl.haxx.se/bug/?i=1874">rtsp: do not call fwrite() with NULL pointer FILE *</a>
BGF <a href="https://curl.haxx.se/bug/?i=1877">mbedtls: enable CA path processing</a>
BGF travis: add build without HTTP/SMTP/IMAP
BGF <a href="https://curl.haxx.se/bug/?i=1878">checksrc: verify more code style rules</a>
BGF <a href="https://curl.haxx.se/bug/?i=1887">HTTP proxy: on connection re-use, still use the new remote port</a>
BGF <a href="https://curl.haxx.se/bug/?i=1687">tests: add initial gssapi test using stub implementation</a>
BGF <a href="https://curl.haxx.se/bug/?i=1880">rtsp: Segfault when using WRITEDATA</a>
BGF docs: clarify the CURLOPT_INTERLEAVE* options behavior
BGF <a href="https://curl.haxx.se/mail/lib-2017-09/0031.html">non-ascii: use iconv() with 'char **' argument</a>
BGF server/getpart: provide dummy function to build conversion enabled
BGF conversions: fix several compiler warnings
BGF <a href="https://curl.haxx.se/bug/?i=1891">openssl: add missing includes</a>
BGF <a href="https://curl.haxx.se/bug/?i=1890">schannel: Support partial send for when data is too large</a>
BGF <a href="https://curl.haxx.se/bug/?i=1892">socks: fix incorrect port number in SOCKS4 error message</a>
BGF <a href="https://curl.haxx.se/bug/?i=1893">curl: fix integer overflow in timeout options</a>
BGF <a href="https://curl.haxx.se/bug/?i=1895">travis: on mac, don't install openssl or libidn</a>
BGF <a href="https://curl.haxx.se/bug/?i=1894">cookies: reject oversized cookies instead of truncating</a>
BGF <a href="https://curl.haxx.se/bug/?i=1896">cookies: use lock when using CURLINFO_COOKIELIST</a>
BGF curl: check fseek() return code and bail on error
BGF examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
BGF <a href="https://curl.haxx.se/bug/?i=1904">openssl: only verify RSA private key if supported</a>
BGF <a href="https://curl.haxx.se/bug/?i=1902">tests: make the imap server not verify user+password</a>
BGF <a href="https://curl.haxx.se/bug/?i=1902">imap: quote atoms properly when escaping characters</a>
BGF tests: fix a compiler warning in test 643
BGF <a href="https://curl.haxx.se/bug/?i=1908">file_range: avoid integer overflow when figuring out byte range</a>
BGF <a href="https://curl.haxx.se/bug/?i=1925">curl.h: include <sys/select.h> on cygwin too</a>
BGF <a href="https://curl.haxx.se/bug/?i=1918">reuse_conn: don't copy flags that are known to be equal</a>
BGF <a href="https://curl.haxx.se/bug/?i=1920">http: fix adding custom empty headers to repeated requests</a>
BGF <a href="https://curl.haxx.se/bug/?i=1921">docs: clarify the use of environment variables for proxy</a>
BGF <a href="https://curl.haxx.se/bug/?i=1922">docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS</a>
BGF <a href="https://curl.haxx.se/bug/?i=1928">connect: fix race condition with happy eyeballs timeout</a>
BGF <a href="https://curl.haxx.se/bug/?i=1932">cookie: fix memory leak if path was set twice in header</a>
BGF <a href="https://curl.haxx.se/bug/?i=1917">vtls: compare and clone ssl configs properly</a>
BGF <a href="https://curl.haxx.se/bug/?i=1919">proxy: read the "no_proxy" variable only if necessary</a>
</ul>
<a name="7_55_1"></a>
SUBTITLE(Fixed in 7.55.1 - August 14 2017)
<p> Bugfixes:
<ul class="bugfixes">
BGF build: fix 'make install' with configure, install docs/libcurl/* too
BGF make install: add 8 missing man pages to the installation
BGF <a href="https://curl.haxx.se/bug/?i=1750">curl: do bounds check using a double comparison</a>
BGF <a href="https://curl.haxx.se/bug/?i=1744">dist: Add dictserver.py/negtelnetserver.py to release</a>
BGF <a href="https://curl.haxx.se/bug/?i=1742">digest_sspi: Don't reuse context if the user/passwd has changed</a>
BGF <a href="https://curl.haxx.se/bug/?i=1746">gitignore: ignore top-level .vs folder</a>
BGF <a href="https://curl.haxx.se/bug/?i=1746">build: check out *.sln files with Windows line endings</a>
BGF <a href="https://curl.haxx.se/bug/?i=1753">travis: verify "make install"</a>
BGF <a href="https://curl.haxx.se/bug/?i=1755">dist: fix the cmake build by shipping cmake_uninstall.cmake.in too</a>
BGF metalink: fix error: ‘*’ in boolean context, suggest ‘&&’ instead
BGF <a href="https://curl.haxx.se/bug/?i=1647">configure: use the threaded resolver backend by default if possible</a>
BGF <a href="https://curl.haxx.se/bug/?i=1743">mkhelp.pl: allow executing this script directly</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-08/0050.html">maketgz: remove old *.dist files before making the tarball</a>
BGF <a href="https://curl.haxx.se/bug/?i=1759">openssl: remove CONST_ASN1_BIT_STRING</a>
BGF openssl: fix "error: this statement may fall through"
BGF <a href="https://curl.haxx.se/bug/?i=1761">proxy: fix memory leak in case of invalid proxy server name</a>
BGF <a href="https://curl.haxx.se/bug/?i=1766">curl/system.h: support more architectures (OpenRISC, ARC)</a>
BGF <a href="https://curl.haxx.se/bug/?i=1770">docs: fix typos</a>
BGF <a href="https://curl.haxx.se/bug/?i=1752">curl/system.h: add Oracle Solaris Studio</a>
BGF <a href="https://curl.haxx.se/bug/?i=1769">CURLINFO_TOTAL_TIME: could wrongly return 4200 seconds</a>
BGF docs: --connect-to clarified
BGF <a href="https://curl.haxx.se/bug/?i=1763">cmake: allow user to override CMAKE_DEBUG_POSTFIX</a>
BGF travis: test cmake build on tarball too
BGF <a href="https://curl.haxx.se/bug/?i=1762">redirect: make it handle absolute redirects to IDN names</a>
BGF <a href="https://curl.haxx.se/bug/?i=1774">curl/system.h: fix for gcc on PowerPC</a>
BGF <a href="https://curl.haxx.se/bug/?i=1764">curl --interface: fixed for IPV6 unique local addresses</a>
BGF <a href="https://curl.haxx.se/bug/?i=1719">cmake: threads detection improvements</a>
</ul>
<a name="7_55_0"></a>
SUBTITLE(Fixed in 7.55.0 - August 9 2017)
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.haxx.se/bug/?i=1486">curl: allow --header and --proxy-header read from file</a>
CHG <a href="https://curl.haxx.se/bug/?i=1511">getinfo: provide sizes as curl_off_t</a>
CHG <a href="https://curl.haxx.se/bug/?i=1512">curl: prevent binary output spewed to terminal</a>
CHG <a href="https://curl.haxx.se/bug/?i=1593">curl: added --request-target</a>
CHG <a href="https://curl.haxx.se/bug/?i=1593">libcurl: added CURLOPT_REQUEST_TARGET</a>
CHG <a href="https://curl.haxx.se/bug/?i=1454">curl: added --socks5-{basic,gssapi}: control socks5 auth</a>
CHG <a href="https://curl.haxx.se/bug/?i=1454">libcurl: added CURLOPT_SOCKS5_AUTH</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.haxx.se/docs/adv_20170809A.html">glob: do not parse after a strtoul() overflow range (CVE-2017-1000101)</a>
BGF <a href="https://curl.haxx.se/docs/adv_20170809B.html">tftp: reject file name lengths that don't fit (CVE-2017-1000100)</a>
BGF <a href="https://curl.haxx.se/docs/adv_20170809C.html">file: output the correct buffer to the user (CVE-2017-1000099)</a>
BGF <a href="https://daniel.haxx.se/blog/2017/06/15/target-independent-libcurl-headers/">includes: remove curl/curlbuild.h and curl/curlrules.h</a>
BGF <a href="https://curl.haxx.se/bug/?i=1565">dist: make the hugehelp.c not get regenerated unnecessarily</a>
BGF <a href="https://curl.haxx.se/bug/?i=1531">timers: store internal time stamps as time_t instead of doubles</a>
BGF <a href="https://curl.haxx.se/bug/?i=1556">progress: let "current speed" be UL + DL speeds combined</a>
BGF <a href="https://curl.haxx.se/bug/?i=1547">http-proxy: do the HTTP CONNECT process entirely non-blocking</a>
BGF <a href="https://curl.haxx.se/bug/?i=1538">lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV</a>
BGF <a href="https://curl.haxx.se/bug/?i=1476">fuzz: bring oss-fuzz initial code converted to C89</a>
BGF configure: disable nghttp2 too if HTTP has been disabled
BGF <a href="https://curl.haxx.se/bug/?i=1577">mk-ca-bundle.pl: Check curl's exit code after certdata download</a>
BGF <a href="https://curl.haxx.se/bug/?i=1569">test1148: verify the -# progressbar</a>
BGF <a href="https://curl.haxx.se/bug/?i=1576">tests: stabilize test 2032 and 2033</a>
BGF <a href="https://curl.haxx.se/bug/?i=1546">HTTPS-Proxy: don't offer h2 for https proxy connections</a>
BGF <a href="https://curl.haxx.se/bug/?i=1505">http-proxy: only attempt FTP over HTTP proxy</a>
BGF <a href="https://curl.haxx.se/bug/?i=1578">curl-compilers.m4: enable vla warning for clang</a>
BGF <a href="https://curl.haxx.se/bug/?i=1578">curl-compilers.m4: enable double-promotion warning</a>
BGF <a href="https://curl.haxx.se/bug/?i=1578">curl-compilers.m4: enable missing-variable-declarations clang warning</a>
BGF <a href="https://curl.haxx.se/bug/?i=1578">curl-compilers.m4: enable comma clang warning</a>
BGF <a href="https://curl.haxx.se/bug/?i=1578">Makefile.m32: enable -W for MinGW32 build</a>
BGF <a href="https://curl.haxx.se/bug/?i=1514">CURLOPT_PREQUOTE: not supported for SFTP</a>
BGF http2: fix OOM crash
BGF <a href="https://curl.haxx.se/bug/?i=1584">PIPELINING_SERVER_BL: cleanup the internal list use</a>
BGF mkhelp.pl: fix script name in usage text
BGF lib1521: add curl_easy_getinfo calls to the test set
BGF travis: do the distcheck test build out-of-tree as well
BGF if2ip: fix compiler warning in ISO C90 mode
BGF <a href="https://github.com/curl/curl/commit/73a2fcea0b4adea6ba342cd7ed1149782c214ae3#commitcomment-22655993">lib: fix the djgpp build</a>
BGF <a href="https://curl.haxx.se/bug/?i=1592">typecheck-gcc: add support for CURLINFO_OFF_T</a>
BGF <a href="https://curl.haxx.se/bug/?i=1595">travis: enable typecheck-gcc warnings</a>
BGF <a href="https://curl.haxx.se/bug/?i=1604">maketgz: switch to xz instead of lzma</a>
BGF CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
BGF <a href="https://curl.haxx.se/bug/?i=1606">curl-compilers.m4: fix unknown-warning-option on Apple clang</a>
BGF <a href="https://curl.haxx.se/bug/?i=1610">winbuild: fix boringssl build</a>
BGF <a href="https://curl.haxx.se/bug/?i=1598">curl/system.h: add check for XTENSA for 32bit gcc</a>
BGF test1537: fixed memory leak on OOM
BGF <a href="https://curl.haxx.se/bug/?i=1611">test1521: fix compiler warnings</a>
BGF <a href="https://github.com/curl/curl/pull/1486#issuecomment-310926872">curl: fix memory leak on test 1147 OOM</a>
BGF <a href="https://curl.haxx.se/bug/?i=1614">libtest/make: generate lib1521.c dynamically at build-time</a>
BGF <a href="https://curl.haxx.se/bug/?i=1623">curl_strequal.3: fix typo in SYNOPSIS</a>
BGF <a href="https://curl.haxx.se/bug/?i=1616">progress: prevent resetting t_starttransfer</a>
BGF <a href="https://curl.haxx.se/bug/?i=1620">openssl: improve fallback seed of PRNG with a time based hash</a>
BGF <a href="https://curl.haxx.se/bug/?i=1521">http2: improved PING frame handling</a>
BGF <a href="https://curl.haxx.se/bug/?i=1615">test1450: add simple testing for DICT</a>
BGF <a href="https://curl.haxx.se/bug/?i=1591">make: build the docs subdir only from within src</a>
BGF <a href="https://curl.haxx.se/bug/?i=1621">cmake: Added compatibility options for older Windows versions</a>
BGF <a href="https://curl.haxx.se/bug/?i=1617">gtls: fix build when sizeof(long) < sizeof(void *)</a>
BGF <a href="https://curl.haxx.se/bug/?i=1631">url: make the original string get used on subsequent transfers</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-07/0003.html">timeval.c: Use long long constant type for timeval assignment</a>
BGF tool_sleep: typecast to avoid macos compiler warning
BGF <a href="https://curl.haxx.se/bug/?i=1637">travis.yml: use --enable-werror on debug builds</a>
BGF <a href="https://curl.haxx.se/bug/?i=1630">test1451: add SMB support to the testbed</a>
BGF <a href="https://curl.haxx.se/bug/?i=1638">configure: remove checks for 5 functions never used</a>
BGF <a href="https://curl.haxx.se/bug/?i=1619">configure: try ldap/lber in reversed order first</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-07/0005.html">smb: fix build for djgpp/MSDOS</a>
BGF <a href="https://curl.haxx.se/bug/?i=1642">travis: install nghttp2 on linux builds</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-07/0005.html">smb: add support for CURLOPT_FILETIME</a>
BGF <a href="https://curl.haxx.se/bug/?i=1640">cmake: fix send/recv argument scanner for windows</a>
BGF <a href="https://curl.haxx.se/bug/?i=1639">inet_pton: fix include on windows to get prototype</a>
BGF select.h: avoid macro redefinition harder
BGF cmake: if inet_pton is used, bump _WIN32_WINNT
BGF asyn-thread.c: fix unused variable warnings on macOS
BGF runtests: support "threaded-resolver" as a feature
BGF test506: skip if threaded-resolver
BGF <a href="https://curl.haxx.se/bug/?i=1552">cmake: remove spurious "-l" from linker flags</a>
BGF cmake: add CURL_WERROR for enabling "warning as errors"
BGF <a href="https://github.com/curl/curl/issues/828#issuecomment-313475151">memdebug: don't setbuf() if the file open failed</a>
BGF <a href="https://curl.haxx.se/bug/?i=1612">curl_easy_escape.3: mention the (lack of) encoding</a>
BGF <a href="https://curl.haxx.se/bug/?i=1645">test1452: add telnet negotiation</a>
BGF CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
BGF <a href="https://curl.haxx.se/bug/?i=1649">cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC</a>
BGF <a href="https://curl.haxx.se/bug/?i=1653">tests/valgrind.supp: supress OpenSSL false positive seen on travis</a>
BGF <a href="https://curl.haxx.se/bug/?i=1589">curl_setup_once: Remove ERRNO/SET_ERRNO macros</a>
BGF <a href="https://curl.haxx.se/bug/?i=1665">curl-compilers.m4: disable warning spam with Cygwin's clang</a>
BGF <a href="https://curl.haxx.se/bug/?i=1664">ldap: fix MinGW compiler warning</a>
BGF <a href="https://curl.haxx.se/bug/?i=1591">make: fix docs build on OpenBSD</a>
BGF <a href="https://curl.haxx.se/bug/?i=1672">curl_setup: always define WIN32_LEAN_AND_MEAN on Windows</a>
BGF system.h: include winsock2.h before windows.h
BGF <a href="https://curl.haxx.se/bug/?i=1667">winbuild: build with warning level 4</a>
BGF rtspd: fix MSVC level 4 warning
BGF sockfilt: suppress conversion warning with explicit cast
BGF libtest: fix MSVC warning C4706
BGF <a href="https://github.com/curl/curl/commit/eb16305#commitcomment-23035670">darwinssl: fix pinnedpubkey build error</a>
BGF <a href="https://curl.haxx.se/bug/?i=1682">tests/server/resolve.c: fix deprecation warning</a>
BGF <a href="https://bugzilla.redhat.com/1436158">nss: fix a possible use-after-free in SelectClientCert()</a>
BGF checksrc: escape open brace in regex
BGF <a href="https://curl.haxx.se/bug/?i=1683">multi: mention integer overflow risk if using > 500 million sockets</a>
BGF <a href="https://curl.haxx.se/bug/?i=1703">darwinssl: fix --tlsv1.2 regression</a>
BGF <a href="https://curl.haxx.se/bug/?i=1693">timeval: struct curltime is a struct timeval replacement</a>
BGF <a href="https://curl.haxx.se/bug/?i=1652">curl_rtmp: fix a compiler warning</a>
BGF <a href="https://curl.haxx.se/bug/?i=1704">include.d: clarify that it concerns the response headers</a>
BGF <a href="https://curl.haxx.se/bug/?i=1674">cmake: support make uninstall</a>
BGF <a href="https://github.com/curl/curl/commit/de6de94#commitcomment-23370851">include.d: clarify --include is only for response headers</a>
BGF <a href="https://curl.haxx.se/bug/?i=1688">libcurl: Stop using error codes defined under CURL_NO_OLDIES</a>
BGF <a href="https://curl.haxx.se/bug/?i=1714">http: fix response code parser to avoid integer overflow</a>
BGF <a href="https://curl.haxx.se/bug/?i=1669">configure: fix the check for IdnToUnicode</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-07/0033.html">multi: fix request timer management</a>
BGF <a href="https://curl.haxx.se/bug/?i=1717">curl_threads: fix MSVC compiler warning</a>
BGF travis: build on osx with openssl
BGF travis: build on osx with libressl
BGF CURLOPT_NETRC.3: mention the file name on windows
BGF <a href="https://curl.haxx.se/bug/?i=1711">cmake: set MSVC warning level to 4</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-08/0008.html">netrc: skip lines starting with '#'</a>
BGF darwinssl: fix curlssl_sha256sum() compiler warnings on first argument
BGF BUILD.WINDOWS: mention buildconf.bat for builds off git
BGF <a href="https://curl.haxx.se/bug/?i=1722">darwinssl: silence compiler warnings</a>
BGF travis: build on osx with darwinssl
BGF <a href="https://curl.haxx.se/bug/?i=1718">FTP: skip unnecessary CWD when in nocwd mode</a>
BGF <a href="https://curl.haxx.se/bug/?i=1733">gssapi: fix memory leak of output token in multi round context</a>
BGF <a href="https://curl.haxx.se/bug/?i=1728">getparameter: avoid returning uninitialized 'usedarg'</a>
BGF curl (debug build) easy_events: make event data static
BGF <a href="https://curl.haxx.se/bug/?i=1730">curl: detect and bail out early on parameter integer overflows</a>
BGF <a href="https://curl.haxx.se/bug/?i=1738">configure: fix recv/send/select detection on Android</a>
</ul>
<a name="7_54_1"></a>
SUBTITLE(Fixed in 7.54.1 - June 14 2017)
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.haxx.se/bug/?i=1474">curl: show the libcurl release date in --version output</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.haxx.se/docs/adv_20170614.html">CVE-2017-9502: default protocol drive letter buffer overflow</a>
BGF openssl: fix memory leak in servercert
BGF tests: remove the html and PDF versions from the tarball
BGF mbedtls: enable NTLM (& SMB) even if MD4 support is unavailable
BGF <a href="https://curl.haxx.se/bug/?i=1403">typecheck-gcc: handle function pointers properly</a>
BGF <a href="https://curl.haxx.se/bug/?i=1435">llist: no longer uses malloc</a>
BGF gnutls: removed some code when --disable-verbose is configured
BGF lib: fix maybe-uninitialized warnings
BGF <a href="https://curl.haxx.se/bug/?i=1439">multi: clarify condition in curl_multi_wait</a>
BGF <a href="https://curl.haxx.se/bug/?i=1392">schannel: Don't treat encrypted partial record as pending data</a>
BGF <a href="https://curl.haxx.se/bug/?i=1427">configure: fix the -ldl check for openssl, add -lpthread check</a>
BGF <a href="https://curl.haxx.se/bug/?i=1440">configure: accept -Og and -Ofast GCC flags</a>
BGF <a href="https://curl.haxx.se/bug/?i=1432">Makefile: avoid use of GNU-specific form of $<</a>
BGF if2ip: fix -Wcast-align warning
BGF <a href="https://curl.haxx.se/bug/?i=1420">configure: stop prepending to LDFLAGS, CPPFLAGS</a>
BGF <a href="https://curl.haxx.se/bug/?i=1446">curl: set a 100K buffer size by default</a>
BGF <a href="https://curl.haxx.se/bug/?i=1447">typecheck-gcc: fix _curl_is_slist_info</a>
BGF <a href="https://bugzilla.redhat.com/1444860">nss: do not leak PKCS #11 slot while loading a key</a>
BGF <a href="https://curl.haxx.se/bug/?i=1414">nss: load libnssckbi.so if no other trust is specified</a>
BGF <a href="https://curl.haxx.se/bug/?i=1451">examples: ftpuploadfrommem.c</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-04/0127.html">url: declare get_protocol_family() static</a>
BGF examples/cookie_interface.c: changed to example.com
BGF test1443: test --remote-time
BGF curl: use utimes instead of obsolescent utime when available
BGF url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
BGF curl_rtmp: fix missing-variable-declarations warnings
BGF tests: fixed OOM handling of unit tests to abort test
BGF <a href="https://github.com/curl/curl/issues/1441#issuecomment-297689856">curl_setup: Ensure no more than one IDN lib is enabled</a>
BGF <a href="https://curl.haxx.se/bug/?i=1460">tool: Fix missing prototype warnings for CURL_DOES_CONVERSIONS</a>
BGF <a href="https://curl.haxx.se/bug/?i=1449">CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size</a>
BGF <a href="https://curl.haxx.se/bug/?i=1453">curl: non-boolean command line args reject --no- prefixes</a>
BGF <a href="https://curl.haxx.se/bug/?i=1389">telnet: Write full buffer instead of byte-by-byte</a>
BGF <a href="https://curl.haxx.se/bug/?i=1452">typecheck-gcc: add missing string options</a>
BGF <a href="https://curl.haxx.se/bug/?i=1452">typecheck-gcc: add support for CURLINFO_SOCKET</a>
BGF opt man pages: they all have examples now
BGF <a href="https://curl.haxx.se/bug/?i=1464">curl_setup_once: use SEND_QUAL_ARG2 for swrite</a>
BGF test557: set a known good numeric locale
BGF schannel: return a more specific error code for SEC_E_UNTRUSTED_ROOT
BGF tests/server: make string literals const
BGF <a href="https://curl.haxx.se/bug/?i=1466">runtests: use -R for random order</a>
BGF unit1305: fix compiler warning
BGF curl_slist_append.3: clarify a NULL input creates a new list
BGF tests/server: run checksrc by default in debug-builds
BGF tests: fix -Wcast-qual warnings
BGF runtests.pl: simplify the datacheck read section
BGF <a href="https://curl.haxx.se/bug/?i=1463">curl: remove --environment and tool_writeenv.c</a>
BGF <a href="https://curl.haxx.se/bug/?i=1471">buildconf: fix hang on IRIX</a>
BGF tftp: silence bad-function-cast warning
BGF asyn-thread: fix unused macro warnings
BGF tool_parsecfg: fix -Wcast-qual warning
BGF sendrecv: fix MinGW-w64 warning
BGF <a href="https://curl.haxx.se/bug/?i=1469">test537: use correct variable type</a>
BGF <a href="https://curl.haxx.se/bug/?i=1315">rand: treat fake entropy the same regardless of endianness</a>
BGF <a href="https://curl.haxx.se/bug/?i=1465">curl: generate the --help output</a>
BGF tests: removed redundant --trace-ascii arguments
BGF multi: assign IDs to all timers and make each timer singleton
BGF <a href="https://curl.haxx.se/bug/?i=1472">multi: use a fixed array of timers instead of malloc</a>
BGF <a href="https://curl.haxx.se/bug/?i=1475">mbedtls: Support server renegotiation request</a>
BGF <a href="https://curl.haxx.se/bug/?i=1481">pipeline: fix mistakenly trying to pipeline POSTs</a>
BGF lib510: don't write past the end of the buffer if it's too small
BGF CURLOPT_HTTPPROXYTUNNEL.3: clarify, add example
BGF <a href="https://curl.haxx.se/bug/?i=1400">SecureTransport/DarwinSSL: Implement public key pinning</a>
BGF curl.1: clarify --config
BGF <a href="https://curl.haxx.se/bug/?i=1487">curl_sasl: fix build error with CURL_DISABLE_CRYPTO_AUTH + USE_NTLM</a>
BGF <a href="https://curl.haxx.se/bug/?i=1450">darwinssl: Fix exception when processing a client-side certificate</a>
BGF curl.1: mention --oauth2-bearer's <token> argument
BGF <a href="https://curl.haxx.se/bug/?i=1490">mkhelp.pl: do not add current time into curl binary</a>
BGF <a href="https://curl.haxx.se/bug/?i=1253">asiohiper.cpp / evhiperfifo.c: deal with negative timerfunction input</a>
BGF <a href="https://curl.haxx.se/bug/?i=1479">ssh: fix memory leak in disconnect due to timeout</a>
BGF <a href="https://curl.haxx.se/bug/?i=1488">tests: stabilize test 1034</a>
BGF <a href="https://curl.haxx.se/bug/?i=1461">cmake: auto detection of CURL_CA_BUNDLE/CURL_CA_PATH</a>
BGF <a href="https://curl.haxx.se/bug/?i=1504">assert: avoid, use DEBUGASSERT instead</a>
BGF <a href="https://curl.haxx.se/bug/?i=878">LDAP: using ldap_bind_s on Windows with methods</a>
BGF <a href="https://curl.haxx.se/bug/?i=1489">redirect: store the "would redirect to" URL when max redirs is reached</a>
BGF <a href="https://curl.haxx.se/bug/?i=1321">winbuild: fix the nghttp2 build</a>
BGF examples: fix -Wimplicit-fallthrough warnings
BGF <a href="https://curl.haxx.se/bug/?i=1499">time: fix type conversions and compiler warnings</a>
BGF mbedtls: fix variable shadow warning
BGF <a href="https://curl.haxx.se/bug/?i=1516">test557: fix ubsan runtime error due to int left shift</a>
BGF <a href="https://curl.haxx.se/bug/?i=1294">transfer: init the infilesize from the postfields</a>
BGF <a href="https://curl.haxx.se/bug/?i=1208">docs: clarify NO_PROXY further</a>
BGF build-wolfssl: Sync config with wolfSSL 3.11
BGF <a href="https://curl.haxx.se/bug/?i=1516">curl-compilers.m4: enable -Wshift-sign-overflow for clang</a>
BGF example/externalsocket.c: make it use CLOSESOCKETFUNCTION too
BGF lib574.c: use correct callback proto
BGF lib583: fix compiler warning
BGF <a href="https://curl.haxx.se/bug/?i=1522">curl-compilers.m4: fix compiler_num for clang</a>
BGF <a href="https://curl.haxx.se/bug/?i=1524">typecheck-gcc.h: separate getinfo slist checks from other pointers</a>
BGF typecheck-gcc.h: check CURLINFO_TLS_SSL_PTR and CURLINFO_TLS_SESSION
BGF <a href="https://curl.haxx.se/bug/?i=846">typecheck-gcc.h: check CURLINFO_CERTINFO</a>
BGF <a href="https://curl.haxx.se/bug/?i=1528">build: provide easy code coverage measuring</a>
BGF <a href="https://curl.haxx.se/bug/?i=1530">test1537: dedicated tests of the URL (un)escape API calls</a>
BGF <a href="https://curl.haxx.se/bug/?i=1529">curl_endian: remove unused functions</a>
BGF test1538: verify the libcurl strerror API calls
BGF MD(4|5): silence cast-align clang warning
BGF <a href="https://curl.haxx.se/bug/?i=1532">dedotdot: fixed output for ".." and "." only input</a>
BGF <a href="https://curl.haxx.se/bug/?i=1536">cyassl: define build macros before including ssl.h</a>
BGF updatemanpages.pl: error out on too old git version
BGF curl_sasl: fix unused-variable warning
BGF x509asn1: fix implicit-fallthrough warning with GCC 7
BGF libtest: fix implicit-fallthrough warnings with GCC 7
BGF <a href="https://curl.haxx.se/bug/?i=1539">BINDINGS: add Ring binding</a>
BGF curl_ntlm_core: pass unsigned char to toupper
BGF test1262: verify ftp download with -z for "if older than this"
BGF <a href="https://curl.haxx.se/bug/?i=1543">test1521: test all curl_easy_setopt options</a>
BGF typecheck-gcc: allow CURLOPT_STDERR to be NULL too
BGF metalink: remove unused printf() argument
BGF <a href="https://curl.haxx.se/bug/?i=1550">file: make speedcheck use current time for checks</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-06/0017.html">configure: fix link with librtmp when specifying path</a>
BGF <a href="https://curl.haxx.se/bug/?i=1557">examples/multi-uv.c: fix deprecated symbol</a>
BGF <a href="https://curl.haxx.se/bug/?i=1541">cmake: Fix inconsistency regarding mbed TLS include directory</a>
BGF setopt: check CURLOPT_ADDRESS_SCOPE option range
BGF <a href="https://curl.haxx.se/bug/?i=1561">gitignore: ignore all vim swap files</a>
BGF urlglob: fix division by zero
BGF <a href="https://curl.haxx.se/mail/lib-2017-06/0038.html">libressl: OCSP and intermediate certs workaround no longer needed</a>
</ul>
<a name="7_54_0"></a>
SUBTITLE(Fixed in 7.54.0 - April 19 2017)
<p> Changes:
<ul class="changes">
CHG <a href="https://curl.haxx.se/bug/?i=1166">Add CURL_SSLVERSION_MAX_* constants to CURLOPT_SSLVERSION</a>
CHG <a href="https://curl.haxx.se/bug/?i=1166">Add --max-tls</a>
CHG <a href="https://curl.haxx.se/bug/?i=783">Add CURLOPT_SUPPRESS_CONNECT_HEADERS</a>
CHG <a href="https://curl.haxx.se/bug/?i=783">Add --suppress-connect-headers</a>
</ul>
<p> Bugfixes:
<ul class="bugfixes">
BGF <a href="https://curl.haxx.se/docs/adv_20170419.html">CVE-2017-7468: switch off SSL session id when client cert is used</a>
BGF <a href="https://curl.haxx.se/bug/?i=1275">cmake: Replace invalid UTF-8 byte sequence</a>
BGF tests: use consistent environment variables for setting charset
BGF proxy: fixed a memory leak on OOM
BGF ftp: removed an erroneous free in an OOM path
BGF <a href="https://curl.haxx.se/bug/?i=1287">docs: de-duplicate file lists in the Makefiles</a>
BGF ftp: fixed a NULL pointer dereference on OOM
BGF gopher: fixed detection of an error condition from Curl_urldecode
BGF <a href="https://curl.haxx.se/bug/?i=1289">url: fix unix-socket support for proxy-disabled builds</a>
BGF test1139: allow for the possibility that the man page is not rebuilt
BGF cyassl: get library version string at runtime
BGF digest_sspi: fix compilation warning
BGF tests: enable HTTP/2 tests to run with non-default port numbers
BGF warnless: suppress compiler warning
BGF <a href="https://curl.haxx.se/bug/?i=1240">darwinssl: Warn that disabling host verify also disables SNI</a>
BGF <a href="https://curl.haxx.se/bug/?i=1295">configure: fix for --enable-pthreads</a>
BGF checksrc.bat: Ignore curl_config.h.in, curl_config.h
BGF <a href="https://curl.haxx.se/bug/?i=1301">no-keepalive.d: fix typo</a>
BGF <a href="https://curl.haxx.se/bug/?i=1292">configure: fix --with-zlib when a path is specified</a>
BGF <a href="https://curl.haxx.se/bug/?i=1297">build: fix gcc7 implicit fallthrough warnings</a>
BGF <a href="https://curl.haxx.se/bug/?i=1304">fix potential use of uninitialized variables</a>
BGF <a href="https://curl.haxx.se/bug/?i=1290">CURLOPT_SSL_CTX_FUNCTION.3: Fix EXAMPLE formatting errors</a>
BGF <a href="https://curl.haxx.se/bug/?i=1228">CMake: Reorganize SSL support, separate WinSSL and SSPI</a>
BGF <a href="https://curl.haxx.se/bug/?i=1228">CMake: Add DarwinSSL support</a>
BGF <a href="https://curl.haxx.se/bug/?i=1228">CMake: Add mbedTLS support</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-03/0004.html">ares: return error at once if timed out before name resolve starts</a>
BGF BINDINGS: added C++, perl, go and Scilab bindings
BGF URL: return error on malformed URLs with junk after port number
BGF <a href="https://curl.haxx.se/bug/?i=1308">KNOWN_BUGS: Add DarwinSSL won't import PKCS#12 without a password</a>
BGF <a href="https://curl.haxx.se/bug/?i=1286">http2: Fix assertion error on redirect with CL=0</a>
BGF <a href="https://curl.haxx.se/bug/?i=1058">updatemanpages.pl: Update man pages to use current date and versions</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-03/0002.html">--insecure: clarify that this option is for server connections</a>
BGF mkhelp: simplified the gzip code
BGF build: fixed making man page in out-of-tree tarball builds
BGF tests: disabled 1903 due to flakiness
BGF openssl: add two /* FALLTHROUGH */ to satisfy coverity
BGF cmdline-opts: fixed a few typos
BGF <a href="https://curl.haxx.se/bug/?i=1095">authneg: clear auth.multi flag at http_done</a>
BGF <a href="https://curl.haxx.se/bug/?i=1095">curl_easy_reset: Also reset the authentication state</a>
BGF <a href="https://curl.haxx.se/bug/?i=1239">proxy: skip SSL initialization for closed connections</a>
BGF <a href="https://curl.haxx.se/bug/?i=1317">http_proxy: ignore TE and CL in CONNECT 2xx responses</a>
BGF tool_writeout: fixed a buffer read overrun on --write-out
BGF <a href="https://curl.haxx.se/mail/lib-2017-03/0017.html">make: regenerate docs/curl.1 by running make in docs</a>
BGF <a href="https://curl.haxx.se/bug/?i=1322">winbuild: add basic support for OpenSSL 1.1.x</a>
BGF build: removed redundant DEPENDENCIES from makefiles
BGF CURLINFO_LOCAL_PORT.3: added example
BGF <a href="https://curl.haxx.se/bug/?i=1331">curl: show HTTPS-Proxy options on CURLE_SSL_CACERT</a>
BGF tests: strip more options from non-HTTP --libcurl tests
BGF tests: fixed the documented test server port numbers
BGF runtests.pl: fixed display of the Gopher IPv6 port number
BGF <a href="https://curl.haxx.se/bug/?i=1329">multi: fix streamclose() crash in debug mode</a>
BGF <a href="https://curl.haxx.se/bug/?i=1288">cmake: build manual pages</a>
BGF <a href="https://curl.haxx.se/bug/?i=1288">cmake: add support for building HTML and PDF docs</a>
BGF <a href="https://curl.haxx.se/bug/?i=1272">mbedtls: add support for CURLOPT_SSL_CTX_FUNCTION</a>
BGF make: introduce 'test-nonflaky' target
BGF CURLINFO_PRIMARY_IP.3: add example
BGF <a href="https://curl.haxx.se/bug/?i=1342">tests/README: mention nroff for --manual tests</a>
BGF mkhelp: disable compression if the perl gzip module is unavailable
BGF <a href="https://curl.haxx.se/bug/?i=1348">openssl: fall back on SSL_ERROR_* string when no error detail</a>
BGF <a href="https://curl.haxx.se/bug/?i=1318">asiohiper: make sure socket is open in event_cb</a>
BGF <a href="https://curl.haxx.se/bug/?i=1352">tests/README: make "Run" section foolproof</a>
BGF curl: check for end of input in writeout backslash handling
BGF <a href="https://curl.haxx.se/bug/?i=1344">.gitattributes: turn off CRLF for *.am</a>
BGF multi: fix MinGW-w64 compiler warnings
BGF schannel: fix variable shadowing warning
BGF <a href="https://curl.haxx.se/bug/?i=1361">openssl: exclude DSA code when OPENSSL_NO_DSA is defined</a>
BGF <a href="https://curl.haxx.se/bug/?i=1350">http: Fix proxy connection reuse with basic-auth</a>
BGF <a href="https://curl.haxx.se/bug/?i=1354">pause: handle mixed types of data when paused</a>
BGF http: do not treat FTPS over CONNECT as HTTPS
BGF <a href="https://curl.haxx.se/bug/?i=1365">conncache: make hashkey avoid malloc</a>
BGF <a href="https://curl.haxx.se/bug/?i=1366">make: use the variable MAKE for recursive calls</a>
BGF <a href="https://curl.haxx.se/mail/lib-2017-03/0116.html">curl: fix callback argument inconsistency</a>
BGF <a href="https://github.com/curl/curl/pull/1367">NTLM: check for features with #ifdef instead of #if</a>
BGF cmake: add several missing files to the dist
BGF <a href="https://curl.haxx.se/bug/?i=1362">select: use correct SIZEOF_ constant</a>
BGF connect: fix unreferenced parameter warning
BGF schannel: fix unused variable warning
BGF <a href="https://curl.haxx.se/bug/?i=1371">gcc7: fix ‘*’ in boolean context</a>
BGF http2: silence unused parameter warnings
BGF ssh: fix narrowing conversion warning
BGF <a href="https://github.com/curl/curl/issues/1225#issuecomment-290340890">telnet: (win32) fix read callback return variable</a>
BGF <a href="https://curl.haxx.se/bug/?i=1375">docs: Explain --fail-early does not imply --fail</a>
BGF docs: added examples for CURLINFO_FILETIME.3 and CURLOPT_FILETIME.3
BGF <a href="https://curl.haxx.se/bug/?i=1379">tests/server/util: remove in6addr_any for recent MinGW</a>
BGF <a href="https://curl.haxx.se/bug/?i=1377">multi: make curl_multi_wait avoid malloc in the typical case</a>
BGF <a href="https://curl.haxx.se/bug/?i=1373">include: curl/system.h is a run-time version of curlbuild.h</a>
BGF easy: silence compiler warning
BGF <a href="https://curl.haxx.se/bug/?i=1381">llist: replace Curl_llist_alloc with Curl_llist_init</a>
BGF <a href="https://curl.haxx.se/bug/?i=1376">hash: move key into hash struct to reduce mallocs</a>
BGF <a href="https://curl.haxx.se/bug/?i=1380">url: don't free postponed data on connection reuse</a>
BGF curl_sasl: declare mechtable static
BGF curl: fix Windows Unicode build
BGF <a href="https://curl.haxx.se/bug/?i=1358">multi: fix queueing of pending easy handles</a>
BGF <a href="https://curl.haxx.se/bug/?i=1378">tool_operate: fix MinGW compiler warning</a>
BGF <a href="https://curl.haxx.se/bug/?i=1390">low_speed_limit: improved function for longer time periods</a>
BGF gtls: fix compiler warning
BGF <a href="https://curl.haxx.se/bug/?i=1395">sspi: print out InitializeSecurityContext() error message</a>
BGF <a href="https://curl.haxx.se/bug/?i=1394">schannel: fix compiler warnings</a>
BGF vtls: fix unreferenced variable warnings
BGF INSTALL.md: fix secure transport configure arguments
BGF CURLINFO_SCHEME.3: fix variable type
BGF <a href="https://curl.haxx.se/mail/lib-2017-04/0044.html">libcurl-thread.3: also mention threaded-resolver</a>
BGF <a href="https://curl.haxx.se/bug/?i=851">nss: load CA certificates even with --insecure</a>
BGF <a href="https://curl.haxx.se/bug/?i=1402">openssl: fix this statement may fall through</a>
BGF <a href="https://curl.haxx.se/bug/?i=1406">poll: prefer <poll.h> over <sys/poll.h></a>
BGF <a href="https://curl.haxx.se/bug/?i=1401">polarssl: unbreak build with versions < 1.3.8</a>