Curl and libcurl 7.63.0 Public curl releases: 178 Command line options: 219 curl_easy_setopt() options: 261 Public functions in libcurl: 80 Contributors: 1808 This release includes the following changes: o curl: add %{stderr} and %{stdout} for --write-out [24] o curl: add undocumented option --dump-module-paths for win32 [19] o setopt: add CURLOPT_CURLU [27] This release includes the following bugfixes: o CURLOPT_HEADERFUNCTION.3: match 'nitems' name in synopsis and description [45] o CURLOPT_WRITEFUNCTION.3: spell out that it gets called many times o Curl_follow: accept non-supported schemes for "fake" redirects [9] o KNOWN_BUGS: add --proxy-any connection issue [28] o OS400: add URL API ccsid wrappers and sync ILE/RPG bindings o SECURITY-PROCESS: bountygraph shuts down again [50] o TODO: Have the URL API offer IDN decoding [22] o ares: remove fd from multi fd set when ares is about to close the fd [42] o axtls: removed [1] o checksrc: add COPYRIGHTYEAR check [62] o cmake: fix MIT/Heimdal Kerberos detection [53] o configure: include all libraries in ssl-libs fetch [55] o configure: show CFLAGS, LDFLAGS etc in summary [7] o connect: fix building for recent versions of Minix [52] o cookies: create the cookiejar even if no cookies to save [48] o curl: --local-port range was not "including" [29] o curl: fix --local-port integer overflow [25] o curl: fix memory leak reading --writeout from file [51] o curl: fixed UTF-8 in current console code page (Windows) [16] o curl_easy_perform: fix timeout handling [49] o curl_multibyte: fix a malloc overcalculation [18] o curle: move deprecated error code to ifndef block [40] o docs: escape "\n" codes [26] o doh: fix memory leak in OOM situation [56] o doh: make it work for h2-disabled builds too [57] o examples/ephiperfifo: report error when epoll_ctl fails o ftp: avoid two unsigned int overflows in FTP listing parser [30] o host names: allow trailing dot in name resolve, then strip it [46] o http_negotiate: do not close connection until negotiation is completed [36] o impacket: add LICENSE [39] o infof: clearly indicate truncation [14] o libcurl: stop reading from paused transfers [20] o mprintf: avoid unsigned integer overflow warning [10] o netrc: don't ignore the login name specified with "--user" [17] o nss: Fall back to latest supported SSL version [60] o nss: Fix compatibility with nss versions 3.14 to 3.15 [61] o nss: fix fallthrough comment to fix picky compiler warning o nss: remove version selecting dead code [33] o nss: set default max-tls to 1.3/1.2 [32] o ntlm: Remove redundant ifdef USE_OPENSSL [41] o openssl: Remove SSLEAY leftovers [37] o openssl: do not log excess "TLS app data" lines for TLS 1.3 [34] o openssl: do not use file BIOs if not requested [59] o openssl: support session resume with TLS 1.3 [44] o openvms: fix example name [8] o os400: Add curl_easy_conn_upkeep() to ILE/RPG binding o os400: add CURLOPT_CURLU to ILE/RPG binding o os400: fix return type of curl_easy_pause() in ILE/RPG binding o packages: remove old leftover files and dirs [58] o pop3: only do APOP with a valid timestamp [35] o runtests: use the local curl for verifying [6] o schannel: be consistent in Schannel capitalization [23] o schannel: better CURLOPT_CERTINFO support [2] o schannel: use Curl_ prefix for global private symbols [4] o snprintf: renamed and we now only use msnprintf() [47] o ssl: fix compilation with OpenSSL 0.9.7 [43] o ssl: replace all internal uses of CURLE_SSL_CACERT [40] o symbols-in-versions: add missing CURLU_ symbols [15] o test328: verify Content-Encoding: none [54] o tests: disable SO_EXCLUSIVEADDRUSE for stunnel on Windows o tests: drop http_pipe.py script no longer used [5] o tool_cb_wrt: Silence function cast compiler warning [31] o tool_doswin: Fix uninitialized field warning [38] o travis: build with clang sanitizers [3] o travis: remove curl before a normal build [11] o url: a short host name + port is not a scheme [13] o url: fix IPv6 numeral address parser [12] o urlapi: only skip encoding the first '=' with APPENDQUERY set [21] This release includes the following known bugs: o see docs/KNOWN_BUGS (https://curl.haxx.se/docs/knownbugs.html) This release would not have looked like this without help, code, reports and advice from friends like these: Alessandro Ghedini, Alexey Melnichuk, Antoni Villalonga, bobmitchell1956 on github, Brad King, Brian Carpenter, daboul on github, Daniel Gustafsson, Daniel Stenberg, David Benjamin, Dheeraj Sangamkar, dtmsecurity on github, Elia Tufarolo, Frank Gevaerts, Gergely Nagy, Gisle Vanem, Hagai Auro, Han Han, infinnovation-dev on github, James Knight, Jérémy Rocher, Jim Fuller, Kamil Dudka, Konstantin Kushnir, Marcel Raad, Marc Hörsken, Marcos Diazr, Michael Kaufmann, NTMan on Github, Patrick Monnerat, Paul Howarth, Peter Wu, Ray Satiro, Romain Fliedel, Sevan Janiyan, Sven Blumenstein, Tim Rühsen, Tobias Hintze, Tomas Hoger, tpaukrt on github, Viktor Szakats, Yasuhiro Matsumoto, (42 contributors) Thanks! (and sorry if I forgot to mention someone) References to bug reports and discussions on issues: [1] = https://curl.haxx.se/bug/?i=3194 [2] = https://curl.haxx.se/bug/?i=3197 [3] = https://curl.haxx.se/bug/?i=3190 [4] = https://curl.haxx.se/bug/?i=3201 [5] = https://curl.haxx.se/bug/?i=3204 [6] = https://curl.haxx.se/mail/lib-2018-10/0118.html [7] = https://curl.haxx.se/bug/?i=3207 [8] = https://curl.haxx.se/bug/?i=3217 [9] = https://curl.haxx.se/bug/?i=3210 [10] = https://curl.haxx.se/bug/?i=3184 [11] = https://curl.haxx.se/bug/?i=3198 [12] = https://curl.haxx.se/bug/?i=3218 [13] = https://curl.haxx.se/bug/?i=3220 [14] = https://curl.haxx.se/bug/?i=3216 [15] = https://curl.haxx.se/bug/?i=3226 [16] = https://curl.haxx.se/bug/?i=3211 [17] = https://curl.haxx.se/bug/?i=3213 [18] = https://curl.haxx.se/bug/?i=3209 [19] = https://curl.haxx.se/bug/?i=3208 [20] = https://curl.haxx.se/bug/?i=3240 [21] = https://curl.haxx.se/bug/?i=3231 [22] = https://curl.haxx.se/bug/?i=3232 [23] = https://curl.haxx.se/bug/?i=3243 [24] = https://curl.haxx.se/bug/?i=3115 [25] = https://curl.haxx.se/bug/?i=3242 [26] = https://curl.haxx.se/bug/?i=3246 [27] = https://curl.haxx.se/bug/?i=3227 [28] = https://curl.haxx.se/bug/?i=876 [29] = https://curl.haxx.se/bug/?i=3251 [30] = https://curl.haxx.se/bug/?i=3225 [31] = https://curl.haxx.se/bug/?i=3263 [32] = https://curl.haxx.se/bug/?i=3261 [33] = https://curl.haxx.se/bug/?i=3262 [34] = https://curl.haxx.se/bug/?i=3281 [35] = https://curl.haxx.se/bug/?i=3278 [36] = https://curl.haxx.se/bug/?i=3275 [37] = https://curl.haxx.se/bug/?i=3270 [38] = https://curl.haxx.se/bug/?i=3254 [39] = https://curl.haxx.se/bug/?i=3276 [40] = https://curl.haxx.se/bug/?i=3291 [41] = https://curl.haxx.se/bug/?i=3269 [42] = https://curl.haxx.se/bug/?i=3238 [43] = https://curl.haxx.se/bug/?i=3266 [44] = https://curl.haxx.se/bug/?i=3202 [45] = https://curl.haxx.se/bug/?i=3295 [46] = https://curl.haxx.se/bug/?i=3022 [47] = https://curl.haxx.se/bug/?i=3296 [48] = https://curl.haxx.se/bug/?i=3299 [49] = https://curl.haxx.se/bug/?i=3305 [50] = https://curl.haxx.se/bug/?i=3311 [51] = https://curl.haxx.se/bug/?i=3322 [52] = https://curl.haxx.se/bug/?i=3323 [53] = https://curl.haxx.se/bug/?i=3316 [54] = https://curl.haxx.se/bug/?i=3317 [55] = https://curl.haxx.se/bug/?i=3193 [56] = https://curl.haxx.se/bug/?i=3342 [57] = https://curl.haxx.se/bug/?i=3325 [58] = https://curl.haxx.se/bug/?i=3331 [59] = https://curl.haxx.se/bug/?i=3339 [60] = https://curl.haxx.se/bug/?i=3261 [61] = https://curl.haxx.se/bug/?i=3337 [62] = https://curl.haxx.se/bug/?i=3303