./www/curl, Client that groks URLs

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 7.71.1, Package name: curl-7.71.1, Maintainer: leot

Curl is a command line tool for transferring files with URL syntax, supporting
FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. Curl supports
HTTPS certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload,
proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate,
kerberos...), file transfer resume, proxy tunneling and a busload of other
useful tricks.


Required to run:
[security/heimdal] [security/openssl] [www/nghttp2] [devel/libidn2]

Required to build:
[pkgtools/cwrappers]

Package options: gssapi, http2, idn, inet6

Master sites:

SHA1: 243b6ab55421c20500cae8224409c3242d10bcce
RMD160: d41a8efd64fe6d831948bc5ab7ef033a23b5179d
Filesize: 2331.699 KB

Version history: (Expand)


CVS history: (Expand)


   2020-07-01 09:54:09 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
curl: updated to 7.71.1

Fixed in 7.71.1:

cirrus-ci: disable FreeBSD 13 (again)
Curl_inet_ntop: always check the return code
CURLOPT_READFUNCTION.3: provide the upload data size up front
DYNBUF.md: fix a typo: trail => tail
escape: make the URL decode able to reject only %00-bytes
escape: zero length input should return a zero length output
examples/multithread.c: call curl_global_cleanup()
http2: set the correct URL in pushed transfers
http: fix proxy auth with blank password
mbedtls: fix build with disabled proxy support
ngtcp2: sync with current master
openssl: Fix compilation on Windows when ngtcp2 is enabled
Revert "multi: implement wait using winsock events"
sendf: improve the message on client write errors
terminology: call them null-terminated strings
tool_cb_hdr: Fix etag warning output and return code
url: allow user + password to contain "control codes" for HTTP(S)
vtls: compare cert blob when finding a connection to reuse
   2020-06-25 23:20:05 by Thomas Klausner | Files touched by this commit (4) | Package updated
Log message:
curl: update to 7.71.0.

freeze ok: gdt, leot

curl and libcurl 7.71.0

 Public curl releases:         192
 Command line options:         232
 curl_easy_setopt() options:   277
 Public functions in libcurl:  82
 Contributors:                 2202

This release includes the following changes:

 o CURLOPT_SSL_OPTIONS: optional use of Windows' CA store (with openssl) [10]
 o setopt: add CURLOPT_PROXY_ISSUERCERT(_BLOB) for coherency [31]
 o setopt: support certificate options in memory with struct curl_blob [41]
 o tool: Add option --retry-all-errors to retry on any error [27]

This release includes the following bugfixes:

 o CVE-2020-8177: curl overwrite local file with -J [111]
 o CVE-2020-8169: Partial password leak over DNS on HTTP redirect [48]
 o *_sspi: fix bad uses of CURLE_NOT_BUILT_IN [21]
 o all: fix codespell errors [75]
 o altsvc: bump to h3-29 [114]
 o altsvc: fix 'dsthost' may be used uninitialized in this function
 o altsvc: fix parser for lines ending with CRLF [74]
 o altsvc: remove the num field from the altsvc struct [109]
 o appveyor: add non-debug plain autotools-based build [90]
 o appveyor: disable flaky test 1501 and ignore broken 1056
 o appveyor: disable test 1139 instead of ignoring it
 o asyn-*: remove support for never-used NULL entry pointers [19]
 o azure: use matrix strategy to avoid configuration redundancy [83]
 o build: disable more code/data when built without proxy support [84]
 o buildconf: remove -print from the find command that removes files
 o checksrc: enhance the ASTERISKSPACE and update code accordingly [52]
 o CI/macos: fix 'is already installed' errors by using bundle [94]
 o cirrus: disable SFTP and SCP tests [7]
 o CMake: add ENABLE_ALT_SVC option
 o CMake: add HTTP/3 support (ngtcp2+nghttp3, quiche) [34]
 o CMake: add libssh build support [37]
 o CMake: do not build test programs by default [30]
 o CMake: fix runtests.pl with CMake, add new test targets [29]
 o CMake: ignore INTERFACE_LIBRARY targets for pkg-config file [112]
 o CMake: rebuild Makefile.inc.cmake when Makefile.inc changes [58]
 o CODE_REVIEW.md: how to do code reviews in curl [108]
 o configure: fix pthread check with static boringssl
 o configure: for wolfSSL, check for the DES func needed for NTLM
 o configure: only strip first -L from LDFLAGS [89]
 o configure: repair the check if argv can be written to [47]
 o configure: the wolfssh backend does not provide SCP [57]
 o connect: improve happy eyeballs handling [118]
 o connect: make happy eyeballs work for QUIC (again) [16]
 o curl.1: Quote globbed URLs [51]
 o curl: remove -J "informational" written on stdout [36]
 o Curl_addrinfo: use one malloc instead of three [97]
 o CURLINFO_ACTIVESOCKET.3: clarify the description [87]
 o doc: add missing closing parenthesis in CURLINFO_SSL_VERIFYRESULT.3 [5]
 o doc: Rename VERSIONS to VERSIONS.md as it already has Markdown syntax [20]
 o docs/HTTP3: add qlog to the quiche build instruction
 o docs/options-in-versions: which version added each cmdline option [53]
 o docs: unify protocol lists [54]
 o dynbuf: introduce internal generic dynamic buffer functions [17]
 o easy: fix dangling pointer on easy_perform fail [26]
 o examples/ephiperfifo: turn off interval when setting timerfd [79]
 o examples/http2-down/upload: add error checks [78]
 o examples: remove asiohiper.cpp [4]
 o FILEFORMAT: add more features that tests can depend on
 o FILEFORMAT: describe verify/stderr
 o ftp: make domore_getsock() return the secondary socket properly
 o ftp: mark return-ignoring calls to Curl_GetFTPResponse with (void) [64]
 o ftp: shut down the secondary connection properly when SSL is used [43]
 o GnuTLS: Backend support for CURLINFO_SSL_VERIFYRESULT [9]
 o hostip: make Curl_printable_address not return anything [63]
 o hostip: on macOS avoid DoH when given a numerical IP address [69]
 o http2: keep trying to send pending frames after req.upload_done [40]
 o http2: simplify and clean up trailer handling [6]
 o HTTP3.md: clarify cargo build directory [77]
 o http: move header storage to Curl_easy from connectdata [107]
 o libcurl.pc: Merge Libs.private into Libs for static-only builds [28]
 o libssh2: improved error output for wrong quote syntax [39]
 o libssh2: keep sftp errors as 'unsigned long' [103]
 o libssh2: set the expected total size in SCP upload init [2]
 o libtest/cmake: Remove commented code [13]
 o list-only.d: this option existed already in 4.0
 o manpage: add three missing environment variables [121]
 o multi: add defensive check on data->multi->num_alive [96]
 o multi: implement wait using winsock events [120]
 o ngtcp2: cleanup memory when failing to connect [70]
 o ngtcp2: fix build with current ngtcp2 master implementing draft 28 [76]
 o ngtcp2: fix happy eyeballs quic connect crash [118]
 o ngtcp2: introduce qlog support [23]
 o ngtcp2: never call fprintf() in lib code in release version
 o ngtcp2: update with recent API changes [100]
 o ntlm: enable NTLM support with wolfSSL [81]
 o OpenSSL: have CURLOPT_CRLFILE imply CURLSSLOPT_NO_PARTIALCHAIN [55]
 o openssl: set FLAG_TRUSTED_FIRST unconditionally [105]
 o projects: Add crypt32.lib to dependencies for all OpenSSL configs [93]
 o quiche: clean up memory properly when failing to connect [71]
 o quiche: enable qlog output [14]
 o quiche: update SSLKEYLOGFILE support [98]
 o Revert "buildconf: use find -execdir" [38]
 o Revert "ssh: ignore timeouts during disconnect" [67]
 o runtests: remove sleep calls [18]
 o runtests: show elapsed test time with higher precision (ms)
 o select: always use Sleep in Curl_wait_ms on Win32 [82]
 o select: fix overflow protection in Curl_socket_check [22]
 o sendf: make failf() use the mvsnprintf() return code [62]
 o server/sws: fix asan warning on use of uninitialized variable
 o server/util: fix logmsg format using curl_off_t argument [106]
 o sha256: fixed potentially uninitialized variable [61]
 o share: don't set the share flag it something fails [116]
 o sockfilt: make select_ws stop waiting on exit signal event
 o socks: detect connection close during handshake [95]
 o socks: fix expected length of SOCKS5 reply [68]
 o socks: remove unreachable breaks in socks.c and mime.c [101]
 o source cleanup: remove all custom typedef structs [42]
 o test1167: fixes in badsymbols.pl [73]
 o test1177: look for curl.h in source directory [1]
 o test1238: avoid tftpd being busy for tests shortly following [33]
 o test613.pl: make tests 613 and 614 work with OpenSSH for Windows [8]
 o test75: Remove precheck test
 o tests: add https-proxy support to the test suite [49]
 o tests: add support for SSH server variant specific transfer paths [24]
 o tests: add two simple tests for --login-options [99]
 o tests: make test 1248 + 1249 use %NOLISTENPORT [3]
 o tests: pick a random port number for SSH [12]
 o tests: run stunnel for HTTPS and FTPS on dynamic ports [11]
 o timeouts: change millisecond timeouts to timediff_t from time_t [86]
 o timeouts: move ms timeouts to timediff_t from int and long [104]
 o tool: fixup a few --help descriptions [56]
 o tool: support UTF-16 command line on Windows [46]
 o tool_cfgable: free login_options at exit [102]
 o tool_getparam: fix memory leak in parse_args
 o tool_operate: fixed potentially uninitialized variables [60]
 o tool_paramhlp: fixed potentially uninitialized strtol() variable [59]
 o transfer: close connection after excess data has been read [66]
 o travis: add "qlog" as feature in the quiche build
 o travis: Add ngtcp2 and quiche tests for CMake
 o travis: upgrade to bionic, clang-9, improve readability [35]
 o typecheck-gcc.h: CURLINFO_PRIVATE does not need a 'char *' [44]
 o unit1604.c: fix implicit conv from 'SANITIZEcode' to 'CURLcode' [88]
 o url: accept "any length" credentials for proxy auth [72]
 o url: alloc the download buffer at transfer start [85]
 o url: reject too long input when parsing credentials [25]
 o url: sort the protocol schemes in rough popularity order [32]
 o urlapi: accept :: as a valid IPv6 address [15]
 o urldata: leave the HTTP method untouched in the set.* struct [45]
 o urlglob: treat literal IPv6 addresses with zone IDs as a host name [115]
 o user-agent.d: spell out what happens given a blank argument [80]
 o vauth/cleartext: fix theoretical integer overflow [50]
 o version.d: expanded and alpha-sorted [110]
 o vtls: Extract and simplify key log file handling from OpenSSL
 o wolfssl: add SSLKEYLOGFILE support [65]
 o wording: avoid blacklist/whitelist stereotypes [92]
 o write-out.d: added "response_code"
   2020-05-22 12:56:49 by Adam Ciarcinski | Files touched by this commit (624)
Log message:
revbump after updating security/nettle
   2020-05-06 16:05:09 by Adam Ciarcinski | Files touched by this commit (591) | Package updated
Log message:
revbump after boost update
   2020-04-29 13:24:19 by Leonardo Taccari | Files touched by this commit (3) | Package updated
Log message:
curl: Update to 7.70.0

Changes:
7.70.0
------
This release includes the following changes:

 o curl: add --ssl-revoke-best-effort to allow a "best effort" \ 
revocation check
 o mqtt: add new experimental protocol
 o schannel: add "best effort" revocation check option: \ 
CURLSSLOPT_REVOKE_BEST_EFFORT
 o writeout: support to generate JSON output with '%{json}'

This release includes the following bugfixes:

 o appveyor: add Unicode winbuild jobs
 o appveyor: completely disable tests that fail to timeout early
 o appveyor: show failed tests in log even if test is ignored
 o appveyor: sort builds by type and add two new variants
 o appveyor: turn disabled tests into ignored result tests
 o appveyor: use random test server ports based upon APPVEYOR_API_URL
 o build: fixed build for systems with select() in unistd.h
 o buildconf: avoid using tempfile when removing files
 o checksrc: warn on obvious conditional blocks on the same line as if()
 o CI-fuzz: increase fuzz time to 40 minutes
 o ci/tests: fix Azure Pipelines not running Windows containers
 o CI: add build with ngtcp2 + gnutls on Travis CI
 o CI: bring GitHub Actions fuzzing job in line with macOS jobs
 o CI: migrate macOS jobs from Azure and Travis CI to GitHub Actions
 o CI: remove default Ubuntu build from GitHub Actions
 o cirrus: no longer ignore test 504 which is working again
 o cirrus: re-enable the FreeBSD 13 CI builds
 o cleanup: insert newline after if() conditions
 o cmake: add aliases so exported target names are available in tree
 o cmake: add CMAKE_MSVC_RUNTIME_LIBRARY
 o cmake: add support for building with wolfSSL
 o cmake: Avoid MSVC C4273 warnings in send/recv checks
 o cmdline: fix handling of OperationConfig linked list (--next)
 o compressed.d: stress that the headers are not modified
 o config: remove all defines of HAVE_DES_H
 o configure: convert -I to -isystem as a last step
 o configure: document 'compiler_num' for gcc
 o configure: don't check for Security.framework when cross-compiling
 o configure: fix -pedantic-errors for GCC 5 and later
 o configure: remove use of -vec-report0 from CFLAGS with icc
 o connect: happy eyeballs cleanup
 o connect: store connection info for QUIC connections
 o copyright: fix out-of-date copyright ranges and missing headers
 o curl-functions.m4: remove inappropriate AC_REQUIRE
 o curl.h: remnove CURL_VERSION_ESNI. Never supported nor documented
 o curl.h: update comment typo
 o curl: allow both --etag-compare and --etag-save with same file name
 o curl_setup: define _WIN32_WINNT_[OS] symbols
 o CURLINFO_CONDITION_UNMET: return true for 304 http status code
 o CURLINFO_NUM_CONNECTS: improve accuracy
 o CURLOPT_WRITEFUNCTION.3: add inline example and new see-also
 o dist: add mail-rcpt-allowfails.d to the tarball
 o docs/make: generate curl.1 from listed files only
 o docs: add warnings about FILE: URLs on Windows
 o easy: fix curl_easy_duphandle for builds missing IPv6 that use c-ares
 o examples/sessioninfo.c: add include to fix compiler warning
 o github actions: run when pushed to master or */ci + PRs
 o gnutls: bump lowest supported version to 3.1.10
 o gnutls: Don't skip really long certificate fields
 o gnutls: ensure TLS 1.3 when SRP isn't requested
 o gopher: check remaining time left during write busy loop
 o gskit: use our internal select wrapper for portability
 o http2: Fix erroneous debug message that h2 connection closed
 o http: don't consider upload done if the request isn't completely sent off
 o http: free memory when Alt-Used header creation fails due to OOM
 o lib/mk-ca-bundle: skip empty certs
 o lib670: use the same Win32 API check as all other lib tests
 o lib: fix typos in comments and errormessages
 o lib: never define CURL_CA_BUNDLE with a getenv
 o libcurl-multi.3: added missing full stop
 o libssh: avoid options override by configuration files
 o libssh: Use new ECDSA key types to check known hosts
 o mailmap: fixup a few author names/fields
 o Makefile.m32: Improve windres parameter compatibility
 o Makefile: run the cd commands in a subshell
 o memdebug: don't log free(NULL)
 o mime: properly check Content-Type even if it has parameters
 o multi-ssl: reset the SSL backend on `Curl_global_cleanup()`
 o multi: improve parameter check for curl_multi_remove_handle
 o nghttp2: 1.12.0 required
 o ngtcp2: update to git master for the key installation API change
 o nss: check for PK11_CreateDigestContext() returning NULL
 o openssl: adapt to functions marked as deprecated since version 3
 o OS400: update strings for ccsid-ifier (fixes the build)
 o output.d: quote the URL when globbing
 o packages: add OS400/chkstrings.c to the dist
 o RELEASE-PROCEDURE.md: run the copyright.pl script!
 o Revert "file: on Windows, refuse paths that start with \\"
 o runtests: always put test number in servercmd file
 o runtests: provide nicer errormsg when protocol "dump" file is empty
 o schannel: Fix blocking timeout logic
 o schannel: support .P12 or .PFX client certificates
 o scripts/release-notes.pl: add helper script for RELEASE-NOTES maintenance
 o select: make Curl_socket_check take timediff_t timeout
 o select: move duplicate select preparation code into Curl_select
 o select: remove typecast from SOCKET_WRITABLE/READABLE macros
 o server/getpart: make the "XML-parser" stricter
 o server/resolve: remove AI_CANONNAME to make macos tell the truth
 o smtp: set auth correctly
 o sockfilt: add logmsg output to select_ws_wait_thread on Windows
 o sockfilt: fix broken pipe on Windows to be ready in select_ws
 o sockfilt: fix handling of ready closed sockets on Windows
 o sockfilt: fix race-condition of waiting threads and event handling
 o socks: Fix blocking timeout logic
 o src: Remove C99 constructs to ensure C89 compliance
 o SSLCERTS.md: Fix example code for setting CA cert file
 o test1148: tolerate progress updates better (again)
 o test1154: set a proper name
 o test1177: verify that all the CURL_VERSION_ bits are documented
 o test1566: verify --etag-compare that gets a 304 back
 o test1908: avoid using fixed port number in test data
 o test2043: use revoked.badssl.com instead of revoked.grc.com
 o test2100: fix static port instead of dynamic value being used
 o tests/data: fix some XML formatting issues in test cases
 o tests/FILEFORMAT: converted to markdown and extended
 o tests/server/util.c: use curl_off_t instead of long for pid
 o tests: add %NOLISTENPORT and use it
 o tests: add Windows compatible pidwait like pidkill and pidterm
 o tests: fix conflict between Cygwin/msys and Windows PIDs
 o tests: introduce preprocessed test cases
 o tests: make Python-based servers compatible with Python 2 and 3
 o tests: make runtests check that disabled tests exists
 o tests: move pingpong server to dynamic listening port
 o tests: remove python_dependencies for smbserver from our tree
 o tests: run the RTSP test server on a dynamic port number
 o tests: run the SOCKS test server on a dynamic port number
 o tests: run the sws server on "any port"
 o tests: run the TFTP test server on a dynamic port number
 o tests: use Cygwin/msys PIDs for stunnel and sshd on Windows
 o tls: remove the BACKEND define kludge from most backends
 o tool: do not declare functions with Curl_ prefix
 o tool_operate: fix add_parallel_transfers when more are in queue
 o transfer: cap retries of "dead connections" to 5
 o transfer: Switch PUT to GET/HEAD on 303 redirect
 o travis: bump the wolfssl CI build to use 4.4.0
 o travis: update the ngtcp2 build to use the latest OpenSSL patch
 o url: allow non-HTTPS altsvc-matching for debug builds
 o version: add 'cainfo' and 'capath' to version info struct
 o version: increase buffer space for ssl version output
 o version: skip idn2_check_version() check and add precaution
 o vquic: add support for GnuTLS backend of ngtcp2
 o vtls: fix ssl_config memory-leak on out-of-memory
 o warnless: remove code block for icc that didn't work
 o windows: enable UnixSockets with all build toolchains
 o windows: suppress UI in all CryptAcquireContext() calls
   2020-03-11 09:30:37 by Adam Ciarcinski | Files touched by this commit (2) | Package updated
Log message:
curl: updated to 7.69.1

curl and libcurl 7.69.1

This release includes the following bugfixes:
* ares: store dns parameters for duphandle
* cirrus-ci: disable the FreeBSD 13 builds
* curl_share_setopt.3: Note sharing cookies doesn't enable the engine
* lib1564: reduce number of mid-wait wakeup calls
* libssh: Fix matching user-specified MD5 hex key
* MANUAL: update a dict-using command line
* mime: do not perform more than one read in a row
* mime: fix the binary encoder to handle large data properly
* mime: latch last read callback status
* multi: skip EINTR check on wakeup socket if it was closed
* pause: bail out on bad input
* pause: force a connection recheck after unpausing (take 2)
* pause: return early for calls that don't change pause state
* runtests.1: rephrase how to specify what tests to run
* runtests: fix missing use of exe_ext helper function
* seek: fix fall back for missing ftruncate on Windows
* sftp: fix segfault regression introduced in 7.69.0
* sha256: Added SecureTransport implementation
* sha256: Added WinCrypt implementation
* socks4: fix host resolve regression
* socks5: host name resolv regression fix
* tests/server: fix missing use of exe_ext helper function
* tests: fix static ip:port instead of dynamic values being used
* tests: make sleeping portable by avoiding select
* unit1612: fix the inclusion and compilation of the HMAC unit test
* urldata: remove the 'stream_was_rewound' connectdata struct member
* version: make curl_version* thread-safe without using global context
   2020-03-08 17:51:54 by Thomas Klausner | Files touched by this commit (2833)
Log message:
*: recursive bump for libffi
   2020-03-04 19:19:26 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
curl: updated to 7.69.0

This release includes the following changes:

 o polarssl: removed
 o smtp: add CURLOPT_MAIL_RCPT_ALLLOWFAILS and --mail-rcpt-allowfails
 o wolfSSH: new SSH backend

This release includes the following bugfixes:

 o altsvc: improved header parser
 o altsvc: keep a copy of the file name to survive handle reset
 o altsvc: make saving the cache an atomic operation
 o altsvc: use h3-27
 o azure: disable brotli on the macos debug-builds
 o build: remove all HAVE_OPENSSL_ENGINE_H defines
 o checksrc.bat: Fix not being able to run script from the main curl dir
 o cleanup: fix several comment typos
 o cleanup: fix typos and wording in docs and comments
 o cmake: add support for CMAKE_LTO option
 o cmake: clean up and improve build procedures
 o cmake: enable SMB for Windows builds
 o cmake: improve libssh2 check on Windows
 o cmake: Show HTTPS-proxy in the features output
 o cmake: support specifying the target Windows version
 o cmake: use check_symbol_exists also for inet_pton
 o configure.ac: fix comments about --with-quiche
 o configure: disable metalink if mbedTLS is specified
 o configure: disable metalink support for incompatible SSL/TLS
 o conn: do not reuse connection if SOCKS proxy credentials differ
 o conncache: removed unused Curl_conncache_bundle_size()
 o connect: remove some spurious infof() calls
 o connection reuse: respect the max_concurrent_streams limits
 o contributors: also include people who contributed to curl-www
 o contrithanks: use the most recent tag by default
 o cookie: check __Secure- and __Host- case sensitively
 o cookies: make saving atomic with a rename
 o create-dirs.d: mention the mode
 o curl: avoid using strlen for testing if a string is empty
 o curl: error on --alt-svc use w/o support
 o curl: let -D merge headers in one file again
 o curl: make #0 not output the full URL
 o curl: make the -# spaceship bar not wrap the line
 o curl: remove 'config' field from OutStruct
 o curl:progressbarinit: ignore column width from terminals < 20
 o curl_escape.3: add a link to curl_free
 o curl_getenv.3: fix the memory handling description
 o curl_global_init: assume the EINTR bit by default
 o curl_global_init: move the IPv6 works status bool to multi handle
 o CURLINFO_COOKIELIST.3: Fix example
 o CURLOPT_ALTSVC_CTRL.3: fix the DEFAULT wording
 o CURLOPT_PROXY_SSL_OPTIONS.3: Sync with CURLOPT_SSL_OPTIONS.3
 o CURLOPT_REDIR_PROTOCOLS.3: update the DEFAULT section
 o data.d: remove "Multiple files can also be specified"
 o digest: do not quote algorithm in HTTP authorisation
 o docs/HTTP3: add --enable-alt-svc to curl's configure
 o docs/HTTP3: update the OpenSSL branch to use for ngtcp2
 o docs: fix typo on CURLINFO_RETRY_AFTER
 o easy: remove dead code
 o form.d: fix two minor typos
 o ftp: convert 'sock_accepted' to a plain boolean
 o ftp: remove superfluous checking for crlf in user or pwd
 o ftp: shrink temp buffers used for PORT
 o github action: add CIFuzz
 o github: Instructions to post "uname -a" on Unix systems in issues
 o GnuTLS: always send client cert
 o gtls: fixed compilation when using GnuTLS < 3.5.0
 o hostip: move code to resolve IP address literals to `Curl_resolv`
 o HTTP-COOKIES: describe the cookie file format
 o HTTP-COOKIES: mention that a trailing newline is required
 o http2: make pausing/unpausing set/clear local stream window
 o http2: now requires nghttp2 >= 1.12.0
 o http: added 417 response treatment
 o http: increase EXPECT_100_THRESHOLD to 1Mb
 o http: mark POSTs with no body as "upload done" from the start
 o http: move "oauth_bearer" from connectdata to Curl_easy
 o include: remove non-curl prefixed defines
 o KNOWN_BUGS: Multiple methods in a single WWW-Authenticate: header
 o libssh2: add support for forcing a hostkey type
 o libssh2: fix variable type
 o libssh: improve known hosts handling
 o llist: removed unused Curl_llist_move()
 o location.d: the method change is from POST to GET only
 o md4: fixed compilation issues when using GNU TLS gcrypt
 o md4: use init/update/final functions in Secure Transport
 o md5: added implementation for mbedTLS
 o mk-ca-bundle: add support for CKA_NSS_SERVER_DISTRUST_AFTER
 o multi: change curl_multi_wait/poll to error on negative timeout
 o multi: fix outdated comment
 o multi: if Curl_readwrite sets 'comeback' use expire, not loop
 o multi_done: if multiplexed, make conn->data point to another transfer
 o multi_wait: stop loop when sread() returns zero
 o ngtcp2: add error code for QUIC connection errors
 o ngtcp2: fixed to only use AF_INET6 when ENABLE_IPV6
 o ngtcp2: update to git master and its draft-25 support
 o ntlm: move the winbind data into the NTLM data structure
 o ntlm: pass the Curl_easy structure to the private winbind functions
 o ntlm: removed the dependency on the TLS libaries when using MD5
 o ntlm_wb: use Curl_socketpair() for greater portability
 o oauth2-bearer.d: works for HTTP too
 o openssl: make CURLINFO_CERTINFO not truncate x509v3 fields
 o openssl: remove redundant assignment
 o os400: fixed the build
 o pause: force-drain the transfer on unpause
 o quiche: update to draft-25
 o README: mention that the docs is in docs/
 o RELEASE-PROCEDURE: feature win is closed post-release a few days
 o runtests: make random seed fixed for a month
 o runtests: restore the command log
 o schannel: make CURLOPT_CAINFO work better on Windows 7
 o schannel_verify: Fix alt names manual verify for UNICODE builds
 o sha256: use crypto implementations when available
 o singleuse.pl: support new API functions, fix curl_dbg_ handling
 o smtp: support the SMTPUTF8 extension
 o smtp: support UTF-8 based host names in MAIL FROM
 o SOCKS: make the connect phase non-blocking
 o strcase: turn Curl_raw_tolower into static
 o strerror: increase STRERROR_LEN 128 -> 256
 o test1323: added missing 'unit test' feature requirement
 o tests: add a unit test for MD4 digest generation
 o tests: add a unit test for SHA256 digest generation
 o tests: add a unit test for the HMAC hash generation
 o tests: deduce the tool name from the test case for unit tests
 o tests: fix Python 3 compatibility of smbserver.py
 o tool_dirhie: allow directory traversal during creation
 o tool_homedir: change GetEnv() to use libcurl's curl_getenv()
 o tool_util: improve Windows version of tvnow()
 o travis: update non-OpenSSL Linux jobs to Bionic
 o url: include the failure reason when curl_win32_idn_to_ascii() fails
 o urlapi: guess scheme properly with credentials given
 o urldata: do string enums without #ifdefs for build scripts
 o vtls: refactor Curl_multissl_version to make the code clearer
 o win32: USE_WIN32_CRYPTO to enable Win32 based MD4, MD5 and SHA256