curl-7.68.0

[Douglas R. Reno]

New minor version

[Bruce Dubbs]

curl and libcurl 7.68.0

This release includes the following changes:

• TLS: add BearSSL vtls implementation [37]
• XFERINFOFUNCTION: support CURL_PROGRESSFUNC_CONTINUE [36]
• curl: add --etag-compare and --etag-save [31]
• curl: add --parallel-immediate [29]
• multi: add curl_multi_wakeup() [38]
• openssl: CURLSSLOPT_NO_PARTIALCHAIN can disable partial cert chains [45]

This release includes the following bugfixes:

• CVE-2019-15601: file: on Windows, refuse paths that start with \\ [106]
• Azure Pipelines: add several builds
• CMake: add support for building with the NSS vtls backend [43]
• CURL-DISABLE: initial docs for the CURL_DISABLE_* defines [19]
• CURLOPT_HEADERFUNCTION.3: Document that size is always 1 [100]
• CURLOPT_QUOTE.3: fix typos [78]
• CURLOPT_READFUNCTION.3: fix the example [107]
• CURLOPT_URL.3: "curl supports SMB version 1 (only)"
• CURLOPT_VERBOSE.3: see also ERRORBUFFER
• HISTORY: added cmake, HTTP/3 and parallel downloads with curl
• HISTORY: the SMB(S) support landed in 2014
• INSTALL.md: provide Android build instructions [10]
• KNOWN_BUGS: Connection information when using TCP Fast Open [85]
• KNOWN_BUGS: LDAP on Windows doesn't work correctly [86]
• KNOWN_BUGS: TLS session cache doesn't work with TFO [56]
• OPENSOCKETFUNCTION.3: correct the purpose description [48]
• TrackMemory tests: always remove CR before LF [111]
• altsvc: bump to h3-24 [6]
• altsvc: make the save function ignore NULL filenames [67]
• build: Disable Visual Studio warning "conditional expression is constant" [49]
• build: fix for CURL_DISABLE_DOH [2]
• checksrc.bat: Add a check for vquic and vssh directories [40]
• checksrc: repair the copyrightyear check [25]
• cirrus-ci: enable clang sanitizers on freebsd 13 [60]
• cirrus: Drop the FreeBSD 10.4 build
• config-win32: cpu-machine-OS for Windows on ARM [13]
• configure: avoid unportable `==' test(1) operator [1]
• configure: enable IPv6 support without getaddrinfo [44]
• configure: fix typo in help text [4]
• conncache: CONNECT_ONLY connections assumed always in-use [71]
• conncache: fix multi-thread use of shared connection cache [61]
• copyrights: fix copyright year range [25]
• create_conn: prefer multiplexing to using new connections [76]
• curl -w: handle a blank input file correctly [105]
• curl.h: add two missing defines for "pre ISO C" compilers [75]
• curl/parseconfig: fix mem-leak [81]
• curl/parseconfig: use curl_free() to free memory allocated by libcurl [80]
• curl: cleanup multi handle on failure [103]
• curl: fix --upload-file . hangs if delay in STDIN [35]
• curl: fix -T globbing [16]
• curl: improved cleanup in upload error path [69]
• curl: make a few char pointers point to const char instead [95]
• curl: properly free mimepost data [104]
• curl: show better error message when no homedir is found [47]
• curl: show error for --http3 if libcurl lacks support [108]
• curl_setup_once: consistently use WHILE_FALSE in macros [54]
• define: remove HAVE_ENGINE_LOAD_BUILTIN_ENGINES, not used anymore [83]
• docs: Change 'experiemental' to 'experimental' [30]
• docs: TLS SRP doesn't work with TLS 1.3 [87]
• docs: fix several typos [62]
• docs: mention CURL_MAX_INPUT_LENGTH restrictions [109]
• doh: improved both encoding and decoding [11]
• doh: make it behave when built without proxy support [68]
• examples/postinmemory.c: Call curl_global_cleanup always [101]
• examples/url2file.c: corrected erroneous comment [102]
• examples: add multi-poll.c [14]
• global_init: undo the "intialized" bump in case of failure [52]
• hostip: suppress compiler warning [64]
• http_ntlm: Remove duplicate NSS initialisation [55]
• lib: Move lib/ssh.h -> lib/vssh/ssh.h [9]
• lib: fix compiler warnings with CURL_DISABLE_VERBOSE_STRINGS [93]
• lib: fix warnings found when porting to NuttX [99]
• lib: remove ASSIGNWITHINCONDITION exceptions, use our code style [84]
• lib: remove erroneous +x file permission on some c files [99]
• libssh2: add support for ECDSA and ed25519 knownhost keys [89]
• multi.h: remove INITIAL_MAX_CONCURRENT_STREAMS from public header [110]
• multi: free sockhash on OOM [63]
• multi_poll: avoid busy-loop when called without easy handles attached [15]
• ngtcp2: Support the latest update key callback type [92]
• ngtcp2: fix thread-safety bug in error-handling [33]
• ngtcp2: free used resources on disconnect [7]
• ngtcp2: handle key updates as ngtcp2 master branch tells us [8]
• ngtcp2: increase QUIC window size when data is consumed [12]
• ngtcp2: use overflow buffer for extra HTTP/3 data [5]
• ntlm: USE_WIN32_CRYPTO check removed to get USE_NTLM2SESSION set [3]
• ntlm_wb: fix double-free in OOM [65]
• openssl: Revert to less sensitivity for SYSCALL errors [26]
• openssl: improve error message for SYSCALL during connect [27]
• openssl: prevent recursive function calls from ctx callbacks [18]
• openssl: retrieve reported LibreSSL version at runtime [50]
• openssl: set X509_V_FLAG_PARTIAL_CHAIN by default [46]
• parsedate: offer a getdate_capped() alternative [53]
• pause: avoid updating socket if done was already called [22]
• projects: Fix Visual Studio projects SSH builds [41]
• projects: Fix Visual Studio wolfSSL configurations
• quiche: reject HTTP/3 headers in the wrong order [17]
• remove_handle: clear expire timers after multi_done() [20]
• runtests: --repeat=[num] to repeat tests [91]
• runtests: introduce --shallow to reduce huge torture tests [70]
• schannel: fix --tls-max for when min is --tlsv1 or default [39]
• setopt: Fix ALPN / NPN user option when built without HTTP2 [42]
• strerror: Add Curl_winapi_strerror for Win API specific errors [51]
• strerror: Fix an error looking up some Windows error strings
• strerror: Fix compiler warning "empty expression" [79]
• system.h: fix for MCST lcc compiler [23]
• test/sws: search for "Testno:" header unconditionally if no testno [73]
• test1175: verify symbols-in-versions and libcurl-errors.3 in sync [28]
• test1270: a basic -w redirect_url test [82]
• test1456: remove the use of a fixed local port number [77]
• test1558: use double slash after file: [21]
• test1560: require IPv6 for IPv6 aware URL parsing [24]
• tests/lib1557: fix mem-leak in OOM [66]
• tests/lib1559: fix mem-leak in OOM [66]
• tests/lib1591: free memory properly on OOM, in the trailers callback [90]
• tests/unit1607: fix mem-leak in OOM [66]
• tests/unit1609: fix mem-leak in OOM [66]
• tests/unit1620: fix bad free in OOM [66]
• tests: Change NTLM tests to require SSL [96]
• tests: Fix bounce requests with truncated writes [94]
• tests: fix build with CURL_DISABLE_DOH [64]
• tests: fix permissions of ssh keys in WSL [58]
• tests: make it possible to set executable extensions [58]
• tests: make sure checksrc runs on header files too
• tests: set LC_ALL=en_US.UTF-8 instead of blank in several tests [74]
• tests: use DoH feature for DoH tests [64]
• tests: use \r\n for log messages in WSL [58]
• tool_operate: fix mem leak when failed config parse [98]
• travis: Fix error detection [97]
• travis: abandon coveralls, it is not reliable [57]
• travis: build ngtcp2 with --enable-lib-only [32]
• travis: export the CC/CXX variables when set [34]
• vtls: make BearSSL possible to set with CURL_SSL_BACKEND [72]
• winbuild: Define CARES_STATICLIB when WITH_CARES=static [59]
• winbuild: Document CURL_STATICLIB requirement for static libcurl [88]

[Bruce Dubbs]

Fixed at revision 22560.