curl/RELEASE-NOTES

curl and libcurl 7.83.1

 Public curl releases:         208
 Command line options:         247
 curl_easy_setopt() options:   295
 Public functions in libcurl:  88
 Contributors:                 2632

This release includes the following bugfixes:

 o altsvc: fix host name matching for trailing dots [31]
 o cirrus: Update to FreeBSD 12.3 [24]
 o cirrus: Use pip for Python packages on FreeBSD [23]
 o conn: fix typo 'connnection' -> 'connection' in two function names [1]
 o cookies: make bad_domain() not consider a trailing dot fine [26]
 o curl: free resource in error path [3]
 o curl: guard against size_t wraparound in no-clobber code [4]
 o CURLOPT_DOH_URL.3: mention the known bug [19]
 o CURLOPT_HSTS*FUNCTION.3: document the involved structs as well [20]
 o CURLOPT_SSH_AUTH_TYPES.3: fix the default [18]
 o data/test376: set a proper name
 o GHA/mbedtls: enabled nghttp2 in the build [11]
 o gha: build msh3 [5]
 o gskit: fixed bogus setsockopt calls [17]
 o gskit: remove unused function set_callback [2]
 o hsts: ignore trailing dots when comparing hosts names [28]
 o HTTP-COOKIES: add missing CURLOPT_COOKIESESSION [40]
 o http: move Curl_allow_auth_to_host() [9]
 o http_proxy/hyper: handle closed connections [34]
 o hyper: fix test 357 [32]
 o Makefile: fix "make ca-firefox" [37]
 o mbedtls: bail out if rng init fails [14]
 o mbedtls: fix compile when h2-enabled [12]
 o mbedtls: fix some error messages
 o misc: use "autoreconf -fi" instead buildconf [22]
 o msh3: get msh3 version from MsH3Version [6]
 o msh3: print boolean value as text representation [10]
 o msh3: psss remote_port to MsH3ConnectionOpen [7]
 o ngtcp2: add ca-fallback support for OpenSSL backend [35]
 o nss: return error if seemingly stuck in a cert loop [30]
 o openssl: define HAVE_SSL_CTX_SET_EC_CURVES for libressl [8]
 o post_per_transfer: remove the updated file name [27]
 o sectransp: bail out if SSLSetPeerDomainName fails [33]
 o tests/server: declare variable 'reqlogfile' static [39]
 o tests: fix markdown formatting in README [38]
 o test{898,974,976}: add 'HTTP proxy' keywords [16]
 o tls: check more TLS details for connection reuse [25]
 o url: check SSH config match on connection reuse [21]
 o urlapi: address (harmless) UndefinedBehavior sanitizer warning [15]
 o urlapi: reject percent-decoding host name into separator bytes [29]
 o x509asn1: make do_pubkey handle EC public keys [13]

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

  Adam Rosenfield, Axel Chong, Christian Weisgerber, Daniel Gustafsson,
  Daniel Stenberg, Fabian Keil, Florian Kohnhäuser, Garrett Squire,
  Harry Sintonen, LigH-de on github, Michael Olbrich, Nick Banks,
  Patrick Monnerat, Philip H, Prithvi MK, Ray Satiro, Ryan Schmidt,
  Sergey Markelov, Tatsuhiro Tsujikawa, Yusuke Nakamura
  (20 contributors)

References to bug reports and discussions on issues:

 [1] = https://curl.se/bug/?i=8759
 [2] = https://curl.se/bug/?i=8782
 [3] = https://curl.se/bug/?i=8770
 [4] = https://curl.se/bug/?i=8771
 [5] = https://curl.se/bug/?i=8779
 [6] = https://curl.se/bug/?i=8762
 [7] = https://curl.se/bug/?i=8762
 [8] = https://curl.se/mail/lib-2022-04/0059.html
 [9] = https://curl.se/bug/?i=8772
 [10] = https://curl.se/bug/?i=8763
 [11] = https://curl.se/bug/?i=8767
 [12] = https://curl.se/bug/?i=8766
 [13] = https://curl.se/bug/?i=8757
 [14] = https://curl.se/bug/?i=8796
 [15] = https://curl.se/bug/?i=8797
 [16] = https://curl.se/bug/?i=8791
 [17] = https://curl.se/bug/?i=8793
 [18] = https://curl.se/bug/?i=8792
 [19] = https://curl.se/bug/?i=8790
 [20] = https://curl.se/bug/?i=8788
 [21] = https://curl.se/docs/CVE-2022-27782.html
 [22] = https://curl.se/bug/?i=8777
 [23] = https://curl.se/bug/?i=8783
 [24] = https://curl.se/bug/?i=8783
 [25] = https://curl.se/docs/CVE-2022-27782.html
 [26] = https://curl.se/docs/CVE-2022-27779.html
 [27] = https://curl.se/docs/CVE-2022-27778.html
 [28] = https://curl.se/docs/CVE-2022-30115.html
 [29] = https://curl.se/docs/CVE-2022-27780.html
 [30] = https://curl.se/docs/CVE-2022-27781.html
 [31] = https://curl.se/bug/?i=8819
 [32] = https://curl.se/bug/?i=8811
 [33] = https://curl.se/bug/?i=8798
 [34] = https://curl.se/bug/?i=8700
 [35] = https://curl.se/bug/?i=8828
 [37] = https://curl.se/bug/?i=8804
 [38] = https://curl.se/bug/?i=8802
 [39] = https://curl.se/bug/?i=8799
 [40] = https://curl.se/bug/?i=8795