The following packages have been upgraded in the Cygwin distribution:
* curl 7.76
* libcurl4 7.76
* libcurl-devel 7.76
* libcurl-doc 7.76
* mingw64-x86_64-curl 7.76
* mingw64-i686-curl 7.76
Command line tool and Library supporting transferring files with
URL syntax, using FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, and
FILE, SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form
based upload, proxies, cookies, user+password authentication (Basic,
Digest, NTLM, Negotiate...), file transfer resume, proxy tunneling and a
busload of other useful tricks.
For more information see the project home page:
https://curl.se/
As there are multiple components and many changes each release please
see below or read /usr/share/doc/curl/RELEASE-NOTES after installation
for complete details:
https://curl.se/changes.html
curl and libcurl 7.76:
* Public curl releases: 198
* Command line options: 240
* curl_easy_setopt() options: 288
* Public functions in libcurl: 85
* Contributors: 2356
This release includes the following changes:
* cookies: Support multiple -b parameters [69]
* curl: add --fail-with-body [17]
* doh: add options to disable ssl verification [5]
* http: add support to read and store the referrer header [30]
* sasl: support SCRAM-SHA-1 and SCRAM-SHA-256 via libgsasl [4]
* vtls: initial implementation of rustls backend [3]
This release includes the following known bugs:
* see /usr/share/doc/curl/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)
This release includes the following bugfixes:
* CVE-2021-22876: strip credentials from the auto-referer header field [88]
* CVE-2021-22890: add 'isproxy' argument to Curl_ssl_get/addsessionid() [55]
* asyn-ares: use consistent resolve error message [37]
* BUG-BOUNTY: removed the cooperation mention
* build: delete unused feature guards [51]
* build: fix --disable-dateparse [1]
* build: fix --disable-http-auth
* build: remove all traces of USE_BLOCKING_SOCKETS [70]
* c-hyper: Remove superfluous pointer check [56]
* c-hyper: support automatic content-encoding [74]
* CI/azure: disable test 433 on azure-ubuntu [105]
* CI/azure: replace python-impacket with python3-impacket [61]
* ci: stop building on freebsd-12-1 [38]
* cmake: fix import library name for non-MS compiler on Windows [10]
* cmake: use CMAKE_INSTALL_INCLUDEDIR indirection [49]
* cmake: support WinIDN [100]
* config: fix building SMB with configure using Win32 Crypto [91]
* config: fix detection of restricted Windows App environment
* configure: fail if --with-quiche is used and quiche isn't found [48]
* configure: make AC_TRY_* into AC_*_IFELSE
* configure: make hyper opt-in, and fail if missing [53]
* configure: only add OpenSSL paths if they are defined [68]
* configure: provide Largefile feature for curl-config [79]
* configure: remove use of deprecated macros
* configure: s/AC_HELP_STRING/AS_HELP_STRING [110]
* cookies: Fix potential NULL pointer deref with PSL [66]
* curl: set CURLOPT_NEW_FILE_PERMS if requested [65]
* curl_easy_setopt.3: add curl_easy_option* functions to SEE ALSO
* curl_multibyte: always return a heap-allocated copy of string [29]
* curl_multibyte: fall back to local code page stat/access on Windows [8]
* Curl_timeleft: check both timeouts during connect [109]
* curl_url_set.3: mention CURLU_PATH_AS_IS [13]
* CURLOPT_QUOTE.3: clarify that libcurl doesn't parse what's sent [16]
* docs/HTTP2: remove the outdated remark about multiplexing for the tool
* docs/Makefile.inc: format to be update-friendly [11]
* docs: add CURLOPT_CURLU to 'See also' in curl_url_ functions [52]
* docs: add missing Arg tag to --stderr [58]
* docs: Add SSL backend names to CURL_SSL_BACKEND [106]
* docs: clarify timeouts for queued transfers in multi API [101]
* docs: Explain DOH transfers inherit some SSL settings [107]
* docs: fix FILE example url in --metalink documentation [19]
* docs: make gen.pl support *italic* and **bold** [112]
* doh: Fix sharing user's resolve list with DOH handles [46]
* doh: Inherit CURLOPT_STDERR from user's easy handle [60]
* dynbuf: bump the max HTTP request to 1MB [39]
* examples: Remove threaded-shared-conn.c due to bug [119]
* file: Support unicode urls on windows [9]
* ftp: add 'list_only' to the transfer state struct [35]
* ftp: add 'prefer_ascii' to the transfer state struct [36]
* FTP: allow SIZE to fail when doing (resumed) upload [78]
* ftp: avoid SIZE when asking for a TYPE A file [23]
* ftp: fix Codacy/cppcheck warning about null pointer arithmetic [34]
* ftp: fix memory leak in ftp_done [96]
* ftp: never set data->set.ftp_append outside setopt [14]
* gen.pl: quote "bare" minuses in the nroff curl.1 [92]
* github: add torture-ftp for FTP-only torture testing [94]
* gnutls: assume nettle crypto support [33]
* gskit: correct the gskit_send() prototype [21]
* hostip: fix build with sync resolver [20]
* hostip: fix crash in sync resolver builds t