diff options
| author | robot-contrib <robot-contrib@yandex-team.ru> | 2022-04-28 16:36:59 +0300 |
|---|---|---|
| committer | robot-contrib <robot-contrib@yandex-team.ru> | 2022-04-28 16:36:59 +0300 |
| commit | 1d80f65d6a77d0e4c1b3a18a6a970715934ecd75 (patch) | |
| tree | e0363932ca34036e90ac4cd461092c763acb3a4d /contrib/libs/curl/RELEASE-NOTES | |
| parent | 505c75794e448a38ffa0b066ccef3299aec10239 (diff) | |
| download | ydb-1d80f65d6a77d0e4c1b3a18a6a970715934ecd75.tar.gz | |
Update contrib/libs/curl to 7.83.0
ref:72dd794f7af62e3844c14f0a9bcee77e66f30a36
Diffstat (limited to 'contrib/libs/curl/RELEASE-NOTES')
| -rw-r--r-- | contrib/libs/curl/RELEASE-NOTES | 626 |
1 files changed, 273 insertions, 353 deletions
diff --git a/contrib/libs/curl/RELEASE-NOTES b/contrib/libs/curl/RELEASE-NOTES index b16e31f1eb..2a42846769 100644 --- a/contrib/libs/curl/RELEASE-NOTES +++ b/contrib/libs/curl/RELEASE-NOTES @@ -1,191 +1,147 @@ -curl and libcurl 7.82.0 +curl and libcurl 7.83.0 - Public curl releases: 206 - Command line options: 245 + Public curl releases: 207 + Command line options: 247 curl_easy_setopt() options: 295 - Public functions in libcurl: 86 - Contributors: 2597 + Public functions in libcurl: 88 + Contributors: 2625 This release includes the following changes: - o curl: add --json [67] - o mesalink: remove support [23] + o curl: add %header{name} experimental support in -w handling + o curl: add %{header_json} experimental support in -w handling + o curl: add --no-clobber [28] + o curl: add --remove-on-error [11] + o header api: add curl_easy_header and curl_easy_nextheader [56] + o msh3: add support for QUIC and HTTP/3 using msh3 [84] This release includes the following bugfixes: - o appveyor: update images from VS 2019 to 2022 - o appveyor: use VS 2017 image for the autotools builds - o azure-pipelines: add a build on Windows with libssh [154] - o bearssl: fix connect error on expired cert and no verify [132] - o bearssl: fix EXC_BAD_ACCESS on incomplete CA cert [131] - o bearssl: fix session resumption (session id) [133] - o build: enable -Warith-conversion - o build: fix -Wenum-conversion handling - o build: fix ngtcp2 crypto library detection [63] - o checkprefix: remove strlen calls [128] - o checksrc: fix typo in comment [34] - o CI: move 'distcheck' job from zuul to azure pipelines [60] - o CI: move scan-build job from Zuul to Azure Pipelines [59] - o CI: move the NSS job from zuul to GHA [84] - o ci: move the OpenSSL + c-ares job from Zuul to Circle CI [75] - o CI: move the rustls CI job to GHA from Zuul [8] - o CI: move two jobs from Zuul to Circle CI [73] - o CI: test building wolfssl with --enable-opensslextra [42] - o CI: workflows/wolfssl: install impacket [47] - o circleci: add a job using libssh [121] - o cirlceci: also run a c-ares job on arm with debug enabled [74] - o cmake: fix iOS CMake project generation error [13] - o cmdline-opts/gen.pl: fix option matching to improve references [50] - o config.d: Clarify _curlrc filename is still valid on Windows [95] - o configure.ac: use user-specified gssapi dir when using pkg-config [136] - o configure: change output for cross-compiled alt-svc support [140] - o configure: fix '--enable-code-coverage' typo [110] - o configure: remove support for "embedded ares" [82] - o configure: requires --with-nss-deprecated to build with NSS [114] - o configure: set CURL_LIBRARY_PATH for nghttp2 [58] - o configure: support specification of a nghttp2 library path [101] - o configure: use correct CFLAGS for threaded resolver with xlC on AIX [54] - o curl tool: erase some more sensitive command line arguments [22] - o curl-functions.m4: fix LIBRARY_PATH adjustment to avoid eval [5] - o curl-functions.m4: revert DYLD_LIBRARY_PATH tricks in CURL_RUN_IFELSE [9] - o curl-openssl: fix SRP check for OpenSSL 3.0 [86] - o curl-openssl: remove the OpenSSL headers and library versions check [35] - o curl.h: fix typo [129] - o curl: remove "separators" (when using globbed URLs) [32] - o curl_getdate.3: remove pointless .PP line [68] - o curl_multi_socket.3: remove callback and typical usage descriptions [7] - o curl_url_set.3: mention when CURLU_ALLOW_SPACE was added - o CURLMOPT_TIMERFUNCTION/DATA.3: fix the examples [27] - o CURLOPT_PROGRESSFUNCTION.3: fix example struct assignment [147] - o CURLOPT_RESOLVE.3: change example port to 443 - o CURLOPT_XFERINFOFUNCTION.3: fix example struct assignment [153] - o CURLOPT_XFERINFOFUNCTION.3: fix typo in example [81] - o CURLSHOPT_LOCKFUNC.3: fix typo "relased" -> "released" [71] - o des: fix compile break for OpenSSL without DES [141] - o docs/cmdline-opts: add "mutexed" options for more http versions [25] - o docs/DEPRECATE: remove NPN support in August 2022 [64] - o docs: capitalize the name 'Netscape' [77] - o docs: document HTTP/2 not insisting on TLS 1.2 [49] - o docs: fix mandoc -T lint formatting complaints [2] - o docs: update IETF links to use datatracker [41] - o examples/curlx: support building with OpenSSL 1.1.0+ [148] - o examples/multi-app.c: call curl_multi_remove_handle as well [19] - o formdata: avoid size_t => long typecast overflows [37] - o ftp: provide error message for control bytes in path [66] - o gen.pl: terminate "example" sections better [4] - o gha: add a macOS CI job with libssh [142] - o gskit: Convert to using Curl_poll [111] - o gskit: Fix errors from Curl_strerror refactor [113] - o gskit: Fix initialization of Curl_ssl_gskit struct [112] - o h2/h3: allow CURLOPT_HTTPHEADER change ":scheme" [88] - o hostcheck: fixed to not touch used input strings [38] - o hostcheck: reduce strlen calls on chained certificates [92] - o hostip: avoid unused parameter error in Curl_resolv_check [144] - o http2: move two infof calls to debug-h2-only [145] - o http: make Curl_compareheader() take string length arguments too [87] - o if2ip: make Curl_ipv6_scope a blank macro when IPv6-disabled [104] - o KNOWN_BUGS: fix typo "libpsl" - o ldap: return CURLE_URL_MALFORMAT for bad URL [24] - o lib: remove support for CURL_DOES_CONVERSIONS [96] - o libssh2: don't typecast socket to int for libssh2_session_handshake [151] - o libssh: fix include files and defines use for Windows builds [156] - o Makefile.am: Generate VS 2022 projects - o maketgz: return error if 'make dist' fails [79] - o mbedtls: enable use of mbedtls without CRL support [57] - o mbedtls: enable use of mbedtls without filesystem functions support [100] - o mbedtls: fix CURLOPT_SSLCERT_BLOB (again) - o mbedtls: fix ssl_init error with mbedTLS 3.1.0+ [12] - o mbedtls: remove #include <mbedtls/certs.h> [56] - o mbedtls: return CURLcode result instead of a mbedtls error code [1] - o md5: check md5_init_func return value - o mime: use a define instead of the magic number 24 [89] - o misc: allow curl to build with wolfssl --enable-opensslextra [43] - o misc: remove BeOS code and references [30] - o misc: remove the final watcom references [29] - o misc: remove unused data when IPv6 is not supported [80] - o mqtt: free 'sendleftovers' in disconnect [115] - o mqtt: free any send leftover data when done [36] - o multi: allow user callbacks to call curl_multi_assign [126] - o multi: grammar fix in comment [69] - o multi: remember connection_id before returning connection to pool [76] - o multi: set in_callback for multi interface callbacks [28] - o netware: remove support [72] - o next.d. remove .fi/.nf as they are handled by gen.pl [3] - o ngtcp2: adapt to changed end of headers callback proto [39] - o ngtcp2: fix declaration of ‘result’ shadows a previous local [14] - o ngtcp2: Reset dynbuf when it is fully drained [143] - o nss: handshake callback during shutdown has no conn->bundle [55] - o ntlm: remove unused feature defines [117] - o openldap: fix compiler warning when built without SSL support [70] - o openldap: implement SASL authentication [16] - o openldap: pass string length arguments to client_write() [116] - o openssl.h: avoid including OpenSSL headers here [15] - o openssl: check if sessionid flag is enabled before retrieving session [125] - o openssl: check SSL_get_ex_data to prevent potential NULL dereference [40] - o openssl: check the return value of BIO_new_mem_buf() [18] - o openssl: fix `ctx_option_t` for OpenSSL v3+ - o openssl: fix build for version < 1.1.0 [134] - o openssl: return error if TLS 1.3 is requested when not supported [45] - o os400: Add function wrapper for system command [138] - o os400: Add link to QADRT devkit to README.OS400 [137] - o os400: Default build to target current release [139] - o OS400: fix typos in rpg include file [149] - o projects: add support for Visual Studio 17 (2022) [124] - o projects: fix Visual Studio wolfSSL configurations - o projects: remove support for MSVC before VC10 (Visual Studio 2010) [123] - o quiche: after leaving h3_recving state, poll again [108] - o quiche: change qlog file extension to `.sqlog` [44] - o quiche: fix upload for bigger content-length [146] - o quiche: handle stream reset [83] - o quiche: remove two leftover debug infof() outputs - o quiche: verify the server cert on connect [33] - o quiche: when *recv_body() returns data, drain it before polling again [109] - o README.md: fix links [118] - o remote-header-name.d: clarify [10] - o runtests.pl: disable debuginfod [51] - o runtests.pl: properly print the test if it contains binary zeros - o runtests.pl: support the nonewline attribute for the data part [21] - o runtests.pl: tolerate test directories without Makefile.inc [98] - o runtests: allow client/file to specify multiple directories - o runtests: make 'rustls' a testable feature - o runtests: make 'wolfssl' a testable feature [6] - o runtests: set 'oldlibssh' for libssh versions before 0.9.5 [122] - o rustls: add CURLOPT_CAINFO_BLOB support [26] - o schannel: move the algIds array out of schannel.h [135] - o scripts/cijobs.pl: output data about all currect CI jobs [78] - o scripts/completion.pl: improve zsh completion [46] - o scripts/copyright.pl: support many provided file names on the cmdline - o scripts/delta: check the file delta for current branch - o sectransp: mark a 3DES cipher as weak [130] - o setopt: do bounds-check before strdup [99] - o setopt: fix the TLSAUTH #ifdefs for proxy-disabled builds [53] - o sha256: Fix minimum OpenSSL version [102] - o smb: pass socket for writing and reading data instead of FIRSTSOCKET [90] - o ssl: reduce allocated space for ssl backend when FTP is disabled [127] - o test3021: disable all msys2 path transformation - o test374: gif data without new line at the end [20] - o tests/disable-scan.pl: properly detect multiple symbols per line [94] - o tests/unit/Makefile.am: add NSS_LIBS to build with NSS fine [85] - o tool_findfile: check ~/.config/curlrc too [17] - o tool_getparam: DNS options that need c-ares now fail without it [31] - o TPF: drop support [97] - o unit1610: init SSL library before calling SHA256 functions [152] - o url: exclude zonefrom_url when no ipv6 is available [103] - o url: given a user in the URL, find pwd for that user in netrc [11] - o url: keep trailing dot in host name [62] - o url: make Curl_disconnect return void [48] - o urlapi: handle "redirects" smarter [119] - o urldata: CONN_IS_PROXIED replaces bits.proxy when proxy can be disabled [52] - o urldata: remove conn->bits.user_passwd [105] - o version_win32: fix warning for `CURL_WINDOWS_APP` [93] - o vtls: fix socket check conditions [150] - o vtls: pass on the right SNI name [61] - o vxworks: drop support [65] - o winbuild: add parameter WITH_SSH [120] - o wolfssl: return CURLE_AGAIN for the SSL_ERROR_NONE case [106] - o wolfssl: when SSL_read() returns zero, check the error [107] - o write-out.d: Fix num_headers formatting - o x509asn1: toggle off functions not needed for diff tls backends [91] + o appveyor: add Cygwin build [77] + o appveyor: only add MSYS2 to PATH where required [78] + o BearSSL: add CURLOPT_SSL_CIPHER_LIST support [27] + o BearSSL: add CURLOPT_SSL_CTX_FUNCTION support [26] + o BINDINGS.md: add Hollywood binding [34] + o CI: Do not use buildconf. Instead, just use: autoreconf -fi [42] + o CI: install Python package impacket to run SMB test 1451 [5] + o configure.ac: move -pthread CFLAGS setting back where it used to be [14] + o configure: bump the copyright year range int the generated output + o conncache: include the zone id in the "bundle" hashkey [112] + o connecache: remove duplicate connc->closure_handle check [90] + o connect: make Curl_getconnectinfo work with conn cache from share handle [22] + o connect: use TCP_KEEPALIVE only if TCP_KEEPIDLE is not defined [6] + o cookie.d: clarify when cookies are sent + o cookies: improve errorhandling for reading cookiefile [123] + o curl/system.h: update ifdef condition for MCST-LCC compiler [4] + o curl: error out if -T and -d are used for the same URL [99] + o curl: error out when options need features not present in libcurl [18] + o curl: escape '?' in generated --libcurl code [117] + o curl: fix segmentation fault for empty output file names. [60] + o curl_easy_header: fix typos in documentation [74] + o CURLINFO_PRIMARY_PORT.3: clarify which port this is [126] + o CURLOPT*TLSAUTH.3: they only work with OpenSSL or GnuTLS [105] + o CURLOPT_DISALLOW_USERNAME_IN_URL.3: use uppercase URL + o CURLOPT_PREQUOTE.3: only works for FTP file transfers, not dirs [79] + o CURLOPT_PROGRESSFUNCTION.3: fix typo in example [63] + o CURLOPT_UNRESTRICTED_AUTH.3: extended explanation [127] + o CURLSHOPT_UNLOCKFUNC.3: fix the callback prototype [9] + o docs/HYPER.md: updated to reflect current hyper build needs + o docs/opts: Mention Schannel client cert type is P12 [50] + o docs: Fix missing semicolon in example code [102] + o docs: lots of minor language polish [51] + o English: use American spelling consistently [95] + o fail.d: tweak the description [101] + o firefox-db2pem.sh: make the shell script safer [47] + o ftp: fix error message for partial file upload [61] + o gen.pl: change wording for mutexed options [98] + o GHA: add openssl3 jobs moved over from zuul [88] + o GHA: build hyper with nightly rustc [7] + o GHA: move bearssl jobs over from zuul [85] + o gha: move the event-based test over from Zuul [59] + o gtls: fix build for disabled TLS-SRP [48] + o http2: handle DONE called for the paused stream [69] + o http2: RST the stream if we stop it on our own will [67] + o http: avoid auth/cookie on redirects same host diff port [110] + o http: close the stream (not connection) on time condition abort [68] + o http: reject header contents with nul bytes [41] + o http: return error on colon-less HTTP headers [31] + o http: streamclose "already downloaded" [57] + o hyper: fix status_line() return code [13] + o hyper: fix tests 580 and 581 for hyper [107] + o hyper: no h2c support [33] + o infof: consistent capitalization of warning messages [103] + o ipv4/6.d: clarify that they are about using IP addresses [3] + o json.d: fix typo (overriden -> overridden) [24] + o keepalive-time.d: It takes many probes to detect brokenness [29] + o lib/warnless.[ch]: only check for WIN32 and ignore _WIN32 [45] + o lib670: avoid double check result [71] + o lib: #ifdef on USE_HTTP2 better [65] + o lib: fix some misuse of curlx_convert_wchar_to_UTF8 [38] + o lib: remove exclamation marks [100] + o libssh2: compare sha256 strings case sensitively [114] + o libssh2: make the md5 comparison fail if wrong length [111] + o libssh: fix build with old libssh versions [12] + o libssh: fix double close [124] + o libssh: Improve fix for missing SSH_S_ stat macros [10] + o libssh: unstick SFTP transfers when done event-based [58] + o macos: set .plist version in autoconf [122] + o mbedtls: remove 'protocols' array from backend when ALPN is not used [66] + o mbedtls: remove server_fd from backend [91] + o mk-ca-bundle.pl: Use stricter logic to process the certificates [39] + o mk-ca-bundle.vbs: delete this script in favor of mk-ca-bundle.pl [8] + o mlc_config.json: add file to ignore known troublesome URLs [35] + o mqtt: better handling of TCP disconnect mid-message [55] + o ngtcp2: add client certificate authentication for OpenSSL [15] + o ngtcp2: avoid busy loop in low CWND situation [119] + o ngtcp2: deal with sub-millisecond timeout [116] + o ngtcp2: disconnect the QUIC connection proper [19] + o ngtcp2: enlarge H3_SEND_SIZE [82] + o ngtcp2: fix HTTP/3 upload stall and avoid busy loop [83] + o ngtcp2: fix memory leak [80] + o ngtcp2: fix QUIC_IDLE_TIMEOUT [94] + o ngtcp2: make curl 1ms faster [93] + o ngtcp2: remove remote_addr which is not used in a meaningful way [81] + o ngtcp2: update to work after recent ngtcp2 updates [62] + o ngtcp2: use token when detecting :status header field [92] + o nonblock: restore setsockopt method to curlx_nonblock [20] + o openssl: check SSL_get_peer_cert_chain return value [1] + o openssl: enable CURLOPT_SSL_EC_CURVES with BoringSSL [23] + o openssl: fix CN check error code [21] + o options: remove mistaken space before paren in prototype + o perl: removed a double semicolon at end of line [64] + o pop3/smtp: return *WEIRD_SERVER_REPLY when not understood [43] + o projects/README: converted to markdown [76] + o projects: Update VC version names for VS2017, VS2022 [52] + o rtsp: don't let CSeq error override earlier errors [37] + o runtests: add 'bearssl' as testable feature [87] + o runtests: make 'oldlibssh' be before 0.9.4 [2] + o schannel: remove dead code that will never run [89] + o scripts/copyright.pl: ignore the new mlc_config.json file + o scripts: move three scripts from lib/ to scripts/ [44] + o test1135: sync with recent API updates [54] + o test1459: disable for oldlibssh [53] + o test375: fix line endings on Windows [40] + o test386: Fix an incorrect test markup tag + o test718: edited slightly to return better HTTP [32] + o tests/server/util.h: align WIN32 condition with util.c [46] + o tests: refactor server/socksd.c to support --unix-socket [96] + o timediff.[ch]: add curlx helper functions for timeval conversions [86] + o tls: make mbedtls and NSS check for h2, not nghttp2 [70] + o tool and tests: force flush of all buffers at end of program [17] + o tool_cb_hdr: Turn the Location: into a terminal hyperlink [30] + o tool_getparam: error out on missing -K file [115] + o tool_listhelp.c: uppercase URL + o tool_operate: fix a scan-build warning [16] + o tool_paramhlp: use feof(3) to identify EOF correctly when using fread(3) [97] + o transfer: redirects to other protocols or ports clear auth [109] + o unit1620: call global_init before calling Curl_open [125] + o url: check sasl additional parameters for connection reuse. [113] + o vtls: provide a unified APLN-disagree string for all backends [75] + o vtls: use a backend standard message for "ALPN: offers %s" [73] + o vtls: use a generic "ALPN, server accepted" message [72] + o winbuild/README.md: fixup dead link [36] + o winbuild: Add a Visual Studio example to the README [49] + o wolfssl: fix compiler error without IPv6 [25] This release includes the following known bugs: @@ -194,179 +150,143 @@ This release includes the following known bugs: This release would not have looked like this without help, code, reports and advice from friends like these: - 1337vt on github, Alejandro R. Sedeño, Alessandro Ghedini, Antoine Pietri, - Bernhard Walle, Bjarni Ingi Gislason, Cameron Will, Charles Cazabon, - coralw on github, Dan Fandrich, Daniel Stenberg, Davide Cassioli, - Eric Musser, Fabian Keil, Fabian Yamaguchi, Farzin on github, Filip Lundgren, - gaoxingwang on github, Harry Sarson, Henrik Holst, Ikko Ashimine, - illusory-dream on github, Jan Ehrhardt, Jan-Piet Mens, Jan Venekamp, - Jean-Philippe Menil, jhoyla on github, Jim Beveridge, Joel Depooter, - John H. Ayad, jonny112 on github, Kantanat Wannapaka, Kevin Adler, - Kushal Das, Leah Neukirchen, Lucas Pardue, luminixinc on github, - Manfred Schwarb, Marcel Raad, Melroy van den Berg, Michael Kaufmann, - Michael Wallner, Michał Antoniak, Neal McBurnett, neutric on github, - Niels Martignène, Patrick Monnerat, pheiduck on github, Ray Satiro, - Rob Boeckermann, Ryan Schmidt, Samuel Henrique, Sandro Jaeckel, - Satadru Pramanik, Sebastian Sterk, siddharthchhabrap on github, Stav Nir, - Stefan Eissing, Stephen Boost, Stephen M. Coakley, Stewart Gebbie, - Tatsuhiro Tsujikawa, updatede on github, Viktor Szakats, vl409 on github, - Xiaoke Wang, 梦终无痕 - (67 contributors) + Alejandro R. Sedeño, Andreas Falkenhahn, Andrey Alifanov, + anon00000000 on github, Balakrishnan Balasubramanian, Boris Verkhovskiy, + Brad Spencer, Christian Schmitz, Christopher Degawa, Colin Leroy, + Dan Fandrich, Daniel Gustafsson, Daniel Stenberg, Daniel Valenzuela, + Don J Olmstead, Emanuele Torre, Evangelos Foutras, Francisco Olarte, + Frank Meier, Gisle Vanem, Harry Sintonen, Ian Blanes, Jan Venekamp, + Jay Dommaschk, Jean-Philippe Menil, Jenny Heino, Joseph Chen, + jurisuk on github, Kristoffer Gleditsch, Kushal Das, Leandro Coutinho, + Liam Warfield, Marcel Raad, Marc Hörsken, Matteo Baccan, + Median Median Stride, mehatzri on github, Michael Kaufmann, Michał Antoniak, + Nick Banks, Nick Coghlan, Nick Zitzmann, Patrick Monnerat, Paul Howarth, + Paweł Kowalski, Peter Korsgaard, pheiduck on github, r-a-sattarov on github, + Ray Satiro, Rianov Viacheslav, Robert Brose, Robert Charles Muir, + Robin A. Meade, Samuel Henrique, Sascha Zengler, Taras Kushnir, + Tatsuhiro Tsujikawa, Timothe Litt, Viktor Szakats, HexTheDragon + (60 contributors) References to bug reports and discussions on issues: - [1] = https://curl.se/bug/?i=8266 - [2] = https://curl.se/bug/?i=8228 - [3] = https://curl.se/bug/?i=8228 - [4] = https://curl.se/bug/?i=8228 - [5] = https://curl.se/bug/?i=8229 - [6] = https://curl.se/bug/?i=8252 - [7] = https://curl.se/bug/?i=8262 - [8] = https://curl.se/bug/?i=8251 - [9] = https://curl.se/bug/?i=8229 - [10] = https://curl.se/bug/?i=8249 - [11] = https://curl.se/bug/?i=8241 - [12] = https://curl.se/bug/?i=8238 - [13] = https://curl.se/bug/?i=8244 - [14] = https://curl.se/bug/?i=8245 - [15] = https://curl.se/bug/?i=8240 - [16] = https://curl.se/bug/?i=8152 - [17] = https://curl.se/bug/?i=8208 - [18] = https://curl.se/bug/?i=8233 - [19] = https://curl.se/bug/?i=8234 - [20] = https://curl.se/bug/?i=8239 - [21] = https://curl.se/bug/?i=8239 - [22] = https://curl.se/bug/?i=7964 - [23] = https://curl.se/bug/?i=8188 - [24] = https://curl.se/bug/?i=8170 - [25] = https://curl.se/bug/?i=8254 - [26] = https://curl.se/bug/?i=8255 - [27] = https://curl.se/bug/?i=8286 - [28] = https://curl.se/bug/?i=8282 - [29] = https://curl.se/bug/?i=8287 - [30] = https://curl.se/bug/?i=8288 - [31] = https://curl.se/bug/?i=8285 - [32] = https://curl.se/bug/?i=8278 - [33] = https://curl.se/bug/?i=8173 - [34] = https://curl.se/bug/?i=8281 - [35] = https://curl.se/bug/?i=8279 - [36] = https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43515 - [37] = https://hackerone.com/reports/1444539 - [38] = https://curl.se/bug/?i=8321 - [39] = https://curl.se/bug/?i=8322 - [40] = https://curl.se/bug/?i=8268 - [41] = https://curl.se/bug/?i=8317 - [42] = https://curl.se/bug/?i=8315 - [43] = https://curl.se/bug/?i=8292 - [44] = https://curl.se/bug/?i=8316 - [45] = https://curl.se/bug/?i=8309 - [46] = https://curl.se/bug/?i=8363 - [47] = https://curl.se/bug/?i=8307 - [48] = https://curl.se/bug/?i=8303 - [49] = https://curl.se/bug/?i=8235 - [50] = https://curl.se/bug/?i=8299 - [51] = https://curl.se/bug/?i=8291 - [52] = https://curl.se/bug/?i=8350 - [53] = https://curl.se/bug/?i=8350 - [54] = https://curl.se/bug/?i=8276 - [55] = https://curl.se/bug/?i=8341 - [56] = https://curl.se/bug/?i=8343 - [57] = https://curl.se/bug/?i=8344 - [58] = https://curl.se/bug/?i=8340 - [59] = https://curl.se/bug/?i=8338 - [60] = https://curl.se/bug/?i=8334 - [61] = https://curl.se/bug/?i=8320 - [62] = https://curl.se/bug/?i=8290 - [63] = https://curl.se/bug/?i=8372 - [64] = https://curl.se/bug/?i=8458 - [65] = https://curl.se/bug/?i=8362 - [66] = https://curl.se/bug/?i=8460 - [67] = https://curl.se/bug/?i=8314 - [68] = https://curl.se/bug/?i=8365 - [69] = https://curl.se/bug/?i=8368 - [70] = https://curl.se/bug/?i=8367 - [71] = https://curl.se/bug/?i=8364 - [72] = https://curl.se/bug/?i=8358 - [73] = https://curl.se/bug/?i=8359 - [74] = https://curl.se/bug/?i=8357 - [75] = https://curl.se/bug/?i=8357 - [76] = https://hackerone.com/reports/1463013 - [77] = https://curl.se/bug/?i=8354 - [78] = https://curl.se/bug/?i=8408 - [79] = https://curl.se/mail/lib-2022-02/0070.html - [80] = https://curl.se/bug/?i=8430 - [81] = https://curl.se/bug/?i=8487 - [82] = https://curl.se/bug/?i=8397 - [83] = https://curl.se/bug/?i=8437 - [84] = https://curl.se/bug/?i=8396 - [85] = https://curl.se/bug/?i=8396 - [86] = https://curl.se/bug/?i=8394 - [87] = https://curl.se/bug/?i=8391 - [88] = https://curl.se/bug/?i=8381 - [89] = https://curl.se/bug/?i=8441 - [90] = https://curl.se/bug/?i=8383 - [91] = https://curl.se/bug/?i=8386 - [92] = https://curl.se/bug/?i=8428 - [93] = https://curl.se/bug/?i=8385 - [94] = https://curl.se/bug/?i=8384 - [95] = https://curl.se/bug/?i=8382 - [96] = https://curl.se/bug/?i=8378 - [97] = https://curl.se/bug/?i=8378 - [98] = https://curl.se/bug/?i=8379 - [99] = https://curl.se/bug/?i=8377 - [100] = https://curl.se/bug/?i=8376 - [101] = https://curl.se/bug/?i=8375 - [102] = https://curl.se/bug/?i=8464 - [103] = https://curl.se/bug/?i=8439 - [104] = https://curl.se/bug/?i=8439 - [105] = https://curl.se/bug/?i=8449 - [106] = https://curl.se/bug/?i=8431 - [107] = https://curl.se/bug/?i=8431 - [108] = https://curl.se/bug/?i=8436 - [109] = https://curl.se/bug/?i=8429 - [110] = https://curl.se/bug/?i=8425 - [111] = https://curl.se/bug/?i=8454 - [112] = https://curl.se/bug/?i=8454 - [113] = https://curl.se/bug/?i=8454 - [114] = https://curl.se/bug/?i=8395 - [115] = https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43646 - [116] = https://curl.se/bug/?i=8404 - [117] = https://curl.se/bug/?i=8453 - [118] = https://curl.se/bug/?i=8448 - [119] = https://curl.se/bug/?i=8450 - [120] = https://curl.se/bug/?i=8514 - [121] = https://curl.se/bug/?i=8444 - [122] = https://curl.se/bug/?i=8444 - [123] = https://curl.se/bug/?i=8442 - [124] = https://curl.se/bug/?i=8438 - [125] = https://curl.se/bug/?i=8472 - [126] = https://curl.se/bug/?i=8480 - [127] = https://curl.se/bug/?i=8471 - [128] = https://curl.se/bug/?i=8481 - [129] = https://curl.se/bug/?i=8482 - [130] = https://curl.se/bug/?i=8479 - [131] = https://curl.se/bug/?i=8476 - [132] = https://curl.se/bug/?i=8475 - [133] = https://curl.se/bug/?i=8474 - [134] = https://curl.se/bug/?i=8470 - [135] = https://curl.se/bug/?i=8469 - [136] = https://curl.se/bug/?i=8289 - [137] = https://curl.se/bug/?i=8455 - [138] = https://curl.se/bug/?i=8455 - [139] = https://curl.se/bug/?i=8455 - [140] = https://curl.se/bug/?i=8512 - [141] = https://curl.se/bug/?i=8459 - [142] = https://curl.se/bug/?i=8513 - [143] = https://curl.se/bug/?i=7351 - [144] = https://curl.se/bug/?i=8505 - [145] = https://curl.se/bug/?i=8502 - [146] = https://curl.se/bug/?i=8421 - [147] = https://curl.se/bug/?i=8500 - [148] = https://curl.se/bug/?i=8529 - [149] = https://curl.se/bug/?i=8494 - [150] = https://curl.se/bug/?i=8493 - [151] = https://curl.se/bug/?i=8492 - [152] = https://curl.se/bug/?i=8538 - [153] = https://curl.se/bug/?i=8519 - [154] = https://curl.se/bug/?i=8511 - [156] = https://curl.se/mail/lib-2022-02/0131.html + [1] = https://curl.se/bug/?i=8579 + [2] = https://curl.se/bug/?i=8548 + [3] = https://curl.se/bug/?i=8543 + [4] = https://curl.se/bug/?i=8546 + [5] = https://curl.se/bug/?i=8544 + [6] = https://curl.se/bug/?i=8539 + [7] = https://curl.se/bug/?i=8545 + [8] = https://curl.se/bug/?i=8412 + [9] = https://curl.se/bug/?i=8573 + [10] = https://curl.se/bug/?i=8588 + [11] = https://curl.se/bug/?i=8503 + [12] = https://curl.se/bug/?i=8574 + [13] = https://curl.se/bug/?i=8572 + [14] = https://curl.se/bug/?i=8541 + [15] = https://curl.se/bug/?i=8522 + [16] = https://curl.se/bug/?i=8565 + [17] = https://curl.se/bug/?i=8516 + [18] = https://curl.se/bug/?i=8565 + [19] = https://curl.se/bug/?i=8534 + [20] = https://curl.se/bug/?i=8562 + [21] = https://curl.se/bug/?i=8559 + [22] = https://curl.se/bug/?i=8524 + [23] = https://curl.se/bug/?i=8553 + [24] = https://curl.se/bug/?i=8557 + [25] = https://curl.se/bug/?i=8550 + [26] = https://curl.se/bug/?i=8478 + [27] = https://curl.se/bug/?i=8477 + [28] = https://curl.se/bug/?i=7708 + [29] = https://curl.se/bug/?i=8570 + [30] = https://curl.se/bug/?i=7963 + [31] = https://curl.se/bug/?i=8610 + [32] = https://github.com/hyperium/hyper/issues/2783 + [33] = https://curl.se/bug/?i=8605 + [34] = https://curl.se/bug/?i=8609 + [35] = https://curl.se/bug/?i=8597 + [36] = https://curl.se/bug/?i=8597 + [37] = https://curl.se/bug/?i=8525 + [38] = https://curl.se/bug/?i=8521 + [39] = https://curl.se/bug/?i=8411 + [40] = https://curl.se/bug/?i=8599 + [41] = https://curl.se/bug/?i=8601 + [42] = https://curl.se/bug/?i=8596 + [43] = https://curl.se/bug/?i=8506 + [44] = https://curl.se/bug/?i=8625 + [45] = https://curl.se/bug/?i=8594 + [46] = https://curl.se/bug/?i=8594 + [47] = https://curl.se/bug/?i=8616 + [48] = https://curl.se/mail/lib-2022-03/0046.html + [49] = https://curl.se/bug/?i=8592 + [50] = https://curl.se/bug/?i=8587 + [51] = https://curl.se/bug/?i=8646 + [52] = https://curl.se/bug/?i=8447 + [53] = https://curl.se/bug/?i=8622 + [54] = https://curl.se/bug/?i=8620 + [55] = https://hackerone.com/reports/1521610 + [56] = https://curl.se/bug/?i=8593 + [57] = https://curl.se/bug/?i=8665 + [58] = https://curl.se/bug/?i=8490 + [59] = https://curl.se/bug/?i=8490 + [60] = https://curl.se/bug/?i=8606 + [61] = https://curl.se/bug/?i=8637 + [62] = https://curl.se/bug/?i=8638 + [63] = https://curl.se/bug/?i=8636 + [64] = https://curl.se/bug/?i=8709 + [65] = https://curl.se/bug/?i=8661 + [66] = https://curl.se/bug/?i=8663 + [67] = https://curl.se/bug/?i=8664 + [68] = https://curl.se/bug/?i=8664 + [69] = https://curl.se/bug/?i=8626 + [70] = https://curl.se/bug/?i=8656 + [71] = https://curl.se/bug/?i=8660 + [72] = https://curl.se/bug/?i=8657 + [73] = https://curl.se/bug/?i=8657 + [74] = https://curl.se/bug/?i=8694 + [75] = https://curl.se/bug/?i=8643 + [76] = https://curl.se/bug/?i=8652 + [77] = https://curl.se/bug/?i=8693 + [78] = https://curl.se/bug/?i=8693 + [79] = https://curl.se/bug/?i=8602 + [80] = https://curl.se/bug/?i=8691 + [81] = https://curl.se/bug/?i=8689 + [82] = https://curl.se/bug/?i=8690 + [83] = https://curl.se/bug/?i=8688 + [84] = https://curl.se/bug/?i=8517 + [85] = https://curl.se/bug/?i=8684 + [86] = https://curl.se/bug/?i=8595 + [87] = https://curl.se/bug/?i=8684 + [88] = https://curl.se/bug/?i=8683 + [89] = https://curl.se/bug/?i=8677 + [90] = https://curl.se/bug/?i=8676 + [91] = https://curl.se/bug/?i=8682 + [92] = https://curl.se/bug/?i=8679 + [93] = https://curl.se/bug/?i=8678 + [94] = https://curl.se/bug/?i=8678 + [95] = https://curl.se/bug/?i=8673 + [96] = https://curl.se/bug/?i=8687 + [97] = https://curl.se/bug/?i=8701 + [98] = https://curl.se/bug/?i=8716 + [99] = https://curl.se/bug/?i=8704 + [100] = https://curl.se/bug/?i=8713 + [101] = https://curl.se/bug/?i=8714 + [102] = https://curl.se/bug/?i=8697 + [103] = https://curl.se/bug/?i=8711 + [105] = https://curl.se/bug/?i=8753 + [107] = https://curl.se/bug/?i=8707 + [109] = https://curl.se/docs/CVE-2022-27774.html + [110] = https://curl.se/docs/CVE-2022-27776.html + [111] = https://hackerone.com/reports/1549461 + [112] = https://curl.se/docs/CVE-2022-27775.html + [113] = https://curl.se/docs/CVE-2022-22576.html + [114] = https://hackerone.com/reports/1549435 + [115] = https://hackerone.com/reports/1542881 + [116] = https://curl.se/bug/?i=8738 + [117] = https://hackerone.com/reports/1548535 + [119] = https://curl.se/bug/?i=8739 + [122] = https://curl.se/bug/?i=8692 + [123] = https://curl.se/bug/?i=8699 + [124] = https://curl.se/bug/?i=8708 + [125] = https://curl.se/bug/?i=8719 + [126] = https://curl.se/bug/?i=8725 + [127] = https://curl.se/bug/?i=8724 |