Adaptively determine fastest TLS 1.3 ciphersuites (klondike)
[L#1703150] Fix crash when closing NMDC hubs (emtee)
[L#1909853] Allow the operating system to determine the best socket buffer sizes by default (maksis)
Add option to exclude encrypted private messages from logs (emtee)
[L#1445330] Allow CCPM on unencrypted ADC hubs (emtee)
[L#1853692] Blacklist an unmaintained hublist server
[L#1829064] Add new hublist server dcnf.github.io
[L#1815377] Fix a bug that could keep files from hashing due to CRC errors when automatic .sfv checking is enabled (emtee)
[L#1910274] Don't add incomplete TTH trees to hash database (cologic)
[L#1649066] Don't share files/directories with non-UTF-8 names on Linux/macOS/BSDs (cologic)
Fix GeoIP country in the Transfer View and Search window (emtee)
Keep existing GeoIP files after an unsuccessful download (emtee)
Update OpenSSL to version 1.1.1k
Require TLS 1.2 or newer (currently only TLS 1.3)-based ADCS connections (cologic)
"Require TLS ADC client-client connections" setting now on by default (poy)
Drop support for SHA-1-based ciphersuites due to chosen-prefix collisions from
https://sha-mbles.github.io/ (cologic)
Disallow Diffie-Hellman keys smaller than 2048 bits to mitigate the Logjam attack (cologic)
Update bzip2 to version 1.0.8
Update MiniUPnPc to version 2.2.1
Update Boost to version 1.72
