#define RELEASEVIDEO(ver,vid)
SUBTITLE(Fixed in 8.2.1 - July 26 2023)
RELEASEVIDEO(8.2.1, "https://youtu.be/gxuisBdfXmI")
Bugfixes:
SUBTITLE(Fixed in 8.2.0 - July 19 2023)
RELEASEVIDEO(8.2.0, "https://youtu.be/eMSD1GOCABc")
Changes:
Bugfixes:
SUBTITLE(Fixed in 8.1.2 - May 30 2023)
RELEASEVIDEO(8.1.2, "https://youtu.be/n9JzOdjOvHg")
Bugfixes:
SUBTITLE(Fixed in 8.1.1 - May 23 2023)
RELEASEVIDEO(8.1.1, "https://youtu.be/Jzg847TgLvw")
Bugfixes:
SUBTITLE(Fixed in 8.1.0 - May 17 2023)
RELEASEVIDEO(8.1.0, "https://youtu.be/fLP141KZ7l4")
Changes:
Bugfixes:
SUBTITLE(Fixed in 8.0.1 - March 20 2023)
Bugfixes:
SUBTITLE(Fixed in 8.0.0 - March 20 2023)
RELEASEVIDEO(8.0.0, "https://youtu.be/LToOQEMcKoo")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.88.1 - February 20 2023)
RELEASEVIDEO(7.88.1, "https://youtu.be/COhD51bgjPY")
Bugfixes:
SUBTITLE(Fixed in 7.88.0 - February 15 2023)
RELEASEVIDEO(7.88.0, "https://youtu.be/9zff4hWOxPE")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.87.0 - December 21 2022)
RELEASEVIDEO(7.87.0, "https://youtu.be/PvvgmBbAzn8")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.86.0 - October 26 2022)
RELEASEVIDEO(7.86.0, "https://youtu.be/nIJUock7mjE")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.85.0 - August 31 2022)
RELEASEVIDEO(7.85.0, "https://youtu.be/I4vYSKjvHGE")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.84.0 - June 27 2022)
RELEASEVIDEO(7.84.0, "https://youtu.be/-FVFLJLrHRY")
Changes:
Bugfixes:
BGF aws-sigv4: fix potentional NULL pointer arithmetic
BGF bindlocal: don't use a random port if port number would wrap
BGF c-hyper: mark status line as status for Curl_client_write()
BGF ci: avoid `cmake -Hpath`
BGF CI: bump FreeBSD 13.0 to 13.1
BGF ci: update github actions
BGF cmake: add libpsl support
BGF cmake: do not add libcurl.rc to the static libcurl library
BGF cmake: enable curl.rc for all Windows targets
BGF cmake: fix detecting libidn2
BGF cmake: support adding a suffix to the OS value
BGF configure: skip libidn2 detection when winidn is used
BGF configure: use the SED value to invoke sed
BGF configure: warn about rustls being experimental
BGF content_encoding: return error on too many compression steps
BGF cookie: address secure domain overlay
BGF cookie: apply limits
BGF copyright.pl: parse and use .reuse/dep5 for skips
BGF copyright: make repository REUSE compliant
BGF curl.1: add a few see also --tls-max
BGF curl.1: mention exit code zero too
BGF curl: re-enable --no-remote-name
BGF curl_easy_pause.3: remove explanation of progress function
BGF curl_getdate.3: document that some illegal dates pass through
BGF Curl_parsenetrc: don't access local pwbuf outside of scope
BGF curl_url_set.3: clarify by default using known schemes only
BGF CURLOPT_ALTSVC.3: document the file format
BGF CURLOPT_FILETIME.3: fix the protocols this works with
BGF CURLOPT_HTTPHEADER.3: improve comment in example
BGF CURLOPT_NETRC.3: document the .netrc file format
BGF CURLOPT_PORT.3: We discourage using this option
BGF CURLOPT_RANGE.3: remove ranged upload advice
BGF digest: added detection of more syntax error in server headers
BGF digest: tolerate missing "realm"
BGF digest: unquote realm and nonce before processing
BGF DISABLED: disable 1021 for hyper again
BGF docs/cmdline-opts: add copyright and license identifier to each file
BGF docs/CONTRIBUTE.md: document the 'needs-votes' concept
BGF docs: clarify data replacement policy for MIME API
BGF doh: remove UNITTEST macro definition
BGF examples/crawler.c: use the curl license
BGF examples: remove fopen.c and rtsp.c
BGF FAQ: Clarify Windows double quote usage
BGF fopen: add Curl_fopen() for better overwriting of files
BGF ftp: restore protocol state after http proxy CONNECT
BGF ftp: when failing to do a secure GSSAPI login, fail hard
BGF GHA/hyper: enable debug in the build
BGF gssapi: improve handling of errors from gss_display_status
BGF gssapi: initialize gss_buffer_desc strings
BGF headers api: remove EXPERIMENTAL tag
BGF http2: always debug print stream id in decimal with %u
BGF http2: reject overly many push-promise headers
BGF http: restore header folding behavior
BGF hyper: use 'alt-used'
BGF krb5: return error properly on decode errors
BGF lib: make more protocol specific struct fields #ifdefed
BGF libcurl-security.3: add "Secrets in memory"
BGF libcurl-security.3: document CRLF header injection
BGF libssh: skip the fake-close when libssh does the right thing
BGF links: update dead links to the curl-wiki
BGF log2changes: do not indent empty lines [ci skip]
BGF macos9: remove partial support
BGF Makefile.am: fix portability issues
BGF Makefile.m32: delete obsolete options, improve -On [ci skip]
BGF Makefile.m32: delete two obsolete OpenSSL options [ci skip]
BGF Makefile.m32: stop forcing XP target with ipv6 enabled [ci skip]
BGF max-time.d: clarify max-time sets max transfer time
BGF mprintf: ignore clang non-literal format string
BGF netrc: check %USERPROFILE% as well on Windows
BGF netrc: support quoted strings
BGF ngtcp2: allow curl to send larger UDP datagrams
BGF ngtcp2: correct use of ngtcp2 and nghttp3 signed integer types
BGF ngtcp2: enable Linux GSO
BGF ngtcp2: extend QUIC transport parameters buffer
BGF ngtcp2: fix alert_read_func return value
BGF ngtcp2: fix typo in preprocessor condition
BGF ngtcp2: handle error from ngtcp2_conn_submit_crypto_data
BGF ngtcp2: send appropriate connection close error code
BGF ngtcp2: support boringssl crypto backend
BGF ngtcp2: use helper funcs to simplify TLS handshake integration
BGF ntlm: provide a fixed fake host name
BGF projects: fix third-party SSL library build paths for Visual Studio
BGF quic: add Curl_quic_idle
BGF quiche: support ca-fallback
BGF rand: stop detecting /dev/urandom in cross-builds
BGF remote-name.d: mention --output-dir
BGF runtests.pl: add the --repeat parameter to the --help output
BGF runtests: fix skipping tests not done event-based
BGF runtests: skip starting the ssh server if user name is lacking
BGF scripts/copyright.pl: fix the exclusion to not ignore man pages
BGF sectransp: check for a function defined when __BLOCKS__ is undefined
BGF select: return error from "lethal" poll/select errors
BGF server/sws: support spaces in the HTTP request path
BGF speed-limit/time.d: mention these affect transfers in either direction
BGF strcase: some optimisations
BGF test 2081: add a valid reply for the second request
BGF test 675: add missing CR so the test passes when run through Privoxy
BGF test414: add the '--resolve' keyword
BGF test681: verify --no-remote-name
BGF tests 266, 116 and 1540: add a small write delay
BGF tests/data/test1501: kill ftp server after slow LIST response
BGF tests/getpart: fix getpartattr to work with "data" and "data2"
BGF tests/server/sws.c: change the HTTP writedelay unit to milliseconds
BGF test{440,441,493,977}: add "HTTP proxy" keywords
BGF tool_getparam: fix --parallel-max maximum value constraint
BGF tool_operate: make sure --fail-with-body works with --retry
BGF transfer: fix potential NULL pointer dereference
BGF transfer: maintain --path-as-is after redirects
BGF transfer: upload performance; avoid tiny send
BGF url: free old conn better on reuse
BGF url: remove redundant #ifdefs in allocate_conn()
BGF url: URL encode the path when extracted, if spaces were set
BGF urlapi: make curl_url_set(url, CURLUPART_URL, NULL, 0) clear all parts
BGF urlapi: support CURLU_URLENCODE for curl_url_get()
BGF urldata: reduce size of a few struct fields
BGF urldata: remove three unused booleans from struct UserDefined
BGF urldata: store tcp_keepidle and tcp_keepintvl as ints
BGF version: allow stricmp() for sorting the feature list
BGF vtls: make curl_global_sslset thread-safe
BGF wolfssh.h: removed
BGF wolfssl: correct the failf() message when a handle can't be made
BGF wolfSSL: explicitly use compatibility layer
BGF x509asn1: mark msnprintf return as unchecked
SUBTITLE(Fixed in 7.83.1 - May 11 2022)
RELEASEVIDEO(7.83.1, "https://youtu.be/mnsCTd4cwyI")
Bugfixes:
SUBTITLE(Fixed in 7.83.0 - April 27 2022)
RELEASEVIDEO(7.83.0, "https://youtu.be/hYcT0HNv8HI")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.82.0 - March 5 2022)
RELEASEVIDEO(7.82.0, "https://youtu.be/ycjidxZWKjo")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.81.0 - January 5 2022)
RELEASEVIDEO(7.81.0, "https://youtu.be/OfTF8kmcSlA")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.80.0 - November 10 2021)
RELEASEVIDEO(7.80.0, "https://youtu.be/GCjvJnlziLY")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.79.1 - September 22 2021)
RELEASEVIDEO(7.79.1, "https://youtu.be/h-m2Vv57SOY")
Bugfixes:
SUBTITLE(Fixed in 7.79.0 - September 15 2021)
RELEASEVIDEO(7.79.0, "https://youtu.be/1y7BR0LZEuM")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.78.0 - July 21 2021)
RELEASEVIDEO(7.78.0, "https://youtu.be/XHaJGFj6wVg")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.77.0 - May 26 2021)
RELEASEVIDEO(7.77.0, "https://youtu.be/Mmq8kb6GcAw")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.76.1 - April 14 2021)
RELEASEVIDEO(7.76.1, "https://youtu.be/3Vj4cdzLZx4")
Bugfixes:
SUBTITLE(Fixed in 7.76.0 - March 31 2021)
RELEASEVIDEO(7.76.0, "https://youtu.be/m3GxI2PFFAU")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.75.0 - February 3 2021)
RELEASEVIDEO(7.75.0, "https://youtu.be/pjqd-r7hAjI")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.74.0 - December 9 2020)
RELEASEVIDEO(7.74.0, "https://youtu.be/IaLwkQuE2IE")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.73.0 - October 14 2020)
RELEASEVIDEO(7.73.0, "https://youtu.be/ebYXC0Cr-dQ")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.72.0 - August 19 2020)
RELEASEVIDEO(7.72.0, "https://youtu.be/yVZ8Q3fTv40")
Bugfixes:
SUBTITLE(Fixed in 7.71.1 - July 1 2020)
RELEASEVIDEO(7.71.1, "https://youtu.be/qd_Lcf8U_FM")
Bugfixes:
SUBTITLE(Fixed in 7.71.0 - June 24 2020)
RELEASEVIDEO(7.71.0, "https://youtu.be/E4gtW3kS1Cw")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.70.0 - April 29 2020)
RELEASEVIDEO(7.70.0, "https://youtu.be/taHoaLkx7XE")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.69.1 - March 11 2020)
RELEASEVIDEO(7.69.1, "https://youtu.be/7iTqBlhhMC0")
Bugfixes:
SUBTITLE(Fixed in 7.69.0 - March 4 2020)
RELEASEVIDEO(7.69.0, "https://youtu.be/X7Jlv87Nb8Y")
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.68.0 - January 8 2020)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.67.0 - November 6 2019)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.66.0 - September 11 2019)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.65.3 - July 19 2019)
Bugfixes:
SUBTITLE(Fixed in 7.65.2 - July 17 2019)
Bugfixes:
SUBTITLE(Fixed in 7.65.1 - June 5 2019)
Bugfixes:
SUBTITLE(Fixed in 7.65.0 - May 22 2019)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.64.1 - March 27 2019)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.64.0 - February 6 2019)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.63.0 - December 12 2018)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.62.0 - October 31 2018)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.61.1 - September 5 2018)
Bugfixes:
SUBTITLE(Fixed in 7.61.0 - July 11 2018)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.60.0 - May 16 2018)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.59.0 - March 14 2018)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.58.0 - January 24 2018)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.57.0 - November 29 2017)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.56.1 - October 23 2017)
Bugfixes:
SUBTITLE(Fixed in 7.56.0 - October 4 2017)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.55.1 - August 14 2017)
Bugfixes:
SUBTITLE(Fixed in 7.55.0 - August 9 2017)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.54.1 - June 14 2017)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.54.0 - April 19 2017)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.53.1 - February 24 2017)
Bugfixes:
SUBTITLE(Fixed in 7.53.0 - February 22 2017)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.52.1 - December 23 2016)
Bugfixes:
SUBTITLE(Fixed in 7.52.0 - December 21 2016)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.51.0 - November 2 2016)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.50.3 - September 14 2016)
Bugfixes:
SUBTITLE(Fixed in 7.50.2 - September 7 2016)
Bugfixes:
SUBTITLE(Fixed in 7.50.1 - August 3 2016)
Bugfixes:
SUBTITLE(Fixed in 7.50.0 - July 21 2016)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.49.1 - May 30 2016)
Bugfixes:
SUBTITLE(Fixed in 7.49.0 - May 18 2016)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.48.0 - March 23 2016)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.47.1 - February 8 2016)
Bugfixes:
SUBTITLE(Fixed in 7.47.0 - January 27 2016)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.46.0 - December 2 2015)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.45.0 - October 7 2015)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.44.0 - August 12 2015)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.43.0 - June 17 2015)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.42.1 - April 29 2015)
Bugfixes:
SUBTITLE(Fixed in 7.42.0 - April 22 2015)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.41.0 - February 25 2015)
Changes:
Bugfixes:
BGF sasl_gssapi: Fixed build on NetBSD with built-in GSS-API
BGF FTP: fix IPv6 host using link-local address
BGF FTP: if EPSV fails on IPV6 connections, bail out
BGF gssapi: Remove need for duplicated GSS_C_NT_HOSTBASED_SERVICE definitions
BGF NSS: fix compiler error when built http2-enabled
BGF mingw build: allow to pass custom CFLAGS
BGF add -m64 CFLAGS when targeting mingw64, add -m32/-m64 to LDFLAGS
BGF curl_schannel.c: mark session as removed from cache if not freed
BGF Curl_pretransfer: reset expected transfer sizes
BGF curl.h: remove extra space
BGF curl_endian: Fixed build when 64-bit integers are not supported
BGF checksrc.bat: Better detection of Perl installation
BGF build-openssl.bat: Added check for Perl installation
BGF http_negotiate: Return CURLcode in Curl_input_negotiate() instead of int
BGF http_negotiate: Added empty decoded challenge message info text
BGF vtls: Removed unimplemented overrides of curlssl_close_all()
BGF sasl_gssapi: Fixed memory leak with local SPN variable
BGF http_negotiate: Use dynamic buffer for SPN generation
BGF ldap: Renamed the CURL_LDAP_WIN definition to USE_WIN32_LDAP
BGF openssl: do public key pinning check independently
BGF timeval: typecast for better type (on Amiga)
BGF ipv6: enclose AF_INET6 uses with proper #ifdefs for ipv6
BGF SASL: common URL option and auth capabilities decoders for all protocols
BGF BoringSSL: fix build
BGF BoringSSL: detected by configure, switches off NTLM
BGF openvms: Handle openssl/0.8.9zb version parsing
BGF configure: detect libresssl
BGF configure: remove detection of the old yassl emulation API
BGF curl_setup: Disable SMB/CIFS support when HTTP only
BGF imap: remove automatic password setting: it breaks external sasl authentication
BGF sasl: remove XOAUTH2 from default enabled authentication mechanism
BGF runtests: identify BoringSSL and libressl
BGF security: avoid compiler warning
BGF ldap: build with BoringSSL
BGF des: Added Curl_des_set_odd_parity()
BGF CURLOPT_SEEKFUNCTION.3: also when server closes a connection
BGF CURLOPT_HTTP_VERSION.3: CURL_HTTP_VERSION_2_0 added in 7.33.0
BGF build: Removed unused Visual Studio bscmake settings
BGF build: Enabled DEBUGBUILD in Visual Studio debug builds
BGF build: Renamed top level Visual Studio solution files
BGF build: Removed Visual Studio SuppressStartupBanner directive for VC8+
BGF libcurl-symbols: first basic shot for autogenerated docs
BGF Makefile.am: fix 'make distcheck'
BGF getpass_r: read from stdin, not stdout!
BGF getpass: protect include with proper #ifdef
BGF opts: CURLOPT_CAINFO availability depends on SSL engine
BGF more cleanup of 'CURLcode result' return code
BGF MD4: replace implementation
BGF MD5: replace implementation
BGF openssl: SSL_SESSION->ssl_version no longer exist
BGF md5: use axTLS's own MD5 functions when available
BGF schannel: Removed curl_ prefix from source files
BGF curl.1: add warning when using -H and redirects
BGF curl.1: clarify that -X is used for all requests
BGF gskit: Fix exclusive SSLv3 option
BGF polarssl: Fix exclusive SSL protocol version options
BGF http2: Fix bug that associated stream canceled on PUSH_PROMISE
BGF ftp: accept all 2xx responses to the PORT command
BGF configure: allow both --with-ca-bundle and --with-ca-path
BGF cmake: install the dll file to the correct directory
BGF nss: fix NPN/ALPN protocol negotiation
BGF polarssl: fix ALPN protocol negotiation
BGF cmake: Fix generation of tool_hugehelp.c on windows
BGF cmake: fix winsock2 detection on windows
BGF gnutls: fix build with HTTP2
BGF connect: fix a spurious connect failure on dual-stacked hosts
BGF test: test 530 is now less timing dependent
BGF telnet: invalid use of custom read function if not set
SUBTITLE(Fixed in 7.40.0 - January 8 2015)
Changes:
CHG http_digest: Added support for Windows SSPI based authentication
CHG version info: Added Kerberos V5 to the supported features
CHG Makefile: Added VC targets for WinIDN
CHG config-win32: Introduce build targets for VS2012+
CHG SSL: Add PEM format support for public key pinning
CHG smtp: Added support for the conversion of Unix newlines during mail send
CHG smb: Added initial support for the SMB/CIFS protocol
CHG Added support for HTTP over unix domain sockets, via
CURLOPT_UNIX_SOCKET_PATH and --unix-socket
CHG sasl: Added support for GSS-API based Kerberos V5 authentication
Bugfixes:
BGF darwinssl: fix session ID keys to only reuse identical sessions
BGF url-parsing: reject CRLFs within URLs
BGF OS400: Adjust specific support to last release
BGF THANKS: Remove duplicate names
BGF url.c: Fixed compilation warning
BGF ssh: Fixed build on platforms where R_OK is not defined
BGF tool_strdup.c: include the tool strdup.h
BGF build: Fixed Visual Studio project file generation of strdup.[c|h]
BGF curl_easy_setopt.3: add CURLOPT_PINNEDPUBLICKEY
BGF curl.1: show zone index use in a URL
BGF mk-ca-bundle.vbs: switch to new certdata.txt url
BGF Makefile.dist: Added some missing SSPI configurations
BGF build: Fixed no NTLM support for email when CURL_DISABLE_HTTP is defined
BGF SSH: use the port number as well for known_known checks
BGF libssh2: detect features based on version, not configure checks
BGF http2: Deal with HTTP/2 data inside Upgrade response header buffer
BGF multi: removed Curl_multi_set_easy_connection
BGF symbol-scan.pl: do not require autotools
BGF cmake: add ENABLE_THREADED_RESOLVER, rename ARES
BGF cmake: build libhostname for test suite
BGF cmake: fix HAVE_GETHOSTNAME definition
BGF tests: fix libhostname visibility
BGF tests: fix memleak in server/resolve.c
BGF vtls.h: Fixed compiler warning when compiled without SSL
BGF CMake: Restore order-dependent header checks
BGF CMake: Restore order-dependent library checks
BGF tool: Removed krb4 from the supported features
BGF http2: Don't send Upgrade headers when we already do HTTP/2
BGF examples: Don't call select() to sleep on windows
BGF win32: Updated some legacy APIs to use the newer extended versions
BGF easy.c: Fixed compilation warning when no verbose string support
BGF connect.c: Fixed compilation warning when no verbose string support
BGF build: in Makefile.m32 pass -F flag to windres
BGF build: in Makefile.m32 add -m32 flag for 32bit
BGF multi: when leaving for timeout, close accordingly
BGF CMake: Simplify if() conditions on check result variables
BGF build: in Makefile.m32 try to detect 64bit target
BGF multi: inform about closed sockets before they are closed
BGF multi-uv.c: close the file handle after download
BGF examples: Wait recommended 100ms when no file descriptors are ready
BGF ntlm: Split the SSPI based messaging code from the native messaging code
BGF cmake: fix NTLM detection when CURL_DISABLE_HTTP defined
BGF cmake: add Kerberos to the supported feature
BGF CURLOPT_POSTFIELDS.3: mention the COPYPOSTFIELDS option
BGF http: Disable pipelining for HTTP/2 and upgraded connections
BGF ntlm: Fixed static'ness of local decode function
BGF sasl: Reduced the need for two sets of NTLM messaging functions
BGF multi.c: Fixed compilation warnings when no verbose string support
BGF select.c: fix compilation for VxWorks
BGF multi-single.c: switch to use curl_multi_wait
BGF curl_multi_wait.3: clarify numfds being used if not NULL
BGF http.c: Fixed compilation warnings from features being disabled
BGF NSS: enable the CAPATH option
BGF docs: Fix FAILONERROR typos
BGF HTTP: don't abort connections with pending Negotiate authentication
BGF HTTP: Free (proxy)userpwd for NTLM/Negotiate after sending a request
BGF http_perhapsrewind: don't abort CONNECT requests
BGF build: updated dependencies in makefiles
BGF multi.c: Fixed compilation warning
BGF ftp.c: Fixed compilation warnings when proxy support disabled
BGF get_url_file_name: Fixed crash on OOM on debug build
BGF cookie.c: Refactored cleanup code to simplify
BGF OS400: enable NTLM authentication
BGF ntlm: Use Windows Crypt API
BGF http2: avoid logging neg "failure" if h2 was not requested
BGF schannel_recv: return the correct code
BGF VC build: added sspi define for winssl-zlib builds
BGF Curl_client_write(): chop long data, convert data only once
BGF openldap: do not ignore Curl_client_write() return code
BGF ldap: check Curl_client_write() return codes
BGF parsedate.c: Fixed compilation warning
BGF url.c: Fixed compilation warning when USE_NTLM is not defined
BGF ntlm_wb_response: fix "statement not reached"
BGF telnet: fix "cast increases required alignment of target type"
BGF smtp: Fixed dot stuffing when EOL characters at end of input buffers
BGF ntlm: Allow NTLM2Session messages when USE_NTRESPONSES manually defined
BGF ntlm: Disable NTLM v2 when 64-bit integers are not supported
BGF ntlm: Use short integer when decoding 16-bit values
BGF ftp.c: Fixed compilation warning when no verbose string support
BGF synctime.c: fixed timeserver URLs
BGF mk-ca-bundle.pl: restored forced run again
BGF ntlm: Fixed return code for bad type-2 Target Info
BGF curl_schannel.c: Data may be available before connection shutdown
BGF curl_schannel: Improvements to memory re-allocation strategy
BGF darwinssl: aprintf() to allocate the session key
BGF tool_util.c: Use GetTickCount64 if it is available
BGF lib: Fixed multiple code analysis warnings if SAL are available
BGF tool_binmode.c: Explicitly ignore the return code of setmode
BGF tool_urlglob.c: Silence warning C6293: Ill-defined for-loop
BGF opts: Warn CURLOPT_TIMEOUT overrides when set after CURLOPT_TIMEOUT_MS
BGF SFTP: work-around servers that return zero size on STAT
BGF connect: singleipconnect(): properly try other address families after failure
BGF IPV6: address scope != scope id
BGF parseurlandfillconn(): fix improper non-numeric scope_id stripping
BGF secureserver.pl: make OpenSSL CApath and cert absolute path values
BGF secureserver.pl: update Windows detection and fix path conversion
BGF secureserver.pl: clean up formatting of config and fix verbose output
BGF tests: Added Windows support using Cygwin-based OpenSSH
BGF sockfilt.c: use non-Ex functions that are available before WinXP
BGF VMS: Updates for 0740-0D1220
BGF openssl: warn for SRP set if SSLv3 is used, not for TLS version
BGF openssl: make it compile against openssl 1.1.0-DEV master branch
BGF openssl: fix SSL/TLS versions in verbose output
BGF curl: show size of inhibited data when using -v
BGF build: Removed WIN32 definition from the Visual Studio projects
BGF build: Removed WIN64 definition from the libcurl Visual Studio projects
BGF vtls: Use bool for Curl_ssl_getsessionid() return type
BGF sockfilt.c: Replace 100ms sleep with thread throttle
BGF sockfilt.c: Reduce the number of individual memory allocations
BGF vtls: Don't set cert info count until memory allocation is successful
BGF nss: Don't ignore Curl_ssl_init_certinfo() OOM failure
BGF nss: Don't ignore Curl_extract_certinfo() OOM failure
BGF vtls: Fixed compilation warning and an ignored return code
BGF sockfilt.c: Fixed compilation warnings
BGF darwinssl: Fixed compilation warning
BGF vtls: Use '(void) arg' for unused parameters
BGF sepheaders.c: Fixed resource leak on failure
BGF lib1900.c: Fixed cppcheck error
BGF ldap: Fixed Unicode connection details in Win32 initialsation / bind calls
BGF ldap: Fixed Unicode DN, attributes and filter in Win32 search calls
SUBTITLE(Fixed in 7.39.0 - November 5 2014)
Changes:
CHG SSLv3 is disabled by default
CHG CURLOPT_COOKIELIST: Added "RELOAD" command
CHG build: Added WinIDN build configuration options to Visual Studio projects
CHG ssh: improve key file search
CHG SSL: public key pinning. Use CURLOPT_PINNEDPUBLICKEY and --pinnedpubkey
CHG vtls: remove QsoSSL support, use gskit!
CHG mk-ca-bundle: added SHA-384 signature algorithm
CHG docs: added many examples for libcurl opts and other doc improvements
CHG build: Added VC ssh2 target to main Makefile
CHG MinGW: Added support to build with nghttp2
CHG NetWare: Added support to build with nghttp2
CHG build: added Watcom support to build with WinSSL
CHG build: Added optional specific version generation of VC project files
Bugfixes:
BGF curl_easy_duphandle: CURLOPT_COPYPOSTFIELDS read out of bounds
BGF openssl: build fix for versions < 0.9.8e
BGF newlines: fix mixed newlines to LF-only
BGF ntlm: Fixed HTTP proxy authentication when using Windows SSPI
BGF sasl_sspi: Fixed Unicode build
BGF file: reject paths using embedded %00
BGF threaded-resolver: revert Curl_expire_latest() switch
BGF configure: allow --with-ca-path with PolarSSL too
BGF HTTP/2: Fix busy loop when EOF is encountered
BGF CURLOPT_CAPATH: return failure if set without backend support
BGF nss: do not fail if a CRL is already cached
BGF smtp: Fixed intermittent "SSL3_WRITE_PENDING: bad write retry" error
BGF fixed 20+ nits/memory leaks identified by Coverity scans
BGF curl_schannel.c: Fixed possible memory or handle leak
BGF multi-uv.c: call curl_multi_info_read() better
BGF cmake: Check for OpenSSL before OpenLDAP
BGF cmake: Fix library list provided to curl tests
BGF cmake: Avoid cycle directory dependencies
BGF cmake: Build with GSS-API libraries (MIT or Heimdal)
BGF vtls: provide backend defines for internal source code
BGF nss: fix a connection failure when FTPS handle is reused
BGF tests/http_pipe.py: Python 3 support
BGF cmake: build tool_hugehelp (ENABLE_MANUAL)
BGF cmake: enable IPv6 by default if available
BGF tests: move TESTCASES to Makefile.inc, add show for cmake
BGF ntlm: Avoid unnecessary buffer allocation for SSPI based type-2 token
BGF ntlm: Fixed empty/bad base-64 decoded buffer return codes
BGF ntlm: Fixed empty type-2 decoded message info text
BGF cmake: add CMake/Macros.cmake to the release tarball
BGF cmake: add SUPPORT_FEATURES and SUPPORT_PROTOCOLS
BGF cmake: use LIBCURL_VERSION from curlver.h
BGF cmake: generate pkg-config and curl-config
BGF fixed several superfluous variable assignments identified by cppcheck
BGF cleanup of 'CURLcode result' return code
BGF pipelining: only output "is not blacklisted" in debug builds
BGF SSL: Remove SSLv3 from SSL default due to POODLE attack
BGF gskit.c: remove SSLv3 from SSL default
BGF darwinssl: detect possible future removal of SSLv3 from the framework
BGF ntlm: Only define ntlm data structure when USE_NTLM is defined
BGF ntlm: Return CURLcode from Curl_ntlm_core_mk_lm_hash()
BGF ntlm: Return all errors from Curl_ntlm_core_mk_nt_hash()
BGF sspi: Only call CompleteAuthToken() when complete is needed
BGF http_negotiate: Fixed missing check for USE_SPNEGO
BGF HTTP: return larger than 3 digit response codes too
BGF openssl: Check for NPN / ALPN via OpenSSL version number
BGF openssl: enable NPN separately from ALPN
BGF sasl_sspi: Allow DIGEST-MD5 to use current windows credentials
BGF sspi: Return CURLE_LOGIN_DENIED on AcquireCredentialsHandle() failure
BGF resume: consider a resume from
BGF sasl: Fixed Kerberos V5 inclusion when CURL_DISABLE_CRYPTO_AUTH is used
BGF build-openssl.bat: Fix x64 release build
BGF cmake: drop _BSD_SOURCE macro usage
BGF cmake: fix gethostby{addr,name}_r in CurlTests
BGF cmake: clean OtherTests, fixing -Werror
BGF cmake: fix struct sockaddr_storage check
BGF Curl_single_getsock: fix hold/pause sock handling
BGF SSL: PolarSSL default min SSL version TLS 1.0
BGF cmake: fix ZLIB_INCLUDE_DIRS use
BGF buildconf: stop checking for libtool
SUBTITLE(Fixed in 7.38.0 - September 10 2014)
Changes:
CHG supports HTTP/2 draft-14
CHG CURLE_HTTP2 is a new error code
CHG CURLAUTH_NEGOTIATE is a new auth define
CHG CURL_VERSION_GSSAPI is a new capability bit
CHG no longer use fbopenssl for anything
CHG schannel: use CryptGenRandom for random numbers
CHG axtls: define curlssl_random using axTLS's PRNG
CHG cyassl: use RNG_GenerateBlock to generate a good random number
CHG findprotocol: show unsupported protocol within quotes
CHG version: detect and show LibreSSL
CHG version: detect and show BoringSSL
CHG imap/pop3/smtp: Kerberos (SASL GSSAPI) authentication via Windows SSPI
CHG http2: requires nghttp2 0.6.0 or later
Bugfixes:
SUBTITLE(Fixed in 7.37.1 - July 16 2014)
Changes:
CHG bits.close: introduce connection close tracking
CHG darwinssl: Add support for --cacert
CHG polarssl: add ALPN support
CHG docs: Added new option man pages
Bugfixes:
SUBTITLE(Fixed in 7.37.0 - May 21 2014)
Changes:
CHG URL parser: IPv6 zone identifiers are now supported
CHG CURLOPT_PROXYHEADER: set headers for proxy-only
CHG CURLOPT_HEADEROPT: added
CHG curl: add --proxy-header
CHG sasl: Added support for DIGEST-MD5 via Windows SSPI
CHG sasl: Added DIGEST-MD5 qop-option validation in native challenge handling
CHG imap: Expanded mailbox SEARCH support to use URL query strings
CHG imap: Extended FETCH support to include PARTIAL URL specifier
CHG nss: implement non-blocking SSL handshake
CHG build: Reworked Visual Studio project files
CHG poll: enable poll on darwin13
CHG mk-ca-bundle: added -p
CHG libtests: add a wait_ms() function
Bugfixes:
SUBTITLE(Fixed in 7.36.0 - March 26 2014)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.35.0 - January 29 2014)
Changes:
CHG imap/pop3/smtp: Added support for SASL authentication downgrades
CHG imap/pop3/smtp: Extended the login options to support multiple auth mechanisms
CHG TheArtOfHttpScripting: major update, converted layout and more
CHG mprintf: Added support for I, I32 and I64 size specifiers
CHG makefile: Added support for VC7, VC11 and VC12
Bugfixes:
SUBTITLE(Fixed in 7.34.0 - December 17 2013)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.33.0 - October 14 2013)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.32.0 - August 12 2013)
Changes:
CHG curl: allow timeouts to accept decimal values
CHG OS400: add slist and certinfo EBCDIC support
CHG OS400: new SSL backend GSKit
CHG CURLOPT_XFERINFOFUNCTION: introducing a new progress callback
CHG LIBCURL-STRUCTS: new document
Bugfixes:
SUBTITLE(Fixed in 7.31.0 - June 22 2013)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.30.0 - April 12 2013)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.29.0 - February 6 2013)
Changes:
CHG test: offer "automake" output and check for perl better
CHG always-multi: always use non-blocking internals
CHG imap: Added support for sasl digest-md5 authentication
CHG imap: Added support for sasl cram-md5 authentication
CHG imap: Added support for sasl ntlm authentication
CHG imap: Added support for sasl login authentication
CHG imap: Added support for sasl plain text authentication
CHG imap: Added support for login disabled server capability
CHG mk-ca-bundle: add -f, support passing to stdout and more
CHG writeout: -w now supports remote_ip/port and local_ip/port
Bugfixes:
SUBTITLE(Fixed in 7.28.1 - November 20 2012)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.28.0 - October 10 2012)
Changes:
CHG SSH: added agent based authentication
CHG ftp: active conn, allow application to set sockopt after accept() call with CURLSOCKTYPE_ACCEPT
CHG multi: add curl_multi_wait()
CHG metalink: Added support for Microsoft Windows CryptoAPI
CHG md5: Added support for Microsoft Windows CryptoAPI
CHG parse_proxy: treat "socks://x" as a socks4 proxy
CHG socks: Added support for IPv6 connections through SOCKSv5 proxy
Bugfixes:
SUBTITLE(Fixed in 7.27.0 - July 27 2012)
Changes:
Bugfixes:
BGF pop3: Fixed the issue of having to supply the user name for all requests
BGF configure: fix LDAPS disabling related misplaced closing parenthesis
BGF cmdline: made -D option work with -O and -J
BGF configure: Fix libcurl.pc and curl-config generation for static MingW* cross builds
BGF ssl: fix duplicated SSL handshake with multi interface and proxy
BGF winbuild: Fix Makefile.vc ignoring USE_IPV6 and USE_IDN flags
BGF OpenSSL: support longer certificate subject names
BGF openldap: OOM fixes
BGF log2changes.pl: fix the Version output
BGF lib554.c: use curl_formadd() properly
BGF urldata.h: fix cyassl build clash with wincrypt.h
BGF cookies: changed the URL in the cookiejar headers
BGF http-proxy: keep CONNECT connections alive (for NTLM)
BGF NTLM SSPI: fixed to work with unicode user names and passwords
BGF OOM fix in the curl tool when cloning cmdline options
BGF fixed some examples to use curl_global_init() properly
BGF cmdline: stricter numerical option parser
BGF HTTP HEAD: don't force-close after response-headers
BGF test231: fix wrong -C use
BGF docs: switch to proper UTF-8 for text file encoding
BGF keepalive: DragonFly uses milliseconds
BGF HTTP Digest: Client's "qop" value should not be quoted
BGF make distclean works again
SUBTITLE(Fixed in 7.26.0 - May 24 2012)
Changes:
CHG nss: the minimal supported version of NSS bumped to 3.12.x
CHG nss: human-readable names are now provided for NSS errors if available
CHG add a manual page for mk-ca-bundle
CHG added --post303 and the CURL_REDIR_POST_303 option for CURLOPT_POSTREDIR
CHG smtp: Add support for DIGEST-MD5 authentication
CHG pop3: Added support for additional pop3 commands
CHG curl: -w now supports 'filename_effective'
Bugfixes:
SUBTITLE(Fixed in 7.25.0 - March 22 2012)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.24.0 - January 24 2012)
Changes:
Bugfixes:
SUBTITLE(Fixed in 7.23.1 - November 17 2011)
Bugfixes:
BGF Windows: curl would fail if it found no CA cert, unless -k was used. Even
if a non-SSL protocol URL was used
SUBTITLE(Fixed in 7.23.0 - November 15 2011)
Changes:
CHG Empty headers can be sent in HTTP requests by terminating with a semicolon
CHG SSL session sharing support added to curl_share_setopt()
CHG Added support to MAIL FROM for the optional SIZE parameter
CHG smtp: Added support for NTLM authentication
CHG curl tool: code split into tool_*.[ch] files
Bugfixes:
BGF handle HTTP redirects to "https://hostname/path"
BGF SMTP without --mail-from caused segfault
BGF prevent extra progress meter headers between multiple files
BGF allow Content-Length to be replaced when sending HTTP requests
BGF curl now always sets postfieldsize to allow --data-binary and --data
to be mixed in the same command line
BGF curl_multi_fdset: avoid FD_SET out of bounds
BGF lots of MinGW build tweaks
BGF Curl_gethostname: return un-qualified machine name
BGF fixed the openssl version number configure check
BGF nss: certificates from files are no longer looked up by file base names
BGF returning abort from the progress function when using the multi interface
would not properly cancel the transfer and close the connection
BGF fix libcurl.m4 to not fail with modern gcc versions
BGF ftp: improved the failed PORT host name resolved error message
BGF TFTP timeout and unexpected block adjustments
BGF HTTP and GOPHER test server-side connection closing adjustments
BGF fix endless loop upon transport connection timeout
BGF don't clobber errno on failed connect
BGF typecheck: allow NULL to unset CURLOPT_ERRORBUFFER
BGF formdata: ack read callback abort
BGF make --show-error properly position independent
BGF set the ipv6-connection boolean correctly on connect
BGF SMTP: fix end-of-body string escaping
BGF gtls: only call gnutls_transport_set_lowat with < gnutls-2.12.0
BGF HTTP: handle multiple auths in a single WWW-Authenticate line
BGF curl_multi_fdset: correct fdset with FTP PORT use
BGF windbuild: fix the static build
BGF fix builds with GnuTLS version 3
BGF fix calling of OpenSSL's ERR_remove_state(0)
BGF HTTP auth: fix proxy Negotiate bug when Negotiate not requested
BGF ftp PORT: don't hang if bind() fails
BGF -# would crash on terminals wider than 256 columns
SUBTITLE(Fixed in 7.22.0 - September 13 2011)
Changes:
CHG Added CURLOPT_GSSAPI_DELEGATION
CHG Added support for NTLM delegation to Samba's winbind daemon helper ntlm_auth
CHG Display notes from setup file in testcurl.pl
CHG BSD-style lwIP TCP/IP stack experimental support on Windows
CHG OpenSSL: Use SSL_MODE_RELEASE_BUFFERS if available
CHG --delegation was added to set CURLOPT_GSSAPI_DELEGATION
CHG nss: start with no database if the selected database is broken
CHG telnet: allow programmatic use on Windows
Bugfixes:
BGF curl_getdate: detect some illegal dates better
BGF when sending a request and an error is received before the (entire) request
body is sent, stop sending the request and close the connection after
having received the entire response. This is equally true if an Expect:
100-continue header was used.
BGF When using both -J and a single -O with multiple URLs, a missing init
could cause a segfault
BGF -J fixed for escaped quotes
BGF -J fixed for file names with semicolons
BGF progress: reset flags at transfer start to avoid wrong
CURLINFO_CONTENT_LENGTH_DOWNLOAD
BGF curl_gssapi: Guard files with HAVE_GSSAPI and rename private header
BGF silence picky compilers: mark unused parameters
BGF help output: more gnu like output
BGF libtests: stop checking for CURLM_CALL_MULTI_PERFORM
BGF setting a non-HTTP proxy with an environment variable or with CURLOPT_PROXY
/ --proxy (without specifying CURLOPT_PROXYTYPE) would still make it do
proxy-like HTTP requests
BGF CURLFORM_BUFFER: insert filename as documented (regression)
BGF SOCKS: fix the connect timeout
BGF ftp_doing: bail out on error properly while multi interfacing
BGF improved Content-Encoded decoding error message
BGF asyn-thread: check for dotted addresses before thread starts
BGF cmake: find winsock when building on windows
BGF Curl_retry_request: check return code
BGF cookies: handle 'secure=' as if it was 'secure'
BGF tests: break busy loops in tests 502, 555, and 573
BGF FTP: fix proxy connect race condition with multi interface and SOCKS proxy
BGF RTSP: GET_PARAMETER requests have a body
BGF fixed several memory leaks in OOM situations
BGF bad expire(0) caused multi_socket API to hang
BGF Avoid ftruncate() static define with mingw64
BGF mk-ca-bundle.pl: ignore untrusted certs
BGF builds with PolarSSL 1.0.0
SUBTITLE(Fixed in 7.21.7 - June 23 2011)
Changes:
CHG recognize the [protocol]:// prefix in proxy hosts where the protocol is one
of socks4, socks4a, socks5 or socks5h.
CHG Added CURLOPT_CLOSESOCKETFUNCTION and CURLOPT_CLOSESOCKETDATA
Bugfixes:
BGF SECURITY ADVISORY: inappropriate GSSAPI delegation
BGF NTLM: work with unicode
BGF fix connect with SOCKS proxy when using the multi interface
BGF anyauthput.c: stdint.h must not be included unconditionally
BGF CMake: improved build
BGF SCP/SFTP enable non-blocking earlier
BGF GnuTLS handshake: fix timeout
BGF cyassl: build without filesystem
BGF HTTPS over HTTP proxy using the multi interface
BGF speedcheck: invalid timeout event on a reused handle
BGF Force connection close for HTTP 200 OK when time condition matched
BGF curl_formget: fix FILE * leak
BGF configure: improved OpenSSL detection
BGF Android build: support gingerbread
BGF CURLFORM_STREAM: acknowledge CURLFORM_FILENAME
BGF windows build: use correct MS CRT
BGF pop3: remove extra space in LIST command
SUBTITLE(Fixed in 7.21.6 - April 22 2011)
Changes:
CHG Added --tr-encoding and CURLOPT_TRANSFER_ENCODING
Bugfixes:
BGF curl-config: fix --version
BGF curl_easy_setopt.3: CURLOPT_PROXYTYPE clarification
BGF use HTTPS properly after CONNECT
BGF SFTP: close file before post quote operations
SUBTITLE(Fixed in 7.21.5 - April 17 2011)
Changes:
CHG SOCKOPTFUNCTION: callback can say already-connected
CHG Added --netrc-file
CHG Added (new) support for cyassl
CHG TLS-SRP: enabled with OpenSSL
CHG Added CURLE_NOT_BUILT_IN and CURLE_UNKNOWN_OPTION
Bugfixes:
BGF nss: avoid memory leak on SSL connection failure
BGF nss: do not ignore failure of SSL handshake
BGF multi: better failed connect handling when using FTP, SMTP, POP3 and IMAP
BGF runtests.pl: fix pid number concatenation that prevented it from killing
the correct process at times
BGF PolarSSL: Return 0 on receiving TLS CLOSE_NOTIFY alert
BGF curl_easy_setopt.3: Removed wrong reference to CURLOPT_USERPASSWORD
BGF multi: close connection on timeout
BGF IMAP in multi mode does SSL connections non-blocking
BGF honours the --disable-ldaps configure option
BGF Force setopt constants written by --libcurl to be long
BGF ssh_connect: treat libssh2 return code better
BGF SFTP upload could stall the state machine when the multi_socket API was
used
BGF SFTP and SCP could leak memory when used with the multi interface and
the connection was closed
BGF Added missing file to repair the MSVC makefiles
BGF Fixed detection of recvfrom arguments on Android/bionic
BGF GSS: handle reuse fix
BGF transfer: avoid insane conversion of time_t
BGF nss: do not ignore value of CURLOPT_SSL_VERIFYPEER in certain cases
BGF SMTP-multi: non-blocking connect
BGF SFTP-multi: set cselect for sftp and scp to fix "stall" risk
BGF configure: removed wrongly claimed default paths
BGF pop3: fixed torture tests to succeed
BGF symbols-in-versions: many corrections
BGF if a HTTP request gets retried because the connection was dead, rewind if
any data was sent as part of it
BGF only probe for working ipv6 once and then re-use that info for further
requests
BGF requests that are asked to bound to a local interface/port will no longer
wrongly re-use connections that aren't
BGF libcurl.m4: Add missing quotes in AC_LINK_IFELSE
BGF progress output: don't print the last update on a separate line
BGF POP3: the command to send is STLS, not STARTTLS
BGF POP3: PASS command was not sent after upgrade to TLS
BGF configure: fix libtool warning
BGF nss: allow to use multiple client certificates for a single host
BGF HTTP pipelining: Fix handling of zero-length responses
BGF Don't list NTLM in curl-config when HTTP is disabled
BGF curl_easy_setopt.3: CURLOPT_RESOLVE typo version
BGF OpenSSL: build fine with no-sslv2 versions
BGF checkconnection: don't call with NULL pointer with RTSP and multi interface
BGF Borland makefile updates
BGF configure: libssh2 link fix without pkg-config
BGF certinfo crash
BGF CCC crash
SUBTITLE(Fixed in 7.21.4 - February 17 2011)
Changes:
CHG CURLINFO_FTP_ENTRY_PATH now supports SFTP
CHG introduced new framework for unit-testing
CHG IDN: use win32 API if told to
CHG ares: ask for both IPv4 and IPv6 addresses
CHG HTTP: do Negotiate authentication using SSPI on windows
CHG Windows build: alternative makefile
CHG TLS-SRP: support added when using GnuTLS
CHG added support for axTLS
Bugfixes:
BGF SMTP: add brackets for MAIL FROM
BGF ossl_seed: no more RAND_screen (on Windows)
BGF multi: connect fail => use next IP address
BGF use the timeout when using multiple IP addresses similar to how
the easy interface does it
BGF cookies: tricked dotcounter fixed
BGF pubkey_show: allocate buffer to fit any-size result
BGF Curl_nss_connect: avoid PATH_MAX
BGF Curl_do: avoid using stale conn pointer
BGF tftpd test server: avoid buffer overflow report from glibc
BGF nss: avoid CURLE_OUT_OF_MEMORY given a file name without any slash
BGF nss: fix a bug in handling of CURLOPT_CAPATH
BGF CMake: Use upstream CheckTypeSize module
BGF OpenSSL get_cert_chain: support larger data sets
BGF SCP/SFTP transfers: acknowledge speedcheck
BGF GnuTLS builds: fix memory leak
BGF connect problem: use UDP correctly
BGF Borland C++ makefile tweaks
BGF OpenSSL: improved error message on SSL_CTX_new failures
BGF HTTP: memory leak on multiple Location:
BGF ares_query_completed_cb: don't touch invalid data
BGF ares: memory leak fix
BGF mk-ca-bundle: use new cacert url
BGF Curl_gmtime: added a portable gmtime and check for NULL
BGF curl.1: typo in -v description
BGF CURLOPT_SOCKOPTFUNCTION: return proper error code
BGF --keepalive-time: warn if not supported properly
BGF file: add support for CURLOPT_TIMECONDITION
BGF nss: avoid memory leaks and failure of NSS shutdown
BGF multi: fix CURLM_STATE_TOOFAST for multi_socket
SUBTITLE(Fixed in 7.21.3 - December 15 2010)
Changes:
CHG Added --noconfigure switch to testcurl.pl
CHG Added --xattr option
CHG Added CURLOPT_RESOLVE and --resolve
CHG Added CURLAUTH_ONLY
CHG Added version-check.pl to the examples dir
Bugfixes:
BGF check for libcurl features for some command line options
BGF Curl_setopt: disallow CURLOPT_USE_SSL without SSL support
BGF http_chunks: remove debug output
BGF URL-parsing: consider ? a divider
BGF SSH: avoid using the libssh2_ prefix
BGF SSH: use libssh2_session_handshake() to work on win64
BGF ftp: prevent server from hanging on closed data connection when stopping
a transfer before the end of the full transfer (ranges)
BGF LDAP: detect non-binary attributes properly
BGF ftp: treat server's response 421 as CURLE_OPERATION_TIMEDOUT
BGF gnutls->handshake: improved timeout handling
BGF security: Pass the right parameter to init
BGF krb5: Use GSS_ERROR to check for error
BGF TFTP: resend the correct data
BGF configure: fix autoconf 2.68 warning: no AC_LANG_SOURCE call detected
BGF GnuTLS: now detects socket errors on Windows
BGF symbols-in-versions: updated en masse
BGF added a couple examples that were missing from the tar ball
BGF Curl_send/recv_plain: return errno on failure
BGF Curl_wait_for_resolv (for c-ares): correct timeout
BGF ossl_connect_common: detect connection re-use
BGF configure: Prevent link errors with --librtmp
BGF openldap: use remote port in URL passed to ldap_init_fd()
BGF url: provide dead_connection flag in Curl_handler::disconnect
BGF lots of compiler warning fixes
BGF ssh: fix a download resume point calculation
BGF fix getinfo CURLINFO_LOCAL* for reused connections
BGF multi: the returned running handles conuter could turn negative
BGF multi: only ever consider pipelining for connections doing HTTP(S)
SUBTITLE(Fixed in 7.21.2 - October 13 2010)
Changes:
CHG curl -T: ignore file size of special files
CHG Added GOPHER protocol support
CHG Added mk-ca-bundle.vbs script
CHG c-ares build now requires c-ares >= 1.6.0
Bugfixes:
BGF --remote-header-name security vulnerability fixed
BGF multi: support the timeouts correctly, fixes known bug #62
BGF multi: use timeouts properly for MAX_RECV/SEND_SPEED
BGF negotiation: Wrong proxy authorization
BGF multi: avoid sending multiple complete messages
BGF cmdline: make -F type= accept ;charset=
BGF RESUME_FROM: clarify what ftp uploads do
BGF http: handle trailer headers in all chunked responses
BGF Curl_is_connected: use correct errno
BGF Added SSPI build to Watcom makefile
BGF progress: callback for POSTs less than MAX_INITIAL_POST_SIZE
BGF linking problem on Fedora 13
BGF Link curl and the test apps with -lrt explicitly when necessary
BGF chunky parser: only rewind stream internally if needed
BGF remote-header-name: don't output filename when NULL
BGF Curl_timeleft: avoid returning "no timeout" by mistake
BGF timeout: use the correct start value as offset
BGF FTP: fix wrong timeout trigger
BGF buildconf got better output on failures
BGF rtsp: avoid SIGSEGV on malformed header
BGF LDAP: Support for tunnelling queries through HTTP proxy
BGF configure's --enable-werror had a bashism
BGF test565: Don't hardcode IP:PORT
BGF configure: check for gcrypt if using GnuTLS
BGF configure: don't enable RTMP if the lib detect fails
BGF curl_easy_duphandle: clone the c-ares handle correctly
BGF MacOSX-Framework: updates for Snowleopard
BGF support URL containing colon without trailing port number
BGF parsedate: allow time specified without seconds
BGF curl_easy_escape: don't escape "unreserved" characters
BGF SFTP: avoid downloading negative sizes
BGF Lots of GSS/KRB FTP fixes
BGF TFTP: Work around tftpd-hpa upload bug
BGF libcurl.m4: several fixes
BGF HTTP: remove special case for 416
BGF examples: use example.com in example URLs
BGF globbing: fix crash on unballanced open brace
BGF cmake: build fixed
SUBTITLE(Fixed in 7.21.1 - August 11 2010)
Changes:
CHG maketgz: produce CHANGES automatically
CHG added support for NTLM authentication when compiled with NSS
CHG build: Enable configure --enable-werror
CHG curl-config: --built-shared returns shared info
Bugfixes:
BGF configure: spell --disable-threaded-resolver correctly
BGF multi: call the progress callback in all states
BGF multi: unmark handle as used when no longer head of pipeline
BGF sendrecv: treat all negative values from send/recv as errors
BGF ftp-wildcard: avoid tight loop when used without any pattern
BGF multi_socket: re-use of same socket without notifying app
BGF ftp wildcard: FTP LIST parser FIX
BGF urlglobbing backslash escaping bug
BGF build: add enable IPV6 option for the VC makefiles
BGF multi: CURLINFO_LASTSOCKET doesn't work after remove_handle
BGF --libcurl: use *_LARGE options with typecasted constants
BGF --libcurl: hide setopt() calls setting default options
BGF curl: avoid setting libcurl options to its default
BGF --libcurl: list the tricky options instead of using [REMARK]
BGF http: don't enable chunked during authentication negotiations
BGF upload: warn users trying to upload from stdin with anyauth
BGF configure: allow environments variable to override internals
BGF threaded resolver: fix timeout issue
BGF multi: fix condition that remove timers before trigger
BGF examples: add curl_multi_timeout
BGF --retry: access violation with URL part sets continued
BGF ssh: Fix compile error on 64-bit systems.
BGF remote-header-name: chop filename at next semicolon
BGF ftp: response timeout bug in "quote" sending
BGF CUSTOMREQUEST: shouldn't be disabled when HTTP is disabled
BGF Watcom makefiles overhaul.
BGF NTLM tests: boost coverage by forcing the hostname
BGF multi: fix FTPS connecting the data connection with OpenSSL
BGF retry: consider retrying even if -f is used
BGF fix SOCKS problem when using multi interface
BGF typecheck-gcc: add checks for recently added options
BGF SCP: send large files properly with new enough libssh2
BGF multi_socket: set timeout for 100-continue
BGF ";type=" URL suffix over HTTP proxy
BGF acknowledge progress callback error returns during connect
BGF Watcom makefile fixes
BGF runtests: clear old setenv remainders before test
SUBTITLE(Fixed in 7.21.0 - June 16 2010)
Changes:
CHG added the --proto and -proto-redir options
CHG new configure option --enable-threaded-resolver
CHG improve TELNET ability with libcurl
CHG added support for PolarSSL
CHG added support for FTP wildcard matching and downloads
CHG added support for RTMP
CHG introducing new LDAP code for new enough OpenLDAP
CHG OpenLDAP support enabled for cygwin builds
CHG added CURLINFO_PRIMARY_PORT, CURLINFO_LOCAL_IP and CURLINFO_LOCAL_PORT
Bugfixes:
BGF prevent needless reverse name lookups
BGF detect GSS on ancient Linux distros
BGF GnuTLS: EOF caused error when it wasn't
BGF GnuTLS: SSL handshake phase is non-blocking
BGF -J/--remote-header-name strips CRLF
BGF MSVC makefiles now use ws2_32.lib instead of wsock32.lib
BGF -O crash on windows
BGF SSL handshake timeout underflow in libcurl-NSS
BGF multi interface missed storing connection time
BGF broken CRL support in libcurl-NSS
BGF ignore response-body on redirect even if compressed
BGF OpenSSL handshake state-machine for multi interface
BGF TFTP timeout option sent correctly
BGF TFTP block id wrap
BGF curl_multi_socket_action() timeout handles inaccuracy in timers better
BGF SCP/SFTP failure to respect the timeout
BGF spurious SSL connection aborts with OpenSSL
SUBTITLE(Fixed in 7.20.1 - April 14 2010)
Changes:
CHG The 'ares' subtree has been removed from the source repository
CHG smoother rate limiting
CHG allow user+password in the URL for all protocols
CHG POP3: Get message listing if no mailbox in URL
Bugfixes:
BGF VMS builder bad behavior when used in a batch job
BGF multiple recipients with SMTP
BGF fixed the CURL_FORMAT_* defines when building with cmake
BGF missing quote in libcurl.m4
BGF SMTP: now waits for 250 after the DATA transfer
BGF SMTP: use angle brackets in RCPT TO
BGF curl --trace-time not using local time
BGF off-by-one in the chunked encoding trailer parser
BGF superfluous blocking for OpenSSL-based SSL connects and multi interface
BGF TFTP upload
BGF FTP timeouts after file transferred completely
BGF skip poll() on Interix
BGF CURLOPT_CERTINFO memory leak
BGF sub-second timeouts improvements
BGF configure fixes for GSSAPI
BGF threaded resolver double free when closing curl handle
BGF configure fixes for building with the clang compiler
BGF easy interix rate limiting logic
BGF curl_multi_remove_handle() caused use after free
BGF TFTP improved error codes
BGF TFTP fixed TSIZE handling for uploads
BGF SSL possible double free when reusing curl handle
BGF alarm()-based DNS timeout bug
BGF re-used FTP connection multi interface crash
BGF chunked-encoding with Content-Length: header problem
BGF multi interface HTTP POST over a proxy using PROXYTUNNEL
BGF RTSP GET_PARAMETER
BGF timeout after last data chunk was handled
BGF SFTP download hang
BGF FTP quote commands prefixed with '*' now can fail without aborting
SUBTITLE(Fixed in 7.20.0 - February 9 2010)
Changes:
CHG support SSL_FILETYPE_ENGINE for client certificate
CHG curl-config can now show the arguments used when building curl
CHG non-blocking TFTP
CHG send Expect: 100-continue for POSTs with unknown sizes
CHG added support for IMAP(S), POP3(S), SMTP(S) and RTSP
CHG added new curl_easy_setopt() options for SMTP and RTSP
CHG added --mail-from and --mail-rcpt for SMTP
CHG VMS build system enhancements
CHG added support for the PRET ftp command
CHG curl supports --ssl and --ssl-reqd
CHG added -J/--remote-header-name for using server-provided filename with -O
CHG enhanced asynchronous DNS lookups
CHG symbol CURL_FORMAT_OFF_T is obsoleted
Bugfixes:
BGF progress meter percentage and transfer time estimates fixes
BGF portability enhancement for OS's without orthogonal directory tree structure
BGF progress meter/callback during FTP connection
BGF DNS cache timeout while transfer in progress
BGF compilation when configured --with-gssapi having GNU GSS installed
BGF SSL connection reused with mismatched protection level
BGF configure --with-nss is set but not "yes"
BGF don't store LDFLAGS in pkg-config file
BGF never-pruned DNS cached entries
BGF HTTP proxy tunnel re-used connection even if tunnel got disabled
BGF SSL lib post-close write
BGF curl failed to report write errors for tiny failed downloads
BGF TFTP BLKSIZE
BGF Expect: 100-continue handling when set by the application
BGF multi interface with OpenSSL read already freed memory when closing down
BGF --retry didn't do right for FTP transient errors
BGF some *_proxy environment variables didn't function
BGF libcurl-OpenSSL engine cleanup
BGF header include fix for FreeBSD versions before v8
BGF fragment part of URLs are no longer sent to the server
BGF progress callback called repeatedly with c-ares for resolving
BGF OpenSSL session id ref count leak
BGF progress callback called repeatedly during slow connects
BGF curl_multi_fdset() would return -1 too often during SCP/SFTP transfers
BGF FTP file size checks with ASCII transfers
BGF HTTP Cookie: headers sort cookies based on specified path lengths
BGF CURLM_CALL_MULTI_PERFORM fix for multi socket timeout calls
BGF libcurl data callback excessive length
SUBTITLE(Fixed in 7.19.7 - November 4 2009)
Changes:
CHG -T. is now for non-blocking uploading from stdin
CHG SYST handling on FTP for OS/400 FTP server cases
CHG libcurl refuses to read a single HTTP header longer than 100K
CHG added the --crlfile option to curl
Bugfixes:
BGF The windows makefiles work again
BGF libcurl-NSS acknowledges verifyhost
BGF SIGSEGV when pipelined pipe unexpectedly breaks
BGF data corruption issue with re-connected transfers
BGF use after free if we're completed but easy_conn not NULL (pipelined)
BGF missing strdup() return code check
BGF CURLOPT_PROXY_TRANSFER_MODE could pass along wrong syntax
BGF configure --with-gnutls=PATH fixed
BGF ftp response reader bug on failed control connections
BGF improved NSS error message on failed host name verifications
BGF ftp NOBODY on re-used connection hang
BGF configure uses pkg-config for cross-compiles as well
BGF improved NSS detection in configure
BGF cookie expiry date at 1970-jan-1 00:00:00
BGF libcurl-OpenSSL failed to verify some certs with Subject Alternative Name
BGF libcurl-OpenSSL can load CRL files with more than one certificate inside
BGF received cookies without explicit path got saved wrong if the URL had a
query part
BGF don't shrink SO_SNDBUF on windows for those who have it set large already
BGF connect next bug
BGF invalid file name characters handling on Windows
BGF double close() on the primary socket with libcurl-NSS
BGF GSS negotiate infinite loop on bad credentials
BGF memory leak in SCP/SFTP connections
BGF use pkg-config to find out libssh2 installation details in configure
BGF unparsable cookie expire dates make cookies get treated as session coookies
BGF POST with Digest authentication and "Transfer-Encoding: chunked"
BGF SCP connection re-use with wrong auth
BGF CURLINFO_CONTENT_LENGTH_DOWNLOAD for 0 bytes transfers
BGF CURLINFO_SIZE_DOWNLOAD for ldap transfers (-w size_download)
SUBTITLE(Fixed in 7.19.6 - August 12 2009)
Changes:
CHG CURLOPT_FTPPORT (and curl's -P/--ftpport) support port ranges
CHG Added CURLOPT_SSH_KNOWNHOSTS, CURLOPT_SSH_KEYFUNCTION, CURLOPT_SSH_KEYDATA
CHG CURLOPT_QUOTE, CURLOPT_POSTQUOTE and CURLOPT_PREQUOTE can be told to ignore
error responses when used with FTP
Bugfixes:
BGF crash on bad socket close with FTP
BGF leaking cookie memory when duplicate domains or paths were used
BGF build fix for Symbian
BGF CURLOPT_USERPWD set to NULL clears auth credentials
BGF libcurl-NSS build fixes
BGF configure script fixed for VMS
BGF set Content-Length: with POST and PUT failed with NTLM auth
BGF allow building libcurl for VxWorks
BGF curl tool exit codes fixed for VMS
BGF --no-buffer treated correctly
BGF djgpp build fix
BGF configure detection of GnuTLS now based on pkg-config as well
BGF libcurl-NSS client cert handling segfaults
BGF curl uploading from stdin/pipes now works in non-blocking way so that it
continues the downloading even when the read stalls
BGF ftp credentials are added to the url if needed for http proxies
BGF curl -o - sends data to stdout using binary mode on windows
BGF fixed the separators for "array" style string that CURLINFO_CERTINFO returns
BGF auth problem over several hosts with re-used connection
BGF improved the support for client certificates in libcurl+NSS
BGF fix leak in gtls code
BGF missing algorithms in libcurl+OpenSSL
BGF with noproxy set you could still get a proxy if a proxy env was set
BGF rand seeding on libcurl on windows built with OpenSSL was not thread-safe
BGF fixed the zero byte inserted in cert name flaw in libcurl+OpenSSL
BGF don't try SNI with SSLv2 or SSLv3 (OpenSSL and GnuTLS builds)
BGF libcurl+OpenSSL would wrongly acknowledge a cert if CN matched but
subjectAltName didn't
BGF TFTP upload sent illegal TSIZE packets
SUBTITLE(Fixed in 7.19.5 - May 18 2009)
Changes:
CHG libcurl now closes all dead connections whenever you attempt to open a new
connection
CHG libssh2's version number can now be figured out run-time instead of using
the build-time fixed number
CHG CURLOPT_SEEKFUNCTION may now return CURL_SEEKFUNC_CANTSEEK
CHG curl can now upload with resume even when reading from a pipe
CHG a build-time configured curl_socklen_t is now used instead of socklen_t
Bugfixes:
BGF NTLM authentication memory leak on SSPI enabled Windows builds
BGF fixed the GnuTLS-using code to do correct return code checks
BGF an alloc-related call in the OpenSSL-using code didn't check the return value
BGF curl_easy_duphandle() failed to duplicate cookies at times
BGF missing TELNET timeout support in Windows builds
BGF missing Curl_read() and write callback result checking in TELNET transfers
BGF more ciphers enabled in libcurl built to use NSS
BGF properly return an error code in curl_easy_recv
BGF Sun compilers specific preprocessor block removed from curlbuild.h.dist
BGF allow creation of four way fat libcurl Mac OS X Framework
BGF several memory leaks in libcurl+NSS
BGF improved the CURLOPT_NOBODY set to 0 confusions
BGF persistent connections when doing FTP over a HTTP proxy
BGF --libcurl bogus strings where other data was pointed to
BGF crash related to FTP and "Re-used connection seems dead, get a new one"
BGF CURLINFO_APPCONNECT_TIME with the multi interface
BGF Enhanced upload speeds on Windows
BGF TFTP problems after a failed transfer to the same host
BGF improved out of the box TPF compatibility
BGF HTTP PUT protocol line endings portions mangled from CRLF to CRCRLF
BGF Rejected SSL session ids are killed properly (for OpenSSL and GnuTLS builds)
BGF Deal with the TFTP OACK packet
BGF fixed roff mistakes in man pages
BGF use SOCKS proxy with the multi interface
BGF fixed the Curl_getoff_all_pipelines SIGSEGV
BGF POST, NTLM and following a redirect hang
BGF libcurl+NSS endless loop on incorrect password for private key
BGF gzip decompression memory leak
BGF no_proxy flaw with user name in URL
SUBTITLE(Fixed in 7.19.4 - March 3 2009)
Changes:
CHG Added CURLOPT_NOPROXY and the corresponding --noproxy
CHG the OpenSSL-specific code disables TICKET (rfc5077) which is enabled by
default in openssl 0.9.8j
CHG Added CURLOPT_TFTP_BLKSIZE
CHG Added CURLOPT_SOCKS5_GSSAPI_SERVICE and CURLOPT_SOCKS5_GSSAPI_NEC - with
the corresponding curl options --socks5-gssapi-service and
--socks5-gssapi-nec
CHG Improved IPv6 support when built with with c-ares >= 1.6.1
CHG Added CURLPROXY_HTTP_1_0 and --proxy1.0
CHG Added docs/libcurl/symbols-in-versions
CHG Added CURLINFO_CONDITION_UNMET
CHG Added support for Digest and NTLM authentication using GnuTLS
CHG CURLOPT_FTP_CREATE_MISSING_DIRS can now be set to 2 to retry the CWD even
when MKD fails
CHG GnuTLS initing moved to curl_global_init()
CHG Added CURLOPT_REDIR_PROTOCOLS and CURLOPT_PROTOCOLS, see also the security advisory
Bugfixes:
BGF missing ssh.obj in VS makefiles
BGF FTP ;type=i URLs now work with CURLOPT_PROXY_TRANSFER_MODE in Turkish
locale
BGF realms with quoted quotation marks in HTTP Digest headers
BGF VC9 makefiles are now really included
BGF multi interface memory leak with CURLMOPT_MAXCONNECTS set
BGF CURLINFO_CONTENT_LENGTH_DOWNLOAD size from file:// "transfers" with
CURLOPT_NOBODY set true
BGF memory leak on some libz errors for content encodings
BGF NSS-enabled build is repaired
BGF superfluous wait in SFTP downloads removed
BGF FTP with the multi interface no longer kills the control connection as
easily on transfer failures
BGF compilation halting when using VS2008 to build a Windows 2000 target
BGF ease creation of libcurl Mac OS X Framework
BGF CURLINFO_CONTENT_LENGTH_DOWNLOAD and CURLINFO_CONTENT_LENGTH_UPLOAD are -1
if unknown
BGF Negotiate proxy authentication
BGF CURLOPT_INTERFACE and CURLOPT_LOCALPORT used together
SUBTITLE(Fixed in 7.19.3 - January 19 2009)
Changes:
CHG CURLAUTH_DIGEST_IE bit added for CURLOPT_HTTPAUTH and CURLOPT_PROXYAUTH
CHG VC9 Makefiles were added to the release package
Bugfixes:
BGF build failure when disabling FTP but enabling GSS
BGF fixed several calls to memory functions that didn't check return codes
BGF memory leak for SSL connects with libcurl/NSS when CURLOPT_ISSUERCERT was
used
BGF re-use of connections with the multi interface when multiple handles used
the same server
BGF memory leak with HTTP GSS/kerberos authentication
BGF removed the default use of "Pragma: no-cache"
BGF fix SCP/SFTP busyloop by using a new libssh2 1.0 function
BGF bad fclose() after a fatal error in cookie code
BGF curl_multi_remove_handle() when the handle was in use in a HTTP pipeline
BGF GSS authentication infinite loop problem
BGF 550 response from SIZE no longer treated as missing file
BGF ftps:// control connections now use explicit protection level
BGF dotted IPv6 addresses longer than 39 bytes failed
BGF curl_easy_duphandle() doesn't try to duplicate the connection cache pointer
BGF build failure on OS/400 when enabling IPv6
BGF better detection of SFTP failures
BGF improved connection re-use for subsequent SCP and SFTP transfers
BGF multi interface does less busy-loops for SCP and SFTP transfers with libssh2
1.0 or later
BGF curl_multi_timeout() no longer returns timeout 0 when there's still more
than 0 but less than 999 microseconds left
BGF the multi_socket API and HTTP pipelining now work a lot better when combined
BGF SFTP seek/resume beyond 32bit file sizes
BGF fixed breakage with --with-ssl --disable-verbose
BGF TTL "leak" in the DNS cache
BGF improved NSS initing
BGF curl_easy_reset now resets more options
BGF rare Location: follow bug with the multi interface
BGF the configure script can now detect gnutls with pkg-config
BGF curlbuild.h was adjusted for SunPro compilers
BGF CURLOPT_COOKIELIST set to "SESS" on an easy handle with no cookies data
BGF fixed timeouts for TFTP
BGF fixed PPC builds
SUBTITLE(Fixed in 7.19.2 - November 13 2008)
Bugfixes:
BGF build failure when using MSVC 6 makefile and on four platforms more
BGF crash when using --interface name on Linux systems with a TEQL device
BGF using the multi interface to download a HTTPS page with libcurl built
powered by OpenSSL could download "rubbish" instead of actual content
SUBTITLE(Fixed in 7.19.1 - November 5 2008)
Changes:
CHG pkg-config can now show supported_protocols and supported_features
CHG Added CURLOPT_CERTINFO and CURLINFO_CERTINFO
CHG Added CURLOPT_POSTREDIR
CHG Better detect HTTP 1.0 servers and don't do HTTP 1.1 requests on them
CHG configure --disable-proxy disables proxy support
CHG Added CURLOPT_USERNAME and CURLOPT_PASSWORD
CHG --interface now works with IPv6 connections on glibc systems
CHG Added CURLOPT_PROXYUSERNAME and CURLOPT_PROXYPASSWORD
Bugfixes:
BGF MingW32 non-configure builds are now largefile feature enabled by default
BGF NetWare LIBC builds are now largefile feature enabled by default
BGF curl_easy_pause() could behave wrongly on unpause
BGF cookies with invalid expire dates are now considered expired
BGF HTTP pipelining over proxy
BGF fix regression in configure script which affected OpenSSL builds on MSYS
BGF GnuTLS-based multi interface doing HTTPS over proxy failed
BGF recv() failures cause CURLE_RECV_ERROR
BGF SFTP over SOCKS crash fixed
BGF thread-safety issues addressed for NSS-powered libcurls
BGF removed the use of mktime() and gmtime(_r)() in date parsing and conversions
BGF HTTP Digest with a blank realm did wrong
BGF CURLINFO_REDIRECT_URL didn't work with the multi interface
BGF CURLOPT_RANGE now works for SFTP downloads
BGF FTP SIZE response 550 now causes CURLE_REMOTE_FILE_NOT_FOUND
BGF CURLINFO_PRIMARY_IP fixed for persistent connection re-use cases
BGF remove_handle/add_handle multi interface timer callback flaw
BGF CURLINFO_REDIRECT_URL memory leak and wrong-doing
BGF case insensitive string matching works in Turkish too
BGF Solaris builds get _REENTRANT defined properly and work again
BGF Garbage sent on chunky upload after curl_easy_pause()
BGF ipv4 name resolves when libcurl is built with ipv6-enabled c-ares
BGF undersized IPv6 address internal buffer truncated long IPv6 addresses
BGF CURLINFO_FILETIME works for file:// transfers as well
SUBTITLE(Fixed in 7.19.0 - September 1 2008)
Changes:
CHG curl_off_t gets its size/typedef somewhat differently than before. This _may_
cause an ABI change for you. See lib/README.curl_off_t for a full explanation.
CHG Added CURLINFO_PRIMARY_IP
CHG Added CURLOPT_CRLFILE and CURLE_SSL_CRL_BADFILE
CHG Added CURLOPT_ISSUERCERT and CURLE_SSL_ISSUER_ERROR
CHG curl's option parser for boolean options reworked
CHG Added --remote-name-all
CHG Now builds for the INTEGRITY operating system
CHG Added CURLINFO_APPCONNECT_TIME
CHG Added test selection by key word in runtests.pl
CHG the curl tool's -w option support the %{ssl_verify_result} variable
CHG Added CURLOPT_ADDRESS_SCOPE and scope parsing of the URL according to RFC4007
CHG Support --append on SFTP uploads (not with OpenSSH, though)
CHG Added curlbuild.h and curlrules.h to the external library interface
Bugfixes:
BGF Fixed curl-config --ca
BGF Fixed the multi interface connection re-use with NSS-built libcurl
BGF connection re-use when using the multi interface with pipelining enabled
BGF curl_multi_socket() socket callback fix for close/re-create sockets case
BGF SCP or SFTP over socks proxy crashed
BGF RC4-MD5 cipher now works with NSS-built libcurl
BGF range requests with --head are now done correctly
BGF fallback to gettimeofday when monotonic clock is unavailable at run-time
BGF range numbers could be made to wrongly get output as signed
BGF unexpected 1xx responses hung transfers
BGF FTP transfers segfault when using different CURLOPT_FTP_FILEMETHOD
BGF c-ares powered libcurls can resolve/use IPv6 addresses
BGF poll not working on Windows Vista due to POLLPRI being incorrectly used
BGF user-agent in CONNECT with non-HTTP protocols
BGF CURL_READFUNC_PAUSE problems fixed
BGF --use-ascii now works on Symbian OS, MS-DOS and OS/2
BGF CURLINFO_SSL_VERIFYRESULT is fixed
BGF FTP URLs and IPv6 URLs mangled when sent to proxy with CURLOPT_PORT set
BGF a user name in a proxy URL without a password was parsed incorrectly
BGF library will now be built with _REENTRANT symbol defined only if needed
BGF no longer link with gdi32 on Windows cross-compiled targets
BGF HTTP PUT with -C - sent bad Content-Range: header
BGF HTTP PUT or POST with redirect could lead to hang
BGF re-use of connections with failed SSL connects in the multi interface
BGF NTLM over proxy state was wrongly cleared when host connection was closed
BGF Windows SSPI DLL loading is now done in curl_global_init()
BGF runtests.pl has an improved find-stunnel-and-invoke
BGF FTP sessions could go out of sync on a long header boundary condition
BGF potential buffer overflows in the MS-DOS command-line port fixed
BGF --stderr is now honoured with the -v option
BGF memory leak in libcurl on Windows built with OpenSSL
BGF improved curl_m*printf() integral data type size and signedness handling
BGF error when --dump-header - used with more than one URL
BGF proxy closing connect during CONNECT with auth with the multi interface
BGF CURLOPT_UPLOAD sets HTTP method back to GET or HEAD when passed in a 0
BGF shared cookies could get locked twice
BGF deal with closed connection while doing POST/PUT
SUBTITLE(Fixed in 7.18.2 - June 4 2008)
Changes:
CHG CURLFORM_STREAM was added
CHG CURLOPT_NOBODY is now supported over SFTP
CHG curl can now run on Symbian OS
CHG curl -w redirect_url and CURLINFO_REDIRECT_URL
CHG added curl_easy_send() and curl_easy_recv()
Bugfixes:
BGF CURLOPT_NOBODY first set to TRUE and then FALSE for HTTP no longer causes
the confusion that could lead to a hung transfer
BGF curl_easy_reset() resets the max redirect limit properly
BGF configure now correctly recognizes Heimdal and MIT gssapi libraries
BGF malloc() failure check in Negotiate
BGF -i and -I together now work the same no matter what order they're used
BGF the typechecker can be bypassed by defining CURL_DISABLE_TYPECHECK
BGF a pointer mixup could make the FTP code send bad user+password under rare
circumstances (found when using curlftpfs)
BGF CURLOPT_OPENSOCKETFUNCTION can now be used to create a unix domain socket
BGF CURLOPT_TCP_NODELAY crash due to getprotobyname() use
BGF libcurl sometimes sent body twice when using CURLAUTH_ANY
BGF configure detecting debug-enabled c-ares
BGF microsecond resolution keys for internal splay trees
BGF krb4 and krb5 ftp segfault
BGF multi interface busy loop for CONNECT requests
BGF internal time differences now use monotonic time source if available
BGF several curl_multi_socket() fixes
BGF builds fine for Haiku OS
BGF follow redirect with only a new query string
BGF SCP and SFTP memory leaks on aborted transfers
BGF curl_multi_socket() and HTTP pipelining transfer stalls
BGF lost telnet data on an EWOULDBLOCK condition
SUBTITLE(Fixed in 7.18.1 - March 30 2008)
Changes:
CHG added support for HttpOnly cookies
CHG 'make ca-bundle' downloads and generates an updated ca bundle file
CHG we no longer distribute or install a ca cert bundle
CHG SSLv2 is now disabled by default for SSL operations
CHG the test509-style setting URL in callback is officially no longer supported
CHG support a full chain of certificates in a given PKCS12 certificate
CHG resumed transfers work with SFTP
CHG added type checking macros for curl_easy_setopt() and curl_easy_getinfo(),
watch out for new warnings in code using libcurl (needs gcc-4.3 and
currently only works in C mode)
CHG curl_easy_setopt(), curl_easy_getinfo(), curl_share_setopt() and
curl_multi_setopt() uses are now checked to use exactly three arguments
CHG --with-ca-path=DIR configure option allows to set an openSSL CApath instead
of a default ca bundle.
CHG supports server name indication (RFC 4366), aka SNI
Bugfixes:
BGF improved pipelining
BGF improved strdup replacement
BGF GnuTLS-built libcurl failed when doing global cleanup and reinit
BGF error message problem when unable to resolve a host on Windows
BGF Accept: header replacing
BGF not verifying server certs with GnuTLS still failed if gnutls had
problems with the cert
BGF when using the multi interface and a handle is removed while still having
a transfer going on, the connection is now closed by force
BGF bad re-use of SSL connections in non-complete state
BGF test case 405 failures with GnuTLS builds
BGF crash when connection cache size is 1 and Curl_do() failed
BGF GnuTLS-built libcurl can now be forced to prefer SSLv3
BGF crash when doing Negotiate again on a re-used connection
BGF select/poll regression
BGF better MIT kerberos configure check
BGF curl_easy_reset() + SFTP re-used connection download crash
BGF SFTP non-existing file + SFTP existing file error
BGF sharing DNS cache between easy handles running in multiple threads could
lead to crash
BGF SFTP upload with CURLOPT_FTP_CREATE_MISSING_DIRS on re-used connection
BGF SFTP infinite loop when given an invalid quote command
BGF curl-config erroneously reported LDAPS support with missing LDAP libraries
BGF SCP infinite loop when downloading a zero byte file
BGF setting the CURLOPT_SSL_CTX_FUNCTION with libcurl built without OpenSSL
now makes curl_easy_setopt() properly return failure
BGF configure --with-libssh2 (with no given path)
SUBTITLE(Fixed in 7.18.0 - January 28 2008)
Changes:
CHG --data-urlencode
CHG CURLOPT_PROXY_TRANSFER_MODE
CHG --no-keepalive - now curl does connections with keep-alive enabled by
default
CHG --socks4a added (proxy type CURLPROXY_SOCKS4A for libcurl)
CHG --socks5-hostname added (CURLPROXY_SOCKS5_HOSTNAME for libcurl)
CHG curl_easy_pause()
CHG CURLOPT_SEEKFUNCTION and CURLOPT_SEEKDATA
CHG --keepalive-time
CHG curl --help output was re-ordered
Bugfixes:
BGF curl-config --features and --protocols show the correct output when built
with NSS, and also when SCP, SFTP and libz are not available
BGF free problem in the curl tool for users with empty home dir
BGF curl.h version 7.17.1 problem when building C++ apps with MSVC
BGF SFTP and SCP use persistent connections
BGF segfault on bad URL
BGF variable wrapping when using absolutely huge send buffer sizes
BGF variable wrapping when using debug callback and the HTTP request wasn't sent
in one go
BGF SSL connections with NSS done with the multi-interface
BGF setting a share no longer activates cookies
BGF Negotiate now works on auth and proxy simultanouesly
BGF support HTTP Digest nonces up to 1023 letters
BGF resumed ftp upload no longer requires the read callback to return full
buffers
BGF no longer default-appends ;type= on FTP URLs through proxies
BGF SSL session id caching
BGF POST with callback over proxy requiring NTLM or Digest
BGF Expect: 100-continue flaw on re-used connection with POSTs
BGF build fix for MSVC 9.0 (VS2008)
BGF Windows curl builds failed file truncation when retry downloading
BGF SSL session ID cache memory leak
BGF bad connection re-use check with environment variable-activated proxy use
BGF --libcurl now generates a return statement as well
BGF socklen_t is no longer used in the public includes
BGF time zone offsets from -1400 to +1400 are now accepted by the date parser
BGF allows more spaces in WWW/Proxy-Authenticate: headers
BGF curl-config --libs skips /usr/lib64
BGF range support for file:// transfers
BGF libcurl hang with huge POST request and request-body read from callback
BGF removed extra newlines from many error messages
BGF improved pipelining
BGF improved OOM handling for data url encoded HTTP POSTs when read from a file
BGF test suite could pick wrong tool(s) if more than one existed in the PATH
BGF curl_multi_fdset() failed to return socket while doing CONNECT over proxy
BGF curl_multi_remove_handle() on a handle that is in used for a pipeline now
break that pipeline
BGF CURLOPT_COOKIELIST memory leaks
BGF progress meter/callback during http proxy CONNECT requests
BGF auth for http proxy when the proxy closes connection after first response
SUBTITLE(Fixed in 7.17.1 - October 29 2007)
Changes:
CHG automatically append ";type=<a|i>" when using HTTP proxies for FTP urls
CHG improved NSS support
CHG added --proxy-negotiate
CHG added --post301 and CURLOPT_POST301
CHG builds with c-ares 1.5.0
CHG added CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 and --hostpubmd5
CHG renamed CURLE_SSL_PEER_CERTIFICATE to CURLE_PEER_FAILED_VERIFICATION
CHG added CURLOPT_OPENSOCKETFUNCTION and CURLOPT_OPENSOCKETDATA
CHG CULROPT_COOKIELIST supports "FLUSH"
CHG added CURLOPT_COPYPOSTFIELDS
CHG added --static-libs to curl-config
Bugfixes:
BGF curl-config --protocols now properly reports LDAPS, SCP and SFTP
BGF ldapv3 support on Windows
BGF ldap builds with the MSVC makefiles
BGF no HOME and no key given caused SSH auth failure
BGF Negotiate authentication over proxy
BGF --ftp-method nocwd on directory listings
BGF FTP, CURLOPT_NOBODY enabled and CURLOPT_HEADER disabled now does TYPE
before SIZE
BGF re-used handle transfers with SFTP
BGF curl_easy_escape() problem with byte values >= 128
BGF handles chunked-encoded CONNECT responses
BGF misuse of ares_timeout() result
BGF --local-port on TFTP transfers
BGF CURLOPT_POSTFIELDS could fail to send binary data
BGF specifying a proxy with a trailing slash didn't work (unless it also
contained a port number)
BGF redirect from HTTP to FTP or TFTP memory problems and leaks
BGF re-used connections a bit too much when using non-SSL protocols tunneled
over a HTTP proxy
BGF embed the manifest in VC8 builds
BGF use valgrind in the tests even when the lib is built shared with libtool
BGF libcurl built with NSS can now ignore the peer verification even when the
ca cert bundle is absent
SUBTITLE(Fixed in 7.17.0 - September 13 2007)
Changes:
CHG support for OS/400 Secure Sockets Layer library
CHG curl_easy_setopt() now allocates strings passed to it
CHG SCP and SFTP support now requires libssh2 0.16 or later
CHG LDAP libraries are now linked "regularly" and not with dlopen
CHG HTTP transfers have the download size info "available" earlier
CHG FTP transfers have the download size info "available" earlier
CHG builds and runs on OS/400
CHG several error codes and options were marked as obsolete and subject to
future removal (set CURL_NO_OLDIES to see if your application is using them)
CHG SFTP errors can return more specific error codes
Bugfixes:
BGF test cases 31, 46, 61, 506, 517 now work in time zones that use leap seconds
BGF problem with closed proxy connection during HTTP CONNECT auth negotiation
BGF transfer-encoding skipping didn't ignore the 407 response bodies properly
BGF CURLOPT_SSL_VERIFYHOST set to 1
BGF CONNECT endless loop
BGF krb5 support builds with Heimdal
BGF added returned error string for connection refused case
BGF re-use of dead FTP control connections
BGF login to FTP servers that don't require (nor understand) PASS after the
USER command
BGF bad free of memory from libssh2
BGF the SFTP PWD command works
BGF HTTP Digest auth on a re-used connection
BGF FTPS data connection close
BGF AIX 4 and 5 get to use non-blocking sockets
BGF small POST with NTLM
BGF resumed file:// transfers
BGF CURLOPT_DNS_CACHE_TIMEOUT and CURLOPT_DNS_USE_GLOBAL_CACHE are 64 bit
"clean"
BGF memory leak when handling compressed data streams from broken servers
BGF no NTLM unicode response
BGF resume HTTP PUT using Digest authentication
BGF FTP NOBODY requests on directories sent "SIZE (null)"
BGF FTP NOBODY request on file crash
BGF excessively long FTP server responses and response lines
BGF file:// upload then FTP:// upload crash
BGF TFTP error 0 is no longer treated as success
BGF uploading empty file over FTP on re-used connection
BGF superfluous CWD command on re-used FTP connections without subdirs used
SUBTITLE(Fixed in 7.16.4 - July 10 2007)
Changes:
CHG added CURLOPT_NEW_FILE_PERMS and CURLOPT_NEW_DIRECTORY_PERMS
CHG improved hashing of sockets for the multi_socket API
CHG ftp kerberos5 support added
Bugfixes:
BGF adjusted how libcurl treats HTTP 1.1 responses without content-lenth or
chunked encoding
BGF fixed the 10-at-a-time.c example
BGF FTP over SOCKS proxy
BGF improved error messages on SCP upload failures
BGF security flaw in which libcurl
failed to properly reject some outdated or not yet valid server certificates
when built with GnuTLS
SUBTITLE(Fixed in 7.16.3 - June 25 2007)
Changes:
CHG added curl_multi_socket_action()
CHG deprecated curl_multi_socket()
CHG uses less memory in non-pipelined use cases
CHG CURLOPT_HTTP200ALIASES matched transfers assume HTTP 1.0 compliance
CHG more than one test harness can run at the same time without conflict
CHG SFTP now supports quote commands before a transfer
CHG CURLMOPT_MAXCONNECTS added to curl_multi_setopt()
CHG upload resume works for file:// URLs
CHG asynchronous name resolves now require c-ares 1.4.0 or later
CHG added SOCKS test cases
CHG CURLOPT_FTP_CREATE_MISSING_DIRS and --ftp-create-dirs now work for SFTP
operations as well
Bugfixes:
BGF if2up too long interface name memory leak
BGF test case 534 started to fail 2007-04-13 due to the existence of a
new host on the net with the same silly domain the test was using
for a host which was supposed not to exist.
BGF test suite SSL certificate works better with newer stunnel
BGF internal progress meter update frequency back to once per second
BGF avoid some unnecessary calls to function gettimeofday
BGF a double-free in the SSL-layer
BGF GnuTLS free of NULL credentials
BGF NSS-fix for closing down SSL
BGF bad warning from configure when gnutls was selected
BGF compilation on VMS 64-bit mode
BGF SCP/SFTP downloads could hang on the last bytes of a transfer
BGF curl_easy_duphandle() crash
BGF curl -V / curl_version*() works even when GnuTLS is used on a system without
a good random source
BGF curl_multi_socket() not "noticing" newly added handles
BGF lack of Content-Length and chunked encoding now requires HTTP 1.1 as well
to be treated as without response body
BGF connection cache growth in multi handles
BGF better handling of out of memory conditions
BGF overwriting an uploaded file with sftp now truncates it first
BGF SFTP quote commands chmod, chown, chgrp can now set a value of 0
BGF TFTP connect timouts less than 5 seconds
BGF improved curl -w for TFTP transfers
BGF memory leak when failed OpenSSL certificate CN field checking
BGF memory leak when OpenSSL failed PKCS #12 parsing
BGF FTP-SSL when built with NSS
BGF out-of-boundary write in Curl_select()
BGF -s/--silent can now be used to toggle off the silence again
BGF builds fine on 64bit HP-UX
BGF multi interface HTTP CONNECT glitch
BGF list FTP root directories when login dir is not root
BGF no longer slows down when getting very many URLs on the same command line
BGF lock share before decreasing dirty counter
BGF no-body FTP requests on re-used connections
SUBTITLE(Fixed in 7.16.2 - April 11 2007)
Changes:
CHG added CURLOPT_TIMEOUT_MS and CURLOPT_CONNECTTIMEOUT_MS
CHG added CURLOPT_HTTP_CONTENT_DECODING, CURLOPT_HTTP_TRANSFER_DECODING and
--raw
CHG added support for using the NSS library for TLS/SSL
CHG changed default anonymous FTP password
CHG changed the CURLOPT_FTP_SSL_CCC option to handle active and passive
CCC shutdown
CHG added the --ftp-ssl-ccc-mode command line option
CHG includes VC8 Makefiles in the release archive
CHG --ftp-ssl-control is now honoured on ftps:// URLs
CHG added experimental CURL_ACKNOWLEDGE_EINTR symbol definition check
CHG --key and new --pubkey options for SSH public key file logins
CHG --pass now works for a SSH public key file, too
CHG select (2) support no longer needed to build the library if poll() used
CHG CURLOPT_POSTQUOTE works for SFTP
Bugfixes:
BGF in testsuite, update test cookies expiration from 2007-Feb-1 to year 2035
BGF socks5 works
BGF builds fine with VC2005
BGF CURLOPT_RANGE set to NULL resets the range for FTP
BGF curl_multi_remove_handle() rare crash
BGF passive FTP transfers work with SOCKS
BGF multi interface HTTPS connection re-use memory leak
BGF libcurl.m4's --with-libcurl is improved
BGF curl-config --libs and libcurl.pc no longer list unnecessary dependencies
BGF fixed an issue with CCC not working on some servers
BGF several HTTP pipelining problems
BGF HTTP CONNECT through a proxy is now less blocking when the multi interface
is used
BGF HTTP Digest header parsing fix for unquoted last word ending with CRLF
BGF CURLOPT_PORT, HTTP proxy, re-using connections and non-HTTP protocols
BGF CURLOPT_INTERFACE for ipv6
BGF use-after-free issue with HTTP transfers with the multi interface
BGF the progress callback can get called more frequently
BGF timeout would restart when signal caught while awaiting socket events
BGF curl -f with user+password embedded in the URL
BGF 26 flaws identified by coverity.com
BGF builds on QNX 6 again
SUBTITLE(Fixed in 7.16.1 - January 29 2007)
Changes:
CHG Support for SCP and SFTP were added (powered by libssh2)
CHG CURLOPT_CLOSEPOLICY is now deprecated
CHG --ftp-ssl-ccc and CURLOPT_FTP_SSL_CCC were added
CHG HTTP support for non-ASCII platforms
CHG --libcurl was added
Bugfixes:
BGF proxy close during CONNECT authentication is now dealt with nicely
BGF the CURLOPT_DEBUGFUNCTION was sometimes called even when CURLOPT_VERBOSE
was not enabled
BGF multiple TFTP transfers on the same (easy or multi) handle could cause a
crash
BGF SIGSEGV when disconnecting on a transfer on a re-used handle when the
host name didn't resolve
BGF stack overwrite on 64bit Windows in the chunked decoding department
BGF HTTP responses on persistent connections without Content-Length nor chunked
encoding are now considered to be without response body
BGF Content-Range: header parsing improved
BGF CPU 100% load when HTTP upload connection broke
BGF active FTP didn't work with multi interface
BGF curl_getdate() could be off one hour for TZ time zones with DST, on windows
BGF CURLOPT_FORBID_REUSE works again
BGF CURLOPT_MAXCONNECTS set to zero caused libcurl to SIGSEGV
BGF rate limiting works better
BGF getting FTP response code errors when using the multi-interface caused
libcurl to leak memory
BGF no more SIGPIPE when GnuTLS is used
BGF FTP downloading 2 zero byte files in a row
BGF using proxy and URLs without protocol prefixes
BGF first using a proxy and then accessing a site that 'no_proxy' matched,
would still make libcurl use the proxy...
BGF curl_easy_duphandle() now makes a handle that is valid for the multi
interface since the magic number is set fine
BGF libcurl.pc now uses Libs.private for "private" libs
BGF --limit-rate (CURLOPT_MAX_SEND_SPEED_LARGE and CURLOPT_MAX_RECV_SPEED_LARGE)
now work on windows again
BGF improved download performance by avoiding the unconditional "double copying"
BGF base64 encoding/decoding works on non-ASCII platforms
BGF large file downloads
BGF CURLOPT_COOKIELIST set to "ALL" crash
BGF easy handle removal from multi handle before completion
BGF TFTP upload memory leak
BGF curl_easy_reset() now resets the CA bundle path correctly
BGF two User-Agent headers in CONNECT requests with custom User-Agent
SUBTITLE(Fixed in 7.16.0 - October 30 2006)
Changes:
CHG the SONAME on the shared library was bumped from 3 to 4
CHG Added CURLE_SSL_CACERT_BADFILE
CHG Added CURLMOPT_TIMERFUNCTION and CURLMOPT_TIMERDATA
CHG (FTP) the CURLOPT_SOURCE_* options are removed and so are the --3p* command
line options
CHG curl_multi_socket() and family are suitable to start using
CHG uses WSAPoll() on Windows Vista
CHG (FTP) --ftp-ssl-control was added
CHG CURLOPT_SSL_SESSIONID_CACHE and --no-sessionid added
CHG CURLMOPT_PIPELINING added for enabling HTTP pipelined transfers
CHG multi handles now have a shared connection cache
CHG Added support for other MS-DOS compilers (besides djgpp)
CHG CURLOPT_SOCKOPTFUNCTION and CURLOPT_SOCKOPTDATA were added
CHG (FTP) libcurl avoids sending TYPE if the desired type was already set
CHG (FTP) CURLOPT_PREQUOTE works even when CURLOPT_NOBODY is set true
Bugfixes:
BGF (HTTP) CURLOPT_FAILONERROR (-f) covers a few more response cases
BGF curl_multi_socket() and the LOW_SPEED options
BGF curl_multi_socket() expire timer during c-ares name resolves
BGF curl_multi_add_handle on an already added handle now fails gracefully
BGF multi interface crash if bad function call order was used for cleanup
BGF put a new URL in saved cookie jar files
BGF configure --with-gssapi-libs
BGF SOCKS proxy connection fixes
BGF (FTP) a failed upload does not invalidate the control connection
BGF proxy URL with user name and empty password or no password at all now work
BGF fixed a socket state problem with *multi_socket()
BGF (HTTP) NTLM hostname fix
BGF getsockname usage fixes
BGF SOCKS5 proxy connects can now time-out
BGF SOCKS5 connects that require auth no longer segfaults when auth not given
BGF multi interface using asynch resolves could get stuck in wrong state
BGF the 'running_handles' counter wasn't always updated properly when
curl_multi_remove_handle() was used
BGF (FTP) EPRT transfers with IPv6 didn't work properly
BGF (FTP) SINGLECWD mode and using files in the root dir
BGF (HTTP) Expect: header disabling work better
BGF (HTTP) "Expect: 100-continue" disable on second POST on re-used connection
BGF src/config.h.in is fixed
BGF (HTTP) POST data logged to the debug callback function is now correctly
tagged as data, not header
SUBTITLE(Fixed in 7.15.5 - August 7 2006)
Changes:
CHG added --ftp-ssl-reqd
CHG modified the prototype for the socket callback set with
CURLMOPT_SOCKETFUNCTION
CHG added curl_multi_assign()
CHG added CURLOPT_FTP_ALTERNATIVE_TO_USER and --ftp-alternative-to-user
CHG added a vcproj file for building libcurl
CHG added curl_formget()
CHG added CURLOPT_MAX_SEND_SPEED_LARGE and CURLOPT_MAX_RECV_SPEED_LARGE
CHG added configure --enable-hidden-symbols
CHG Made -K on a file that couldn't be read cause a warning to be displayed
Bugfixes:
BGF chunked encoding when custom header "Transfer-Encoding: chunked" is set
BGF Curl_strerror() crash on unknown errors
BGF changing Content-Type when doing formposts
BGF added CURL_EXTERN to a few recent multi functions that lacked them
BGF splay-tree related problems for internal expire time handling
BGF FTP ASCII CRLF counter reset
BGF cookie parser now compares paths case sensitive
BGF an easy handle with shared DNS cache added to a multi handle caused a crash
BGF couldn't override the Proxy-Connection: header for non-CONNECT requests
BGF curl_multi_fdset() could wrongly return -1 as max_fd value
SUBTITLE(Fixed in 7.15.4 - June 12 2006)
Changes:
CHG NTLM2 session response support
CHG CURLOPT_COOKIELIST set to "SESS" clears all session cookies
CHG CURLINFO_LASTSOCKET returned sockets are now checked more before returned
CHG curl-config got a --checkfor option to compare version numbers
CHG line end conversions for FTP ASCII transfers
CHG curl_multi_socket() API added (still mostly untested)
CHG conversion callback options for EBCDIC <=> ASCII conversions
CHG added CURLINFO_FTP_ENTRY_PATH
CHG less blocking for the multi interface during (Open)SSL connect negotiation
Bugfixes:
BGF builds fine on cygwin
BGF md5-sess with Digest authentication
BGF dict with letters such as space in a word
BGF dict with url-encoded words in the URL
BGF libcurl.m4 when default=yes but no libcurl was found
BGF numerous bugs fixed in the TFTP code
BGF possible memory leak when adding easy handles to multi stack
BGF TFTP works in a more portable fashion (== on more platforms)
BGF WSAGetLastError() is now used (better) on Windows
BGF GnuTLS non-block case that could cause data trashing
BGF deflate code survives lack of zlib header
BGF CURLOPT_INTERFACE works with hostname
BGF configure runs fine with ICC
BGF closed control connection with FTP when easy handle was removed from multi
BGF curl --trace crash when built with VS2005
BGF SSL connect time-out
BGF improved NTLM functionality
BGF following redirects with more than one question mark in source URL
BGF fixed debug build crash with -d
BGF generates a fine AIX Toolbox RPM spec
BGF treat FTP AUTH failures properly
BGF TFTP transfers could trash data
BGF -d + -G combo crash
SUBTITLE(Fixed in 7.15.3 - March 20 2006)
Changes:
CHG added docs for --ftp-method and CURLOPT_FTP_FILEMETHOD
Bugfixes:
BGF TFTP Packet Buffer Overflow Vulnerability
BGF properly detecting problems with sending the FTP command USER
BGF wrong error message shown when certificate verification failed
BGF multi-part formpost with multi interface crash
BGF the CURLFTPSSL_CONTROL setting for CURLOPT_FTP_SSL is acknowledged
BGF "SSL: couldn't set callback" is now treated as a less serious problem
BGF Interix build fix
BGF fixed curl "hang" when out of file handles at start
BGF prevent FTP uploads to URLs with trailing slash
SUBTITLE(Fixed in 7.15.2 - February 27 2006)
Changes:
CHG Support for SOCKS4 proxies (added --socks4)
CHG CURLOPT_CONNECT_ONLY and CURLINFO_LASTSOCKET added
CHG CURLOPT_LOCALPORT and CURLOPT_LOCALPORTRANGE (--local-port) added
CHG Dropped support for the LPRT ftp command
CHG Gopher is now officially abandoned as a protocol (lib)curl tries to support
CHG curl_global_init() and curl_global_cleanup() are now using a refcount so
that it is now legal to call them multiple times. See updated info for
details
Bugfixes:
BGF two bugs concerning using curl_multi_remove_handle() before the transfer
was complete
BGF multi-pass authentication and compressed content
BGF minor format string mistake in the GSS/Negotiate code
BGF cached DNS entries could remain in the cache too long
BGF improved GnuTLS check in configure
BGF re-used FTP connections when the second request didn't do a transfer
BGF plain --limit-rate [num] means bytes
BGF re-creating a dead connection is no longer counted internally as a followed
redirect and thus prevents a weird error that would occur if a FTP
connection died on an attempted re-use
BGF Try PASV after failing to connect to the port the EPSV response contained
BGF -P [IP] with non-local address with ipv6-enabled curl
BGF -P [hostname] with ipv6-disabled curl
BGF libcurl.m4 was updated
BGF configure no longer warns if the current path contains a space
BGF test suite kill race condition
BGF FTP_SKIP_PASV_IP and FTP_USE_EPSV when doing FTP over HTTP proxy
BGF Doing a second request with FTP on the same bath path, would make libcurl
confuse what current working directory it had
BGF FTP over HTTP proxy now sends the second CONNECT properly
BGF numerous compiler warnings and build quirks for various compilers have
been addressed
BGF supports name and passwords up to 255 bytes long, embedded in URLs
BGF the HTTP_ONLY define disables the TFTP support
SUBTITLE(Fixed in 7.15.1 - December 7 2005)
Changes:
CHG the libcurl.pc pkgconfig file now gets installed on make install
CHG URL globbing now offers "range steps": [1-100:10]
CHG LDAPv3 is now the preferred LDAP protocol version
CHG --max-redirs and CURLOPT_MAXREDIRS set to 0 limits redirects
CHG improved MSVC makefile
Bugfixes:
BGF URL buffer overflow problem
BGF using file:// on non-existing files are properly handled
BGF builds fine on DJGPP
BGF CURLOPT_ERRORBUFFER is now always filled in on errors
BGF curl outputs error on bad --limit-rate units
BGF fixed libcurl's use of poll() on cygwin
BGF the GnuTLS code didn't support client certificates
BGF TFTP over IPv6 works
BGF no reverse lookups on IP addresses when ipv6-enabled
BGF SSPI compatibility fix: using the proper DLLs
BGF binary LDAP properties are now shown base64 encoded
BGF Windows uploads from stdin using curl can now contain ctrl-Z bytes
BGF -r [num] would produce an invalid HTTP Range: header
BGF multi interface with multi IP hosts could leak socket descriptors
BGF the GnuTLS code didn't handle rehandshakes
BGF re-use of a dead FTP connection
BGF name resolve error codes fixed for Windows builds
BGF double WWW-Authenticate Digest headers are now handled
BGF curl-config --vernum fixed
SUBTITLE(Fixed in 7.15.0 - October 13 2005)
Changes:
CHG --ftp-skip-pasv-ip / CURLOPT_FTP_SKIP_PASV_IP (sponsored by CU*Answers)
CHG TFTP support added
Bugfixes:
BGF user+domain name buffer overflow in the NTLM code (security flaw)
BGF -z over FTP now considers equal timestamps "not modified since"
BGF Weird characters removed from the configure script
BGF Fixed time zone offsets for MEST and CEST for the time parser
BGF HTTP Content-Range header parser crash
BGF FTPS negotiation timeouts/errors
BGF SSPI works even for Windows 9x
BGF crash in --dump-header on FTP
BGF test 56 runs better
SUBTITLE(Fixed in 7.14.1 - September 1 2005)
Changes:
CHG GNU GSS support
CHG --ignore-content-length and CURLOPT_IGNORE_CONTENT_LENGTH added
CHG negotiates data connection SSL earlier when doing FTPS with PASV
CHG CURLOPT_COOKIELIST and CURLINFO_COOKIELIST
CHG trailer support for chunked encoded data streams
CHG -x/CURL_PROXY strings may now contain user+password
CHG --trace-time now outputs the full microsecond, all 6 digits
Bugfixes:
BGF MSVC build problem with the DSP file
BGF windows threaded resolver access violation with multi interface
BGF test suite works with valgrind 3
BGF CA cert verification with GnuTLS builds
BGF handles expiry times in cookie files that go beyond 32 bits in size
BGF several client problems with files, such as doing -d @file when the file
isn't readable now gets a warning displayed
BGF write callback abort didn't always "take"
BGF the curl -z "bad syntax" warning is now hidden when -s is used
BGF curl -d @nonexisting no longer makes a GET
BGF minor debug callback data size
BGF date parsing of dates including daylight savings time zone names
BGF using NTLM over proxy with an FTP URL
BGF curl-config --features now displays SSL when built with GnuTLS too
BGF CURLOPT_HTTPGET, CURLOPT_POST and CURLOPT_HTTPPOST reset CURLOPT_NOBODY
BGF builds fine on AmigaOS again
BGF corrected date parsing on Windows with auto-DST-adjust enabled
BGF treats CONNECT 407 responses with bodies better during Digest/NTLM auth
BGF improved strerror_r() API guessing when cross-compiling
BGF debug builds work on Tru64
BGF improved libcurl.m4
BGF possible memory leak in windows name resolves
BGF c-ares enabled build with mingw
BGF proxy host set with numerical IPv6 address
BGF better treatment of binary zeroes in HTTP response headers
BGF fixed the notorious FTP server failure in the test suite
BGF better checking of text output in the test suite on windows
BGF FTP servers' TYPE command response check made less strict
BGF URL-without-slash as in http://example?data
BGF strerror_r() configure check for HP-UX 10.20 (and others)
BGF time parse work-around on HP-UX 10.20 since its gmtime_r() is broken
SUBTITLE(Fixed in 7.14.0 - May 16 2005)
Changes:
CHG modified default HTTP request headers
CHG curl --trace-time added for time stamping trace logs
CHG curl now respects the SSL_CERT_DIR and SSL_CERT_PATH environment variables
CHG more search paths for curl's default .curlrc config file check
CHG GnuTLS support, use configure --with-gnutls. Work on this was sponsored
by The Written Word.
Bugfixes:
BGF uses select() instead of poll() even on Mac OS X 10.4
BGF reconnected proxy use with NTLM auth on the same handle
BGF warns about bad -z date syntax
BGF docs/THANKS now contains all known contributors
BGF builds out-of-the-box on (presumably ipv6-enabled) AIX 4.3 hosts
BGF curl --head could wrongly complain on bad chunked-encoding
BGF --interface SIGSEGVed on a bad address
BGF kill the HTTPS server better when stopping the test suite
BGF builds fine with VS2005 on x64
BGF auth fix for HTTP redirects and .netrc usage
BGF FTP uploads show the progress meter easier
BGF MSVC makefile fixes for static libcurl builds
BGF configure fix for static libcurl build on Windows
BGF --retry-delay
BGF POST with read callback now uses Expect: 100-continue
BGF CURLOPT_PORT didn't actually use the set port number
BGF HTTP 304 response with Content-Length: header
BGF time-conditioned FTP uploads
SUBTITLE(Fixed in 7.13.2 - April 4 2005)
Changes:
CHG Added --form-string
CHG libcurl can be built with SSPI support. curl_version_info() then returns
a new feature bit: CURL_VERSION_SSPI. configure --enable-sspi added
CHG Added --proxy-anyauth
CHG Added runtests.1 and testcurl.1 man pages
Bugfixes:
BGF the MSVC libcurl Makefile was fixed
BGF libcurl on Windows crash if resolver was active when easy handle was killed
BGF HTTP POST with auth and an initial 100 response before the 401/407
BGF configure's SSL-detection for msys/mingw
BGF better connection keep-alive when POSTing with HTTP Digest
BGF FTP-SSL
BGF reading FTP server response in multiple reads
BGF picking one out of multiple proxy auth methods
BGF inet_ntoa_r() when built with uClibc
BGF the so name issue for the LDAP library dynamic load
BGF crash when using SOCKS4 proxy
BGF a debug printf() was removed
BGF CURLOPT_FILETIME when downloading FTP corrupted data
BGF FTP upload resume now works even if no file is present on the site
BGF SSL seeding no longer attempts to read the whole random file
SUBTITLE(Fixed in 7.13.1 - March 4 2005)
Changes:
CHG CURLOPT_COOKIEFILE set to "" is now activating the cookie engine
CHG FTP code overhaul => multi interface much less blocking
CHG Added CURLE_LOGIN_DENIED to be returned when curl is denied login to FTP
servers
Bugfixes:
BGF -# crash when more data than expected was retrieved
BGF NTLM/krb4 buffer overflow fixed
BGF proxy auth bug when following redirects to another host
BGF socket leak when local bind failed
BGF HTTP POST with --anyauth picking NTLM
BGF SSL problems when downloading exactly 16KB data
BGF out of memory conditions preserve error codes better
BGF a few crashes at out of memory
BGF inflate buffer usage bugfix
BGF better DICT protocol adherence
BGF disable valgrind-checking while testing if libcurl is built shared
BGF locale names in some date strings
SUBTITLE(Fixed in 7.13.0 - February 1 2005)
Changes:
CHG added --ftp-account and CURLOPT_FTP_ACCOUNT
CHG added CURLOPT_SOURCE_URL and CURLOPT_SOURCE_QUOTE
CHG obsoleted CURLOPT_SOURCE_HOST, CURLOPT_SOURCE_PATH, CURLOPT_SOURCE_PORT
and CURLOPT_PASV_HOST
CHG added --3p-url, --3p-user and --3p-quote
CHG -Q "+[command]" was added
CHG src/getpass.c license issue sorted (code was rewritten)
CHG curl -w now supports 'http_connect' for the proxy's response to CONNECT
CHG introducing "curl-config --protocols"
Bugfixes:
BGF re-sending a request when retrying on a fresh connection with multi
interface
BGF improved valgrind report parser in the test suite
BGF several valgrind reports
BGF CURLOPT_FTPPORT and -P work when built ipv6-enabled
BGF FTP third party transfers was much improved
BGF proxy environment variables are now ignored when built HTTP-disabled
BGF CURLOPT_PROXY can now disable HTTP proxy even when built HTTP-disabled
BGF "curl dictionary.com" no longer assumes DICT protocol
BGF re-invoke some system calls on EINTR
BGF duplicate Host: when failed connection re-use
BGF SOCKS5 version check
BGF memory problem with cleaning up multi interface
BGF SSL certificate name memory leak
BGF -d with -G to multiple URLs crashed
BGF double va_list access crash fixed
BGF minor memory leak when "version" is set in a cookie header
BGF builds fine on BeOS and NetBSD
BGF builds and runs fine on FreeBSD
SUBTITLE(Fixed in 7.12.3 - December 20 2004)
Changes:
CHG PKCS12 certificate support added
CHG added CURLINFO_SSL_ENGINES (and "--engine list")
CHG new configure options: --disable-cookies, --disable-crypto-auth and
--disable-verbose
CHG persistent ftp request improvements
CHG CURLOPT_IOCTLFUNCTION and CURLOPT_IOCTLDATA added. If your app uses HTTP
Digest, NTLM or Negotiate authentication, you will most likely want to use
these
CHG -w time_redirect and num_redirects
CHG no longer uses libcurl.def for building on Windows, OS/2 and Netware
CHG builds on Windows CE
CHG request retrying, --retry and family added
CHG FTP 3rd party transfers with source and dest on the same host now works
CHG added CURLINFO_NUM_CONNECTS
Bugfixes:
BGF curl -E on windows accepts "c:/path" with forward-slash
BGF several improvements for large file support on windows
BGF file handle leak in aborted multipart formpost file upload
BGF -T upload multiple files with backslashes in file names
BGF modified credentials between two requests on a persistent http connection
BGF large file file:// resumes on Windows
BGF URLs with username and IPv6 numerical addresses
BGF configure works better with SSL libs in a "non-standard ld.so dir"
BGF curl-config --vernum zero prefixed
BGF bad memory access in the NTLM code
BGF EPSV on multi-homed servers now works correctly
BGF chunked-encoded transfers could get closed pre-maturely without error
BGF proxy CONNECT now default timeouts after 3600 seconds
BGF disabling EPSV or EPRT is ignored when connecting to an IPv6 FTP server
BGF no extra progress meter newline output after each Location: followed
BGF HTTP PUT/POST with Digest, NTLM or Negotiate no longer uses HEAD
BGF works with or gracefully bails out when exceeding FD_SETSIZE file
descriptors
BGF CURLINFO_REDIRECT_TIME works
BGF building with gssapi libs and hdeaders in the default dirs
BGF curl_getdate() parsing of dates later than year 2037 with 32 bit time_t
BGF curl -v when stderr is closed wrote debug messages to the network socket
BGF build failure with libidn 0.3.X or older
BGF huge POSTs on VMS
BGF configure no longer uses pkg-config on cross-compiles
BGF potential gzip decompress memory leak
BGF "-C - --fail" on a HTTP page already downloaded
BGF formposting a zero byte file
BGF use setlocale() for better IDN functionality by default
SUBTITLE(Fixed in 7.12.2 - October 18 2004)
Changes:
CHG the IDN code now verifies that only TLD-legitmate letters are used in the
name or a warning is displayed (when verbose is enabled)
CHG provides error texts for IDN errors
CHG file upload parts in formposts now get their directory names cut off
CHG added CURLINFO_OS_ERRNO
CHG added CURLOPT_FTPSSLAUTH to allow ftp connects to attempt "AUTH TLS" instead
before "AUTH SSL"
CHG curl_getdate() completely rewritten: may affect rare curl -z use cases
Bugfixes:
BGF CURLOPT_FTP_CREATE_MISSING_DIRS works for third party transfers
BGF memory leak for cookies received with max-age set
BGF potential memory leaks in the window name resolver
BGF URLs with ?-letters in the user name or password fields
BGF libcurl error message is now provided when send() fails
BGF no more SIGPIPE on Mac OS X and other SO_NOSIGPIPE-supporting platforms
BGF HTTP resume was refused if redirected
BGF configure's gethostbyname check when both nsl and socket libs are required
BGF configure --with-libidn now checks the given path before defaults
BGF a race condition sometimes resulting in CURLE_COULDNT_RESOLVE_HOST in the
windows threaded name resolver code
BGF isspace() invokes with negative values in the cookie code
BGF a case of read-already-freed-data when CURLOPT_VERBOSE is used and a (very)
persistent connection
BGF now includes descriptive error messages for IDN errors
BGF more forgivning PASS response code check for better working with proftpd
BGF curl/multi.h works better included in winsock-using apps
BGF curl_easy_reset() no longer enables the progress meter
BGF build fix for SSL disabled curl with SSL Engine support present
BGF configure --with-ssl=PATH now ignores pkg-config path info
BGF CURLOPT_SSLENGINE can be set to NULL even if no engine support is available
BGF LDAP crash when more than one record was received
BGF connect failures properly stores an error message in the errorbuffer
BGF Rare Location:-following problem with bad original URL
BGF -F can now add Content-Type on non-file sections
BGF double Host: header when following Location: with replaced Host:
BGF curl_multi_add_handle() return code
BGF "Proxy-Connection: close" is now understood and properly dealt with
BGF curl_getdate() crash
BGF downloading empty files now calls the write callback properly
BGF no reverse DNS lookups for ip-only addresses with ipv6-enabled libcurl
BGF file handler leak when getting an empty file:// URL
BGF libcurl works better multi-threaded on AIX (when built with xlc)
BGF cookies over proxy didn't match the path properly
BGF MSVC makefile fixes to build better
BGF FTP response 530 on 'PASS' now sends back a better error message
SUBTITLE(Fixed in 7.12.1 - August 10 2004)
Changes:
CHG the version string now only contains info about (sub) package versions,
while for example krb4 and ipv6 now only are available as 'features'
CHG added curl_easy_reset()
CHG socks proxy support even when libcurl is built ipv6-enabled
CHG read callbacks can stop the transfer by returning CURL_READFUNC_ABORT
CHG libcurl-tutorial.3 is the new man page formerly known as libcurl-the-guide
CHG additional SSL trace data might be sent to the debug callback using two new
types: CURLINFO_SSL_DATA_IN and CURLINFO_SSL_DATA_OUT
CHG multipart formposts can upload files larger than system memory
CHG the curl tool continues with the next URL even if one transfer fails
CHG FTP 3rd party transfer support - seven new setopt() options
Bugfixes:
BGF UTF-8 encoded certificate names can now be verified properly
BGF krb4 link problem
BGF HTTP Negotiate service name now provided in uppercase
BGF no longer accepts any cookies with domain set to just a TLD
BGF HTTP Digest properties without quotes in the header
BGF bad Host: header case on re-used connections over proxy
BGF duplicate Host: header case on re-used connections
BGF curl -o name#[num] now works when no globbing for [num] exists
BGF test suite runs fine with valgrind 2.1.x
BGF negative Content-Length is ignored
BGF test 505 runs fine on windows
BGF curl_share_cleanup() crash
BGF --trace files now get the final info lines too
BGF multi interface connects fine to multi-IP resolving hosts
BGF --limit-rate works on Mac OS X (and other systems with bad poll()s)
BGF cookies can now hold 4999 bytes of content
BGF HTTP POST/PUT with NTLM/Digest/Negotiate to a URL returning 3XX
BGF HTTPS POST/PUT over a proxy requiring NTLM/Digest/Negotiate
BGF less restrictive libidn requirements, 0.4.1 or later is fine
BGF HTTP POST or PUT with Digest/Negotiate/NTLM selected but the server
didn't require any authentication
BGF win32 file:// transfer free memory bug
BGF configure --disable-http builds a libcurl without HTTP support
BGF CURLOPT_FILETIME had wrong type in curl.h, it expects a long argument
BGF builds fine with Borland on Windows
BGF the msvc curllib.dsp now builds the libcurl.lib file
BGF builds fine on VMS
BGF builds fine on NetWare
BGF HTTP Digest authentication with proxies uses correct user name + password
BGF builds fine with lcc-win32
SUBTITLE(Fixed in 7.12.0 - June 2 2004)
Changes:
CHG added ability to "upload" to file:// URLs
CHG added curl_global_init_mem()
CHG removed curl_formparse()
CHG the MSVC project file in the release archive is automatically built
CHG curl --proxy-digest is a new command line option
CHG the Windows version of libcurl can use wldap32.dll for LDAP
CHG added curl_easy_strerror(), curl_multi_strerror() and curl_share_strerror()
CHG IPv6-enabled Windows hosts now resolves names threaded/asynch as well
CHG configure --with-libidn can be used to point out the root dir of a libidn
installation (version 0.4.5 or later) for curl to use, then libcurl can
resolve and use IDNA names (domain names with "international" letters)
Bugfixes:
BGF incoming cookies with domains set with a prefixed dot now works better
BGF CURLOPT_COOKIEFILE and CURLOPT_COOKIE can be used in the same request
BGF improved peer certificate name verification
BGF allocation failures cause no leaks nor crashes
BGF the progress meter display now handles file sizes up to full 8 exabytes
(which is as high a signed 64 bit number can reach)
BGF general HTTP authentication improvements
BGF HTTP Digest authentication with the proxy works
BGF mulipart formposting with -F and file names with spaces work again
BGF curl_easy_duphandle() now works when ares-enabled
BGF HTTP Digest authentication works a lot more like the RFC says
BGF curl works with telnet and stdin properly on Windows
BGF configure --without-ssl works even when pkg-config has OpenSSL details
BGF src/hugehelp.c builds correct again in non-configure build environments
SUBTITLE(Fixed in 7.11.2 - April 26 2004)
Changes:
CHG removed maximum user+password+hostname size limit
CHG removed maximum dir depth limit for FTP
CHG the ares build now requires c-ares 1.2.0 or later
CHG --tcp-nodelay and CURLOPT_TCP_NODELAY were added
CHG curl/curlver.h contains the libcurl version info now
Bugfixes:
BGF configure --disable-manual works better
BGF removed a memory leak when doing a windows threaded resolve and it failed
BGF --proxy-ntlm now checks if libcurl supports NTLM before using it
BGF minor --fail with authentication bugfix
BGF CURLOPT_IPRESOLVE set to CURL_IPRESOLVE_V6 will now cause a returned error
if the host only can resolve ipv4 addresses
BGF curl -4/-6 now actually sets the requested option in libcurl
BGF multi interface on Windows without ares works again
BGF improved resolution for the CURLINFO_*_TIME info variables
BGF getting only a 100 Continue response and nothing else, when talking HTTP,
is now treated as an error by libcurl
BGF fixed minor memory leak in libcurl for Windows when statically linked
BGF POST/PUT using Digest/NTLM/Negotiate (including anyauth) now work better
BGF --limit-rate with high speed rates is a lot more accurate now, and supports
limiting to speeds >2GB/sec on systems with Large File support.
BGF curl_strnqual.3 "refer-to" man page fix
BGF fixed a minor very old progress meter final update bug
BGF added checks for a working NI_WITHSCOPEID before that is used
BGF fixed a flaw that prevented ares name resolve timeouts to occur
BGF getting user name from http_proxy env variable works now
BGF fixed too early name resolve timeouts with ares
BGF HTTP Digest "re-negotiation" works now
BGF CURLOPT_FAILONERROR (-f/--fail) works with all kinds of authentication
BGF better thread-safety thanks to the internal strerror() replacement
BGF better thread-safety on AIX thanks to better function detection
BGF minor ipv6 build fix for windows
BGF the test suite runs fine with mingw-built curl
BGF the postit2.c example works now
BGF better error message when --interface fails on windows
BGF the progress meter now displays very long times better
BGF CURLINFO_CONTENT_LENGTH_DOWNLOAD with CURLOPT_NOBODY set TRUE now works
BGF passwords longer than 14 letters work with NTLM
BGF 'make netware' in the root dir works now
BGF builds fine on VMS again and even nicer than before
SUBTITLE(Fixed in 7.11.1 - March 19 2004)
Changes:
CHG CURLOPT_POSTFIELDSIZE_LARGE added to offer POSTs larger than 2GB
CHG CURL_VERSION_LARGEFILE is a feature bit returned by libcurls that feature
large file support
CHG libcurl only requires winsock 1.1 on windows now
CHG when doing FTP, curl now sends QUIT before disconnecting
CHG name resolves can now timeout on windows too
CHG $HOME is now recognized better when looking for .netrc files
CHG now re-uses the ares handle when re-using curl handles
CHG SO_BINDTODEVICE is used for network interface binding
CHG configure --disable-manual disables the built-in huge manual from the
command line tool
CHG the default Accept: header used in HTTP requests changed
CHG asynch dns lookups now require the c-ares library
CHG curl --socks can be used to set a SOCKS5 proxy to use
CHG response-headers received after a (proxy) CONNECT request are now passed
to the header callback just like other headers
Bugfixes:
BGF builds and runs on Novell NetWare
BGF Windows builds now report OS as "i386-pc-win32"
BGF received signals during SSL connect is handled better
BGF improved PUT/POST with NTLM/Digest authentication
BGF following redirects and doing NTLM/Digest (where the first connection gets
closed) with the multi interface work better now
BGF file: progress meter and getinfo variables work now
BGF CURLOPT_FRESH_CONNECT and CURLAUTH_NTLM now work when set together
BGF share interface usage without (un)lock functions segfaulted
BGF --limit-rate no longer cripples the --speed-limit feature
BGF fixed verbose output problem with ipv6-enabled re-used connections
BGF fixed the socks5 code to check version in the socks response properly
BGF dns cache bug - fixed the 'inuse' counter
BGF large file fix for Content-Length
BGF better docs for the share interface
BGF several configure fixes for mingw/msys
BGF setting a Host: header is no longer affecting the Host: header used when
libcurl follows a Location:
BGF fixed numerous compiler warnings on several operating systems and compilers
BGF PUTting from stdin couldn't disable chunked transfer-encoding
BGF corrected the mingw makefiles
BGF improved the configure libz detection
BGF fixed EPRT/PORT use when doing FTP on ipv6-enabled AIX hosts
BGF *nroff commands that only support -mandoc and not -man are now supported
(for the built-in manual text in the command line tool)
BGF fixed the unconditional #include of config.h in hugehelp.c
BGF builds fine on MPE/iX
BGF upload using chunked transfer-encoding now sends the last chunk properly
teriminated with an extra CRLF
BGF Fixed the progress meter display for files >2GB
BGF persistent connections over a proxy messed up the proxy name/password
BGF the socks5 code segfaulted if no username/password was set
BGF the *_LARGE options now take curl_off_t types as parameters and this will
make it possible to handle large files on windows too
BGF builds with large file support even on systems without strtoll()
SUBTITLE(Fixed in 7.11.0 - January 22 2004)
Changes:
CHG allows the URL to be set by a callback when using the multi interface
CHG large file support was added. Use one of the new options: INFILESIZE_LARGE,
RESUME_FROM_LARGE and MAXFILESIZE_LARGE
CHG the new --ftp-pasv overrides a previous --ftpport
CHG CURLOPT_FTPSSL and ftps:// now do ssl over FTP "The Right Way" (the curl
tool now features the --ftp-ssl option)
CHG The Windows DLLs are built with an added "resource file"
CHG New LIBCURL_VERSION_* defines for easier checking version number
CHG Included Mac OS X 'framework' makefile in the release archive
CHG Removed the TRUE and FALSE #defines from the public curl header file
CHG Added CURLOPT_NETRC_FILE
Bugfixes:
BGF improved config file parsing for options with required parameters
BGF using --trace with a bad file name could crash
BGF release archive contains compressed help text
BGF the win32 password prompting supports backspace
BGF builds natively on AmigaOS (without unix emulation)
BGF ftps:// now uses port 990 by default
BGF the "configure --with-spnego" action was improved
BGF fixed a rare follow-redirect problem
BGF curl-config --feature now outputs AsynchDNS if enabled
BGF occasional re-use of freed-memory problem fixed
BGF curl-config --libs now include the ares link directory
BGF configure --enable-ares now accepts a given path
BGF -lz no longer appear twice on the link line
BGF more descriptive error message if the FTP response reader fails
BGF curl-config --feature now shows 'AsynchDNS' when built with ares
BGF VMS build up-to-date and clarified source code
BGF resolve bug caused socks5 to fail
BGF Content-Length: is ignored when getting chunked Transfer-Encoding
BGF POST over proxy to https server failed
BGF improved how libcurl deals with persistent connections over FTP when a
transfer fails
BGF accessing a proxy that requires Basic auth without password caused a hang
BGF a free free-twice problem in the server certificate code
BGF minor memory leak when using ranges on persistent connections
BGF formpost parts sending files with .html extensions now use "Content-Type:
text/html"
BGF formpost parts now default to "Content-Type: application/octet-stream"
BGF --progress-bar was slightly improved
BGF Failing to connect to localhost, using the multi interface on Solaris
showed a connect problem now fixed.
BGF The generated ca-bundle.h file is now generated in the build dir, not the
source dir
BGF The FTP-EPSV response parser for the 229 code was fixed
BGF curl finds the user's home dir slightly different and hopefully better on
Windows
BGF testcurl.sh can now be used to autotest daily tarballs
BGF a couple of command line options now check that the underlying library
actually supports the features before trying to enable them
BGF uninitialized variable fix
BGF better html versions of the man pages
SUBTITLE(Fixed in 7.10.8 - November 1 2003)
Changes:
CHG --head now works on file:// URLs too
CHG file: URLs with only one initial slash now works too
CHG RELEASE-NOTES document added to the release archive to summarize the big
and visible changes and bugfixes
CHG CURLOPT_MAXFILESIZE was added, and --max-filesize
CHG CURLOPT_PASSWDFUNCTION and CURLOPT_PASSWDDATA are no longer supported
CHG IPv6 is now supported on Windows builds too
CHG CURLOPT_IPRESOLVE lets you select pure IPv6 or IPv4 resolved addresses
(offers the command line options -4/--ipv4 and -6/--ipv6)
CHG GSS-Negotiate works fine with the MIT kerberos library
CHG SPNEGO support added, if libcurl is built with the FBopenssl libraries,
curl_version_info() can return a feature bit for it and curl -V displays
SPNEGO as a feature if libcurl is built with it enabled
CHG easy handles added to a multi handle now share DNS cache automatically
CHG CURLINFO_HTTPAUTH_AVAIL and CURLINFO_PROXYAUTH_AVAIL were added
CHG CURLOPT_FTP_RESPONSE_TIMEOUT was added
CHG NTLM, Digest and GSS-Negotiate authentications also work for HTTPS over
proxies
CHG curl supports multiple -T flags to allow several uploaded files using
a single command line
CHG CURLINFO_RESPONSE_CODE can return the last FTP response code
Bugfixes:
BGF added work-around for a name resolve problem on some glibc versions
BGF a rare ERRORBUFFER single-byte overflow was fixed
BGF HTTP-resuming an already downloaded file works better
BGF builds better on Solaris 8+ with gcc
BGF --disable-eprt works now
BGF improved CA cert verification
BGF --anyauth could bug when the first response had no body contents
BGF double password prompting when doing NTLM fixed
BGF improved performance when used multi-threaded on windows
BGF share-locking during DNS lookups was modified
BGF resume was not possible to switch off properly once enabled
BGF fixed the ipv4 connect code when a DNS entry has multiple IPs
BGF now checks subjectAltNames when matching certs
BGF HTTP POST using read callback works again
BGF builds fine on BeOS now
BGF CURLOPT_COOKIE set to NULL no longer sends the previously set cookie
BGF if an FTP transfer used a bad path, the next transfer could fail too
BGF ares-built libcurl resolves IP-only names properly
BGF changed the curl_lock_function proto to prevent warnings on some compilers
BGF builds fine on QNX 6.2.x now
BGF PUT with --digest works now
BGF --anyauth that picks NTLM and then follows a redirect (and does NTLM again)
works now
BGF asynch resolves now work on NT4 too
BGF a DNS cache trash (possible segfault) was fixed
BGF runtests.pl clears all proxy environment variables before the test is run
BGF Microsoft's "Negotiate" authentication is now supported by the existing
GSSNEGOTIATE option
BGF A set zero-length proxy name confused libcurl
BGF Digest authentication works again without OpenSSL on 64bit architectures
BGF configure --enable-thread works now
BGF buffer problems in the test suite's web server were fixed
BGF improved proxy password handling
BGF LDAP is again working nicely with the current OpenLDAP
BGF asynch name lookup for non-resolving hosts now return a proper error message
BGF CURLOPT_SSL_VERIFYHOST set to 1 no longer aborts if no CN field is
obtainable, it will merely warn about it
BGF name resolve segfault with uClibc fixed
BGF multi interface and multi-part/formpost could end in segfault
BGF curl_multi_info_read() sets the msgs_in_queue to 0 when returning NULL
BGF multi interface, ares and non-resolving host caused a segfault
BGF minor single SSL memory leak fixed
BGF Setting CURLOPT_WRITEFUNCTION or CURLOPT_READFUNCTION to NULL resets them
to default
SUBTITLE(Fixed in 7.10.7 - August 15 2003)
Changes:
CHG CURLOPT_PROXYAUTH was added to allow different authentication methods on
proxies (--proxy-ntlm was added to the curl tool).
CHG --ftp-create-dirs and CURLOPT_FTP_CREATE_MISSING_DIRS were added
CHG optional and still experimetal asynch name resolve support
CHG getting headers-only and no-body from FTP can now reply "Accept-Ranges"
if the server seems to support REST.
Bugfixes:
BGF fixed a memory leak on re-used connections with proxy-authentication
BGF cookies with no contents are sent off too now
BGF 64bit-related bugfix for uploads
BGF file:// URLs with drive letters now work on windows and OS/2
BGF The output numbering (#[num]) on url globbing didn't work due to a bug
in curl_msprintf()
BGF FTP persitent download directory re-use problem fixed
BGF cookie parser now only requires two dots in cookie domain
BGF FOLLOWLOCATION (or -L) did not always ignore the redirect page properly
BGF information leak fixed. When proxy authentication is used in a CONNECT
request (as used for all SSL connects and otherwise enforced
tunnel-thru-proxy requests), the same authentication header was also
wrongly sent to the remote host.
BGF the VC++ Makefiles were updated
BGF builds better on VMS
BGF src/hugehelp.c is now distributed uncompressed in the source package
BGF the mkhelp script now compresses properly on DOS/Windows
SUBTITLE(Fixed in 7.10.6 - July 28 2003)
Changes:
CHG CURLOPT_SSL_CTX_FUNCTION allows a custom callback for SSL connections
CHG multiple patches lets curl build and run on DOS
CHG libcurl now deals with spaces in Location: redirects and URLifies them
CHG curl --version shows more detailed info
CHG curl_version_info() now returns info on NTLM, GSS-Negotiate and Debug
CHG curl_version() includes "GSS" in the string if built with GSSAPI available
CHG Pick-best-authentication option added (--anyauth, using the
CURLOPT_HTTPAUTH set to CURLAUTH_ANY)
CHG NTLM authentication support (--ntlm and CURLAUTH_NTLM)
CHG GSS-Negotiate authentication support (--negotiate and CURLAUTH_GSSNEGOTIATE)
CHG Digest authentication support added (--digest and CURLAUTH_DIGEST)
CHG Allow curl to switch (back to) to Basic authentication (--basic)
CHG libcurl supports name and password in proxy environment variables
Bugfixes:
BGF double slash after the host name on a FTP URL again points out the root dir
BGF obscure and rare DNS cache problem was fixed
BGF multiple FTP connections to the same host with different user names
didn't work properly
BGF no more CWD commands without arguments for ftp connections
BGF curl no longer uses setvbuf() due to portability problems
BGF VMS build fixes
BGF the curl tool has the -M manual compressed internally if built with libz
BGF url globbing syntax error could cause segfault
BGF Huge (>40-60KB) GET requests over HTTPS failed.
BGF Content-Length now overrides socket-closed as a means of knowing when the
response body is complete.