gmane.comp.web.curl.announce

ANNOUNCE: curl and libcurl 7.19.2

Daniel Stenberg — 2008-11-13T13:15:34

Hi again! We found some rather annoying (and to some people even rather disturbing) flaws in the previous release so thus we ship a new release just a week after the last one. You of course get the latest package from here: http://curl.haxx.se/download.html Please bear with us and before you flame our quality assurance process, please consider join the team to help us improve it instead! Curl and libcurl 7.19.2 Public curl releases: 108 Command line options: 128 curl_easy_setopt() options: 158 Public functions in libcurl: 58 Known libcurl bindings: 37 Contributors: 683 This release includes the following bugfixes: o build failure when using MSVC 6 makefile and on four platforms more o crash when using --interface name on Linux systems with a TEQL device o using the multi interface to download a HTTPS page with libcurl built powered by OpenSSL could download "rubbish" instead of actual content This release includes the following known bugs: o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html) This release would not have looked like this without help, code, reports and advice from friends like these: John Wilkinson, Adam Sampson, Daniel Fandrich, Yang Tse, Rainer Canavan, Michal Marek Thanks! (and sorry if I forgot to mention someone)

ANNOUNCE: curl and libcurl 7.19.1

Daniel Stenberg — 2008-11-05T12:11:25

Hi friends! It is yet again time for a release. This time it is mostly bugfixes but we can't really stop adding stuff either... As usual download your copy from: http://curl.haxx.se/download.html The mirrors and alternative download packages will probably catch up soon! Curl and libcurl 7.19.1 Public curl releases: 107 Command line options: 128 curl_easy_setopt() options: 158 Public functions in libcurl: 58 Known libcurl bindings: 37 Contributors: 672 This release includes the following changes: o pkg-config can now show supported_protocols and supported_features o Added CURLOPT_CERTINFO and CURLINFO_CERTINFO o Added CURLOPT_POSTREDIR o Better detect HTTP 1.0 servers and don't do HTTP 1.1 requests on them o configure --disable-proxy disables proxy support o Added CURLOPT_USERNAME and CURLOPT_PASSWORD o --interface now works with IPv6 connections on glibc systems o Added CURLOPT_PROXYUSERNAME and CURLOPT_PROXYPASSWORD This release includes the following bugfixes: o MingW32 non-configure builds are now largefile feature enabled by default o NetWare LIBC builds are now largefile feature enabled by default o curl_easy_pause() could behave wrongly on unpause o cookies with invalid expire dates are now considered expired o HTTP pipelining over proxy o fix regression in configure script which affected OpenSSL builds on MSYS o GnuTLS-based multi interface doing HTTPS over proxy failed o recv() failures cause CURLE_RECV_ERROR o SFTP over SOCKS crash fixed o thread-safety issues addressed for NSS-powered libcurls o removed the use of mktime() and gmtime(_r)() in date parsing and conversions o HTTP Digest with a blank realm did wrong o CURLINFO_REDIRECT_URL didn't work with the multi interface o CURLOPT_RANGE now works for SFTP downloads o FTP SIZE response 550 now causes CURLE_REMOTE_FILE_NOT_FOUND o CURLINFO_PRIMARY_IP fixed for persistent connection re-use cases o remove_handle/add_handle multi interface timer callback flaw o CURLINFO_REDIRECT_URL memory leak and wrong-doing o case insensitive string matching works in Turkish too o Solaris builds get _REENTRANT defined properly and work again o Garbage sent on chunky upload after curl_easy_pause() o ipv4 name resolves when libcurl is built with ipv6-enabled c-ares o undersized IPv6 address internal buffer truncated long IPv6 addresses o CURLINFO_FILETIME works for file:// transfers as well This release includes the following known bugs: o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html) This release would not have looked like this without help, code, reports and advice from friends like these: Keith Mok, Yang Tse, Daniel Fandrich, Guenter Knauf, Dmitriy Sergeyev, Linus Nielsen Feltzing, Martin Drasar, Stefan Krause, Dmitry Kurochkin, Mike Revi, Andres Garcia, Michael Goffioul, Markus Moeller, Rob Crittenden, Jamie Lokier, Emanuele Bovisio, Maxim Ivanov, Ian Lynagh, Daniel Egger, Igor Novoseltsev, John Wilkinson, Pascal Terjan, Steve Roskowski, Daniel Johnson Thanks! (and sorry if I forgot to mention someone)

ANNOUNCE: Curl and libcurl 7.19.0

Daniel Stenberg — 2008-09-01T15:16:07

Hello friends! I'm happy and proud to bring yet another release of curl and libcurl. Get your own copy of it from: http://curl.haxx.se/download.html Curl and libcurl 7.19.0 Public curl releases: 106 Command line options: 127 curl_easy_setopt() options: 153 Public functions in libcurl: 58 Known libcurl bindings: 36 Contributors: 654 This release includes the following changes: o curl_off_t gets its size/typedef somewhat differently than before. This _may_ cause an ABI change for you. See lib/README.curl_off_t for a full explanation. o Added CURLINFO_PRIMARY_IP o Added CURLOPT_CRLFILE and CURLE_SSL_CRL_BADFILE o Added CURLOPT_ISSUERCERT and CURLE_SSL_ISSUER_ERROR o curl's option parser for boolean options reworked o Added --remote-name-all o Now builds for the INTEGRITY operating system o Added CURLINFO_APPCONNECT_TIME o Added test selection by key word in runtests.pl o the curl tool's -w option support the %{ssl_verify_result} variable o Added CURLOPT_ADDRESS_SCOPE and scope parsing of the URL according to RFC4007 o Support --append on SFTP uploads (not with OpenSSH, though) o Added curlbuild.h and curlrules.h to the external library interface This release includes the following bugfixes: o Fixed curl-config --ca o Fixed the multi interface connection re-use with NSS-built libcurl o connection re-use when using the multi interface with pipelining enabled o curl_multi_socket() socket callback fix for close/re-create sockets case o SCP or SFTP over socks proxy crashed o RC4-MD5 cipher now works with NSS-built libcurl o range requests with --head are now done correctly o fallback to gettimeofday when monotonic clock is unavailable at run-time o range numbers could be made to wrongly get output as signed o unexpected 1xx responses hung transfers o FTP transfers segfault when using different CURLOPT_FTP_FILEMETHOD o c-ares powered libcurls can resolve/use IPv6 addresses o poll not working on Windows Vista due to POLLPRI being incorrectly used o user-agent in CONNECT with non-HTTP protocols o CURL_READFUNC_PAUSE problems fixed o --use-ascii now works on Symbian OS, MS-DOS and OS/2 o CURLINFO_SSL_VERIFYRESULT is fixed o FTP URLs and IPv6 URLs mangled when sent to proxy with CURLOPT_PORT set o a user name in a proxy URL without a password was parsed incorrectly o library will now be built with _REENTRANT symbol defined only if needed o no longer link with gdi32 on Windows cross-compiled targets o HTTP PUT with -C - sent bad Content-Range: header o HTTP PUT or POST with redirect could lead to hang o re-use of connections with failed SSL connects in the multi interface o NTLM over proxy state was wrongly cleared when host connection was closed o Windows SSPI DLL loading is now done in curl_global_init() o runtests.pl has an improved find-stunnel-and-invoke o FTP sessions could go out of sync on a long header boundary condition o potential buffer overflows in the MS-DOS command-line port fixed o --stderr is now honoured with the -v option o memory leak in libcurl on Windows built with OpenSSL o improved curl_m*printf() integral data type size and signedness handling o error when --dump-header - used with more than one URL o proxy closing connect during CONNECT with auth with the multi interface o CURLOPT_UPLOAD sets HTTP method back to GET or HEAD when passed in a 0 o shared cookies could get locked twice o deal with closed connection while doing POST/PUT This release includes the following known bugs: o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html) This release would not have looked like this without help, code, reports and advice from friends like these: Lenny Rachitsky, Axel Tillequin, Arnaud Ebalard, Yang Tse, Dan Fandrich, Rob Crittenden, Dengminwen, Christopher Palow, Hans-Jurgen May, Phil Pellouchoud, Eduard Bloch, John Lightsey, Stephen Collyer, Tor Arntsen, Rolland Dudemaine, Phil Blundell, Scott Barrett, Andreas Schuldei, Peter Lamberg, David Bau, Pramod Sharma, Yehoshua Hershberg, Constantine Sapuntzakis, Lars Nilsson, Andy Tsouladze, Jamie Lokier, Vincent Le Normand Thanks! (and sorry if I forgot to mention someone)

ANNOUNCE: curl and libcurl 7.18.2!

Daniel Stenberg — 2008-06-04T15:49:38

Hello! I'm proud and happy to be able to announce the spanking new release. Enjoy! Curl and libcurl 7.18.2 Public curl releases: 105 Command line options: 126 curl_easy_setopt() options: 150 Public functions in libcurl: 58 Public web site mirrors: 37 Known libcurl bindings: 36 Contributors: 636 This release includes the following changes: o CURLFORM_STREAM was added o CURLOPT_NOBODY is now supported over SFTP o curl can now run on Symbian OS o curl -w redirect_url and CURLINFO_REDIRECT_URL o added curl_easy_send() and curl_easy_recv() This release includes the following bugfixes: o CURLOPT_NOBODY first set to TRUE and then FALSE for HTTP no longer causes the confusion that could lead to a hung transfer o curl_easy_reset() resets the max redirect limit properly o configure now correctly recognizes Heimdal and MIT gssapi libraries o malloc() failure check in Negotiate o -i and -I together now work the same no matter what order they're used o the typechecker can be bypassed by defining CURL_DISABLE_TYPECHECK o a pointer mixup could make the FTP code send bad user+password under rare circumstances (found when using curlftpfs) o CURLOPT_OPENSOCKETFUNCTION can now be used to create a unix domain socket o CURLOPT_TCP_NODELAY crash due to getprotobyname() use o libcurl sometimes sent body twice when using CURLAUTH_ANY o configure detecting debug-enabled c-ares o microsecond resolution keys for internal splay trees o krb4 and krb5 ftp segfault o multi interface busy loop for CONNECT requests o internal time differences now use monotonic time source if available o several curl_multi_socket() fixes o builds fine for Haiku OS o follow redirect with only a new query string o SCP and SFTP memory leaks on aborted transfers o curl_multi_socket() and HTTP pipelining transfer stalls o lost telnet data on an EWOULDBLOCK condition This release includes the following known bugs: o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html) Other curl-related news: o pycurl 7.18.1 was released: http://pycurl.sf.net/ o brand new curl Haskell binding: http://hackage.haskell.org/cgi-bin/hackage-scripts/package/curl This release would not have looked like this without help, code, reports and advice from friends like these: Michal Marek, Daniel Fandrich, Scott Barrett, Alexey Simak, Daniel Black, Rafa Muyo, Andre Guibert de Bruet, Brock Noland, Sandor Feldi, Stefan Krause, David Shaw, Norbert Frese, Bart Whiteley, Jean-Francois Bertrand, Ben Van Hof, Yuriy Sosov, Christopher Palow, Yang Tse, Liam Healy, Nikolai Kondrashov, David Rosenstrauch, Andreas Faerber, Scott McCreary, Jeff Weber, Emil Romanus Thanks! (and sorry if I forgot to mention someone)

ANNOUNCE: curl and libcurl 7.18.1

Daniel Stenberg — 2008-03-30T09:21:28

Hi friends! Another two months of efforts have gone by and now we're happy to present a new curl and libcurl release! The major focus this time is bug fixing, but there are a few fancy new features added and in some esoteric behavior that no longer is supported. See CHANGES for the gory details. Go get it from http://curl.haxx.se/download.html Curl and libcurl 7.18.1 Public curl releases: 104 Command line options: 126 curl_easy_setopt() options: 150 Public functions in libcurl: 56 Public web site mirrors: 39 Known libcurl bindings: 36 Contributors: 621 This release includes the following changes: o added support for HttpOnly cookies o 'make ca-bundle' downloads and generates an updated ca bundle file o we no longer distribute or install a ca cert bundle o SSLv2 is now disabled by default for SSL operations o the test509-style setting URL in callback is officially no longer supported o support a full chain of certificates in a given PKCS12 certificate o resumed transfers work with SFTP o added type checking macros for curl_easy_setopt() and curl_easy_getinfo(), watch out for new warnings in code using libcurl (needs gcc-4.3 and currently only works in C mode) o curl_easy_setopt(), curl_easy_getinfo(), curl_share_setopt() and curl_multi_setopt() uses are now checked to use exactly three arguments o --with-ca-path=DIR configure option allows to set an openSSL CApath instead of a default ca bundle. This release includes the following bugfixes: o improved pipelining o improved strdup replacement o GnuTLS-built libcurl failed when doing global cleanup and reinit o error message problem when unable to resolve a host on Windows o Accept: header replacing o not verifying server certs with GnuTLS still failed if gnutls had problems with the cert o when using the multi interface and a handle is removed while still having a transfer going on, the connection is now closed by force o bad re-use of SSL connections in non-complete state o test case 405 failures with GnuTLS builds o crash when connection cache size is 1 and Curl_do() failed o GnuTLS-built libcurl can now be forced to prefer SSLv3 o crash when doing Negotiate again on a re-used connection o select/poll regression o better MIT kerberos configure check o curl_easy_reset() + SFTP re-used connection download crash o SFTP non-existing file + SFTP existing file error o sharing DNS cache between easy handles running in multiple threads could lead to crash o SFTP upload with CURLOPT_FTP_CREATE_MISSING_DIRS on re-used connection o SFTP infinite loop when given an invalid quote command o curl-config erroneously reported LDAPS support with missing LDAP libraries o SCP infinite loop when downloading a zero byte file o setting the CURLOPT_SSL_CTX_FUNCTION with libcurl built without OpenSSL now makes curl_easy_setopt() properly return failure o configure --with-libssh2 (with no given path) This release includes the following known bugs: o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html) New curl mirrors: o http://curl.cuendet.com/ is a new mirror in Atlanta, USA This release would not have looked like this without help, code, reports and advice from friends like these: Michal Marek, Dmitry Kurochkin, Niklas Angebrand, Günter Knauf, Yang Tse, Dan Fandrich, Mike Hommey, Pooyan McSporran, Jerome Muffat-Meridol, Kaspar Brand, Gautam Kachroo, Zmey Petroff, Georg Lippitsch, Sam Listopad, Anatoli Tubman, Mike Protts, Michael Calmer, Brian Ulm, Dmitry Popov, Jes Badwal, Dan Petitt, Stephen Collyer Thanks! (and sorry if I forgot to mention someone)_______________________________________________ curl-announce mailing list curl-announce< at >cool.haxx.se http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-announce

[ANNOUNCE] curl and libcurl 7.18.0

Daniel Stenberg — 2008-01-28T19:20:02

Hello curlonauts! I'm happy to announce curl and libcurl 7.18.0! Release focus this time: minor features added. I think this release has every potential of becoming the best and most solid libcurl release ever, simply based on the huge team of contributors and large amount of bug fixes that have gone into this. Download your fresh copy here: http://curl.haxx.se/download.html Curl and libcurl 7.18.0 Public curl releases: 103 Command line options: 126 curl_easy_setopt() options: 150 Public functions in libcurl: 56 Public web site mirrors: 43 Known libcurl bindings: 36 Contributors: 597 This release includes the following changes: o --data-urlencode o CURLOPT_PROXY_TRANSFER_MODE o --no-keepalive - now curl does connections with keep-alive enabled by default o --socks4a added (proxy type CURLPROXY_SOCKS4A for libcurl) o --socks5-hostname added (CURLPROXY_SOCKS5_HOSTNAME for libcurl) o curl_easy_pause() o CURLOPT_SEEKFUNCTION and CURLOPT_SEEKDATA o --keepalive-time o curl --help output was re-ordered This release includes the following bugfixes: o curl-config --features and --protocols show the correct output when built with NSS, and also when SCP, SFTP and libz are not available o free problem in the curl tool for users with empty home dir o curl.h version 7.17.1 problem when building C++ apps with MSVC o SFTP and SCP use persistent connections o segfault on bad URL o variable wrapping when using absolutely huge send buffer sizes o variable wrapping when using debug callback and the HTTP request wasn't sent in one go o SSL connections with NSS done with the multi-interface o setting a share no longer activates cookies o Negotiate now works on auth and proxy simultanouesly o support HTTP Digest nonces up to 1023 letters o resumed ftp upload no longer requires the read callback to return full buffers o no longer default-appends ;type= on FTP URLs thru proxies o SSL session id caching o POST with callback over proxy requiring NTLM or Digest o Expect: 100-continue flaw on re-used connection with POSTs o build fix for MSVC 9.0 (VS2008) o Windows curl builds failed file truncation when retry downloading o SSL session ID cache memory leak o bad connection re-use check with environment variable-activated proxy use o --libcurl now generates a return statement as well o socklen_t is no longer used in the public includes o time zone offsets from -1400 to +1400 are now accepted by the date parser o allows more spaces in WWW/Proxy-Authenticate: headers o curl-config --libs skips /usr/lib64 o range support for file:// transfers o libcurl hang with huge POST request and request-body read from callback o removed extra newlines from many error messages o improved pipelining o improved OOM handling for data url encoded HTTP POSTs when read from a file o test suite could pick wrong tool(s) if more than one existed in the PATH o curl_multi_fdset() failed to return socket while doing CONNECT over proxy o curl_multi_remove_handle() on a handle that is in used for a pipeline now break that pipeline o CURLOPT_COOKIELIST memory leaks o progress meter/callback during http proxy CONNECT requests o auth for http proxy when the proxy closes connection after first response This release includes the following known bugs: o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html) Other curl-related news: o TclCurl 7.17.1 => http://personal1.iddeo.es/andresgarci/tclcurl/english/ o Ruby Curl::Multi 0.1 => http://curl-multi.rubyforge.org/ o curl-java 0.2.1 => http://curl.haxx.se/libcurl/java/ New curl mirrors: o http://curl.gominet.net/ is new mirror in Vizcaya, Portugal o http://curl.very-clever.com/ is a new mirror in Nuremberg, Germany This release would not have looked like this without help, code, reports and advice from friends like these: Dan Fandrich, Gisle Vanem, Toby Peterson, Yang Tse, Daniel Black, Robin Johnson, Michal Marek, Ates Goral, Andres Garcia, Rob Crittenden, Emil Romanus, Alessandro Vesely, Ray Pekowski, Spacen Jasset, Andrew Moise, Gilles Blanc, David Wright, Vikram Saxena, Mateusz Loskot, Gary Maxwell, Dmitry Kurochkin, Mohun Biswas, Richard Atterer, Maxim Perenesenko, Daniel Egger, Jeff Johnson, Nikitinskit Dmitriy, Georg Lippitsch, Eric Landes, Joe Malicki, Nathan Coulter, Lau Hang Kin, Judson Bishop, Igor Franchuk, Kevin Reed Thanks! (and sorry if I forgot to mention someone)

[ANNOUNCE] curl and libcurl 7.17.1

Daniel Stenberg — 2007-10-29T14:55:07

Hello curlers! I'm happy to announce curl and libcurl 7.17.1! Release focus this time: bug fixes. Download your fresh copy here: http://curl.haxx.se/download.html Curl and libcurl 7.17.1 Public curl release number: 102 Releases counted from the very beginning: 128 Available command line options: 121 Available curl_easy_setopt() options: 147 Number of public functions in libcurl: 55 Amount of public web site mirrors: 43 Number of known libcurl bindings: 36 Number of contributors: 588 This release includes the following changes: o automatically append ";type=" when using HTTP proxies for FTP urls o improved NSS support o added --proxy-negotiate o added --post301 and CURLOPT_POST301 o builds with c-ares 1.5.0 o added CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 and --hostpubmd5 o renamed CURLE_SSL_PEER_CERTIFICATE to CURLE_PEER_FAILED_VERIFICATION o added CURLOPT_OPENSOCKETFUNCTION and CURLOPT_OPENSOCKETDATA o CULROPT_COOKIELIST supports "FLUSH" o added CURLOPT_COPYPOSTFIELDS o added --static-libs to curl-config This release includes the following bugfixes: o curl-config --protocols now properly reports LDAPS, SCP and SFTP o ldapv3 support on Windows o ldap builds with the MSVC makefiles o no HOME and no key given caused SSH auth failure o Negotiate authentication over proxy o --ftp-method nocwd on directory listings o FTP, CURLOPT_NOBODY enabled and CURLOPT_HEADER disabled now does TYPE before SIZE o re-used handle transfers with SFTP o curl_easy_escape() problem with byte values >= 128 o handles chunked-encoded CONNECT responses o misuse of ares_timeout() result o --local-port on TFTP transfers o CURLOPT_POSTFIELDS could fail to send binary data o specifying a proxy with a trailing slash didn't work (unless it also contained a port number) o redirect from HTTP to FTP or TFTP memory problems and leaks o re-used connections a bit too much when using non-SSL protocols tunneled over a HTTP proxy o embed the manifest in VC8 builds o use valgrind in the tests even when the lib is built shared with libtool o libcurl built with NSS can now ignore the peer verification even when the ca cert bundle is absent This release includes the following known bugs: o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html) New curl mirrors: o http://curl.wetzlmayr.at/ is a new web mirror in Nuremberg, Germany This release would not have looked like this without help, code, reports and advice from friends like these: Dan Fandrich, Michal Marek, Günter Knauf, Rob Crittenden, Immanuel Gregoire, Mark Davies, Max Katsev, Philip Langdale, Alex Fishman, Johnny Luong, Alexey Pesternikov, Yang Tse, Kim Rinnewitz, Michael Wallner, Patrick Monnerat, Vladimir Lazarenko Thanks! (and sorry if I forgot to mention someone)_______________________________________________ curl-announce mailing list curl-announce< at >cool.haxx.se http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-announce

[ANNOUNCE] curl and libcurl 7.17.0

Daniel Stenberg — 2007-09-13T20:31:02

Hello curlers! I'm happy to announce curl and libcurl 7.17.0! This time with a small set of changes done that made us bump the minor number. Download your fresh copy here: http://curl.haxx.se/download.html Curl and libcurl 7.17.0 Public curl release number: 101 Releases counted from the very beginning: 127 Available command line options: 118 Available curl_easy_setopt() options: 143 Number of public functions in libcurl: 55 Amount of public web site mirrors: 42 Number of known libcurl bindings: 36 Number of contributors: 572 This release includes the following changes: o support for OS/400 Secure Sockets Layer library o curl_easy_setopt() now allocates strings passed to it o SCP and SFTP support now requires libssh2 0.16 or later o LDAP libraries are now linked "regularly" and not with dlopen o HTTP transfers have the download size info "available" earlier o FTP transfers have the download size info "available" earlier o builds and runs on OS/400 o several error codes and options were marked as obsolete and subject to future removal (set CURL_NO_OLDIES to see if your application is using them) o SFTP errors can return more specific error codes This release includes the following bugfixes: o test cases 31, 46, 61, 506, 517 now work in time zones that use leap seconds o problem with closed proxy connection during HTTP CONNECT auth negotiation o transfer-encoding skipping didn't ignore the 407 response bodies properly o CURLOPT_SSL_VERIFYHOST set to 1 o CONNECT endless loop o krb5 support builds with Heimdal o added returned error string for connection refused case o re-use of dead FTP control connections o login to FTP servers that don't require (nor understand) PASS after the USER command o bad free of memory from libssh2 o the SFTP PWD command works o HTTP Digest auth on a re-used connection o FTPS data connection close o AIX 4 and 5 get to use non-blocking sockets o small POST with NTLM o resumed file:// transfers o CURLOPT_DNS_CACHE_TIMEOUT and CURLOPT_DNS_USE_GLOBAL_CACHE are 64 bit "clean" o memory leak when handling compressed data streams from broken servers o no NTLM unicode response o resume HTTP PUT using Digest authentication o FTP NOBODY requests on directories sent "SIZE (null)" o FTP NOBODY request on file crash o excessively long FTP server responses and response lines o file:// upload then FTP:// upload crash o TFTP error 0 is no longer treated as success o uploading empty file over FTP on re-used connection o superfluous CWD command on re-used FTP connections without subdirs used This release includes the following known bugs: o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html) Other curl-related news: o pycurl 7.16.4 was released http://pycurl.sf.net o TclCurl 7.16.4 was released http://personal1.iddeo.es/andresgarci/tclcurl/english/ o curlpp 0.7.1 was released http://rrette.com/textpattern/index.php?s=cURLpp o A brand new binding for SP-Forth was written by ygrek: http://www.forth.org.ru/~ac/lib/lin/curl/ New curl mirrors: o http://curl.freeby.pctools.cl is a new mirror in Santiago, Chile o http://curl.site2nd.org is a new mirror in Dallas, Texas, USA o http://curl.cheap.co.il is a new mirror in Tel-Aviv, Israel o http://curl.digimirror.nl is a new mirror in Amsterdam, the Netherlands This release would not have looked like this without help, code, reports and advice from friends like these: Dan Fandrich, Song Ma, Daniel Black, Giancarlo Formicuccia, Shmulik Regev, Daniel Cater, Colin Hogben, Jofell Gallardo, Daniel Johnson, Ralf S. Engelschall, James Housley, Chris Flerackers, Patrick Monnerat, Jayesh A Shah, Greg Zavertnik, Peter O'Gorman, Greg Morse, Dmitriy Sergeyev, Scott Cantor, Allen Pulsifer, Andrew Wansink, Robson Braga Araujo, Christian Vogt Thanks! (and sorry if I forgot to mention someone)

[ANNOUNCE] curl and libcurl 7.16.4

Daniel Stenberg — 2007-07-10T21:53:11

Good day! I'm happy to announce curl and libcurl 7.16.4! A release mostly focused on a (minor) security-related bug fix. Download your fresh copy here: http://curl.haxx.se/download.html Curl and libcurl 7.16.4 Public curl release number: 100 Releases counted from the very beginning: 126 Available command line options: 118 Available curl_easy_setopt() options: 143 Number of public functions in libcurl: 55 Amount of public web site mirrors: 39 Number of known libcurl bindings: 35 Number of contributors: 572 This release includes the following changes: o added CURLOPT_NEW_FILE_PERMS and CURLOPT_NEW_DIRECTORY_PERMS o improved hashing of sockets for the multi_socket API o ftp kerberos5 support added This release includes the following bugfixes: o adjusted how libcurl treats HTTP 1.1 responses without content-lenth or chunked encoding o fixed the 10-at-a-time.c example o FTP over SOCKS proxy o improved error messages on SCP upload failures o security flaw (http://curl.haxx.se/docs/adv_20070710.html) in which libcurl failed to properly reject some outdated or not yet valid server certificates when built with GnuTLS This release includes the following known bugs: o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html) This release would not have looked like this without help, code, reports and advice from friends like these: Robert Iakobashvili, James Housley, Guenter Knauf, James Bursa, Song Ma, Thomas J. Moore, Gavrie Philipson, Kees Cook Thanks! (and sorry if I forgot to mention someone)

[ANNOUNCE] curl and libcurl 7.16.3

Daniel Stenberg — 2007-06-25T09:32:31

Good day! I'm happy to announce curl and libcurl 7.16.3! Another release mostly focused on bug fixes. Download your fresh copy here: http://curl.haxx.se/download.html Curl and libcurl 7.16.3 Public curl release number: 99 Releases counted from the very beginning: 126 Available command line options: 118 Available curl_easy_setopt() options: 141 Number of public functions in libcurl: 54 Amount of public web site mirrors: 38 Number of known libcurl bindings: 35 Number of contributors: 554 This release includes the following changes: o added curl_multi_socket_action() o deprecated curl_multi_socket() o uses less memory in non-pipelined use cases o CURLOPT_HTTP200ALIASES matched transfers assume HTTP 1.0 compliance o more than one test harness can run at the same time without conflict o SFTP now supports quote commands before a transfer o CURLMOPT_MAXCONNECTS added to curl_multi_setopt() o upload resume works for file:// URLs o asynchronous name resolves now require c-ares 1.4.0 or later o added SOCKS test cases o CURLOPT_FTP_CREATE_MISSING_DIRS and --ftp-create-dirs now work for SFTP operations as well This release includes the following bugfixes: o if2up too long interface name memory leak o test case 534 started to fail 2007-04-13 due to the existance of a new host on the net with the same silly domain the test was using for a host which was supposed not to exist. o test suite SSL certificate works better with newer stunnel o internal progress meter update frequency back to once per second o avoid some unnecessary calls to function gettimeofday o a double-free in the SSL-layer o GnuTLS free of NULL credentials o NSS-fix for closing down SSL o bad warning from configure when gnutls was selected o compilation on VMS 64-bit mode o SCP/SFTP downloads could hang on the last bytes of a transfer o curl_easy_duphandle() crash o curl -V / curl_version*() works even when GnuTLS is used on a system without a good random source o curl_multi_socket() not "noticing" newly added handles o lack of Content-Length and chunked encoding now requires HTTP 1.1 as well to be treated as without response body o connection cache growth in multi handles o better handling of out of memory conditions o overwriting an uploaded file with sftp now truncates it first o SFTP quote commands chmod, chown, chgrp can now set a value of 0 o TFTP connect timouts less than 5 seconds o improved curl -w for TFTP transfers o memory leak when failed OpenSSL certificate CN field checking o memory leak when OpenSSL failed PKCS #12 parsing o FPL-SSL when built with NSS o out-of-boundary write in Curl_select() o -s/--silent can now be used to toggle off the silence again o builds fine on 64bit HP-UX o multi interface HTTP CONNECT glitch o list FTP root directories when login dir is not root o no longer slows down when getting very many URLs on the same command line o lock share before decreasing dirty counter o no-body FTP requests on re-used connections This release includes the following known bugs: o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html) Other curl-related news: o PycURL 7.16.2.1 was released: http://pycurl.sf.net/ o TclCurl 7.16.2 was released: http://personal1.iddeo.es/andresgarci/tclcurl/english/ New curl mirrors: o http://curl.spegulo.be is a new mirror in Belgium o http://curl.piotrkosoft.net is a new mirror in Poland o http://curl.smudge-it.net is a new mirror in St Louis, MO, USA o http://curl.askapache.com is a new mirror in Indiana, USA This release would not have looked like this without help, code, reports and advice from friends like these: Song Ma, Dan Fandrich, Yang Tse, Jay Austin, Robert Iakobashvil, James Housley, Daniel Black, Steve Little, Sonia Subramanian, Peter O'Gorman, Frank Hempel, Michael Wallner, Jeff Pohlmeyer, Tobias Rundström, Anders Gustafsson, James Bursa, Kristian Gunstone, Feng Tu, Andre Guibert de Bruet, Rob Crittenden, Rich Rauenzahn, Tom Regner, Dave Vasilevsky, Shmulik Regev, Robson Braga Araujo, Adam Piggott, Gerrit Bruchhäuser Thanks! (and sorry if I forgot to mention someone)_______________________________________________ curl-announce mailing list curl-announce< at >cool.haxx.se http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-announce

[ANNOUNCE] curl and libcurl 7.16.2

Daniel Stenberg — 2007-04-11T13:16:25

Good day! I'm happy to announce curl and libcurl 7.16.2! Another release mostly focused on bug fixes. Download your fresh copy here: http://curl.haxx.se/download.html Curl and libcurl 7.16.2 Public curl release number: 98 Releases counted from the very beginning: 125 Available command line options: 118 Available curl_easy_setopt() options: 141 Number of public functions in libcurl: 54 Amount of public web site mirrors: 38 Number of known libcurl bindings: 35 Number of contributors: 539 This release includes the following changes: o added CURLOPT_TIMEOUT_MS and CURLOPT_CONNECTTIMEOUT_MS o added CURLOPT_HTTP_CONTENT_DECODING, CURLOPT_HTTP_TRANSFER_DECODING and --raw o added support for using the NSS library for TLS/SSL o changed default anonymous FTP password o changed the CURLOPT_FTP_SSL_CCC option to handle active and passive CCC shutdown o added the --ftp-ssl-ccc-mode command line option o includes VC8 Makefiles in the release archive o --ftp-ssl-control is now honoured on ftps:// URLs o added experimental CURL_ACKNOWLEDGE_EINTR symbol definition check o --key and new --pubkey options for SSH public key file logins o --pass now works for a SSH public key file, too o select (2) support no longer needed to build the library if poll() used o CURLOPT_POSTQUOTE works for SFTP This release includes the following bugfixes: o in testsuite, update test cookies expiration from 2007-Feb-1 to year 2035 o socks5 works o builds fine with VC2005 o CURLOPT_RANGE set to NULL resets the range for FTP o curl_multi_remove_handle() rare crash o passive FTP transfers work with SOCKS o multi interface HTTPS connection re-use memory leak o libcurl.m4's --with-libcurl is improved o curl-config --libs and libcurl.pc no longer list unnecessary dependencies o fixed an issue with CCC not working on some servers o several HTTP pipelining problems o HTTP CONNECT thru a proxy is now less blocking when the multi interface is used o HTTP Digest header parsing fix for unquoted last word ending with CRLF o CURLOPT_PORT, HTTP proxy, re-using connections and non-HTTP protocols o CURLOPT_INTERFACE for ipv6 o use-after-free issue with HTTP transfers with the multi interface o the progress callback can get called more frequently o timeout would restart when signal caught while awaiting socket events o curl -f with user+password embedded in the URL o 26 flaws identified by coverity.com o builds on QNX 6 again This release includes the following known bugs: o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html) Other curl-related news: o pycurl 7.16.1 was released: http://pycurl.sf.net/ New curl mirrors: o http://curl.basemirror.de is a new mirror in Germany o http://curl.xxtracker.org is a new mirror in The Netherlands This release would not have looked like this without help, code, reports and advice from friends like these: Yang Tse, Manfred Schwarb, Michael Wallner, Jeff Pohlmeyer, Shmulik Regev, Rob Crittenden, Robert A. Monat, Dan Fandrich, Duncan Mac-Vicar Prett, Michal Marek, Robson Braga Araujo, Ian Turner, Linus Nielsen Feltzing, Ravi Pratap, Adam D. Moss, Jose Kahan, Hang Kin Lau, Justin Fletcher, Robert Iakobashvili, Bryan Henderson, Eygene Ryabinkin, Daniel Johnson, Matt Kraai, Nick Zitzmann, Rob Jones Thanks! (and sorry if I forgot to mention someone)

[ANNOUNCE] curl and libcurl 7.16.1

Daniel Stenberg — 2007-01-29T15:23:28

Hi again I'm happy to announce curl and libcurl 7.16.1! Public curl release number: 97 Releases counted from the very beginning: 124 Available command line options: 115 Available curl_easy_setopt() options: 137 Number of public functions in libcurl: 54 Amount of public web site mirrors: 39 Number of known libcurl bindings: 35 Number of contributors: 539 This release includes the following changes: o Support for SCP and SFTP were added (powered by libssh2) o CURLOPT_CLOSEPOLICY is now deprecated o --ftp-ssl-ccc and CURLOPT_FTP_SSL_CCC were added o HTTP support for non-ASCII platforms o --libcurl was added This release includes the following bugfixes: o proxy close during CONNECT authentication is now dealt with nicely o the CURLOPT_DEBUGFUNCTION was sometimes called even when CURLOPT_VERBOSE was not enabled o multiple TFTP transfers on the same (easy or multi) handle could cause a crash o SIGSEGV when disconnecting on a transfer on a re-used handle when the host name didn't resolve o stack overwrite on 64bit Windows in the chunked decoding department o HTTP responses on persistent connections without Content-Length nor chunked encoding are now considered to be without response body o Content-Range: header parsing improved o CPU 100% load when HTTP upload connection broke o active FTP didn't work with multi interface o curl_getdate() could be off one hour for TZ time zones with DST, on windows o CURLOPT_FORBID_REUSE works again o CURLOPT_MAXCONNECTS set to zero caused libcurl to SIGSEGV o rate limiting works better o getting FTP response code errors when using the multi-interface caused libcurl to leak memory o no more SIGPIPE when GnuTLS is used o FTP downloading 2 zero byte files in a row o using proxy and URLs without protocol prefixes o first using a proxy and then accessing a site that 'no_proxy' matched, would still make libcurl use the proxy... o curl_easy_duphandle() now makes a handle that is valid for the multi interface since the magic number is set fine o libcurl.pc now uses Libs.private for "private" libs o --limit-rate (CURLOPT_MAX_SEND_SPEED_LARGE and CURLOPT_MAX_RECV_SPEED_LARGE) now work on windows again o improved download performance by avoiding the unconditional "double copying" o base64 encoding/decoding works on non-ASCII platforms o large file downloads o CURLOPT_COOKIELIST set to "ALL" crash o easy handle removal from multi handle before completion o TFTP upload memory leak o curl_easy_reset() now resets the CA bundle path correctly o two User-Agent headers in CONNECT requests with custom User-Agent This release includes the following known bugs: o see docs/KNOWN_BUGS (http://curl.haxx.se/docs/knownbugs.html) Other curl-related news: o TclCurl 7.16.0 was released: http://personal1.iddeo.es/andresgarci/tclcurl/english/ o Curb - Libcurl bindings for Ruby: http://curb.rubyforge.org/ New curl mirrors: o curl.miroir-francais.fr is a new French web mirror o curl.dsmirror.nl is a new Dutch web mirror This release would not have looked like this without help, code, reports and advice from friends like these: James Housley, Olaf Stueben, Yang Tse, Gisle Vanem, Bradford Bruce, Ciprian Badescu, Dmitriy Sergeyev, Nir Soffer, Venkat Akella, Toon Verwaest, Matt Witherspoon, Alexey Simak, Martin Skinner, Sh Diao, Jared Lundell, Stefan Krause, Sebastien Willemijns, Alexey Simak, Brendan Jurd, Robson Braga Araujo, David McCreedy, Robert Foreman, Nathanael Nerode, Victor Snezhko, Linus Nielsen Feltzing, Toby Peterson, Dan Fandrich, Armel Asselin, Michael Wallner, Guenter Knauf Thanks! (and sorry if I forgot to mention someone)

[ANNOUNCE] curl and libcurl 7.16.0

Daniel Stenberg — 2006-10-30T08:39:11

Hi I'm happy and proud to finally be at this stage when I've packaged and now release: Curl and libcurl 7.16.0 Release focus this time is a few new features added (and some actually removed). Download curl from http://curl.haxx.se/download.html or use the download wizard at http://curl.haxx.se/dlwiz/. Public curl release number: 96 Releases counted from the very beginning: 123 Available command line options: 112 Available curl_easy_setopt() options: 133 Number of public functions in libcurl: 54 Amount of public web site mirrors: 37 Number of known libcurl bindings: 35 Number of contributors: 515 This release includes the following changes: o Added CURLE_SSL_CACERT_BADFILE o Added CURLMOPT_TIMERFUNCTION and CURLMOPT_TIMERDATA o (FTP) the CURLOPT_SOURCE_* options are removed and so are the --3p* command line options o curl_multi_socket() and family are suitable to start using o uses WSAPoll() on Windows Vista o (FTP) --ftp-ssl-control was added o CURLOPT_SSL_SESSIONID_CACHE and --no-sessionid added o CURLMOPT_PIPELINING added for enabling HTTP pipelined transfers o multi handles now have a shared connection cache o Added support for other MS-DOS compilers (besides djgpp) o CURLOPT_SOCKOPTFUNCTION and CURLOPT_SOCKOPTDATA were added o (FTP) libcurl avoids sending TYPE if the desired type was already set o (FTP) CURLOPT_PREQUOTE works even when CURLOPT_NOBODY is set true This release includes the following bugfixes: o (HTTP) CURLOPT_FAILONERROR (curl -f) covers a few more reponse cases o curl_multi_socket() and the LOW_SPEED options o curl_multi_socket() expire timer during c-ares name resolves o curl_multi_add_handle on an already added handle now fails gracefully o multi interface crash if bad function call order was used for cleanup o put a new URL in saved cookie jar files o configure --with-gssapi-libs o SOCKS proxy connection fixes o (FTP) a failed upload does not invalidate the control connection o proxy URL with user name and empty password or no password at all now work o fixed a socket state problem with *multi_socket() o (HTTP) NTLM hostname fix o getsockname usage fixes o SOCKS5 proxy connects can now time-out o SOCKS5 connects that require auth no longer segfaults when auth not given o multi interface using asynch resolves could get stuck in wrong state o the 'running_handles' counter wasn't always updated properly when curl_multi_remove_handle() was used o (FTP) EPRT transfers with IPv6 didn't work properly o (FTP) SINGLECWD mode and using files in the root dir o (HTTP) Expect: header disabling work better o (HTTP) "Expect: 100-continue" disable on second POST on re-used connection o src/config.h.in is fixed o (HTTP) POST data logged to the debug callback function is now correctly tagged as data, not header Other curl-related news: o a Smalltalk binding: http://curl.haxx.se/libcurl/smalltalk/ o pycurl-7.15.5 was released: http://pycurl.sf.net New curl mirrors: o http://curl.geosdreams.info/ is a new Polish mirror o http://curl.gfiles.org/ is a new Russian mirror o http://curl.online-mirror.de/ is a new German mirror o http://curl.blogvoid.com/ is a new Canadian mirror o http://curl.internet.bs/ is a new United Kingdom mirror o http://curl2.haxx.se/ is a new Swedish mirror This release would not have looked like this without help, code, reports and advice from friends like these: Domenico Andreoli, Armel Asselin, Gisle Vanem, Yang Tse, Andrew Biggs, Peter Sylvester, David McCreedy, Dmitriy Sergeyev, Dmitry Rechkin, Jari Sundell, Ravi Pratap, Michele Bini, Jeff Pohlmeyer, Michael Wallner, Mike Protts, Cory Nelson, Bernard Leak, Bogdan Nicula, Dan Fandrich, Nir Soffer Thanks! (and sorry if I forgot to mention someone)

[ANNOUNCE] curl and libcurl 7.15.5

Daniel Stenberg — 2006-08-07T06:36:28

Curl and libcurl 7.15.5 This is a bugfixes and minor new features added release. Download curl from http://curlm.haxx.se/download.html or use the download wizard at http://curl.haxx.se/dlwiz/. Curl and libcurl 7.15.5 Public curl release number: 95 Releases counted from the very beginning: 122 Available command line options: 114 Available curl_easy_setopt() options: 133 Number of public functions in libcurl: 54 Amount of public web site mirrors: 33 Number of known libcurl bindings: 32 Number of contributors: 506 This release includes the following changes: o added --ftp-ssl-reqd o modified the prototype for the socket callback set with CURLMOPT_SOCKETFUNCTION o added curl_multi_assign() o added CURLOPT_FTP_ALTERNATIVE_TO_USER and --ftp-alternative-to-user o added a vcproj file for building libcurl o added curl_formget() o added CURLOPT_MAX_SEND_SPEED_LARGE and CURLOPT_MAX_RECV_SPEED_LARGE o added configure --enable-hidden-symbols o Made -K on a file that couldn't be read cause a warning to be displayed This release includes the following bugfixes: o chunked encoding when custom header "Transfer-Encoding: chunked" is set o Curl_strerror() crash on unknown errors o changing Content-Type when doing formposts o added CURL_EXTERN to a few recent multi functions that lacked them o splay-tree related problems for internal expire time handling o FTP ASCII CRLF counter reset o cookie parser now compares paths case sensitive o an easy handle with shared DNS cache added to a multi handle caused a crash o couldn't override the Proxy-Connection: header for non-CONNECT requests o curl_multi_fdset() could wrongly return -1 as max_fd value Other curl-related news: o yassl 1.3.7 can now be used with libcurl as an optional TLS library for HTTPS/FTPS support: http://www.yassl.com/ o cURLpp 0.6.0 was released: http://rrette.com/curlpp.html o pycurl-7.15.4 was released: http://pycurl.sf.net advice from friends like these: Dan Fandrich, Peter Silva, Arve Knudsen, Michael Wallner, Toshiyuki Maezawa, Ingmar Runge, Ates Goral, David McCreedy, Jari Sundell, Georg Horn, Gisle Vanem, Yang Tse, Michael Jerris, Dan Nelson, Yves Lejeune, Maciej Karpiuk, Mark Lentczner Thanks! (and sorry if I forgot to mention someone)

ANNOUNCE: curl and libcurl 7.15.4

Daniel Stenberg — 2006-06-12T07:09:30

Curl and libcurl 7.15.4 This is a bugfixes and minor new features added release. Download curl from http://curlm.haxx.se/download.html or use the download wizard at http://curl.haxx.se/dlwiz/. Public curl release number: 94 Releases counted from the very beginning: 121 Available command line options: 112 Available curl_easy_setopt() options: 132 Number of public functions in libcurl: 49 Amount of public web site mirrors: 33 Number of known libcurl bindings: 32 Number of contributors: 492 This release includes the following changes: o NTLM2 session response support o CURLOPT_COOKIELIST set to "SESS" clears all session cookies o CURLINFO_LASTSOCKET returned sockets are now checked more before returned o curl-config got a --checkfor option to compare version numbers o line end conversions for FTP ASCII transfers o curl_multi_socket() API added (still mostly untested) o conversion callback options for EBCDIC <=> ASCII conversions o added CURLINFO_FTP_ENTRY_PATH o less blocking for the multi interface during (Open)SSL connect negotiation This release includes the following bugfixes: o builds fine on cygwin o md5-sess with Digest authentication o dict with letters such as space in a word o dict with url-encoded words in the URL o libcurl.m4 when default=yes but no libcurl was found o numerous bugs fixed in the TFTP code o possible memory leak when adding easy handles to multi stack o TFTP works in a more portable fashion (== on more platforms) o WSAGetLastError() is now used (better) on Windows o GnuTLS non-block case that could cause data trashing o deflate code survives lack of zlib header o CURLOPT_INTERFACE works with hostname o configure runs fine with ICC o closed control connection with FTP when easy handle was removed from multi o curl --trace crash when built with VS2005 o SSL connect time-out o improved NTLM functionality o following redirects with more than one question mark in source URL o fixed debug build crash with -d o generates a fine AIX Toolbox RPM spec o treat FTP AUTH failures properly o TFTP transfers could trash data o -d + -G combo crash Other curl-related news: o tclcurl 0.15.3 was released: http://personal1.iddeo.es/andresgarci/tclcurl/english/ New curl mirrors: o http://curl.webdesign-zdg.de/ in Frankfurt, Germany o http://curl.de-mirror.de/ in Aachen, Germany o http://curl.osmirror.nl/ in Amsterdam, the Netherlands o http://curl.usphp.com/ in Florida, US o http://curl.oslevel.de/ in Karlsruhe, Germany This release would not have looked like this without help, code, reports and advice from friends like these: Dan Fandrich, Ilja van Sprundel, David McCreedy, Tor Arntsen, Xavier Bouchoux, David Byron, Michele Bini, Ates Goral, Katie Wang, Robson Braga Araujo, Ale Vesely, Paul Querna, Gisle Vanem, Mark Eichin, Roland Blom, Andreas Ntaflos, David Shaw, Michael Wallner, Olaf Stüben, Mikael Sennerholm, Brian Dessent Thanks! (and sorry if I forgot to mention someone)

ANNOUNCE: curl and libcurl 7.15.3

Daniel Stenberg — 2006-03-20T08:06:43

Curl and libcurl 7.15.3 (This very day 8 years ago the first ever curl release was published.) This is mostly a security-related-problem-fixed release. Download curl from http://curlm.haxx.se/download.html or use the download wizard at http://curl.haxx.se/dlwiz/. Curl and libcurl 7.15.3 Public curl release number: 93 Releases counted from the very beginning: 120 Available command line options: 112 Available curl_easy_setopt() options: 129 Number of public functions in libcurl: 46 Amount of public web site mirrors: 31 Number of known libcurl bindings: 32 Number of contributors: 487 This release includes the following changes: o added docs for --ftp-method and CURLOPT_FTP_FILEMETHOD This release includes the following bugfixes: o TFTP Packet Buffer Overflow Vulnerability: http://curl.haxx.se/docs/adv_20060320.html o properly detecting problems with sending the FTP command USER o wrong error message shown when certificate verification failed o multi-part formpost with multi interface crash o the CURLFTPSSL_CONTROL setting for CURLOPT_FTP_SSL is acknowledged o "SSL: couldn't set callback" is now treated as a less serious problem o Interix build fix o fixed curl "hang" when out of file handles at start o prevent FTP uploads to URLs with trailing slash Other curl-related news since the previous public release: o pycurl-7.15.2 has been released: http://pycurl.sf.net o http://curl.download.nextag.com/ is a new US curl web mirror! This release would not have looked like this without help, code, reports and advice from friends like these: Gisle Vanem, Dan Fandrich, Thomas Klausner, Todd Vierling, Peter Heuchert, Markus Koetter, David McCreedy, Tor Arntsen Thanks! (and sorry if I forgot to mention someone)

ANNOUNCE: curl and libcurl 7.15.2

Daniel Stenberg — 2006-02-27T18:02:55

Curl and libcurl 7.15.2 Another bugfix-release. Download curl from http://curl.haxx.se/download.html or use the download wizard at http://curl.haxx.se/dlwiz/. Public curl release number: 92 Releases counted from the very beginning: 119 Available command line options: 112 Available curl_easy_setopt() options: 129 Number of public functions in libcurl: 46 Amount of public web site mirrors: 31 Number of known libcurl bindings: 32 Number of contributors: 474 This release includes the following changes: o Support for SOCKS4 proxies (added --socks4) o CURLOPT_CONNECT_ONLY and CURLINFO_LASTSOCKET added o CURLOPT_LOCALPORT and CURLOPT_LOCALPORTRANGE (--local-port) added o Dropped support for the LPRT ftp command o Gopher is now officially abandoned as a protocol (lib)curl tries to support o curl_global_init() and curl_global_cleanup() are now using a refcount so that it is now legal to call them multiple times. See updated info for details This release includes the following bugfixes: o two bugs concerning using curl_multi_remove_handle() before the transfer was complete o multi-pass authentication and compressed content o minor format string mistake in the GSS/Negotiate code o cached DNS entries could remain in the cache too long o improved GnuTLS check in configure o re-used FTP connections when the second request didn't do a transfer o plain --limit-rate [num] means bytes o re-creating a dead connection is no longer counted internally as a followed redirect and thus prevents a weird error that would occur if a FTP connection died on an attempted re-use o Try PASV after failing to connect to the port the EPSV response contained o -P [IP] with non-local address with ipv6-enabled curl o -P [hostname] with ipv6-disabled curl o libcurl.m4 was updated o configure no longer warns if the current path contains a space o test suite kill race condition o FTP_SKIP_PASV_IP and FTP_USE_EPSV when doing FTP over HTTP proxy o Doing a second request with FTP on the same bath path, would make libcurl confuse what current working directory it had o FTP over HTTP proxy now sends the second CONNECT properly o numerous compiler warnings and build quirks for various compilers have been addressed o supports name and passwords up to 255 bytes long, embedded in URLs o the HTTP_ONLY define disables the TFTP support Other curl-related news since the previous public release: o http://curlm.haxx.se/ is new service that automatically redirects you to a curl web mirror that is close to you! o http://curl.hkmirror.org/ is a new curl web mirror in Hong Kong o http://curl.storemypix.com/ is a new curl web mirror in Germany o http://curl.s-lines.net/ is a new curl web mirror in Japan o http://curl.oss-mirror.org/ is a new curl web mirror in Ireland o http://curl.linux-mirror.org/ is a new curl web mirror in Germany o pycurl 7.15.1 was released: http://pycurl.sf.net/ o TclCurl 0.15.1 was released: http://personal1.iddeo.es/andresgarci/tclcurl/english/ This release would not have looked like this without help, code, reports and advice from friends like these: Dov Murik, Jean Jacques Drouin, Andres Garcia, Yang Tse, Gisle Vanem, Dan Fandrich, Alexander Lazic, Michael Jahn, Andrew Benham, Bryan Henderson, David Shaw, Jon Turner, Duane Cathey, Michal Marek, Philippe Vaucher, Kent Boortz, Karl Moerder, Shmulik Regev, Ulf Härnhammar, Peter Su Thanks! (and sorry if I forgot to mention someone)

ANNOUNCE: curl and libcurl 7.15.1

Daniel Stenberg — 2005-12-06T23:20:49

Curl and libcurl 7.15.1 Another security-related fix is the most important change in this release. More info about that on http://curl.haxx.se/docs/security.html Download curl from http://curl.haxx.se/download.html or use the download wizard at http://curl.haxx.se/dlwiz/. Public curl release number: 91 Releases counted from the very beginning: 118 Available command line options: 109 Available curl_easy_setopt() options: 125 Number of public functions in libcurl: 46 Amount of public web site mirrors: 27 Number of known libcurl bindings: 32 Number of contributors: 459 This release includes the following changes: o the libcurl.pc pkgconfig file now gets installed on make install o URL globbing now offers "range steps": [1-100:10] o LDAPv3 is now the preferred LDAP protocol version o --max-redirs and CURLOPT_MAXREDIRS set to 0 limits redirects o improved MSVC makefile This release includes the following bugfixes: o buffer overflow problem: http://curl.haxx.se/docs/adv_20051207.html o using file:// on non-existing files are properly handled o builds fine on DJGPP o CURLOPT_ERRORBUFFER is now always filled in on errors o curl outputs error on bad --limit-rate units o fixed libcurl's use of poll() on cygwin o the GnuTLS code didn't support client certificates o TFTP over IPv6 works o no reverse lookups on IP addresses when ipv6-enabled o SSPI compatibility fix: using the proper DLLs o binary LDAP properties are now shown base64 encoded o Windows uploads from stdin using curl can now contain ctrl-Z bytes o -r [num] would produce an invalid HTTP Range: header o multi interface with multi IP hosts could leak socket descriptors o the GnuTLS code didn't handle rehandshakes o re-use of a dead FTP connection o name resolve error codes fixed for Windows builds o double WWW-Authenticate Digest headers are now handled o curl-config --vernum fixed Other curl-related news since the previous public release: o FTP-SSL is now RFC4217 o CurlPas 2005-11-05 was released: http://curlpas.sf.net/ o pycurl 7.15.0 was released http://pycurl.sf.net o New web mirrors: http://curl.triplemind.com/ located in Mannheim, Germany http://curl.nedmirror.nl located in Amsterdam, the Netherlands http://curl.hoxt.com located in Florida, US This release would not have looked like this without help, code, reports and advice from friends like these: Dave Dribin, Bradford Bruce, Temprimus, Ofer, Dima Barsky, Amol Pattekar, Jaz Fresh, tommink[at]post.pl, Gisle Vanem, Nis Jorgensen, Vilmos Nebehaj, Dmitry Bartsevich, David Lang, Eugene Kotlyarov, Jan Kunder, Yang Tse, Quagmire, Albert Chin, David Shaw, Doug Kaufman, Bryan Henderson, Jamie Newton, Stefan Esser Thanks! (and sorry if I forgot to mention someone)

ANNOUNCE: curl and libcurl 7.15.0

Daniel Stenberg — 2005-10-13T08:48:05

Curl and libcurl 7.15.0 A security-related fix is the most important change in this release. More info about that on http://curl.haxx.se/docs/security.html and in the soon upcoming advisory. Download curl from http://curl.haxx.se/download.html or use the download wizard at http://curl.haxx.se/dlwiz/. Public curl release number: 90 Releases counted from the very beginning: 117 Available command line options: 109 Available curl_easy_setopt() options: 124 Number of public functions in libcurl: 46 Amount of public web site mirrors: 24 Number of known libcurl bindings: 32 Number of contributors: 451 This release includes the following changes: o --ftp-skip-pasv-ip / CURLOPT_FTP_SKIP_PASV_IP (sponsored by CU*Answers) o TFTP support added This release includes the following bugfixes: o user+domain name buffer overflow in the NTLM code (security flaw) o -z over FTP now considers equal timestamps "not modified since" o Weird characters removed from the configure script o Fixed time zone offsets for MEST and CEST for the time parser o HTTP Content-Range header parser crash o FTPS negotiation timeouts/errors o SSPI works even for Windows 9x o crash in --dump-header on FTP o test 56 runs better Other curl-related news since the previous public release: o http://curl.freemirror.de/ is a new German mirror o All curl relatd mailing list information and subscribers on cool.haxx.se were lost due to a malicious user exploiting a security hole on the server. Attempts have been made to put back susbcribers on the lists, but many have been lost: http://curl.haxx.se/mail/lost.html o New S-Lang binding: http://curl.haxx.se/libcurl/slang/ o TclCurl 0.14.1: http://personal1.iddeo.es/andresgarci/tclcurl/english/ o pycurl 7.14.1: http://pycurl.sf.net/ This release would not have looked like this without help, code, reports and advice from friends like these: o John Kelly, Nicolas François, Scott Davis, Ben Madsen, Dmitry Bartsevich, David Yan, Michael Wallner, Domenico Andreoli, Darryl House Thanks! (and sorry if I forgot to mention someone)

ANNOUNCE: curl and libcurl 7.14.1

Daniel Stenberg — 2005-09-01T21:11:51

Hello good people! Here's a fresh new package to play with! Download curl from http://curl.haxx.se/download.html or use the download wizard at http://curl.haxx.se/dlwiz/. Curl and libcurl 7.14.1 Public curl release number: 89 Releases counted from the very beginning: 116 Available command line options: 108 Available curl_easy_setopt() options: 123 Number of public functions in libcurl: 46 Amount of public web site mirrors: 25 Number of known libcurl bindings: 31 Number of contributors: 447 This release includes the following changes: o GNU GSS support o --ignore-content-length and CURLOPT_IGNORE_CONTENT_LENGTH added o negotiates data connection SSL earlier when doing FTPS with PASV o CURLOPT_COOKIELIST and CURLINFO_COOKIELIST o trailer support for chunked encoded data streams o -x/CURL_PROXY strings may now contain user+password o --trace-time now outputs the full microsecond, all 6 digits This release includes the following bugfixes: o MSVC build problem with the DSP file o windows threaded resolver access violation with multi interface o test suite works with valgrind 3 o CA cert verification with GnuTLS builds o handles expiry times in cookie files that go beyond 32 bits in size o several client problems with files, such as doing -d < at >file when the file isn't readable now gets a warning displayed o write callback abort didn't always "take" o the curl -z "bad syntax" warning is now hidden when -s is used o curl -d < at >nonexisting no longer makes a GET o minor debug callback data size o date parsing of dates including daylight savings time zone names o using NTLM over proxy with an FTP URL o curl-config --features now displays SSL when built with GnuTLS too o CURLOPT_HTTPGET, CURLOPT_POST and CURLOPT_HTTPPOST reset CURLOPT_NOBODY o builds fine on AmigaOS again o corrected date parsing on Windows with auto-DST-adjust enabled o treats CONNECT 407 responses with bodies better during Digest/NTLM auth o improved strerror_r() API guessing when cross-compiling o debug builds work on Tru64 o improved libcurl.m4 o possible memory leak in windows name resolves o c-ares enabled build with mingw o proxy host set with numerical IPv6 address o better treatment of binary zeroes in HTTP response headers o fixed the notorious FTP server failure in the test suite o better checking of text output in the test suite on windows o FTP servers' TYPE command response check made less strict o URL-without-slash as in http://somehost?data o strerror_r() configure check for HP-UX 10.20 (and others) o time parse work-around on HP-UX 10.20 since its gmtime_r() is broken Other curl-related news since the previous public release: o cURLpp 0.5.2 was released at http://rrette.com/curlpp.html o Rexx/CURL 1.3 was released at http://rexxcurl.sf.net/ o http://curl.miscellaneousmirror.org is a new German curl mirror o LuaCURL by Alexander Marinov at http://luacurl.luaforge.net/ o http://curl.hostingzero.com/ is a new US curl mirror o ocurl 0.2.1 was released at http://sourceforge.net/projects/ocurl This release would not have looked like this without help, code, reports and advice from friends like these: John McGowan, Georg Wicherski, Andres Garcia, Eric Cooper, Todd Kulesza, Tupone Alfredo, Gisle Vanem, David Shaw, Andrew Bushnell, Dan Fandrich, Adrian Schuur, Diego Casorran, Peteris Krumins, Jon Grubbs, Christopher R. Palmer, Mario Schroeder, Richard Clayton, James Bursa, Jeff Pohlmeyer, Norbert Novotny, Toby Peterson, Simon Josefsson, Igor Polyakov, Kevin Lussier Thanks! (and sorry if I forgot to mention someone)

ANNOUNCE: curl and libcurl 7.14.0

Daniel Stenberg — 2005-05-16T13:13:44

Hello! I'm happy to announce another release, this time with some feature improvements. Download curl 7.14.0 from http://curl.haxx.se/download.html or use the download wizard at http://curl.haxx.se/dlwiz/. Curl and libcurl 7.14.0 Public curl release number: 88 Releases counted from the very beginning: 115 Available command line options: 107 Available curl_easy_setopt() options: 122 Number of public functions in libcurl: 46 Amount of public web site mirrors: 23 Number of known libcurl bindings: 31 Number of contributors: 437 This release includes the following changes: o modified default HTTP request headers o curl --trace-time added for time stamping trace logs o curl now respects the SSL_CERT_DIR and SSL_CERT_PATH environment variables o more search paths for curl's default .curlrc config file check o GnuTLS support, use configure --with-gnutls. Work on this was sponsored by The Written Word. This release includes the following bugfixes: o uses select() instead of poll() even on Mac OS X 10.4 o reconnected proxy use with NTLM auth on the same handle o warns about bad -z date syntax o docs/THANKS now contains all known contributors o builds out-of-the-box on (presumably ipv6-enabled) AIX 4.3 hosts o curl --head could wrongly complain on bad chunked-encoding o --interface SIGSEGVed on a bad address o kill the HTTPS server better when stopping the test suite o builds fine with VS2005 on x64 o auth fix for HTTP redirects and .netrc usage o FTP uploads show the progress meter easier o MSVC makefile fixes for static libcurl builds o configure fix for static libcurl build on Windows o --retry-delay o POST with read callback now uses Expect: 100-continue o CURLOPT_PORT didn't actually use the set port number o HTTP 304 response with Content-Length: header o time-conditioned FTP uploads Other curl-related news since the previous public release: o http://curl.mirroring.de/ is a new german curl mirror o pycurl 7.13.2: http://pycurl.sf.net/ o TclCurl 0.13.2: http://personal1.iddeo.es/andresgarci/tclcurl/english/ o http://curl.webhosting76.com/ is a new US curl mirror o http://curl.meulie.net/ is a new Canadian curl mirror This release would not have looked like this without help, code, reports and advice from friends like these: Christophe Legry, Cory Nelson, Gisle Vanem, Dan Fandrich, Toshiyuki Maezawa, Olivier, Andres Garcia, Dave Dribin, Alex Suykov, Cory Nelson, Fred New, Paul Moore, Alexander Zhuravlev, Bryan Henderson, Jeremy Brown, Allan, Grigory Entin Thanks! (and sorry if I forgot to mention someone)