Home Explore Help
Sign In
OWEALs
/
curl
mirror of https://github.com/curl/curl.git
2
0
Fork 0
Files Issues 8 Wiki
Tree: 6268caee83
Branches Tags
curl
/
RELEASE-NOTES

RELEASE-NOTES 15 KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325 
  1. curl and libcurl 8.11.0
    2. 

  2. 

  3.  Public curl releases:         262
    4. 

  4.  Command line options:         265
    5. 

  5.  curl_easy_setopt() options:   306
    6. 

  6.  Public functions in libcurl:  94
    7. 

  7.  Contributors:                 3251
    8. 

  8. 

  9. This release includes the following changes:
    10. 

  10. 

  11.  o curl: --create-dirs works for --dump-header as well [4]
    12. 

  12.  o gtls: Add P12 format support [9]
    13. 

  13.  o ipfs: add options to disable [8]
    14. 

  14.  o WebSockets: make support official (non-experimental) [106]
    15. 

  15. 

  16. This release includes the following bugfixes:
    17. 

  17. 

  18.  o alt-svc: honor data->state.httpwant [19]
    19. 

  19.  o altsvc: avoid using local buffer and memcpy [124]
    20. 

  20.  o asyn-ares: remove typecast, fix expire [113]
    21. 

  21.  o autotools: add support for 'unity' builds, enable in CI [15]
    22. 

  22.  o bearssl: avoid strpcy() when generating TLS version log message [120]
    23. 

  23.  o bufq: unwrite fix [121]
    24. 

  24.  o build: add `ldap` to `libcurl.pc` `Requires:` [139]
    25. 

  25.  o build: add pytest targets [71]
    26. 

  26.  o build: clarify CA embed is for curl tool, mark default, improve summary [72]
    27. 

  27.  o build: detect and use `_setmode()` with Cygwin/MSYS, also use on Windows [136]
    28. 

  28.  o build: fix cross-compile check for poll with bionic [70]
    29. 

  29.  o build: fix possible `-Wformat-overflow` in lib557 [85]
    30. 

  30.  o build: limit arc4random detection to no-SSL configs [43]
    31. 

  31.  o build: show if CA bundle to embed was found [83]
    32. 

  32.  o build: tidy up and improve versioned-symbols options [5]
    33. 

  33.  o build: tidy up deprecation suppression, enable warnings for clang [12]
    34. 

  34.  o checksrc: Added checks for colon operator in ternary expressions [77]
    35. 

  35.  o checksrc: check for spaces around '?', '>' and '<' [46]
    36. 

  36.  o cmake, Makefile.mk: use -isystem for headers, silence BearSSL issues [37]
    37. 

  37.  o cmake/FindNGTCP2: use library path as hint for finding crypto module [40]
    38. 

  38.  o cmake: add missed variable to comment
    39. 

  39.  o cmake: allow building tests in unity mode [31]
    40. 

  40.  o cmake: delete unused NEED_LBER_H, HAVE_LDAP_H [38]
    41. 

  41.  o cmake: detect `HAVE_NETINET_IN6_H`, `HAVE_CLOSESOCKET_CAMEL`, `HAVE_PROTO_BSDSOCKET_H` [132]
    42. 

  42.  o cmake: detect GNU GSS [127]
    43. 

  43.  o cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled [44]
    44. 

  44.  o cmake: do not propagate unused `HAVE_GSSAPI_GSSAPI_KRB5_H` to C [131]
    45. 

  45.  o cmake: drop redundant assignments [49]
    46. 

  46.  o cmake: drop redundant zlib var, rename function (internals) [50]
    47. 

  47.  o cmake: expand CURL_USE_PKGCONFIG to non-cross MINGW [13]
    48. 

  48.  o cmake: fix broken dependency chain for cmdline-opts, tidy-ups [11]
    49. 

  49.  o cmake: make `test-ci` target skip building dependencies [88]
    50. 

  50.  o cmake: readd `generate-curl.1` dependency for `src` just in case [86]
    51. 

  51.  o cmake: require quictls (or fork) when using msh3 on non-Windows [14]
    52. 

  52.  o cmake: separate target for examples, optimize CI, fix fallouts [16]
    53. 

  53.  o cmake: sync torture test parallelism with autotools [35]
    54. 

  54.  o cmake: use OpenSSL for LDAP detection only if available [102]
    55. 

  55.  o configure: add GSS to `libcurl.pc` `Depends:` [126]
    56. 

  56.  o configure: catch Apple in more target triplets [6]
    57. 

  57.  o configure: drop duplicate feature checks for `poll()`, `if_nametoindex()` [135]
    58. 

  58.  o configure: drop unused bare `socket.h` detection [133]
    59. 

  59.  o configure: improve help string for some options [78]
    60. 

  60.  o conncache: find bundle again in case it is removed [129]
    61. 

  61.  o curl: add build options for safe/no CA bundle search (Windows) [26]
    62. 

  62.  o curl_trc: fix build with verbose messages disabled [79]
    63. 

  63.  o curl_url_set.md: document HOST handling when URL is parsed [2]
    64. 

  64.  o CURLMOPT_PIPELINING.md: clarify that CURLPIPE_NOTHING is not default [54]
    65. 

  65.  o CURLOPT_APPEND.md: goes for SFTP as well [128]
    66. 

  66.  o CURLOPT_HEADERFUNCTION.md: do not modify the passed in buffer [107]
    67. 

  67.  o docs/cmdline-opts: GnuTLS supports PKCS#11 URI in --cert option [101]
    68. 

  68.  o ech: spelling, whitespace, say `--ech` default config [137]
    69. 

  69.  o ftp: fix 0-length last write on upload from stdin [76]
    70. 

  70.  o hsts: avoid the local buffer and memcpy on lookup [125]
    71. 

  71.  o http_aws_sigv4: avoid local buffer and strcpy [92]
    72. 

  72.  o INSTALL-CMAKE.md: mention focus on shared libraries [73]
    73. 

  73.  o json.md: cli-option `--json` is an alias of `--data-binary` [89]
    74. 

  74.  o lib, src, tests: added space around ternary expressions [56]
    75. 

  75.  o lib/cw-out: initialize 'flush_all' directly [62]
    76. 

  76.  o lib/src: white space edits to comply better with code style [47]
    77. 

  77.  o lib: avoid assigning 'result' temporarily [97]
    78. 

  78.  o lib: fix disabled-verbose-strings + enable-debug build warnings
    79. 

  79.  o lib: fix unity builds with BearSSL, MSH3, Quiche, OmniOS [32]
    80. 

  80.  o lib: use bool/TRUE/FALSE properly [48]
    81. 

  81.  o libssh.c: handle EGAINS during proto-connect correctly [23]
    82. 

  82.  o libssh2: use the Curl_* memory functions to avoid memdebug [22]
    83. 

  83.  o multi.c: make stronger check for paused transfer before asserting [24]
    84. 

  84.  o multi.c: warn/assert on stall only without timer [80]
    85. 

  85.  o multi: avoid reading whole struct pointer from pointer [10]
    86. 

  86.  o multi: make multi_handle_timeout use the connect timeout [98]
    87. 

  87.  o negotiate: conditional check around GSS & SSL specific code [1]
    88. 

  88.  o openssl quic: populate x509 store before handshake [117]
    89. 

  89.  o openssl: convert a memcpy to dynbuf use [57]
    90. 

  90.  o openssl: remove two strcpy() calls [64]
    91. 

  91.  o processhelp.pm: improve taskkill calls (Windows) [52]
    92. 

  92.  o pytest: improve pytest_07_42a reliability [118]
    93. 

  93.  o quic: use send/recvmmsg when available [93]
    94. 

  94.  o request: on shutdown send, proceed normally on timeout [18]
    95. 

  95.  o runtests.md: suggest a value for -j for torture tests
    96. 

  96.  o runtests: drop unused code for old/classic-mingw support [87]
    97. 

  97.  o select: use poll() if existing, avoid poll() with no sockets [75]
    98. 

  98.  o sendf: add condition to max-filesize check [3]
    99. 

  99.  o setopt: avoid superfluous length checks before strcmp() [105]
    100. 

  100.  o singleuse: make `git grep` faster, add Apple `nm` support [109]
    101. 

  101.  o smb: replace use of strcpy() with snprintf() [122]
    102. 

  102.  o socks_gssapi: switch to dynbuf from buffer with strcpy [42]
    103. 

  103.  o sws: fix unused static function with `TCP_NODELAY` undefined [134]
    104. 

  104.  o telnet: avoid two strcpy() by pointing to the strings instead [99]
    105. 

  105.  o test1035: convert host name back to utf8 as should be [63]
    106. 

  106.  o test1515: add tracing and more debug info [119]
    107. 

  107.  o test1540: add debug logging [58]
    108. 

  108.  o test190: replace %FTPTIME2 with a fixed value [34]
    109. 

  109.  o test1915: add tracing and connect timeout [114]
    110. 

  110.  o test1915: remove wrong comment
    111. 

  111.  o test2502: add libtest debug tracing [60]
    112. 

  112.  o test504: fix handling on pending connect [59]
    113. 

  113.  o testrun: explicitly set proper IP address for stunnel listen/connect [61]
    114. 

  114.  o tests/valgrind.pm: fix warnings with no valgrind report to show [25]
    115. 

  115.  o tests/valgrind.supp: remove a travis suppression, add a Debian [116]
    116. 

  116.  o tests: add and use `%PERL` variable to refer to the Perl binary [82]
    117. 

  117.  o tests: add codeset-utf8 as a feature [66]
    118. 

  118.  o tests: add file: tests with existing files [45]
    119. 

  119.  o tests: change Python code style to pass ruff checks
    120. 

  120.  o tests: check http/2 and http/3 server responsiveness [28]
    121. 

  121.  o tests: delete duplicate macro check [53]
    122. 

  122.  o tests: enable additional ruff Python lint options
    123. 

  123.  o tests: fix `%POSIX_PWD` on native Windows Perl [111]
    124. 

  124.  o tests: fix keyword for test1411
    125. 

  125.  o tests: fix shell quoting on native Windows Perl [110]
    126. 

  126.  o tests: fix some Python typing issues
    127. 

  127.  o tests: fixup `checkcmd` `PATH` on non-unixy platforms [108]
    128. 

  128.  o tests: improve mqtt server handling [27]
    129. 

  129.  o tests: introduce %CLIENT6IP-NB [67]
    130. 

  130.  o tests: let openssl generate random cert serials [91]
    131. 

  131.  o tests: libtests and unit tests need explicit #include memdebug [7]
    132. 

  132.  o tests: make precheck for HTTP on 127.0.0.1 into a feature [68]
    133. 

  133.  o tests: Only log warnings or worse by default in smbserver [33]
    134. 

  134.  o tests: postcheck is now in verify [69]
    135. 

  135.  o tests: remove all valgrind disable instructions [21]
    136. 

  136.  o tests: remove debug requirement on 38 tests [100]
    137. 

  137.  o tests: remove the %FTPTIME3 variable [41]
    138. 

  138.  o tests: replace `%PWD` with `%FILE_PWD` for `file://` [84]
    139. 

  139.  o tests: replace `%PWD` with `%SSH_PWD` in SCP/SFTP tests [112]
    140. 

  140.  o tests: replace hard-coded `/dev/null` with variable [81]
    141. 

  141.  o tests: simplify `pathhelp.pm`, avoid using external tools [95]
    142. 

  142.  o tests: speed up builds with single-binary test bundles [29]
    143. 

  143.  o tests: testrunner fairness [39]
    144. 

  144.  o tests: testrunner reliability improvements [55]
    145. 

  145.  o tests: use '-4' where needed [17]
    146. 

  146.  o tftp: avoid two memcpy/strcpy [94]
    147. 

  147.  o tidy-up: rename CURL_WINDOWS_APP to CURL_WINDOWS_UWP [36]
    148. 

  148.  o tool: support --show-headers AND --remote-header-name [103]
    149. 

  149.  o tool_doswin: simplify; remove unused options and strncpy calls [65]
    150. 

  150.  o unit1660: fix unreachable code warning in no-SSL builds [30]
    151. 

  151.  o url: connection reuse on h3 connections [20]
    152. 

  152.  o urlapi: drop unused header [51]
    153. 

  153.  o urlapi: normalize the IPv6 address [115]
    154. 

  154.  o vtls: convert Curl_pin_peer_pubkey to use dynbuf [74]
    155. 

  155.  o vtls: convert pubkey_pem_to_der to use dynbuf [90]
    156. 

  156.  o warnless: remove curlx_sktosi and curlx_sitosk [104]
    157. 

  157.  o wolfssl: convert malloc + memcpys to dynbuf for cipher string [96]
    158. 

  158. 

  159. This release includes the following known bugs:
    160. 

  160. 

  161.  See docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)
    162. 

  162. 

  163. For all changes ever done in curl:
    164. 

  164. 

  165.  See https://curl.se/changes.html
    166. 

  166. 

  167. Planned upcoming removals include:
    168. 

  168. 

  169.  o Hyper support
    170. 

  170.  o TLS libraries not supporting TLS 1.3
    171. 

  171. 

  172.  See https://curl.se/dev/deprecate.html for details
    173. 

  173. 

  174. This release would not have looked like this without help, code, reports and
    175. 

  175. advice from friends like these:
    176. 

  176. 

  177.   Aki Sakurai, Baruch Siach, Chris Stubbs, Dan Fandrich, Daniel Stenberg,
    178. 

  178.   Denis Goleshchikhin, Deniz Sökmen, dependabot[bot], Gabriel Marin,
    179. 

  179.   Ian Spence, Jon Rumsey, Kai Pastor, lomberd2 on github, MacKenzie,
    180. 

  180.   Montg0mery on github, Moritz Knüsel, Nemos2024 on github, Nicolas George,
    181. 

  181.   Pavel Kropachev, ralfjunker on github, Rasmus Melchior Jacobsen, Ray Satiro,
    182. 

  182.   renovate[bot], Sebastian Walz, Stefan Eissing, Tal Regev,
    183. 

  183.   Tatsuhiro Tsujikawa, Testclutch, Venkat Krishna R, Viktor Szakats,
    184. 

  184.   Vollstrecker on github, vvb2060 on github
    185. 

  185.   (32 contributors)
    186. 

  186. 

  187. References to bug reports and discussions on issues:
    188. 

  188. 

  189.  [1] = https://curl.se/bug/?i=14938
    190. 

  190.  [2] = https://curl.se/bug/?i=14942
    191. 

  191.  [3] = https://curl.se/bug/?i=14958
    192. 

  192.  [4] = https://curl.se/bug/?i=14941
    193. 

  193.  [5] = https://curl.se/bug/?i=14818
    194. 

  194.  [6] = https://curl.se/bug/?i=14728
    195. 

  195.  [7] = https://curl.se/bug/?i=15007
    196. 

  196.  [8] = https://curl.se/bug/?i=14824
    197. 

  197.  [9] = https://curl.se/bug/?i=14991
    198. 

  198.  [10] = https://curl.se/bug/?i=15063
    199. 

  199.  [11] = https://curl.se/bug/?i=14883
    200. 

  200.  [12] = https://curl.se/bug/?i=14789
    201. 

  201.  [13] = https://curl.se/bug/?i=14658
    202. 

  202.  [14] = https://curl.se/bug/?i=15003
    203. 

  203.  [15] = https://curl.se/bug/?i=14815
    204. 

  204.  [16] = https://curl.se/bug/?i=14906
    205. 

  205.  [17] = https://curl.se/bug/?i=15060
    206. 

  206.  [18] = https://curl.se/bug/?i=14843
    207. 

  207.  [19] = https://curl.se/bug/?i=14966
    208. 

  208.  [20] = https://curl.se/bug/?i=14890
    209. 

  209.  [21] = https://curl.se/bug/?i=14983
    210. 

  210.  [22] = https://curl.se/bug/?i=14984
    211. 

  211.  [23] = https://curl.se/bug/?i=14982
    212. 

  212.  [24] = https://curl.se/bug/?i=14981
    213. 

  213.  [25] = https://curl.se/bug/?i=14977
    214. 

  214.  [26] = https://curl.se/bug/?i=14582
    215. 

  215.  [27] = https://curl.se/bug/?i=15059
    216. 

  216.  [28] = https://curl.se/bug/?i=15058
    217. 

  217.  [29] = https://curl.se/bug/?i=14772
    218. 

  218.  [30] = https://curl.se/bug/?i=14971
    219. 

  219.  [31] = https://curl.se/bug/?i=14765
    220. 

  220.  [32] = https://curl.se/bug/?i=14932
    221. 

  221.  [33] = https://curl.se/bug/?i=14950
    222. 

  222.  [34] = https://curl.se/bug/?i=15056
    223. 

  223.  [35] = https://curl.se/bug/?i=14969
    224. 

  224.  [36] = https://curl.se/bug/?i=14881
    225. 

  225.  [37] = https://curl.se/bug/?i=14763
    226. 

  226.  [38] = https://curl.se/bug/?i=14690
    227. 

  227.  [39] = https://curl.se/bug/?i=14967
    228. 

  228.  [40] = https://github.com/curl/curl-for-win/blob/8b8909e1206de1dcca356a8dd33eb1e4ffeea7fd/curl.sh#L289
    229. 

  229.  [41] = https://curl.se/bug/?i=15064
    230. 

  230.  [42] = https://curl.se/bug/?i=15057
    231. 

  231.  [43] = https://curl.se/bug/?i=14909
    232. 

  232.  [44] = https://curl.se/bug/?i=14828
    233. 

  233.  [45] = https://curl.se/bug/?i=15045
    234. 

  234.  [46] = https://curl.se/bug/?i=14921
    235. 

  235.  [47] = https://curl.se/bug/?i=14921
    236. 

  236.  [48] = https://curl.se/bug/?i=15123
    237. 

  237.  [49] = https://curl.se/bug/?i=14924
    238. 

  238.  [50] = https://curl.se/bug/?i=14918
    239. 

  239.  [51] = https://curl.se/bug/?i=14867
    240. 

  240.  [52] = https://curl.se/bug/?i=14959
    241. 

  241.  [53] = https://curl.se/bug/?i=14963
    242. 

  242.  [54] = https://curl.se/bug/?i=14961
    243. 

  243.  [55] = https://curl.se/bug/?i=14960
    244. 

  244.  [56] = https://curl.se/bug/?i=14912
    245. 

  245.  [57] = https://curl.se/bug/?i=15049
    246. 

  246.  [58] = https://curl.se/bug/?i=15055
    247. 

  247.  [59] = https://curl.se/bug/?i=15054
    248. 

  248.  [60] = https://curl.se/bug/?i=15053
    249. 

  249.  [61] = https://curl.se/bug/?i=15051
    250. 

  250.  [62] = https://curl.se/bug/?i=15044
    251. 

  251.  [63] = https://curl.se/bug/?i=15050
    252. 

  252.  [64] = https://curl.se/bug/?i=15052
    253. 

  253.  [65] = https://curl.se/bug/?i=15047
    254. 

  254.  [66] = https://curl.se/bug/?i=15039
    255. 

  255.  [67] = https://curl.se/bug/?i=15039
    256. 

  256.  [68] = https://curl.se/bug/?i=15039
    257. 

  257.  [69] = https://curl.se/bug/?i=15046
    258. 

  258.  [70] = https://curl.se/bug/?i=15013
    259. 

  259.  [71] = https://curl.se/bug/?i=15034
    260. 

  260.  [72] = https://curl.se/bug/?i=15035
    261. 

  261.  [73] = https://curl.se/bug/?i=14845
    262. 

  262.  [74] = https://curl.se/bug/?i=15126
    263. 

  263.  [75] = https://curl.se/bug/?i=15096
    264. 

  264.  [76] = https://curl.se/bug/?i=15101
    265. 

  265.  [77] = https://curl.se/bug/?i=14990
    266. 

  266.  [78] = https://curl.se/bug/?i=15033
    267. 

  267.  [79] = https://curl.se/bug/?i=15026
    268. 

  268.  [80] = https://curl.se/bug/?i=15028
    269. 

  269.  [81] = https://curl.se/bug/?i=15098
    270. 

  270.  [82] = https://curl.se/bug/?i=15097
    271. 

  271.  [83] = https://curl.se/bug/?i=15027
    272. 

  272.  [84] = https://curl.se/bug/?i=15090
    273. 

  273.  [85] = https://curl.se/bug/?i=15012
    274. 

  274.  [86] = https://curl.se/bug/?i=15088
    275. 

  275.  [87] = https://curl.se/bug/?i=15087
    276. 

  276.  [88] = https://curl.se/bug/?i=15001
    277. 

  277.  [89] = https://curl.se/bug/?i=15197
    278. 

  278.  [90] = https://curl.se/bug/?i=15126
    279. 

  279.  [91] = https://curl.se/bug/?i=15129
    280. 

  280.  [92] = https://curl.se/bug/?i=15200
    281. 

  281.  [93] = https://curl.se/bug/?i=14880
    282. 

  282.  [94] = https://curl.se/bug/?i=15199
    283. 

  283.  [95] = https://curl.se/bug/?i=15111
    284. 

  284.  [96] = https://curl.se/bug/?i=15124
    285. 

  285.  [97] = https://curl.se/bug/?i=15122
    286. 

  286.  [98] = https://curl.se/bug/?i=15100
    287. 

  287.  [99] = https://curl.se/bug/?i=15198
    288. 

  288.  [100] = https://curl.se/bug/?i=15114
    289. 

  289.  [101] = https://curl.se/bug/?i=15075
    290. 

  290.  [102] = https://curl.se/bug/?i=15077
    291. 

  291.  [103] = https://curl.se/bug/?i=15110
    292. 

  292.  [104] = https://curl.se/bug/?i=15153
    293. 

  293.  [105] = https://curl.se/bug/?i=15192
    294. 

  294.  [106] = https://curl.se/bug/?i=14936
    295. 

  295.  [107] = https://curl.se/bug/?i=15148
    296. 

  296.  [108] = https://curl.se/bug/?i=15106
    297. 

  297.  [109] = https://curl.se/bug/?i=15070
    298. 

  298.  [110] = https://curl.se/bug/?i=15105
    299. 

  299.  [111] = https://curl.se/bug/?i=15104
    300. 

  300.  [112] = https://curl.se/bug/?i=15103
    301. 

  301.  [113] = https://curl.se/bug/?i=15145
    302. 

  302.  [114] = https://curl.se/bug/?i=15107
    303. 

  303.  [115] = https://curl.se/bug/?i=15143
    304. 

  304.  [116] = https://curl.se/bug/?i=15142
    305. 

  305.  [117] = https://curl.se/bug/?i=15137
    306. 

  306.  [118] = https://curl.se/bug/?i=15138
    307. 

  307.  [119] = https://curl.se/bug/?i=15140
    308. 

  308.  [120] = https://curl.se/bug/?i=15194
    309. 

  309.  [121] = https://curl.se/bug/?i=15136
    310. 

  310.  [122] = https://curl.se/bug/?i=15196
    311. 

  311.  [123] = https://curl.se/bug/?i=15135
    312. 

  312.  [124] = https://curl.se/bug/?i=15191
    313. 

  313.  [125] = https://curl.se/bug/?i=15190
    314. 

  314.  [126] = https://curl.se/bug/?i=15177
    315. 

  315.  [127] = https://curl.se/bug/?i=15176
    316. 

  316.  [128] = https://curl.se/bug/?i=15181
    317. 

  317.  [129] = https://curl.se/bug/?i=15185
    318. 

  318.  [131] = https://curl.se/bug/?i=15174
    319. 

  319.  [132] = https://curl.se/bug/?i=15172
    320. 

  320.  [133] = https://curl.se/bug/?i=15173
    321. 

  321.  [134] = https://curl.se/bug/?i=15171
    322. 

  322.  [135] = https://curl.se/bug/?i=15170
    323. 

  323.  [136] = https://curl.se/bug/?i=15169
    324. 

  324.  [137] = https://curl.se/bug/?i=15167
    325. 

  325.  [139] = https://curl.se/bug/?i=15163
    326.