0 views collected around this technical thread.
The article introduces the cURL project and its command‑line tool, explains that curl 8.8.0 has been officially released without known security issues, and lists the eight notable changes including libcurl enhancements, protocol support, macOS/iOS AppleIDN integration, and experimental Encrypted Client Hello.
The article reports two high‑severity libcurl vulnerabilities (CVE‑2023‑38545 and CVE‑2023‑38546) disclosed by curl’s maintainer, explains the limited public information before the scheduled curl 8.4.0 release, and urges developers to upgrade promptly due to the library’s widespread use.
cURL 8.1.2, the second patch of the 8.1.x series, introduces a range of bug fixes including corrected configure handling of $CC, improved nghttp2 linking without pkg-config, HTTP/2 and HTTP/3 EOF handling enhancements, libcurl.m4 cleanup, and libssh authentication fixes.
cURL 8.1 introduces three main changes: support for HTTP/2 over HTTPS proxies via the –proxy-http2 option, rejection of hostnames ending with .onion during DNS resolution, and an expanded set of variables for the -w option to output URL components.
cURL 7.87 has been officially released, introducing new command‑line options such as -url-query, enhancements like quick‑exit and CA cache timeout, expanded version‑info feature names, and a long list of bug fixes covering base64 handling, locale‑independent parsing, FTP, WebSocket, TLS‑proxy support, and more.
cURL 7.84 introduces a new –rate option to limit transfer frequency, deprecates –random-file and –egd-file, adds thread‑safety indicators, expands CA path info, supports SSH host‑key callbacks, enables Unix‑socket SOCKS proxy usage, and includes various bug fixes such as improved CMake support and .netrc handling.