cURL / Mailing Lists / curl-users / Single Mail


ANNOUNCE: curl and libcurl 7.18.1

From: Daniel Stenberg <>
Date: Sun, 30 Mar 2008 11:21:28 +0200 (CEST)

Hi friends!

Another two months of efforts have gone by and now we're happy to present a
new curl and libcurl release! The major focus this time is bug fixing, but
there are a few fancy new features added and in some esoteric behavior that no
longer is supported. See CHANGES for the gory details.

Go get it from

Curl and libcurl 7.18.1

  Public curl releases: 104
  Command line options: 126
  curl_easy_setopt() options: 150
  Public functions in libcurl: 56
  Public web site mirrors: 39
  Known libcurl bindings: 36
  Contributors: 621

This release includes the following changes:

  o added support for HttpOnly cookies
  o 'make ca-bundle' downloads and generates an updated ca bundle file
  o we no longer distribute or install a ca cert bundle
  o SSLv2 is now disabled by default for SSL operations
  o the test509-style setting URL in callback is officially no longer supported
  o support a full chain of certificates in a given PKCS12 certificate
  o resumed transfers work with SFTP
  o added type checking macros for curl_easy_setopt() and curl_easy_getinfo(),
    watch out for new warnings in code using libcurl (needs gcc-4.3 and
    currently only works in C mode)
  o curl_easy_setopt(), curl_easy_getinfo(), curl_share_setopt() and
    curl_multi_setopt() uses are now checked to use exactly three arguments
  o --with-ca-path=DIR configure option allows to set an openSSL CApath instead
    of a default ca bundle.

This release includes the following bugfixes:

  o improved pipelining
  o improved strdup replacement
  o GnuTLS-built libcurl failed when doing global cleanup and reinit
  o error message problem when unable to resolve a host on Windows
  o Accept: header replacing
  o not verifying server certs with GnuTLS still failed if gnutls had
    problems with the cert
  o when using the multi interface and a handle is removed while still having
    a transfer going on, the connection is now closed by force
  o bad re-use of SSL connections in non-complete state
  o test case 405 failures with GnuTLS builds
  o crash when connection cache size is 1 and Curl_do() failed
  o GnuTLS-built libcurl can now be forced to prefer SSLv3
  o crash when doing Negotiate again on a re-used connection
  o select/poll regression
  o better MIT kerberos configure check
  o curl_easy_reset() + SFTP re-used connection download crash
  o SFTP non-existing file + SFTP existing file error
  o sharing DNS cache between easy handles running in multiple threads could
    lead to crash
  o SFTP upload with CURLOPT_FTP_CREATE_MISSING_DIRS on re-used connection
  o SFTP infinite loop when given an invalid quote command
  o curl-config erroneously reported LDAPS support with missing LDAP libraries
  o SCP infinite loop when downloading a zero byte file
  o setting the CURLOPT_SSL_CTX_FUNCTION with libcurl built without OpenSSL
    now makes curl_easy_setopt() properly return failure
  o configure --with-libssh2 (with no given path)

This release includes the following known bugs:

  o see docs/KNOWN_BUGS (

New curl mirrors:

  o is a new mirror in Atlanta, USA

This release would not have looked like this without help, code, reports and
advice from friends like these:

  Michal Marek, Dmitry Kurochkin, Niklas Angebrand, GŁnter Knauf, Yang Tse,
  Dan Fandrich, Mike Hommey, Pooyan McSporran, Jerome Muffat-Meridol,
  Kaspar Brand, Gautam Kachroo, Zmey Petroff, Georg Lippitsch, Sam Listopad,
  Anatoli Tubman, Mike Protts, Michael Calmer, Brian Ulm, Dmitry Popov,
  Jes Badwal, Dan Petitt, Stephen Collyer

         Thanks! (and sorry if I forgot to mention someone)
Received on 2008-03-30