cURL / Mailing Lists / curl-library / Single Mail


RELEASE: curl and libcurl 7.46.0

From: Daniel Stenberg <>
Date: Wed, 2 Dec 2015 08:14:06 +0100 (CET)

Good day team!

I'm happy to announce the end of another eight week cycle with a new release.
We call it 7.46.0 and it is our 150th release. 68 bug fixes, 18 of the 35
credited contributors are new. We also introduce a few new things again. The
full RELEASE-NOTES is of course below as usual.

Get the latest from:

Curl and libcurl 7.46.0

  Public curl releases: 150
  Command line options: 177
  curl_easy_setopt() options: 221
  Public functions in libcurl: 61
  Contributors: 1340

This release includes the following changes:

  o configure: build silently by default
  o cookies: Add support for Publix Suffix List with libpsl
  o vtls: added support for mbedTLS [7]
  o oauth2: Added support for OAUTHBEARER SASL mechanism to IMAP, POP3 and SNMP

This release includes the following bugfixes:

  o des: Fix header conditional for Curl_des_set_odd_parity
  o ntlm: get rid of unconditional use of long long [1]
  o http2: Fix http2_recv to return -1 if recv returned -1
  o curl_global_init_mem: set function pointers before doing init
  o ntlm: error out without 64bit support as the code needs it [1]
  o openssl: Fix set up of pkcs12 certificate verification chain
  o acinclude: remove PKGCONFIG override [3]
  o test1531: case the size to fix the test on non-largefile builds
  o fread_func: move callback pointer from set to state struct [4]
  o test1601: fix compilation with --enable-debug and --disable-crypto-auth
  o http2: Don't pass unitialized name+len pairs to nghttp2_submit_request [5]
  o curlbuild.h: Fix non-configure compiling to mips and sh4 targets
  o tool: Generate easysrc with last cache linked-list [6]
  o cmake: Fix for add_subdirectory(curl) use-case
  o vtls: fix compiler warning for TLS backends without sha256
  o build: fix for MSDOS/djgpp
  o checksrc: add crude // detection
  o http2: on_frame_recv: trust the conn/data input
  o ftp: allow CURLOPT_IGNORE_CONTENT_LENGTH to ignore size [11]
  o polarssl/mbedtls: fix name space pollution
  o build: Fix mingw ssl gdi32 order [12]
  o build: Fix support for PKG_CONFIG
  o MacOSX-Framework: sdk regex fix for sdk 10.10 and later
  o socks: Fix incorrect port numbers in failed connect messages
  o curl.1: -E: s/private certificate/client certificate
  o curl.h: s/HTTPPOST_/CURL_HTTPOST_ [13]
  o curl_formadd: support >2GB files on windows [14]
  o http redirects: %-encode bytes outside of ascii range [15]
  o rawstr: Speed up Curl_raw_toupper by 40%
  o curl_ntlm_core: fix 2 curl_off_t constant overflows.
  o getinfo: CURLINFO_ACTIVESOCKET: fix bad socket value
  o tftp tests: verify sent options too
  o imap: Don't call imap_atom() when no mailbox specified in LIST command
  o imap: Fixed double quote in LIST command when mailbox contains spaces
  o imap: Don't check for continuation when executing a CUSTOMREQUEST [16]
  o acinclude: Remove check for 16-bit curl_off_t
  o BoringSSL: Work with stricter BIO_get_mem_data() [17]
  o cmake: Add missing feature macros in config header [18]
  o sasl_sspi: fixed unicode build for digest authentication [19]
  o sasl_sspi: fix identity memory leak in digest authentication
  o unit1602: Fixed failure in torture test
  o unit1603: Added unit tests for hash functions
  o vtls/openssl: remove unused traces of yassl ifdefs
  o openssl: remove #ifdefs for < 0.9.7 support
  o typecheck-gcc.h: add some missing options
  o curl: mark two more options strings for --libcurl output
  o openssl: Free modules on cleanup [20]
  o CURLMOPT_PUSHFUNCTION.3: *_byname() returns only the first header
  o getconnectinfo: Don't call recv(2) if socket == -1
  o http2: http_done: don't free already-freed push headers
  o zsh completion: Preserve single quotes in output [21]
  o os400: Provide options for libssh2 use in compile scripts.
  o build: Fix theoretical infinite loops [22]
  o pop3: Differentiate between success and continuation responses
  o examples: Fixed compilation warnings
  o schannel: Use GetVersionEx() when VerifyVersionInfo() isn't available
  o curl: expanded the -XHEAD warning text
  o done: make sure the final progress update is made [23]
  o build: Install zsh completion [24]
  o RTSP: do not add if-modified-since without timecondition [25]
  o curl: Fixed display of URL index in password prompt for --next
  o nonblock: fix setting non-blocking mode for Amiga [26]
  o http2 push: add missing inits of new stream [27]
  o http2: convert some verbose output into debug-only output
  o Curl_read_plain: clean up ifdefs that break statements [28]

This release includes the following known bugs:

  o see docs/KNOWN_BUGS (

This release would not have looked like this without help, code, reports and
advice from friends like these:

   Anders Bakken, Dan Fandrich, Daniel Hwang, Daniel Shahaf, Daniel Stenberg,
   Davey Shafik, Dmitry S. Baikov, Douglas Creager, Erik Johansson,
   Flavio Medeiros, Gisle Vanem, Javier G. Sogo, John Levon, Jonas Minnberg,
   Justin Ehlert, Kamil Dudka, Kang Lin, Kurt Fankhauser, Lauri Kasanen,
   Lukas Ruzicka, Marcel Raad, Micha³ Piechowski, Mohammad AlSaleh, Norbert Kett,
   Patrick Monnerat, Rainer Jung, Ray Satiro, Richard Hosking,
   Sebastian Pohlschmidt, Stefan Bühler, Steve Holme, Svyatoslav Mishyn,
   Tatsuhiro Tsujikawa, Tim Rühsen, Xiangbin Li,
   (35 contributors)

         Thanks! (and sorry if I forgot to mention someone)

References to bug reports and discussions on issues:

  [1] =
  [2] =
  [3] =
  [4] =
  [5] =
  [6] =
  [7] =
  [8] =
  [9] =
  [10] =
  [11] =
  [12] =
  [13] =
  [14] =
  [15] =
  [16] =
  [17] =
  [18] =
  [19] =
  [20] =
  [21] =
  [22] =
  [23] =
  [24] =
  [25] =
  [26] =
  [27] =
  [28] =


List admin:
Received on 2015-12-02