curl / News / Older News

Older events - things that happened earlier in the project

Stuff "gets moved here" from the news page, so some of the links on this page are more likely than others not to work anymore. I still think this page may be of value and I just want you to be aware of this fact. Use the search field to find working pages with similar info.

curl and libcurl 7.84.0 June 27 2022

The curl team proudly presents curl and libcurl version 7.84.0. See the full changelog.

Pay special attention to these four security vulnerabilities fixed in this version:

curl and libcurl 7.83.1 May 11 2022

The curl team proudly presents curl and libcurl version 7.83.1. See the full changelog.

Pay special attention to these six security vulnerabilities fixed in this version:

curl and libcurl 7.83.0 April 27 2022

The curl team proudly presents curl and libcurl version 7.83.0. See the full changelog.

Pay special attention to these four security vulnerabilities fixed in this version:

curl and libcurl 7.82.0 March 5 2022

The curl team proudly presents curl and libcurl version 7.82.0. See the full changelog.

curl and libcurl 7.81.0 January 5 2022

The curl team proudly presents curl and libcurl version 7.81.0. See the full changelog.

curl and libcurl 7.80.0 November 10 2021

The curl team proudly presents curl and libcurl version 7.80.0. See the full changelog.

curl and libcurl 7.79.1 September 22 2021

The curl team proudly presents curl and libcurl version 7.79.1. See the full changelog.

curl and libcurl 7.79.0 September 15 2021

The curl team proudly presents curl and libcurl version 7.79.0. See the full changelog.

Pay special attention to the three security vulnerabilities fixed in this version:

curl and libcurl 7.78.0 July 21 2021

The curl team proudly presents curl and libcurl version 7.78.0. See the full changelog.

Pay special attention to the five security vulnerabilities fixed in this version:

curl and libcurl 7.77.0 May 26 2021

The curl team proudly presents curl and libcurl version 7.77.0. See the full changelog.

Pay special attention to the three security vulnerabilities fixed in this version:

A new IRC channel May 20 2021

The curl project officially moved to the Libera.Chat IRC network into the #curl channel. The documentation on joining was updated accordingly.

curl and libcurl 7.76.1 April 14 2021

The curl team proudly presents curl and libcurl version 7.76.1. See the changelog.

curl and libcurl 7.76.0 March 31 2021

The curl team proudly presents curl and libcurl version 7.76.0. See the changelog.

Pay special attention to the two security vulnerabilities fixed in this version: CVE-2021-22876: Automatic referer leaks credentials and CVE-2021-22890: TLS 1.3 session ticket proxy host mixup.

curl and libcurl 7.75.0 February 3 2021

The curl team proudly presents curl and libcurl version 7.75.0. See the changelog.

curl and libcurl 7.74.0 December 9 2020

The curl team proudly presents curl and libcurl version 7.74.0. See the changelog.

Pay special attention to these security vulnerabilities fixed in this version: CVE-2020-8284: trusting FTP PASV responses, CVE-2020-8285: FTP wildcard stack overflow and CVE-2020-8286: Inferior OCSP verification.

curl.se moved to a new server 23 Oct 2020

The website curl.se and others were moved over to a new host today. No major problems or outages were discovered. A few minor breakages occurred but were fixed within shortly. A good transition! It was fifteen years since the previous host move!

curl and libcurl 7.73.0 October 14 2020

The curl team proudly presents curl and libcurl version 7.73.0. See the changelog.

curl and libcurl 7.72.0 August 19 2020

The curl team proudly presents curl and libcurl version 7.72.0. See the changelog.

Pay special attention to the security vulnerability fixed in this version: CVE-2020-8231: libcurl: wrong connect-only connection.

curl and libcurl 7.71.1 July 1 2020

The curl team proudly presents curl and libcurl version 7.71.1. See the changelog.

curl and libcurl 7.71.0 June 24 2020

The curl team proudly presents curl and libcurl version 7.71.0. See the changelog.

Pay special attention to the two security vulnerabilities fixed in this version: CVE-2020-8169: Partial password leak over DNS on HTTP redirect and CVE-2020-8177: curl overwrite local file with -J.

curl and libcurl 7.70.0 April 29 2020

The curl team proudly presents curl and libcurl version 7.70.0. See the changelog.

curl and libcurl 7.69.1 March 11 2020

The curl team proudly presents curl and libcurl version 7.69.1. See the changelog.

curl and libcurl 7.69.0 March 4 2020

The curl team proudly presents curl and libcurl version 7.69.0. See the changelog.

curl and libcurl 7.68.0 January 8 2020

The curl team proudly presents curl and libcurl version 7.68.0. See the changelog.

Pay special attention to the security vulnerability fixed in this version: CVE-2019-15601: SMB access smuggling via FILE URL on Windows .

curl and libcurl 7.67.0 November 6 2019

The curl team proudly presents curl and libcurl version 7.67.0. See the changelog.

curl and libcurl 7.66.0 September 11 2019

The curl team proudly presents curl and libcurl version 7.66.0. See the changelog.

Pay special attention to the two security vulnerabilities fixed in this version: CVE-2019-5481: ftp-krb double-free and CVE-2019-5482: TFTP heap buffer overflow.

curl and libcurl 7.65.3 July 19 2019

The curl team proudly presents curl and libcurl version 7.65.3. A patch release fixing a single but annoying regression. See the changelog.

curl and libcurl 7.65.2 July 17 2019

The curl team proudly presents curl and libcurl version 7.65.2. A patch release. All bug-fixes are documented in the changelog.

curl and libcurl 7.65.1 June 5 2019

The curl team proudly presents curl and libcurl version 7.65.1. A patch release. All bug-fixes are documented in the changelog.

curl and libcurl 7.65.0 May 22 2019

The curl team proudly presents curl and libcurl version 7.65.0. All changes and bug-fixes are documented in the changelog.

Pay special attention to the two security vulnerabilities fixed in this version: CVE-2019-5435 and CVE-2019-5436. Both with severity low.

curl and libcurl 7.64.1 March 27 2019

The curl team proudly presents curl and libcurl version 7.64.1. A patch release. All bug-fixes are documented in the changelog.

curl and libcurl 7.64.0 February 6 2019

The curl team proudly presents curl and libcurl version 7.64.0. All bug-fixes are documented in the changelog.

Pay special attention to three security vulnerabilities fixed in this version: CVE-2018-16890, CVE-2019-3822w and CVE-2019-3823.

curl and libcurl 7.63.0 December 12 2018

The curl team proudly presents curl and libcurl version 7.63.0. All bug-fixes are documented in the changelog.

curl and libcurl 7.62.0 October 31 2018

The curl team proudly presents curl and libcurl version 7.62.0. All bug-fixes are documented in the changelog.

Pay special attention to two security vulnerabilities fixed in this version: CVE-2018-16839 and CVE-2018-16840.

curl and libcurl 7.61.1 September 5 2018

The curl team proudly presents curl and libcurl version 7.61.1. All bug-fixes are documented in the changelog.

Pay special attention to the security vulnerability fixed in this version: CVE-2018-14618.

curl and libcurl 7.61.0 July 11 2018

The curl team proudly presents curl and libcurl version 7.61.0. All changes are documented in the changelog.

Pay special attention to the security vulnerability fixed in this version: CVE-2018-0500.

curl and libcurl 7.60.0 May 16 2018

The curl team proudly presents curl and libcurl version 7.60.0. All changes are documented in the changelog.

Pay special attention to the two security vulnerabilities fixed in this version: CVE-2018-1000300 and CVE-2018-1000301

curl and libcurl 7.59.0 March 14 2018

The curl team proudly presents curl and libcurl version 7.59.0. All changes are documented in the changelog.

Pay special attention to the three security vulnerabilities fixed in this version: CVE-2018-1000120, CVE-2018-1000121 and CVE-2018-1000122

curl and libcurl 7.58.0 January 24 2018

The curl team proudly presents curl and libcurl version 7.58.0. All changes are documented in the changelog.

Pay special attention to the two security vulnerabilities fixed in this version: CVE-2018-1000005 and CVE-2018-1000007

curl and libcurl 7.57.0 November 29 2017

The curl team proudly presents curl and libcurl version 7.57.0. All changes are documented in the changelog.

Pay special attention to the three security vulnerabilities fixed in this version: CVE-2017-8816, CVE-2017-8817 and CVE-2017-8818.

curl and libcurl 7.56.1 October 23 2017

The curl team proudly presents curl and libcurl version 7.56.1. All changes are documented in the changelog.

Pay special attention to the CVE-2017-1000257 security vulnerability we fixed.

curl and libcurl 7.56.0 October 4 2017

The curl team proudly presents curl and libcurl version 7.56.0. All changes are documented in the changelog.

Pay special attention to the CVE-2017-1000254 security vulnerability we fixed.

curl and libcurl 7.55.1 August 14 2017

The curl team proudly presents curl and libcurl version 7.55.1. All changes are documented in the changelog.

curl and libcurl 7.54.1 June 14 2017

The curl team proudly presents curl and libcurl version 7.54.1. The bug fixes are documented in the changelog.

Pay special attention to the CVE-2017-9502 security vulnerability we fixed.

curl and libcurl 7.54.0 April 19 2017

The curl team proudly presents curl and libcurl version 7.54.0. The bug fixes are documented in the changelog.

Pay special attention to the CVE-2017-7468 security vulnerability we fixed.

curl and libcurl 7.53.1 February 24 2017

The curl team proudly presents curl and libcurl version 7.53.1. The bug fixes are documented in the changelog.

We did this patch release this soon after our previous version primarily to address a build error that caused people on Windows some annoyances.

curl and libcurl 7.53.0 February 22 2017

The curl team proudly presents curl and libcurl version 7.53.0. The bug fixes are documented in the changelog.

Pay special attention to the CVE-2017-2629 security vulnerability we fixed.

curl and libcurl 7.52.1 December 23 2016

The curl team proudly presents curl and libcurl version 7.52.1. The bug fixes are documented in the changelog.

We hurried out this release due to the security vulnerability we found in 7.52.0.

curl and libcurl 7.52.0 December 21 2016

The curl team proudly presents curl and libcurl version 7.52.0. All changes and bug fixes are documented in the changelog.

Pay special attention to the new security vulnerabilities.

curl and libcurl 7.51.0 November 2 2016

The curl team proudly presents curl and libcurl version 7.51.0. All changes and bug fixes are documented in the changelog.

Pay special attention to the new security vulnerabilities.

curl and libcurl 7.50.3 September 14 2016

The curl team proudly presents curl and libcurl version 7.50.3. All changes and bug fixes are documented in the changelog.

Pay special attention to the new security vulnerability CVE-2016-7167.

curl and libcurl 7.50.2 September 7 2016

The curl team proudly presents curl and libcurl version 7.50.2. All changes and bug fixes are documented in the changelog.

curl and libcurl 7.50.1 August 3 2016

The curl team proudly presents curl and libcurl version 7.50.1. All changes and bug fixes are documented in the changelog. Pay special attention to the three new security vulnerabilities mentioned there.

curl and libcurl 7.50.0 July 21 2016

The curl team proudly presents curl and libcurl version 7.50.0. All changes and bug fixes are documented in the changelog.

Windows DLL hijacking May 30 2016

curl and libcurl are vulnerable to a Windows DLL hijacking (known as CVE-2016-4802). Affecting versions running on Microsoft Windows.

curl and libcurl 7.49.1 May 30 2016

The curl team proudly presents curl and libcurl version 7.49.1. All changes and bug fixes are documented in the changelog.

curl and libcurl 7.49.0 May 18 2016

The curl team proudly presents curl and libcurl version 7.49.0. All changes and bug fixes are documented in the changelog.

TLS certificate check bypass with mbedTLS/PolarSSL May 18 2016

curl and libcurl are vulnerable to a TLS certificate check bypass (known as CVE-2016-3739) when built to use mbedTLS or PolarSSL.

curl and libcurl 7.48.0 March 23 2016

The curl team proudly presents yet another version in the never ending train of curl releases. curl and libcurl version 7.48.0 is out. Read up on all the changes and bug fixes in the changelog.

curl and libcurl 7.47.1 February 8 2016

The curl team proudly presents curl and libcurl version 7.47.1. Read up on all the changes and bug fixes in the changelog.

git repo moved on github February 3 2016

The git repositories on github for the source and the website have now been moved over to its new home there: the curl organization.

website over HTTPS January 29 2016

The curl website is now served over HTTPS and with HTTP/2 - with certificates from Let's Encrypt. Starting February 3, the curl site automatically redirects all http accesses to its https version. No more HTTP accesses to contents.

curl and libcurl 7.47.0 January 27 2016

The curl team proudly presents curl and libcurl version 7.47.0. Read up on all the changes and bug fixes in the changelog.

This release comes bundled with two security advisories: CVE-2016-0754: local drive traversal when saving file on Windows and CVE-2016-0755: NTLM credentials not-checked for proxy connection re-use.

curl and libcurl 7.46.0 December 2 2015

The curl team proudly presents curl and libcurl version 7.46.0. Read up on all the changes and bug fixes in the changelog.

This is the 150th release counted from the beginning!

curl and libcurl 7.45.0 October 7 2015

The curl team proudly presents the best release ever: curl and libcurl version 7.45.0. Read up on all the changes and bug fixes in the changelog.

curl HTTP cheat sheet September 24 2015

As a little side-project, a curl cheat sheet is being worked on, as a small page showing the most commonly used curl HTTP options.

Help us improve it! It will most probably move into the curl site umbrella at some point.

curl and libcurl 7.44.0 August 12 2015

The curl team proudly presents curl and libcurl version 7.44.0. Read up on all the changes and bug fixes in the changelog.

[SECURITY NOTICE] libidn with bad UTF8 input June 29 2015

A recent security review of libcurl showed that a remote attacker can abuse libcurl's support for international domain names to disclose memory of a libcurl application or cause other unintended behaviors by passing in a malformed unicode string in the URL parameter.

The entire libidn notice

Release archives over HTTPS June 29 2015

As long as the main curl site is still on HTTP only, we now offer HTTPS downloads of the source archives over HTTPS from github. We also modified the look of the release archives list slightly.

Enjoy!

ISP blacklisted by Spamhaus June 18 2015

Right now a large amount of mail servers in the world refuse to accept mails from our primary mail server since Spamhaus deems our ISP to be irresponsible and blacklists us.

We have a fixed IP and we have done nothing wrong here, but apparently collective punishment is a method.

daniel weekly 37 June 17 2015

curl and libcurl 7.43.0 June 17 2015

The curl team proudly presents curl and libcurl version 7.43.0. Read up on all the changes and bug fixes in the changelog.

This release comes bundled with two security advisories: CVE-2015-3236: lingering HTTP credentials in connection re-use and CVE-2015-3237: SMB send off unrelated memory contents.

daniel weekly 36 June 9 2015

daniel weekly 35 June 3 2015

curl user poll 2015 analysis May 26 2015

The 30 page document with all details and analyses of the curl user poll 2015 is now available. It shows details of all the questions, most of them with a comparison with last year’s survey. The write-ins are also full of good advice, wisdom and some signs of ignorance or unawareness.

curl and libcurl 7.42.1 April 29 2015

The curl team proudly presents another curl and libcurl release: version 7.42.1. Read up on all the changes and bug fixes in the changelog.

This release comes bundled another security advisory: CVE-2015-3153: sensitive HTTP server headers also sent to proxies.

curl and libcurl 7.42.0 April 22 2015

The curl team proudly presents another curl and libcurl release: version 7.42.0. Read up on all the changes and bug fixes in the changelog.

This release comes bundled with no less than four different security advisories:

becoming more github friendly March 2 2015

We are trying to lower barriers and friction for newcomers. We have a new positive attitude to pull requests and issues filed directly at github. Welcome!

Existing hackers: consider clicking 'watch' on that repo to get notified.

curl and libcurl 7.41.0 February 25 2015

The curl team proudly presents another curl and libcurl release: version 7.41.0. Read up on all the changes and bug fixes in the changelog.

Enhanced vulnerability overview January 9 2015

The vulnerability table on the web site has gotten an overhaul. It is the complete list of all published curl vulnerabilities together with which curl versions that are vulnerable.

The new layout is much smaller HTML, and it now features links to specific summaries for each individual curl release through the history. Each summarizing its own vulnerability situation.

For example, you can look at the vulnerability situation for curl 7.37.0 as well as all the others - back to 6.0, released in 1999.

curl and libcurl 7.40.0 January 8 2015

The curl team proudly presents another curl and libcurl release: version 7.40.0. Read up on all the changes and bug fixes on the changes page.

We also publish two security advisories in association with this release. See CVE-2014-8151 and CVE-2014-8150 for all the details.