curl

No entries match these filters. Clear filters

1. 8.22.0 Sep 2, 2026 · release notes

   curl 8.22.0 adds HTTP Message Signatures via --http-signatures, Apple GSSAPI support, and Apple fast UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. option.

   • gssapi: add support for Apple GSS Framework (MacOS/AppleSilicon)

   1 detail in Everything

   └──▷ BREAKING ON UPGRADE

   • !Removed support for TLS-SRP (deprecated in prior versions)
2. docs update Aug 1, 2026 · issue 032

   curl gains RFC 9421RFC 9421An IETF standard defining HTTP Message Signatures, a scheme for cryptographically signing HTTP requests and responses so tools can verify message integrity and authenticity end-to-end. HTTP Message Signing and HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. proxy support in 8.21–8.22

   └──▷ TRY IT
   Sign an outgoing request with an Ed25519Ed25519A fast elliptic-curve signature scheme with small keys, the default for new SSH keys and common in code signing. It is not quantum-safe. key so the server can verify its integrity and authenticity via RFC 9421.
   copy

   $ curl --httpsig-algo ed25519 --httpsig-key @key.hex --httpsig-keyid "my-key" https://example.com

   Force HTTP/3 when routing traffic through a proxy that supports it, useful in zero-trust or performance-sensitive environments.
   copy

   $ curl --proxy-http3 -x proxy https://example.com

   • Adds --httpsig-algo to sign outgoing HTTP requests using RFC 9421 HTTP Message Signatures, with ed25519 (default) or hmac-sha256 algorithms.
   • Adds --httpsig-key to supply the signing key (inline hex or @filename) for RFC 9421 HTTP Message Signatures.
   • Adds --httpsig-keyid to set the keyid parameter in the Signature-Input header so servers can look up the correct verification key.
   • Adds --httpsig-headers to control exactly which HTTP components (method, path, headers, etc.) are included in the RFC 9421 signature.
   • Adds --proxy-http3 to negotiate HTTP/3 with an HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. proxy, failing the transfer if the proxy does not support it.

   5 details in Everything

3. docs update Jul 24, 2026 · issue 024

   curl 8.22.0 extends --xattr Windows support, writing Zone.Identifier Alternate Data Streams with HostUrl and ReferrerUrl.

4. docs update Jul 24, 2026 · docs issue 004

   curl 8.22.0 extends --xattr Windows support, writing Zone.Identifier Alternate Data Streams with HostUrl and ReferrerUrl.

5. 8.21.0 Jun 24, 2026 · release notes

   curl 8.21.0 adds named globs for upload filenames and HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. proxy CONNECT support

   • Adds MASQUE CONNECT-UDP support via ngtcp2 QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. backend for HTTP/3.

   1 detail in Everything

   └──▷ BREAKING ON UPGRADE

   • !Drops support for CURLAUTH_DIGEST_IE in libcurl.
6. 8.20.0 Apr 29, 2026 · release notes

   curl 8.20.0 adds async thread pool for DNS resolution and makes NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. default disabled.

   • lib: add thread pool and queue
   • build: make NTLM disabled by default

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Dropped support for CMake 3.17 and older
   • !Dropped support for < c-ares 1.16.0
7. 8.19.0 Mar 11, 2026 · release notes

   curl 8.19.0 adds MQTT over TLS support, fraction limits for --limit-rate/--max-filesize, and new cmake flags.

   └──▷ TRY IT
   Rate limit transfers with decimal precision.
   copy

   $ curl --limit-rate 10.5M https://example.com/file

   • tool: support fractions for --limit-rate
   • tool: support fractions for --max-filesize
   • mqtt: initial support for MQTTS
   • cmake: add CURL_BUILD_EVERYTHING option
   • cmake: add CURL_DROP_UNUSED option to reduce binary sizes

   5 details in Everything

8. curl-8_17_0 Nov 5, 2025 · release notes

   curl 8.17 adds QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. v2 support and new --no-alpn flag

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch curl-8_17_0 https://github.com/curl/curl.git
   # already have the repo? check out this version:
   $ git checkout curl-8_17_0

   └──▷ TRY IT
   Force HTTP/1.1 or HTTP/2 by disabling ALPN to avoid automatic protocol selection.
   copy

   $ curl --no-alpn https://example.com

   Test a server that supports the newer QUIC v2 specification.
   copy

   $ curl --quic2 https://example.com

   • Adds --no-alpn flag to disable ALPN negotiation for HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. connections
   • Adds initial support for the QUIC v2 protocol

   2 details in Everything

9. 8.17.0 Nov 5, 2025 · release notes

   curl 8.17.0 adds --knownhosts, multi notifications API, 6-char progress sizes, and %header{} for all occurrences

   └──▷ USE IT
   Use write-out to capture every instance of a header field in the response.
   shell copy

   curl --write-out '%header{set-cookie}' https://example.com

   • Adds --knownhosts to tool_getparam for outputting the current known_hosts file contents.
   • Adds a notifications API in the multi interface to signal internal events.
   • Expands progress display size formatting to use 6 characters per size unit.
   • Makes %header{} able to output all occurrences of a header via write-out formats.

   4 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Drops Heimdal KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. support, requiring users who relied on it to switch to MIT Kerberos or other implementations.
   • !Drops the winbuild build system for Windows builds.
   • !Raises the minimum libssh2 requirement to version 1.9.0.
   • !Drops wolfSSH support in vssh.
10. 8.16.0 Sep 10, 2025 · release notes

    curl 8.16.0 adds --follow for HTTP redirects, --parallel-max-host for per-host concurrency limits, and %time{} in writeout

    └──▷ TRY IT
    Fetch a URL while strictly limiting concurrent connections per host to avoid overwhelming the target server.
    copy

    $ curl --parallel-max-host 5 https://example.com

    Track detailed timing metrics including time-to-first-byte and total transfer time for performance analysis.
    copy

    $ curl -w 'Total: %{time_total}s, FTP: %{time_starttransfer}s\n' https://example.com

    Use the new offset type API for handling large file sizes in multi-interface applications.
    c copy

    curl_off_t offset = curl_multi_get_offt(multi_handle);

    • Adds --follow flag to curl to enable following HTTP redirects.
    • Adds --parallel-max-host <n> option to limit concurrent connections per host in parallel transfers.
    • Adds --out-null flag to discard the downloaded data entirely.
    • Adds %time{} token to -w/--write-out format strings for timing data.
    • Introduces curl_multi_get_offt() API function in the multi interface.

    +1 more show less

    • Adds CURLMOPT_NETWORK_CHANGED option in the multi interface to signal network changes.

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Minimum required mingw-w64 version bumped from v1.0 to v3.0.
    • !Minimum required mbedtls version bumped to 3.2.0.
11. curl-8_15_0 Jul 16, 2025 · release notes

    curl 8.15.0 adds HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. DNS-over-HTTPSDNS-over-HTTPSA protocol that tunnels DNS queries inside encrypted HTTPS requests, hiding lookups from network observers. Cyber tools use it to evade DNS-based monitoring or filtering. transport support and new protocol options.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch curl-8_15_0 https://github.com/curl/curl.git
    # already have the repo? check out this version:
    $ git checkout curl-8_15_0

    └──▷ USE IT
    Limit the number of retries for DNS resolution when using HTTP/3 DoHDoHDNS over HTTPS, an IETF standard (RFC 8484) that tunnels DNS queries inside encrypted HTTPS traffic, making resolution indistinguishable from web traffic and bypassing traditional DNS-based monitoring..
    shell copy

    curl --doh-url https://dns.google/dns-query --doh-over-http3 --doh-max-retries 2 https://example.com

    • Adds support for DNS-over-HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. (DoH) over HTTP/3 transports via the --doh-over-http3 flag
    • Adds new --doh-max-retries option to control DoH retry behavior on HTTP/3

    2 details in Everything

12. curl-8_14_0 May 28, 2025 · release notes

    curl 8.14.0 adds QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking./HTTP3 improvements, new --ip-tos flag, and expands ECH support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch curl-8_14_0 https://github.com/curl/curl.git
    # already have the repo? check out this version:
    $ git checkout curl-8_14_0

    └──▷ TRY IT
    Set QoS/traffic class on outgoing packets — useful when testing priority-sensitive network paths.
    copy

    $ curl --ip-tos lowdelay https://example.com

    Capture QUIC qlog traces for HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. connection debugging.
    copy

    $ curl --vquic-qlog ./qlog-output/ --http3 https://example.com

    Tune TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. keepalive probe count to detect dead connections faster without changing the interval.
    copy

    $ curl --keepalive-cnt 3 --keepalive-time 10 https://example.com

    • Adds --ip-tos flag to set the IP Type-of-Service (ToS) / traffic class byte on outgoing connections.
    • Supports ECH (Encrypted Client Hello)GreaseEnabled config for improved TLS privacy.
    • Adds --vquic-qlog to enable qlog tracing output for QUIC connections, aiding HTTP/3 debugging.
    • Adds curlopt_tcp_keepcnt / --keepalive-cnt to control the number of TCP keepalive probes.
    • Adds --ca-native (and CURLOPT_CA_NATIVE) support on more platforms for using the OS native CA store.

    5 details in Everything

13. 8.13.0 Apr 2, 2025 · release notes

    curl 8.13.0 adds TLS early data support, --url file input, IMAP upload flags, and rustls CERTINFO/SSLKEYLOGFILE/ECH capabilities

    • New write-out variable tls_earlydata allows inspecting the status of early data usage in transfer logs.
    • The --url option now accepts a file path containing a list of URLs to process sequentially.
    • IMAP protocol gains CURLOPT_UPLOAD_FLAGS and corresponding --upload-flags CLI flag for fine-grained upload control.
    • rustls backend adds support for CERTINFO (certificate information output), SSLKEYLOGFILE (key logging for debugging), and ECH with DoHDoHDNS over HTTPS, an IETF standard (RFC 8484) that tunnels DNS queries inside encrypted HTTPS traffic, making resolution indistinguishable from web traffic and bypassing traditional DNS-based monitoring. lookup for configuration.

    4 details in Everything

14. 8.12.0 Feb 5, 2025 · release notes

    curl 8.12.0 adds PKCS#11PKCS#11The standard programming interface software uses to ask an HSM, smart card or token to sign or decrypt with a key it holds. Supporting it lets a tool keep its keys in hardware. provider support and QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. 0RTT for gnutls

    └──▷ TRY IT
    Send Early Data for QUIC connections with GnuTLSGnuTLSAn open-source TLS/SSL library maintained by the GNU Project that implements secure communications protocols, giving cyber tools a portable, LGPL-licensed alternative to OpenSSL for encrypted connections. to reduce latency.
    copy

    $ curl --quic --sslopt 'early_data' https://example.com

    • enable 0RTT (Early Data) for QUIC connections when using GnuTLS via the new CURLSSLOPT_EARLYDATA flag.

    1 detail in Everything

15. curl-8_11_0 Nov 6, 2024 · release notes

    curl 8.11 adds --resolve, --no-sessionid, and --tls-srp for new control surfaces

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch curl-8_11_0 https://github.com/curl/curl.git
    # already have the repo? check out this version:
    $ git checkout curl-8_11_0

    └──▷ USE IT
    Force a request to a specific IP for a hostname, bypassing system DNS for testing or attack simulation.
    shell copy

    curl --resolve example.com:443:1.2.3.4 https://example.com/

    Test server TLS-SRP authentication support by providing username and password directly via CLI.
    shell copy

    curl --tls-srp 1234567890abcdef --tls-srp-username testuser https://example.com/

    • Adds --resolve option to override DNS resolution with a specific IP address.
    • Adds --no-sessionid to disable TLS session ID resumption, forcing a full handshake.
    • Adds --tls-srp and --tls-srp-username flags to configure TLS-SRP authentication parameters.
    • Adds --tls-use-sha256 to enforce SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. in TLS 1.3 key derivation.

    4 details in Everything

16. curl-8_10_0 Sep 11, 2024 · release notes

    curl 8.10.0 adds SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. size limits, HTTP/2 PUSH_PROMISE support, and new curl_multi_perform options

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch curl-8_10_0 https://github.com/curl/curl.git
    # already have the repo? check out this version:
    $ git checkout curl-8_10_0

    • Adds the --max-smtp-pixel command-line option to limit the number of bytes sent in an SMTP mail transfer
    • Adds CURLMOPT_PUSHFUNCTION to the multi interface API, allowing applications to intercept HTTP/2 PUSH_PROMISE frames
    • Adds the CURLINFO_SIZE_DOWNLOAD_T info option for retrieving download sizes as 64-bit values across all protocols

    3 details in Everything

17. 8.10.0 Sep 11, 2024 · release notes

    curl 8.10.0 adds --skip-existing, default filenames for -O with missing paths, and libuv parallel transfers.

    • Add --skip-existing flag to prevent overwriting local files that already exist during downloads
    • Use default as the filename when using -O and the URL lacks a trailing path component
    • Add CURLINFO_POSTTRANSFER_TIME_T to getinfo for precise post-transfer timing metrics

    3 details in Everything

18. curl-8_9_0 Jul 24, 2024 · release notes

    curl 8.9.0 adds --http2-server-priority for HTTP/2 stream prioritization and fixes CVE-2024-7264

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch curl-8_9_0 https://github.com/curl/curl.git
    # already have the repo? check out this version:
    $ git checkout curl-8_9_0

    └──▷ TRY IT
    Set custom HTTP/2 stream priority to manage bandwidth for critical requests.
    copy

    $ curl --http2-server-priority=1:32768 https://example.com/api/data

    • Adds --http2-server-priority flag to control HTTP/2 stream priority settings.

    1 detail in Everything

19. 8.9.0 Jul 24, 2024 · release notes

    curl 8.9.0 adds --ip-tos, --mptcp, --vlan-priority, -w %{num_retries}, and CURLU_NO_GUESS_SCHEME

    └──▷ TRY IT
    Set DSCP values and enable Multipath TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. for a specific host
    copy

    $ curl --ip-tos 0x2c --mptcp http://example.com

    Track how many times curl retried the connection in a script
    copy

    $ curl -w "Retries: %{num_retries}" http://example.com

    • Adds --ip-tos CLI flag to set IP Type of Service / Traffic Class
    • Adds --mptcp CLI flag to enable Multipath TCP support
    • Adds --vlan-priority CLI flag to set VLAN priority
    • Adds -w '%{num_retries}' write-out variable to report retry counts
    • Adds CURLU_NO_GUESS_SCHEME option to URL API to disable scheme guessing

    +1 more show less

    • Adds CURLOPT_TCP_KEEPCNT and --keepalive-cnt for configuring TCP keepalive count

    6 details in Everything

20. curl-8_8_0 May 22, 2024 · release notes

    curl 8.8.0 adds TLS 1.3 post-handshake authentication and new HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. capabilities

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch curl-8_8_0 https://github.com/curl/curl.git
    # already have the repo? check out this version:
    $ git checkout curl-8_8_0

    • Adds HSTS_CTRL and NO_HSTS options to the .curlrc file for HSTSHSTSAn HTTP response header, standardized in RFC 6797, that instructs browsers to contact a site over HTTPS only for a declared period, preventing protocol-downgrade and cookie-hijacking attacks. cache management

    1 detail in Everything

21. 8.8.0 May 22, 2024 · release notes

    curl 8.8.0 adds ECH support, curl_multi_waitfds API, and AppleIDN

    • TLS: add support for ECH (Encrypted Client Hello)
    • file: add support for directory listings
    • idn: add native AppleIDN (icucore) support for macOS/iOS

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !NTLM_WB: drop support
22. 8.7.0 Mar 27, 2024 · release notes

    curl 8.7.0 adds SHA-512/256 digest auth, DoHDoHDNS over HTTPS, an IETF standard (RFC 8484) that tunnels DNS queries inside encrypted HTTPS traffic, making resolution indistinguishable from web traffic and bypassing traditional DNS-based monitoring. tracing, and proxy usage introspection

    • --disable-docs configure flag to skip documentation build
    • CURLINFO_USED_PROXY info option returns whether a proxy was used
    • SHA-512/256 support for digest authentication
    • %{proxy_used} format string for --write-out

    4 details in Everything

23. 8.5.0 Dec 6, 2023 · release notes

    curl 8.5.0 adds ngtcp2 HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. support and improved IPFSIPFSA peer-to-peer, content-addressed distributed file system where files are identified by their cryptographic hash rather than location, letting cyber tools store or retrieve data without relying on a central server./IPNS handling

    • ngtcp2 builds are no longer experimental for HTTP/3.

    1 detail in Everything

24. 8.4.0 Oct 11, 2023 · release notes

    curl 8.4.0 adds IPFSIPFSA peer-to-peer, content-addressed distributed file system where files are identified by their cryptographic hash rather than location, letting cyber tools store or retrieve data without relying on a central server. via HTTP gateway, libcurl multi handle API, and ngtcp2/H3 support

    • Adds IPFS protocol support over HTTP gateway
    • Adds curl_multi_get_handles() function to retrieve easy handles from a multi handle
    • Adds support for ngtcp2 with AWS-LC builds for QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking./HTTP3

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Deletes support for legacy mingw.org toolchain on Windows (mingw)
    • !Marked CURLSSLBACKEND_NSS as deprecated since 8.3.0
25. curl-8_3_0 Sep 13, 2023 · release notes

    curl 8.3.0 adds SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. mail sending, IMAP folder creation, and multiple new curl commands

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch curl-8_3_0 https://github.com/curl/curl.git
    # already have the repo? check out this version:
    $ git checkout curl-8_3_0

    └──▷ USE IT
    Send an email to a recipient using SMTP via the command line.
    shell copy

    curl --mail-from 'sender@example.com' --mail-rcpt 'recipient@example.com' smtp://smtp.example.com -T message.txt

    Create a remote IMAP mailbox for archiving.
    shell copy

    curl imap://imap.example.com/mkdir?"Archive/2023" --user username:password

    Use the new API to add a part to a MIME message in code.
    c copy

    curl_mime_part *part = curl_mime_addpart(mime);
    curl_mime_type(part, "text/plain");
    curl_mime_data(part, "Body content", CURL_ZERO_TERMINATED);

    • Adds --mail-from, --mail-rcpt, and --mail-rcpt-async options to send emails via SMTP
    • Adds IMAP/mkdir support for creating remote mailboxes
    • Adds new --list-only option for IMAP LIST command
    • Adds new --disable-epsv flag to disable EPSV mode in FTP/FTPSFTPSFTP with TLS/SSL encryption layered on top, standardized in RFC 4217, used by tools that need to transfer files over authenticated, encrypted channels while staying compatible with legacy FTP infrastructure. transfers
    • Adds curl_getdate() function and curl_mime_addpart() API functions

    +1 more show less

    • Adds support for HTTP Connect tunneling over QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. with --quic

    6 details in Everything

26. 8.3.0 Sep 13, 2023 · release notes

    curl 8.3.0 adds %output{} to -w for file writing, variable support, and global tracing

    • Adds the %output{<file>} format specifier to --write-out, allowing output data to be written directly to a specified file instead of stdout.
    • Introduces variable support in the curl tool, enabling access to internal variables via the --write-out formatting syntax.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The gskit library support is removed, so builds using it will fail unless disabled or switched to a different TLS backend.
27. curl-8_2_0 Jul 19, 2023 · release notes

    curl 8.2.0 adds new HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. priority support, multi-interface event loop callbacks, and more.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch curl-8_2_0 https://github.com/curl/curl.git
    # already have the repo? check out this version:
    $ git checkout curl-8_2_0

    └──▷ TRY IT
    Prioritize HTTP/3 over HTTP/2 for all curl commands without changing the CLI flag every time.
    copy

    $ H3PRIORIZE=1 curl --h3 https://example.com

    • --h3 (and -0) now respect the H3PRIORIZE environment variable to control whether HTTP/2 or HTTP/3 is prioritized when both are available.

    1 detail in Everything

28. curl-8_1_0 May 17, 2023 · release notes

    curl 8.1.0 adds support for HTTP/2 over HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. proxy tunnels (H2 over proxy).

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch curl-8_1_0 https://github.com/curl/curl.git
    # already have the repo? check out this version:
    $ git checkout curl-8_1_0

    └──▷ USE IT
    Use HTTP/2 multiplexing through an HTTPS proxy to accelerate multiple concurrent requests to a backend server.
    shell copy

    curl --http2 -x https://proxy.example.com:443 https://target.com/

    • Adds support for --http2 over HTTPS proxies (https-proxy), enabling HTTP/2 multiplexing through an intermediate proxy server.
    • Implements the underlying protocol logic to tunnel HTTP/2 traffic correctly when using https-proxy, resolving previous limitations where H2 was ignored or failed.

    2 details in Everything

29. 8.1.0 May 17, 2023 · release notes

    curl 8.1.0 adds --proxy-http2 for HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. proxies speaking HTTP/2 and URL component variables in --write-out

    └──▷ USE IT
    Extract the final resolved URL and port from a transfer using the new write-out variables.
    shell copy

    curl --write-out 'Final URL: %{url_effective}\nPort: %{port_num}\n' -o /dev/null https://example.com

    • Adds --proxy-http2 option (and CURLPROXY_HTTPS2 enum) to connect to an HTTPS proxy using HTTP/2

    1 detail in Everything

30. curl-7_88_0 Feb 15, 2023 · release notes

    curl 7.88.0 adds HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. without OpenSSL/Quictls, HSTSHSTSAn HTTP response header, standardized in RFC 6797, that instructs browsers to contact a site over HTTPS only for a declared period, preventing protocol-downgrade and cookie-hijacking attacks. preload list updates, and more.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch curl-7_88_0 https://github.com/curl/curl.git
    # already have the repo? check out this version:
    $ git checkout curl-7_88_0

    • Adds support for HTTP/3 even when not using OpenSSL or Quictls
    • Updates the built-in HSTS (HTTP Strict Transport Security) preload list

    2 details in Everything

31. 7.88.0 Feb 15, 2023 · release notes

    curl 7.88.0 adds --http3-only, HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. support to curl_operate, new libcurl options and info codes.

    └──▷ TRY IT
    Force curl to only connect via HTTP/3, failing if the server does not support it.
    copy

    $ curl --http3-only https://example.com

    Use the libcurl C API to programmatically restrict requests to HTTP/3 only.
    c copy

    curl_easy_setopt(easyhandle, CURLOPT_HTTP_VERSION, CURL_HTTP_VERSION_3ONLY);

    Retrieve raw certificates and their count from the writeout info string.
    copy

    $ curl --write-out '%{certs}\n%{num_certs}' https://example.com -o /dev/null

    • Adds CURL_HTTP_VERSION_3ONLY enum for the CURLOPT_HTTP_VERSION option
    • Adds --http3-only CLI flag to force HTTP/3
    • Adds CURLU_PUNYCODE flag to URL parsing API
    • Adds %{certs} and %{num_certs} formats in curl_writeout for certificate information retrieval

    4 details in Everything

32. 7.87.0 Dec 21, 2022 · release notes

    curl 7.87.0 adds --url-query, CURLOPT_QUICK_EXIT, and CURL_WRITEFUNC_ERROR

    • Adds --url-query CLI option to append query parameters to the URL.
    • Adds CURL_WRITEFUNC_ERROR constant for write callbacks to signal errors without dumping data.

    2 details in Everything

33. curl-7_86_0 Oct 26, 2022 · release notes

    curl 7.86.0 adds WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. protocol support via --websocket options

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch curl-7_86_0 https://github.com/curl/curl.git
    # already have the repo? check out this version:
    $ git checkout curl-7_86_0

    └──▷ TRY IT
    Initiate a WebSocket connection to an endpoint without manual HTTP upgrade handling.
    copy

    $ curl --websocket ws://example.com/socket

    • Adds --websocket, -ws-upgrade, and -w options to enable WebSocket client functionality
    • Supports the WebSocket handshake upgrade sequence automatically when using the new flags

    2 details in Everything

34. 7.86.0 Oct 26, 2022 · release notes

    curl 7.86.0 adds initial WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. support and removes NPN.

    • Removes NPN (Next Protocol Negotiation) support

    1 detail in Everything

35. 7.85.0 Aug 31, 2022 · release notes

    curl 7.85.0 adds QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. via wolfSSL, TLS 1.3 on Schannel, and STR protocol options

    • Add quic support via the wolfSSL backend for HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. connectivity
    • Add TLS 1.3 support to the Windows Schannel backend
    • Add CURLOPT_PROTOCOLS_STR option to specify allowed protocols as a string
    • Add CURLOPT_REDIR_PROTOCOLS_STR option to specify allowed redirect protocols as a string

    4 details in Everything

36. 7.84.0 Jun 27, 2022 · release notes

    curl 7.84.0 adds rate limiting via --rate, unix socket support for SOCKSSOCKSA proxy protocol that relays TCP (and optionally UDP) connections through an intermediary server, letting cyber tools route traffic through a pivot host or anonymizing layer without needing raw network access. proxies, and libcurl API additions.

    • Adds --rate flag to limit the maximum request rate per time unit.
    • Supports unix sockets for SOCKS proxy via new transport layer capability.
    • Adds CURL_VERSION_THREADSAFE to curl_version_info() to indicate thread safety.
    • Allows querying default CA paths using CURLINFO_CAPATH and CURLINFO_CAINFO in libcurl.

    4 details in Everything

37. curl-7_83_0 Apr 27, 2022 · release notes

    curl 7.83.0 adds headers-only mode (-I/--head), cookie jar handling with --cookie-jar - (stdin), and HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. h3 settings.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch curl-7_83_0 https://github.com/curl/curl.git
    # already have the repo? check out this version:
    $ git checkout curl-7_83_0

    └──▷ TRY IT
    Adjust HTTP/3 QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. stream limits for a request to handle high-concurrency scenarios.
    copy

    $ curl --h3-settings max_concurrent_streams=100 https://example.com/h3

    • Enables configuration of HTTP/3 settings using the --h3-settings option

    1 detail in Everything

38. 7.83.0 Apr 27, 2022 · release notes

    curl 7.83.0 adds %header and %header_json output formats, --no-clobber, libcurl headers API, and msh3 QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. support

    • Adds %{header{name}} and %{header_json} to the -w write-out format for extracting response headers via the CLI

    1 detail in Everything

39. 7.82.0 Mar 5, 2022 · release notes

    curl 7.82.0 adds --json and libssh removal

    └──▷ TRY IT
    Send a POST request with JSON content type and body using the new flag.
    copy

    $ curl --json '{"key": "value"}' https://example.com/api

    • Adds --json CLI option for sending JSON data in requests
    • Removes support for the mesalink library

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The mesalink backend is removed; builds requiring it must use a different TLS library
40. curl-7_81_0 Jan 5, 2022 · release notes

    curl 7.81.0 introduces percent-encoded string parsing for headers and auth.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch curl-7_81_0 https://github.com/curl/curl.git
    # already have the repo? check out this version:
    $ git checkout curl-7_81_0

    • Adds % character handling in URL-encoding to allow percent-encoded strings in header values and authentication data.

    1 detail in Everything

41. 7.80.0 Nov 10, 2021 · release notes

    curl 7.80.0 enhances connection lifecycle control and URL parsing capabilities while extending wolfSSL curve configuration support.

    • Adds CURLOPT_MAXLIFETIME_CONN to limit connection reuse lifetime
    • Adds curl_url_strerror() to the URL API for error reporting
    • Supports UNC paths in file: URLs on Windows via the URL parser
    • Allows configuring groups/curves for wolfSSL via new callback options

    4 details in Everything

42. 7.78.0 Jul 21, 2021 · release notes

    curl 7.78.0 adds MQTT auth support and new error code for setopt syntax issues

    • mqtt: add support for username and password
    • CURLE_SETOPT_OPTION_SYNTAX: new error name for wrong curl_url_set syntax

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !curl_url_set: reject spaces in URLs unless the CURLU_ALLOW_SPACE flag is used
43. 7.77.0 May 26, 2021 · release notes

    curl 7.77.0 adds in-memory CA cert support and explicit TLS library selection

    • Adds --enable-hsts default to enable HTTP Strict Transport Security by default
    • Adds support for in-memory CA certificates via new API functions for supported backends

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Configure script now deprecates --with-ssl in favor of explicit --with-openssl, --with-gnutls, etc.
44. 7.76.0 Mar 31, 2021 · release notes

    curl 7.76.0 adds --fail-with-body, rustls backend support, and SCRAM-SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. SASLSASLA framework for plugging authentication mechanisms into network protocols, standardized by the IETF, so a tool can support password, Kerberos, or certificate login without rewriting auth logic per protocol. authentication

    • Adds --fail-with-body CLI flag to exit with error code on HTTP errors while preserving the response body in output
    • Adds support for SCRAM-SHA-1SHA-1A cryptographic hash function standardized by NIST that produces a 160-bit digest; tools use it for file integrity checks, though it is now considered cryptographically broken and unsuitable for collision-resistant applications. and SCRAM-SHA-256 SASL mechanisms via libgsasl

    2 details in Everything

45. 7.73.0 Oct 14, 2020 · release notes

    curl 7.73.0 adds --output-dir, MQTT by default, SFTPSFTPSSH File Transfer Protocol, a file transfer standard built on top of SSH that provides encrypted upload, download, and remote file management; cyber tools use it to move files or exfiltrate data over an authenticated, encrypted channel. quote commands, and new API/CLI surfaces

    • Adds --output-dir CLI option to direct downloaded files into a specific directory without affecting the URL path
    • Enables MQTT protocol support by default for use with the -Q option or multi-interface
    • Adds SFTP quote commands atime and mtime via curl_multi_setopt(CURLMOPT_QUEUEING) or --quote to modify file timestamps on remote servers
    • Introduces new API curl_easy_option_next() and curl_easy_option_by_name() for enumerating and inspecting easy options at runtime
    • Adds new error code CURLE_PROXY for proxy-related failures

    +1 more show less

    • Adds TLS curve selection via CLI --curves flag or CURLSHOPT_SSL_CTX/CURLOPT_SSL_EC_CURVES option

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Drops Symbian OS support
    • !Requires Windows WinSock version 2, dropping WinSock 1 compatibility
46. 7.72.0 Aug 19, 2020 · release notes

    curl 7.72.0 adds zstd decompression, effective method info, push callback errors, and %{method} write-out variable

    • Adds content_encoding: zstd to support decoding responses compressed with the Zstandard algorithm
    • Adds CURLINFO_EFFECTIVE_METHOD as a new info option to retrieve the HTTP method used in the last request
    • Allows the HTTP/2 push callback (CURLOPT_PUSHFUNCTION) to fail the parent stream by returning CURL_PUSH_ERROROUT
    • Adds %{method} to the -w write-out variables to expose the HTTP method of the request in curl's output formatting

    4 details in Everything

47. 7.71.0 Jun 24, 2020 · release notes

    curl 7.71.0 adds --retry-all-errors, HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. via nghttp2/ngtcp2/quiche, QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. happy eyeballs, and Windows CA store support

    • Adds --retry-all-errors option to retry on any error, not just transient network issues.
    • Supports HTTP/3 (QUIC) in both curl tool and libcurl via ngtcp2 or quiche backends.
    • Enables QUIC support in happy eyeballs DNS resolution via the connect improvements.
    • Allows optional use of Windows' CA store on Windows with OpenSSL backend via CURLOPT_SSL_OPTIONS.

    4 details in Everything

48. 7.70.0 Apr 29, 2020 · release notes

    curl 7.70.0 adds MQTT protocol support, --ssl-revoke-best-effort, and JSON writeout via %{json}.

    • Adds mqtt experimental protocol support
    • Adds --ssl-revoke-best-effort CLI flag for SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. certificate revocation checks
    • Adds support for generating JSON output using the %{json} writeout format
    • Adds CURLSSLOPT_REVOKE_BEST_EFFORT option for schannel backend configuration

    4 details in Everything

49. 7.69.0 Mar 4, 2020 · release notes

    curl 7.69.0 adds SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. auth failover, SSH via wolfSSH, HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. draft-25, and QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. support improvements

    • Adds --mail-rcpt-allowfails CLI flag to allow SMTP transactions to succeed even if some recipient validations fail during delivery.
    • Enables the use of WolfSSH as a new SSH backend for curl, allowing SSH connections through this specific library instead of libssh2 or libssh.
    • Adds support for QUIC draft-25 via the ngtcp2 and quiche libraries, enabling HTTP/3 connections using the updated protocol version.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The polarssl backend has been removed; builds relying on it must migrate to another SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./TLS library.
50. 7.68.0 Jan 8, 2020 · release notes

    curl 7.68.0 adds BearSSL backend, --etag-compare/save, --parallel-immediate, and curl_multi_wakeup()

    • Adds --etag-compare and --etag-save to control conditional HTTP requests
    • Adds --parallel-immediate to start all parallel transfers immediately
    • Adds CURL_PROGRESSFUNC_CONTINUE return value for transfer progress callbacks
    • Adds curl_multi_wakeup() API for async multi handle notification
    • Adds BearSSL vtls backend implementation as a TLS alternative

    5 details in Everything

51. 7.66.0 Sep 11, 2019 · release notes

    curl 7.66.0 adds experimental HTTP/3HTTP/3The third major version of HTTP, standardized by the IETF, which runs over QUIC instead of TCP, eliminating head-of-line blocking and reducing connection latency for faster, more resilient data transfer. support, parallel transfers (-Z), and SASLSASLA framework for plugging authentication mechanisms into network protocols, standardized by the IETF, so a tool can support password, Kerberos, or certificate login without rewriting auth logic per protocol. authorization identity

    • Adds HTTP3 protocol support as an experimental feature.
    • Adds -Z flag to curl to enable parallel (multi) transfers for improved performance.
    • Adds --sasl-authzid CLI option and CURLOPT_SASL_AUTHZID API to specify the SASL authorization identity.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !HTTP/0.9 is now disabled by default in both tool and library via internal changes.
    • !The value 1 for CURLOPT_SSL_VERIFYHOST is now treated as 2.
52. 7.65.0 May 22, 2019 · release notes

    curl 7.65.0 adds HTTP/2 prior knowledge for proxies and multi-SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. support

    • CURLOPT_MAXAGE_CONN option added to control connection reuse age.

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !CURLOPT_DNS_USE_GLOBAL_CACHE option removed.
53. 7.63.0 Dec 12, 2018 · release notes

    curl 7.63.0 adds --write-out placeholders for stderr/stdout, the --dump-module-paths option, and the CURLOPT_CURLU library function.

    • --write-out now supports %{stderr} and %{stdout} placeholders to direct output to standard streams.
    • Adds the --dump-module-paths CLI option (undocumented, Windows only) to dump module paths.
    • libcurl adds the CURLOPT_CURLU option for setting the URL API handle on easy handles.

    3 details in Everything

54. 7.62.0 Oct 31, 2018 · release notes

    curl 7.62.0 adds DoHDoHDNS over HTTPS, an IETF standard (RFC 8484) that tunnels DNS queries inside encrypted HTTPS traffic, making resolution indistinguishable from web traffic and bypassing traditional DNS-based monitoring. via --doh-url/CURLOPT_DOH_URL, HTTP/2 default to TLS, and multiplexing support

    • Adds --doh-url command-line option to enable DNS-over-HTTPSDNS-over-HTTPSA protocol that tunnels DNS queries inside encrypted HTTPS requests, hiding lookups from network observers. Cyber tools use it to evade DNS-based monitoring or filtering. queries for name resolution.
    • Adds CURLOPT_DOH_URL library function to configure DNS-over-HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. programmatically.
    • Enables HTTP/2 multiplexing by default when using the H2 backend.
    • Changes default HTTP version selection to CURL_HTTP_VERSION_2TLS when built with h2 support, preferring HTTP/2 if the server supports it over TLS.
    • Adds CURLOPT_UPLOAD_BUFFERSIZE option to control the upload buffer size for transfers.

    +3 more show less

    • Adds connection upkeep API curl_easy_upkeep() via the upkeep interface.
    • Adds five new URL-API functions in the URL library for programmatic URL parsing and manipulation.
    • Integrates MesaLink as a new TLS backend for curl.

    8 details in Everything

55. 7.61.1 Sep 5, 2018 · release notes

    Enhances curl with ALPN on macOS, cookie creation-time support, and retry logic for HTTP 408 timeouts.

    • darwinssl: add support for ALPN negotiation
    • cookies: support creation-time attribute for cookies
    • add --retry support for transient status code 408 (Request Timeout)

    3 details in Everything

56. 7.61.0 Jul 11, 2018 · release notes

    curl 7.61.0 adds TLS 1.3 cipher control, Bearer tokenBearer tokenA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else. auth, and styled output

    • Adds --tls13-ciphers and --proxy-tls13-ciphers CLI arguments to specify allowed TLS 1.3 ciphersuites for the connection and proxy respectively
    • Adds --no-styled-output flag to disable bold formatting of headers in curl's terminal output
    • Adds CURLOPT_TLS13_CIPHERS and CURLOPT_PROXY_TLS13_CIPHERS library options to configure TLS 1.3 ciphers programmatically
    • Adds --disallow-username-in-url CLI argument to reject URLs containing embedded username information
    • Adds CURLOPT_DISALLOW_USERNAME_IN_URL library option to enforce the username disallowance in libcurl applications

    5 details in Everything

57. 7.60.0 May 16, 2018 · release notes

    curl 7.60.0 adds HAProxy PROXY protocol support and DNS address shuffling via new flags and API options.

    • Adds --haproxy-protocol CLI flag and CURLOPT_HAPROXYPROTOCOL libcurl option to enable the HAProxy PROXY protocol for connections
    • Adds CURLOPT_DNS_SHUFFLE_ADDRESSES libcurl option to shuffle returned IP addresses

    2 details in Everything

58. 7.59.0 Mar 14, 2018 · release notes

    curl 7.59.0 adds public key pinning for proxies and servers, Happy Eyeballs timeout control, and multi-DNS resolution.

    • Adds --proxy-pinnedpubkey option to enable TLS public key pinning for HTTP/HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. proxy connections
    • Adds --happy-eyeballs-timeout-ms CLI flag and CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS API option to control Happy Eyeballs algorithm timing
    • Extends CURLOPT_RESOLVE to support multiple IP addresses per hostname entry for multi-homed host resolution
    • Adds CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA for custom asynchronous DNS resolver integration
    • Adds CURLINFO_FILETIME_T info option providing file modification time as a curl_off_t type instead of a struct

    5 details in Everything

59. 7.58.0 Jan 24, 2018 · release notes

    curl 7.58.0 adds a libssh-powered SSH SCPSCPSecure Copy Protocol, a file-transfer method built on SSH that encrypts data in transit; cyber tools use it to move files to or from remote hosts without exposing credentials or content./SFTPSFTPSSH File Transfer Protocol, a file transfer standard built on top of SSH that provides encrypted upload, download, and remote file management; cyber tools use it to move files or exfiltrate data over an authenticated, encrypted channel. backend and exposes backend info via curl-config.

    • Adds a new libssh-powered backend for SSH, enabling native SCP and SFTP transfers without requiring an external sftp binary.
    • curl-config --ssl-backends now outputs the list of supported SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./TLS backends compiled into curl.

    2 details in Everything

60. 7.56.0 Oct 4, 2017 · release notes

    curl 7.56.0 adds SCPSCPSecure Copy Protocol, a file-transfer method built on SSH that encrypts data in transit; cyber tools use it to move files to or from remote hosts without exposing credentials or content./SFTPSFTPSSH File Transfer Protocol, a file transfer standard built on top of SSH that provides encrypted upload, download, and remote file management; cyber tools use it to move files or exfiltrate data over an authenticated, encrypted channel. compression, dynamic SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. backends, MIME API and SSLKEYLOGFILE support

    • Adds --compressed-ssh flag to enable compression for SCP and SFTP transfers.
    • Adds CURLOPT_SSH_COMPRESSION option to libcurl for configuring SSH compression.
    • Adds curl_global_sslset() function to dynamically switch SSL backend at runtime.
    • Introduces new MIME API with curl_mime_init() and associated functions.
    • Adds initial SSLKEYLOGFILE implementation in OpenSSL support.

    5 details in Everything

61. 7.55.0 Aug 9, 2017 · release notes

    curl 7.55.0 adds --request-target control and SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. auth flags for libcurl/CURL

    • Adds --request-target flag to curl CLI for controlling the Request-Target in HTTP requests.
    • Introduces CURLOPT_REQUEST_TARGET option in libcurl to set the request target programmatically.
    • Adds --socks5-basic and --socks5-gssapi flags to curl CLI to control SOCKS5 authentication methods.
    • Introduces CURLOPT_SOCKS5_AUTH option in libcurl for programmatic SOCKS5 authentication control.

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !CURL_WANTS_CA_BUNDLE_ENV macro removed from curl_setup.h
    • !nghttp2 disabled when --disable-http is configured
62. 7.54.0 Apr 19, 2017 · release notes

    curl 7.54.0 adds TLS max version control and connect header suppression

    • Adds --max-tls CLI flag to set the maximum TLS protocol version for connections.
    • Adds CURL_SSLVERSION_MAX_* constants to use with CURLOPT_SSLVERSION for programmatic TLS version limiting.
    • Adds --suppress-connect-headers flag to omit proxy CONNECT response headers from output.
    • Adds CURLOPT_SUPPRESS_CONNECT_HEADERS option to suppress proxy CONNECT response headers programmatically.

    4 details in Everything

63. 7.53.0 Feb 22, 2017 · release notes

    curl 7.53.0 adds abstract Unix sockets, server push control, and new build options

    • Adds --abstract-unix-socket CLI flag and CURLOPT_ABSTRACT_UNIX_SOCKET library option to connect via abstract namespace Unix domain sockets
    • HTTP/2 server push is now disabled by default if not explicitly requested

    2 details in Everything

64. curl-7_52_0 Dec 21, 2016 · release notes

    curl 7.52.0 adds TLS 1.3 draft 28 support and multiple protocol/client enhancements

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch curl-7_52_0 https://github.com/curl/curl.git
    # already have the repo? check out this version:
    $ git checkout curl-7_52_0

    └──▷ TRY IT
    Force curl to reject any connection attempting to use a TLS version newer than 1.2 for compatibility with legacy servers.
    copy

    $ curl --tls-max 1.2 https://example.com

    Connect to an SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. server using TLS and authenticate via GSS-API (KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application.) for the STARTTLSSTARTTLSA protocol command that upgrades a plaintext connection to an encrypted TLS session without changing ports, used in SMTP, IMAP, and LDAP so tools can negotiate encryption opportunistically on standard service ports. command.
    copy

    $ curl --tlsuser 'admin' --tlspassword 'secret' smtps://mail.example.com

    Disable ALPN to force the server to fall back to NPN or older protocol selection methods, useful for debugging specific TLS negotiation issues.
    copy

    $ curl --no-alpn https://example.com

    • Adds --tls-max flag to restrict the maximum TLS version allowed for connections.
    • Adds --tlsuser and --tlspassword flags to specify credentials for GSS-API authentication in TLS channels.
    • Adds support for TLS 1.3 draft 28 protocol implementation.
    • Adds --hsts option to enable HSTSHSTSAn HTTP response header, standardized in RFC 6797, that instructs browsers to contact a site over HTTPS only for a declared period, preventing protocol-downgrade and cookie-hijacking attacks. behavior on the command line.
    • Adds --no-npn flag to disable Next Protocol Negotiation (NPN) during TLS handshake.

    +1 more show less

    • Adds --no-alpn flag to disable Application-Layer Protocol Negotiation (ALPN) during TLS handshake.

    6 details in Everything

65. 7.52.0 Dec 21, 2016 · release notes

    curl 7.52.0 adds --retry-connrefused, --fail-early, --tlsv1.3 and HTTP/2 window tuning

    • Adds --retry-connrefused to automatically retry connections that are refused by the target server.
    • Adds --fail-early to abort immediately on first error instead of continuing to drain the stream.
    • Adds --tlsv1.3 option to explicitly force TLS version 1.3 for a connection.
    • Supports HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. proxies and SOCKSSOCKSA proxy protocol that relays TCP (and optionally UDP) connections through an intermediary server, letting cyber tools route traffic through a pivot host or anonymizing layer without needing raw network access.+HTTP(S) proxy configurations via existing proxy flags.
    • Adds CURLINFO_SCHEME, CURLINFO_PROTOCOL, %{scheme} format escape, and HTTP/2 window size configuration options.

    5 details in Everything

66. 7.50.0 Jul 21, 2016 · release notes

    curl 7.50.0 adds HTTP version info, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. DNS64DNS64A DNS server mechanism that synthesizes AAAA (IPv6) records from A (IPv4) records, letting IPv6-only clients reach IPv4-only hosts without dual-stack infrastructure. Cyber tools use it to handle mixed-protocol environments transparently./NAT64 resolution, and SCHANNEL cert verification

    • Adds CURLINFO_HTTP_VERSION info option to retrieve the negotiated HTTP protocol version.
    • Adds %{http_version} curl-format placeholder to display the HTTP version in output formatting.
    • Adds support for resolving DNS via IPv6 DNS64/NAT64 networks on OS X and iOS through the resolve feature.
    • Adds CURLOPT_CERTINFO support for the Schannel SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. backend on Windows to allow certificate chain inspection.

    4 details in Everything

67. 7.49.0 May 18, 2016 · release notes

    curl 7.49.0 adds ALPN, HTTP/2 prior knowledge, connect-to redirection, and TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. fast open

    • Adds --http2-prior-knowledge CLI flag to use HTTP/2 without HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. upgrade negotiation
    • Adds --connect-to <host:port:target-host:target-port> option to redirect requests to a different address
    • Adds --tcp-fastopen flag to enable TCP Fast Open (TFO) for connections
    • Integrates ALPN support in schannel and wolfssl backends for protocol negotiation
    • Adds statvfs as a new CURLOPT_QUOTE subcommand for SSH transfers

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !curl removes support for the deprecated flags --ftpport, -http-request, and --socks
68. 7.47.0 Jan 27, 2016 · release notes

    curl 7.47.0 adds HTTP/2 for HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate.-only via --http2_tls, new --expect100-timeout flag, and CURL_VERSION_PSL symbol.

    • Adds --http2_tls option (CURL_HTTP_VERSION_2TLS) to enable HTTP/2 strictly for HTTPS connections
    • Adds --expect100-timeout CLI argument to control the wait time for a 100-continue response
    • Adds CURL_VERSION_PSL flag in libcurl to detect Public Suffix List support

    3 details in Everything

69. 7.46.0 Dec 2, 2015 · release notes

    curl 7.46 adds HTTP/2 stream dependency/weight controls, mbedTLS support, and OAUTHBEARER SASLSASLA framework for plugging authentication mechanisms into network protocols, standardized by the IETF, so a tool can support password, Kerberos, or certificate login without rewriting auth logic per protocol. for IMAP/POP3/SNMPSNMPA UDP-based protocol for querying and managing network devices, standardized by the IETF. Cyber tools use it to pull interface stats, topology data, and device state from routers, switches, and servers at scale..

    • CURLOPT_STREAM_DEPENDS to specify an HTTP/2 stream dependency
    • CURLOPT_STREAM_DEPENDS_E for exclusive HTTP/2 stream dependencies
    • CURLOPT_STREAM_WEIGHT to set priority weight for HTTP/2 streams
    • mbedTLS vtls backend support via configure
    • oauth2 OAUTHBEARER SASL mechanism support for IMAP, POP3 and SNMP

    5 details in Everything

70. 7.44.0 Aug 12, 2015 · release notes

    curl 7.44.0 adds HTTP/2 server push support and --ssl-no-revoke CLI flag

    • Adds --ssl-no-revoke to curl CLI to disable certificate revocation checks
    • Adds CURLMOPT_PUSHFUNCTION and CURLMOPT_PUSHDATA multi-interface options for HTTP/2 server push
    • Adds curl_pushheader_byname() and curl_pushheader_bynum() API functions for inspecting HTTP/2 push headers

    3 details in Everything

71. 7.43.0 Jun 17, 2015 · release notes

    curl 7.43.0 adds HPKP support via NSS and cyassl backends, HTTP/2 multiplexing, --data-raw, and new service-name options

    • --data-raw option for sending raw data without interpreting special characters like @ or -
    • CURLPIPE_MULTIPLEX bit in CURLMOPT_PIPELINING to enable HTTP/2 multiplexing transfers (requires nghttp2 1.0.0+)
    • HPKP support in NSS backend (nss: implement public key pinning for NSS backend)
    • HPKP support in cyassl backend (cyassl: Implement public key pinning)
    • --proxy-service-name option (and CURLOPT_PROXY_SERVICE_NAME API) for proxy authentication service names

    +1 more show less

    • --service-name option (and CURLOPT_SERVICE_NAME API) for generic service name support

    6 details in Everything

72. 7.42.0 Apr 22, 2015 · release notes

    curl 7.42.0 adds --false-start and --path-as-is options

    • Adds --false-start option to enable SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./TLS false start (darwinssl and NSS)
    • Adds --path-as-is option to send the request path without normalizing it

    2 details in Everything

73. 7.41.0 Feb 25, 2015 · release notes

    curl 7.41.0 adds --cert-status, CURL_LDAP_WIN rename, and EXTERNAL SASLSASLA framework for plugging authentication mechanisms into network protocols, standardized by the IETF, so a tool can support password, Kerberos, or certificate login without rewriting auth logic per protocol.

    • Adds the --cert-status command-line option to request OCSPOCSPA protocol for checking whether a TLS certificate has been revoked, defined in RFC 6960, letting clients query a CA's responder in real time instead of downloading full CRL lists. certificate status checks.
    • Adds CURLOPT_SSL_VERIFYSTATUS libcurl API for enabling OCSP stapling verification in code.
    • Implements the EXTERNAL SASL authentication mechanism, enabling external identity-based authentication across supported protocols.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Renames CURL_LDAP_WIN definition to USE_WIN32_LDAP in curl.h/libcurl internal headers.
74. 7.40.0 Jan 8, 2015 · release notes

    curl 7.40.0 adds SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments./CIFS protocol support, HTTP over unix domain sockets, and KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. V5 to new installations.

    • Adds initial support for the SMB/CIFS protocol
    • Added support for HTTP over unix domain sockets via --unix-socket flag and CURLOPT_UNIX_SOCKET_PATH option
    • Added Kerberos V5 to the supported features list for version info and authentication

    3 details in Everything

75. 7.39.0 Nov 5, 2014 · release notes

    curl 7.39.0 adds public key pinning and the RELOAD cookie command.

    • Adds --pinnedpubkey flag to enable SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. public key pinning via the underlying CURLOPT_PINNEDPUBLICKEY option
    • Adds the RELOAD subcommand to CURLOPT_COOKIELIST for reloading cookies from disk

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !SSLv3 is disabled by default, which will break connections to servers requiring SSLv3
76. 7.38.0 Sep 10, 2014 · release notes

    curl 7.38.0 adds HTTP/2 draft-14 support via nghttp2

    • Introduces CURLE_HTTP2 error code for HTTP/2 specific failures.
    • Adds CURLAUTH_NEGOTIATE constant for KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. (SASLSASLA framework for plugging authentication mechanisms into network protocols, standardized by the IETF, so a tool can support password, Kerberos, or certificate login without rewriting auth logic per protocol. GSSAPI) authentication.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Deprecated GSS-Negotiate macros due to bad naming.
77. 7.37.1 Jul 16, 2014 · release notes

    curl 7.37.1 adds connection close tracking, Darwin SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. --cacert support, PolarSSL ALPN, and HTTP/2 initial support.

    • Introduces bits.close for connection close tracking to improve connection reuse logic
    • Adds --cacert option support when compiled with DarwinSSL (macOS native SSL backend)
    • Enables ALPN (Application-Layer Protocol Negotiation) support when compiled with PolarSSL

    3 details in Everything

78. 7.37.0 May 21, 2014 · release notes

    curl 7.37.0 adds IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. zone ID support, HTTP/2 (nghttp2), and --proxy-header flag

    • Adds --proxy-header flag to set custom headers for proxy-only connections via new CURLOPT_PROXYHEADER API

    1 detail in Everything

79. 7.36.0 Mar 26, 2014 · release notes

    curl 7.36.0 adds NTLMv2NTLMv2A Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent., ALPN/NPN support for SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. backends, TLS 1.1/1.2 defaults, and new HTTP/2 build capabilities

    • Added --no-alpn and --no-npn CLI options to disable protocol negotiation
    • Added support for NTLMv2 authentication via the ntlm backend
    • Added URL-specific options allowing per-URL configuration overrides
    • Added CURLOPT_EXPECT_100_TIMEOUT_MS for fine-grained control of 100-continue timeouts
    • Added CURLOPT_SSL_ENABLE_NPN and CURLOPT_SSL_ENABLE_ALPN libcurl options

    +1 more show less

    • Enabled TLSv1.1 and TLSv1.2 by default in winssl backend

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Dropped support for PolarSSL versions older than 1.3.0
80. 7.35.0 Jan 29, 2014 · release notes

    curl 7.35.0 adds SASLSASLA framework for plugging authentication mechanisms into network protocols, standardized by the IETF, so a tool can support password, Kerberos, or certificate login without rewriting auth logic per protocol. downgrades and I64 specifiers

    • Added support for SASL authentication downgrades in imap/pop3/smtp protocols
    • Extended login options to allow multiple auth mechanisms for imap/pop3/smtp
    • Added support for I, I32 and I64 size specifiers in mprintf

    3 details in Everything

81. 7.33.0 Oct 14, 2013 · release notes

    curl 7.33.0 adds SASLSASLA framework for plugging authentication mechanisms into network protocols, standardized by the IETF, so a tool can support password, Kerberos, or certificate login without rewriting auth logic per protocol. XOAUTH2, --oauth2-bearer, darwinssl PKCS12PKCS12A file format standard from RSA Labs, now maintained under IETF, that bundles a private key, certificate, and chain into one encrypted container, letting cyber tools ship or load credentials as a single portable file. and TFTPTFTPTrivial File Transfer Protocol, a minimal UDP-based file transfer protocol standardized in RFC 1350, used by cyber tools when simplicity and low overhead matter more than authentication or error recovery. writedelay

    • imap/pop3/smtp: added basic SASL XOAUTH2 support for IMAP/POP3/SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. authentication
    • curl: added --oauth2-bearer option to supply an OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. token directly
    • darwinssl: add support for PKCS#12 files for client authentication
    • test TFTP server: support writedelay within <servercmd>
    • c-ares: Add support for various DNS binding options

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !krb4 support has been removed
82. 7.32.0 Aug 12, 2013 · release notes

    curl 7.32.0 adds decimal timeout support, GSKit SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. backend, and CURLOPT_XFERINFOFUNCTION progress callback

    • Allows timeout values to accept decimal numbers for finer-grained control
    • Adds the GSKit SSL backend for OS400 systems
    • Introduces CURLOPT_XFERINFOFUNCTION as a new progress callback mechanism

    3 details in Everything

83. 7.31.0 Jun 22, 2013 · release notes

    curl 7.31.0 adds TLS session resumption for darwinssl, SASLSASLA framework for plugging authentication mechanisms into network protocols, standardized by the IETF, so a tool can support password, Kerberos, or certificate login without rewriting auth logic per protocol. initial response support, and allows colons in certificate nicknames via -E.

    • Adds darwinssl backend support for TLS session resumption to improve connection performance on macOS
    • Adds darwinssl support for TLS crypto authentication (client certificates) using the system keychain
    • Adds ;auth=<mech> URL syntax support for imap, pop3, and smtp protocols to specify authentication mechanism
    • Adds support for SASL initial response in imap/pop3/smtp via both URL syntax and CURLOPT_USERPWD
    • Allows colons (:) in certificate nicknames when using the -E flag by parsing the format nickname:password

    5 details in Everything

84. 7.30.0 Apr 12, 2013 · release notes

    curl 7.30.0 adds IMAP extensions, STARTTLSSTARTTLSA protocol command that upgrades a plaintext connection to an encrypted TLS session without changing ports, used in SMTP, IMAP, and LDAP so tools can negotiate encryption opportunistically on standard service ports. across protocols, and multi-interface pipelining controls.

    • Adds imap: Added support for the list command to query mailbox contents via IMAP
    • Adds imap: Added support for the append command to upload messages to a mailbox via IMAP
    • Adds curl_global_init() CURL_GLOBAL_ACK_EINTR flag to handle EINTR in global initialization
    • Adds CURLMOPT_MAX_HOST_CONNECTIONS and CURLMOPT_MAX_TOTAL_CONNECTIONS for multi interface connection limits
    • Adds CURLMOPT_MAX_PIPELINE_LENGTH, CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE, CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE, CURLMOPT_PIPELINING_SITE_BL, and CURLMOPT_PIPELINING_SERVER_BL for pipelining control

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The strlcat function is removed from the source code
85. 7.28.0 Oct 10, 2012 · release notes

    curl 7.28.0 adds multi interface wait API, SSH agent auth, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. SOCKSv5, and TLS 1.2

    • Adds curl_multi_wait() to the multi interface for efficient event loop integration
    • Adds SSH agent based authentication for secure key handling
    • Adds support for IPv6 connections through SOCKSv5 proxies
    • Adds TLS 1.2 support in the darwinssl backend
    • Adds CryptoAPI support for metalink and md5 operations on Windows

    5 details in Everything

86. 7.27.0 Jul 27, 2012 · release notes

    curl 7.27.0 adds --metalink flag, POP3 SASLSASLA framework for plugging authentication mechanisms into network protocols, standardized by the IETF, so a tool can support password, Kerberos, or certificate login without rewriting auth logic per protocol. auth and native SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. backends

    • Adds --metalink command-line flag to support Metalink protocol downloads
    • Enables POP3 SASL Plain text authentication for automated account access
    • Enables POP3 SASL Login authentication for automated account access
    • Enables POP3 SASL NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. authentication for Windows domain accounts
    • Enables POP3 SASL CRAM-MD5 authentication for secure password verification

    +4 more show less

    • Enables POP3 SASL Digest-MD5 authentication with nonce-based hashing
    • Enables POP3 APOP authentication using MD5 message digests
    • Adds Schannel as a native Windows SSL/TLS backend option
    • Adds Darwin SSL as the native SSL/TLS backend for macOS and iOS

    9 details in Everything

87. 7.26.0 May 24, 2012 · release notes

    curl 7.26.0 adds --post303, CURL_REDIR_POST_303, smtp DIGEST-MD5 auth, pop3 commands, and -w filename_effective

    • --post303 CLI flag and CURL_REDIR_POST_303 option for CURLOPT_POSTREDIR to keep POST data on 303 redirects.
    • smtp: support for DIGEST-MD5 authentication mechanism.
    • pop3: support for additional pop3 commands.
    • New -w format string filename_effective to output the effective filename after a transfer.

    4 details in Everything

88. 7.25.0 Mar 22, 2012 · release notes

    curl 7.25.0 adds mail-auth CLI flag, TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. keepalive libcurl options, SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. BEAST allow config, and improved --libcurl support.

    • Adds --mail-auth CLI option for SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. AUTH identity verification
    • Adds configure option to disable --libcurl output generation
    • Adds CURLOPT_TCP_KEEPIDLE and CURLOPT_TCP_KEEPINTVL libcurl options for library-side TCP keepalive configuration
    • Adds CURLOPT_SSL_OPTIONS with CURLOPT_SSL_ALLOW_BEAST support in libcurl
    • Enables -F and other options to work with the --libcurl flag

    5 details in Everything

89. 7.24.0 Jan 24, 2012 · release notes

    curl 7.24.0 adds SFTPSFTPSSH File Transfer Protocol, a file transfer standard built on top of SSH that provides encrypted upload, download, and remote file management; cyber tools use it to move files or exfiltrate data over an authenticated, encrypted channel. prefix support, nettle backend, ACCEPTTIMEOUT_MS option, and versioned symbols build option.

    • CURLOPT_QUOTE for the SFTP protocol now supports the *-prefix to execute commands
    • Add support for using nettle instead of gcrypt as gnutls backend
    • Added CURLOPT_ACCEPTTIMEOUT_MS option to control socket acceptance timeout
    • configure: add symbols versioning option --enable-versioned-symbols
    • curl now supports setting name servers via CURLOPT_DNS_SERVERS if the platform allows it

    5 details in Everything

90. 7.22.0 Sep 13, 2011 · release notes

    curl 7.22.0 adds NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. delegation support and GSSAPI delegation options for KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application./NTLM scenarios.

    • Adds --delegation command-line option to control GSSAPI credential delegation behavior
    • Adds CURLOPT_GSSAPI_DELEGATION API option to programmatically set GSSAPI delegation levels
    • Adds support for NTLM delegation to Samba's winbind daemon helper ntlm_auth

    3 details in Everything

91. 7.21.7 Jun 23, 2011 · release notes

    curl 7.21.7 adds SOCKSSOCKSA proxy protocol that relays TCP (and optionally UDP) connections through an intermediary server, letting cyber tools route traffic through a pivot host or anonymizing layer without needing raw network access. proxy protocol prefixes and new CURLM socket callback options

    • Recognizes [protocol]:// prefix in proxy hosts for socks4, socks4a, socks5, or socks5h protocols to simplify proxy configuration without manual --proxy-type flags.
    • Adds CURLOPT_CLOSESOCKETFUNCTION and CURLOPT_CLOSESOCKETDATA options to allow custom socket cleanup logic in multi-handle workflows.

    2 details in Everything

92. 7.21.5 Apr 17, 2011 · release notes

    curl 7.21.5 adds --netrc-file, cyassl support, and new libcurl error codes

    • Adds --netrc-file option to specify a custom netrc file path instead of the default ~/.netrc
    • Adds support for CyASSL TLS library as an alternative to OpenSSL or GnuTLSGnuTLSAn open-source TLS/SSL library maintained by the GNU Project that implements secure communications protocols, giving cyber tools a portable, LGPL-licensed alternative to OpenSSL for encrypted connections.
    • Adds new libcurl error codes CURLE_NOT_BUILT_IN and CURLE_UNKNOWN_OPTION for better API diagnostics

    3 details in Everything

93. 7.21.3 Dec 15, 2010 · release notes

    curl 7.21.3 adds --xattr support, --resolve/CURLOPT_RESOLVE, and CURLAUTH_ONLY

    • Adds --xattr command-line option to store extended attributes on downloaded files.
    • Adds --resolve CLI flag and CURLOPT_RESOLVE libcurl option for custom DNS resolution.
    • Adds CURLAUTH_ONLY constant to force authentication-only behavior without sending credentials.

    3 details in Everything

94. 7.21.2 Oct 13, 2010 · release notes

    curl 7.21.2 adds GOPHER protocol support and mk-ca-bundle.vbs script

    • Adds mk-ca-bundle.vbs script for certificate bundle generation.

    1 detail in Everything

95. 7.21.0 Jun 16, 2010 · release notes

    curl 7.21.0 adds --proto for protocol selection, RTMP support, and PolarSSL

    • Adds --proto and -proto-redir options to control allowed protocols

    1 detail in Everything

96. 7.20.0 Feb 9, 2010 · release notes

    curl 7.20.0 adds IMAP/POP3/SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure./RTSP support and TFTPTFTPTrivial File Transfer Protocol, a minimal UDP-based file transfer protocol standardized in RFC 1350, used by cyber tools when simplicity and low overhead matter more than authentication or error recovery. async

    • Adds --mail-from and --mail-rcpt options for SMTP mail sending

    1 detail in Everything

97. 7.19.7 Nov 4, 2009 · release notes

    curl 7.19.7 adds --crlfile option for non-blocking stdin uploads and SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./CRLCRLA Certificate Revocation List is a signed file, published by a certificate authority, listing certificates it has revoked before expiry so that clients can reject compromised or mis-issued credentials without contacting the CA live. support

    • --crlfile added to curl for specifying Certificate Revocation List files

    1 detail in Everything

98. 7.19.4 Mar 3, 2009 · release notes

    curl 7.19.4 adds new flags for noproxy, TFTPTFTPTrivial File Transfer Protocol, a minimal UDP-based file transfer protocol standardized in RFC 1350, used by cyber tools when simplicity and low overhead matter more than authentication or error recovery. blocksize, SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. GSSAPI service, HTTP 1.0 proxy, and SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address./TLS ticket controls.

    • Adds the --noproxy command-line option (and CURLOPT_NOPROXY) to specify hosts that should bypass the proxy
    • Adds CURLOPT_TFTP_BLKSIZE to configure the TFTP transfer block size
    • Adds --socks5-gssapi-service and --socks5-gssapi-nec CLI options (and corresponding CURLOPT_* settings) for SOCKS5 GSSAPI configuration
    • Adds --proxy1.0 command-line option (and CURLPROXY_HTTP_1_0) to force HTTP proxy version 1.0 instead of 1.1
    • Adds CURLOPT_REDIR_PROTOCOLS and CURLOPT_PROTOCOLS to control which protocols are followed during redirects or explicitly set by the application

    +1 more show less

    • Adds CURLINFO_CONDITION_UNMET to check if conditional request headers caused the server to reject the transfer

    6 details in Everything

99. 7.19.1 Nov 5, 2008 · release notes

    curl 7.19.1 adds protocol introspection via pkg-config and new libcurl options for cert info, redirect handling, credentials, and proxy auth.

    • pkg-config --libs can now show supported_protocols and supported_features
    • Added CURLOPT_CERTINFO to request certificate details in responses
    • Added CURLINFO_CERTINFO option to retrieve the requested certificate info
    • Added CURLOPT_POSTREDIR to control redirect behavior for POST requests
    • Added CURLOPT_USERNAME and CURLOPT_PASSWORD options

    +2 more show less

    • --interface flag now works with IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. connections on glibc systems
    • Added CURLOPT_PROXYUSERNAME and CURLOPT_PROXYPASSWORD options

    7 details in Everything

100. 7.19.0 Sep 1, 2008 · release notes

     curl 7.19.0 adds --remote-name-all, SFTPSFTPSSH File Transfer Protocol, a file transfer standard built on top of SSH that provides encrypted upload, download, and remote file management; cyber tools use it to move files or exfiltrate data over an authenticated, encrypted channel. append, SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. CRLCRLA Certificate Revocation List is a signed file, published by a certificate authority, listing certificates it has revoked before expiry so that clients can reject compromised or mis-issued credentials without contacting the CA live./Issuer cert options, and INTEGRITY OS support

     • Adds the --remote-name-all flag to save all received files using the remote file name
     • Adds --append support for SFTP uploads to continue existing files on the server
     • Adds CURLOPT_CRLFILE and CURLE_SSL_CRL_BADFILE to specify Certificate Revocation List files
     • Adds CURLOPT_ISSUERCERT and CURLE_SSL_ISSUER_ERROR to validate SSL certificate issuers
     • Adds new -w %{ssl_verify_result} format variable for the -w option to check SSL verification status

     +4 more show less

     • Adds CURLINFO_PRIMARY_IP info function to retrieve the primary IP address of the connection
     • Adds CURLOPT_ADDRESS_SCOPE option and URL scope parsing according to RFC4007 for IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. link-local addresses
     • Adds CURLINFO_APPCONNECT_TIME info function to retrieve application connect time
     • Enables building for the INTEGRITY operating system

     9 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !curl_off_t size/typedef changed, potentially causing an ABI change
101. 7.18.2 Jun 4, 2008 · release notes

     Adds CURLFORM_STREAM, SFTPSFTPSSH File Transfer Protocol, a file transfer standard built on top of SSH that provides encrypted upload, download, and remote file management; cyber tools use it to move files or exfiltrate data over an authenticated, encrypted channel. NOBODY support, Symbian OS platform support, new multi-interface functions, and HTTP redirect URL tracking in curl 7.18.2

     • Adds CURLFORM_STREAM for stream-based form data construction
     • Adds support for CURLOPT_NOBODY over SFTP protocol
     • Enables curl to run on Symbian OS platform
     • Adds -w redirect_url and CURLINFO_REDIRECT_URL for tracking redirects
     • Adds curl_easy_send() and curl_easy_recv() functions to the multi interface

     5 details in Everything

102. 7.18.1 Mar 30, 2008 · release notes

     curl 7.18.1 adds SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address., HttpOnly cookie support, --with-ca-path and SSLv2 disabled by default

     • Adds --with-ca-path=DIR configure option to set an OpenSSL CApath instead of a default ca bundle
     • Supports server name indication (RFC 4366), aka SNI
     • Adds support for HttpOnly cookies
     • SSLv2 is now disabled by default for SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. operations

     4 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !SSLv2 is now disabled by default for SSL operations
     • !the test509-style setting URL in callback is officially no longer supported
103. 7.18.0 Jan 28, 2008 · release notes

     curl 7.18.0 adds SOCKS4a and SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead.-hostname proxies, --data-urlencode, curl_easy_pause(), seek callbacks, --keepalive-time, and improved pipelining

     • --socks4a proxy support (CURLPROXY_SOCKS4A in libcurl)
     • --socks5-hostname proxy support (CURLPROXY_SOCKS5_HOSTNAME in libcurl)
     • CURLOPT_PROXY_TRANSFER_MODE option added
     • curl_easy_pause() function added to libcurl
     • --data-urlencode flag added for URL-encoding POST data

     5 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Connections now have keep-alive enabled by default; the --no-keepalive flag is now needed to disable this behavior.
104. 7.17.1 Oct 29, 2007 · release notes

     Adds --proxy-negotiate, --post301, and --hostpubmd5 flags; adds CURLOPT_* library functions

     • Adds --proxy-negotiate flag for Negotiate authentication over proxy
     • Adds --post301 CLI option and CURLOPT_POST301 libcurl option to handle HTTP 301 redirects
     • Adds --hostpubmd5 flag and CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 libcurl option for SSH host key verification via MD5 hash
     • Adds --static-libs to curl-config for static library linking
     • Adds CURLOPT_OPENSOCKETFUNCTION and CURLOPT_OPENSOCKETDATA for custom socket creation

     5 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !CURLE_SSL_PEER_CERTIFICATE is renamed to CURLE_PEER_FAILED_VERIFICATION
105. 7.16.4 Jul 10, 2007 · release notes

     curl 7.16.4 adds KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. 5 for FTP and two new CURLOPT options

     • Adds CURLOPT_NEW_FILE_PERMS and CURLOPT_NEW_DIRECTORY_PERMS to control file and directory permissions for newly created remote files.
     • Adds FTP Kerberos 5 support for encrypted authentication over FTP.

     2 details in Everything

106. 7.16.3 Jun 25, 2007 · release notes

     curl 7.16.3 adds curl_multi_socket_action(), CURLMOPT_MAXCONNECTS and SFTPSFTPSSH File Transfer Protocol, a file transfer standard built on top of SSH that provides encrypted upload, download, and remote file management; cyber tools use it to move files or exfiltrate data over an authenticated, encrypted channel. quote commands before transfer

     • curl_multi_socket_action() added; curl_multi_socket() deprecated
     • CURLMOPT_MAXCONNECTS option added to curl_multi_setopt()

     2 details in Everything

107. 7.16.2 Apr 11, 2007 · release notes

     curl 7.16.2 adds MS timeouts, SSH key support, NSS TLS and new CLI options

     • Adds CURLOPT_TIMEOUT_MS and CURLOPT_CONNECTTIMEOUT_MS API options for millisecond precision timeouts.
     • Adds --raw, --ftp-ssl-ccc-mode, --pubkey, and --key command-line flags for raw transfer and SSH public key authentication.
     • Adds support for using the NSS library for TLS/SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. instead of OpenSSL.
     • Enables CURLOPT_HTTP_CONTENT_DECODING and CURLOPT_HTTP_TRANSFER_DECODING to control HTTP decoding behavior.
     • Extends --ftp-ssl-control functionality to now be honored on ftps:// URLs.

     5 details in Everything

108. 7.16.0 Oct 30, 2006 · release notes

     curl 7.16.0 introduces HTTP pipelining via CURLMOPT_PIPELINING and FTP over SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. control with --ftp-ssl-control

     • Adds CURLMOPT_PIPELINING to enable HTTP pipelined transfers in the multi interface.
     • Adds --ftp-ssl-control command-line option for explicit FTP SSL control channel management.
     • Adds support for WSAPoll() on Windows Vista for improved socket polling.
     • Adds CURLMOPT_TIMERFUNCTION and CURLMOPT_TIMERDATA to customize multi-interface timer behavior.

     4 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The CURLOPT_SOURCE_* options are removed.
     • !The --3p* command line options are removed.
109. 7.15.5 Aug 7, 2006 · release notes

     curl 7.15.5 adds FTP SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. requirement flag, multi-handle assign API, and form data export

     • Adds --ftp-ssl-reqd to require FTP over TLS/SSL for transfers
     • Adds curl_multi_assign() function to map pointers to easy handles in a multi stack
     • Adds curl_formget() to retrieve form data payload for external processing
     • Adds CURLOPT_FTP_ALTERNATIVE_TO_USER and --ftp-alternative-to-user options for FTP authentication fallback

     4 details in Everything

110. 7.15.4 Jun 12, 2006 · release notes

     curl 7.15.4 adds curl_multi_socket API, session cookie clearing, and FTP/NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. improvements

     • Adds curl_multi_socket() API for multi interface event-based usage
     • Adds CURLOPT_COOKIELIST with SESS value to clear all session cookies
     • Adds --checkfor option to curl-config for version number comparison
     • Adds CURLINFO_FTP_ENTRY_PATH info variable
     • Enables line end conversions for FTP ASCII transfers

     5 details in Everything

111. 7.15.2 Feb 27, 2006 · release notes

     curl 7.15.2 adds --socks4 support and refcounted global init/cleanup APIs

     • Adds --socks4 flag to enable SOCKS4 proxy support
     • Introduces CURLOPT_CONNECT_ONLY and CURLINFO_LASTSOCKET options for libcurl
     • Adds --local-port CLI argument mapped to CURLOPT_LOCALPORT and CURLOPT_LOCALPORTRANGE for controlling source ports

     3 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Dropped support for the LPRT ftp command
     • !Gopher is now officially abandoned as a protocol in libcurl
112. 7.15.1 Dec 7, 2005 · release notes

     curl 7.15.1 adds URL globbing range steps, LDAPv3 preference, and redirect limit controls

     • Sets LDAPv3 as the preferred LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. protocol version automatically

     1 detail in Everything

113. 7.15.0 Oct 13, 2005 · release notes

     curl 7.15.0 adds TFTPTFTPTrivial File Transfer Protocol, a minimal UDP-based file transfer protocol standardized in RFC 1350, used by cyber tools when simplicity and low overhead matter more than authentication or error recovery. support, --ftp-skip-pasv-ip flag, and CURLOPT_FTP_SKIP_PASV_IP option

     • Adds --ftp-skip-pasv-ip CLI argument to skip PASV IP address handling in FTP transfers
     • Adds CURLOPT_FTP_SKIP_PASV_IP library option for programmatic control of PASV IP skipping
     • Adds TFTP protocol support

     3 details in Everything

114. 7.14.1 Sep 1, 2005 · release notes

     curl 7.14.1 adds GSSAPI support, FTPSFTPSFTP with TLS/SSL encryption layered on top, standardized in RFC 4217, used by tools that need to transfer files over authenticated, encrypted channels while staying compatible with legacy FTP infrastructure. early data connection SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination., and new curl_easy options for cookies and content length handling.

     • Adds GNU GSS support for authentication
     • Adds --ignore-content-length and CURLOPT_IGNORE_CONTENT_LENGTH to override Content-Length headers
     • Negotiates FTPS data connection SSL earlier when using PASV mode
     • Adds CURLOPT_COOKIELIST and CURLINFO_COOKIELIST for cookie management
     • Adds trailer support for chunked encoded data streams

     +2 more show less

     • Allows -x/CURL_PROXY strings to contain user+password in the format user+password@host
     • Makes --trace-time output full microsecond precision (6 digits)

     7 details in Everything

115. 7.14.0 May 16, 2005 · release notes

     curl 7.14.0 adds --trace-time, GnuTLSGnuTLSAn open-source TLS/SSL library maintained by the GNU Project that implements secure communications protocols, giving cyber tools a portable, LGPL-licensed alternative to OpenSSL for encrypted connections. support, env var respect, and more search paths for .curlrc

     • Adds --trace-time flag to prefix each trace line with a time stamp
     • Now respects the SSL_CERT_DIR and SSL_CERT_PATH environment variables for CA certificate locations
     • Adds GnuTLS backend support via configure --with-gnutls
     • Expands search paths for curl's default .curlrc config file

     4 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Modified default HTTP request headers
116. 7.13.0 Feb 1, 2005 · release notes

     Adds FTP account control, third-party URL options, curl-config --protocols, and HTTP CONNECTHTTP CONNECTAn HTTP method that asks a proxy server to open a raw TCP tunnel to a target host, letting clients relay arbitrary traffic — including TLS — through the proxy without the proxy inspecting it. header in -w output

     └──▷ USE IT
     Check which protocols your curl build supports.
     shell copy

     curl-config --protocols

     • --ftp-account and CURLOPT_FTP_ACCOUNT add FTP account string support for transfers.
     • --3p-url, --3p-user, and --3p-quote enable third-party URL, user, and quote commands for FTP.
     • curl-config --protocols prints supported protocols to stdout.
     • -w format variable http_connect outputs the proxy's response code to a CONNECT request.

     4 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !CURLOPT_SOURCE_HOST, CURLOPT_SOURCE_PATH, CURLOPT_SOURCE_PORT, and CURLOPT_PASV_HOST are now obsoleted.
117. 7.12.1 Aug 10, 2004 · release notes

     curl 7.12.1 adds libcurl API reset, SOCKSSOCKSA proxy protocol that relays TCP (and optionally UDP) connections through an intermediary server, letting cyber tools route traffic through a pivot host or anonymizing layer without needing raw network access./IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. combo, read callback abort, and multipart memory limits

     • Adds curl_easy_reset() function to reinitialize a curl easy handle without closing it
     • Enables socks proxy support even when libcurl is built with ipv6 enabled
     • Adds curl tool ability to continue with the next URL if one transfer fails

     3 details in Everything

118. 7.12.0 Jun 2, 2004 · release notes

     curl 7.12.0 adds file:// uploads, curl_global_init_mem(), new CLI flags, and libidn support

     • curl --proxy-digest enables HTTP Digest authentication for proxies.
     • Added curl_global_init_mem() for custom memory allocation management in libcurl.
     • Added curl_easy_strerror(), curl_multi_strerror(), and curl_share_strerror() to libcurl for error message retrieval.
     • configure --with-libidn allows curl to use IDNA names with libidn 0.4.5+.
     • Added ability to upload to file:// URLs using standard PUT/copy methods.

     +1 more show less

     • Windows libcurl can now use wldap32.dll for LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. operations.

     6 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Removed curl_formparse() from the libcurl API.
119. 7.11.2 Apr 26, 2004 · release notes

     curl 7.11.2 adds --tcp-nodelay flag, libcurl version header, and NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. proxy checks

     • Adds --tcp-nodelay CLI flag to control TCP_NODELAY socket option
     • Adds CURLOPT_TCP_NODELAY API setting for programmatic TCP_NODELAY control
     • Introduces curl/curlver.h header containing libcurl version information
     • --proxy-ntlm now checks libcurl NTLM support before execution to prevent errors

     4 details in Everything

120. 7.11.0 Jan 22, 2004 · release notes

     curl 7.11.0 adds large file support, FTP over SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination., multi-interface URL callbacks, and new libcurl version defines

     • Adds INFILESIZE_LARGE, RESUME_FROM_LARGE and MAXFILESIZE_LARGE options for large file support in libcurl
     • Adds --ftp-ssl CLI option to enable SSL over FTP using CURLOPT_FTPSSL or the ftps:// protocol
     • Allows setting the URL via a callback when using the multi interface in libcurl
     • Adds new LIBCURL_VERSION_* defines for easier version checking in code
     • Adds --ftp-pasv flag to override previous --ftpport behavior

     +1 more show less

     • Adds CURLOPT_NETRC_FILE option in libcurl

     6 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Removed the TRUE and FALSE #defines from the public curl header file
121. 7.10.8 Nov 1, 2003 · release notes

     curl 7.10.8 adds SPNEGO, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. on Windows, multi-handle DNS sharing, and several new options

     • --head now works on file:// URLs too
     • Adds CURLOPT_MAXFILESIZE / --max-filesize to limit download size
     • Adds CURLOPT_IPRESOLVE with -4/--ipv4 and -6/--ipv6 CLI options
     • SPNEGO support added (requires libcurl built with FBopenssl)
     • Easy handles in a multi handle now share DNS cache automatically

     +1 more show less

     • curl supports multiple -T flags for uploading several files in one command

     6 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !CURLOPT_PASSWDFUNCTION and CURLOPT_PASSWDDATA are no longer supported
122. 7.10.7 Aug 15, 2003 · release notes

     curl 7.10.7 adds --proxy-ntlm and CURLOPT_PROXYAUTH, optional async DNS, and FTP create-dirs support

     • Adds --proxy-ntlm CLI option for proxy authentication
     • Adds CURLOPT_PROXYAUTH option to allow different authentication methods on proxies
     • Adds --ftp-create-dirs and CURLOPT_FTP_CREATE_MISSING_DIRS support for creating remote directories during FTP uploads

     3 details in Everything

123. 7.10.6 Jul 28, 2003 · release notes

     curl 7.10.6 adds NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent., GSS-Negotiate, Digest auth and proxy env vars

     • Adds --ntlm flag and CURLOPT_HTTPAUTH CURLAUTH_NTLM for NTLM authentication support
     • Adds --negotiate flag and CURLOPT_HTTPAUTH CURLAUTH_GSSNEGOTIATE for GSS-Negotiate authentication support
     • Adds --digest flag and CURLAUTH_DIGEST support, including --anyauth pick-best option
     • Allows libcurl to use name and password from proxy environment variables

     4 details in Everything

124. 7.10.3 Jan 14, 2003 · release notes

     curl 7.10.3 adds --create-dirs, CURLINFO_PRIVATE, and HTTP200aliases

     • Adds --create-dirs flag to automatically create remote directory hierarchies during uploads.
     • Adds CURLOPT_PRIVATE option and CURLINFO_PRIVATE info to associate user data with individual easy handles.
     • Adds CURLOPT_HTTP200ALIASES config to specify alternative HTTP status codes treated as 200 OK.

     3 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !CURL_MAX_WRITE_SIZE is lowered to 16KB by default, which may impact large write buffer expectations on Windows.
125. 7.10 Oct 1, 2002 · release notes

     curl 7.10 adds SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead. proxy support, --compressed flag, and multi-threading safe libcurl API.

     • Added SOCKS5-proxy protocol support for curl and libcurl
     • Added --compressed CLI flag (via CURLOPT_ENCODING) to handle decompressed download data
     • Added curl_version_info() runtime function for version information
     • Added curl_free() function to free memory allocated by libcurl
     • Added CURLOPT_NOSIGNAL option for multi-threaded program safety

     +3 more show less

     • Added --limit-rate CLI flag to control transfer speed
     • Added CURLOPT_BUFFERSIZE option to set the desired read buffer size
     • Changed -x "" (empty proxy argument) to completely disable proxy usage

     8 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !libcurl now verifies peer certificates by default; use -k to disable SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. verification
126. 7.9.8 Jun 13, 2002 · release notes

     curl 7.9.8 adds --capath, optional netrc modes, buffer uploads via libcurl, and higher-resolution timers

     • Adds --capath command line option (and CURLOPT_CAPATH) to specify an alternative certificate directory
     • Adds optional or required mode support to CURLOPT_NETRC for fine-grained netrc usage control
     • Enables curl_formadd() to upload file parts directly from a buffer instead of requiring a file path
     • Improves win32 timers to use higher resolution for more precise timing in transfers

     4 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !curl_formadd() now returns a CURLFORMcode type instead of a plain int, which may require compilation fixes for existing code depending on the return value.
127. 7.9.7 May 10, 2002 · release notes

     curl 7.9.7 adds --trace/--trace-ascii to files, new multi info functions and HTTP 301 POST handling

     • --trace and --trace-ascii flags now support dumping full network/debug logs to a specified file
     • curl_multi_info_read() is implemented as documented for the multi interface
     • Added CURLINFO_REDIRECT_TIME and CURLINFO_REDIRECT_COUNT info options

     3 details in Everything

128. 7.9.6 Apr 14, 2002 · release notes

     curl 7.9.6 adds CURLOPT_DEBUGFUNCTION and multi interface docs

     • Adds CURLOPT_DEBUGFUNCTION option to libcurl for custom debug logging callbacks
     • Adds multi interface man pages, examples and public header files to documentation bundle

     2 details in Everything

129. 7.9.5 Mar 7, 2002 · release notes

     curl 7.9.5 adds CURLOPT_PREQUOTE and %{content_type} support

     • Adds CURLOPT_PREQUOTE option to send custom commands before HTTP requests
     • Extends -w format strings with %{content_type} placeholder

     2 details in Everything

130. 7.9.3 Jan 23, 2002 · release notes

     curl 7.9.3 introduces DNS caching and OpenSSL ENGINE support.

     • Adds DNS lookup cache for improved performance
     • Adds CURLFORM_CONTENTHEADER option to include custom headers in form posts

     2 details in Everything

131. 7.9.2 Dec 5, 2001 · release notes

     curl 7.9.2 adds -disable-epsv, CURLINFO_STARTTRANSFER_TIME, and TLSv1 option

     • Adds --disable-epsv flag to control EPSV behavior in FTP transfers.
     • Adds CURLOPT_FTP_USE_EPSV option for libcurl users to manage EPSV state programmatically.
     • Adds CURLINFO_STARTTRANSFER_TIME info option to retrieve transfer start time details.
     • Adds -1/--tls-v1 command-line option to force TLSv1 protocol negotiation.

     4 details in Everything

132. 7.9 Sep 23, 2001 · release notes

     curl 7.9 adds -r for remote timestamping and curl_formadd()

     • -R sets the timestamp of a downloaded file to match the remote source

     1 detail in Everything

133. 7.5 Dec 1, 2000 · release notes

     curl 7.5 adds --max-redirs, HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. CA cert pinning via --cacert, FTP time retrieval, and config URL support

     • Adds --max-redirs option and CURLOPT_MAXREDIRS libcurl option to limit redirect counts
     • Adds --cacert <file> flag to specify a CA certificate for verifying peer certificates in HTTPS connections
     • Enables --head on FTP files to display modification time when available
     • Adds curl_formfree() function to the libcurl library
     • Adds --url support in config files for easier URL specification

     5 details in Everything

134. 7.3 Sep 28, 2000 · release notes

     curl 7.3 adds --proxytunnel for non-HTTP traffic through HTTP proxies, --interface for binding, and --krb4 for FTP KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application..

     • Adds --proxytunnel to allow non-HTTP protocols to be tunneled through an HTTP proxy
     • Adds --interface to specify the outgoing network interface for connections
     • Adds --krb4 to enable Kerberos V4 authentication for FTP transfers

     3 details in Everything

135. 7.2 Aug 30, 2000 · release notes

     curl 7.2 introduces --data-binary for binary POST data

     • Adds --data-binary flag to enable fully binary -d style posts.

     1 detail in Everything

136. 7.1 Aug 7, 2000 · release notes

     curl 7.1 adds CURLOPT_PROXYPORT and auto-referer support

     • Adds CURLOPT_PROXYPORT option to curl_easy_setopt() in libcurl for explicit proxy port configuration
     • Adds automatic Referer header setting when following Location: redirects (auto referer feature)
     • Enables progress meter callback via new API in libcurl

     3 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !CURLOPT_PROGRESSMODE removed from libcurl public API
137. 6.5 Mar 13, 2000 · release notes

     curl 6.5 adds -w write-out for script output and -b stdin support

     • Adds --write-out (-w) option to specify custom output after a successful request
     • Updates -b flag to accept @- for reading cookies from standard input

     2 details in Everything

138. 6.4 Jan 17, 2000 · release notes

     curl 6.4 adds post-transfer FTP quotes and long option --request

     • --quote commands can now run after FTP transfers
     • -X long option renamed to --request to support full command strings for FTP

     2 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !-X long option is renamed to --request; users must update scripts using the old name
139. 6.3 Nov 10, 1999 · release notes

     curl 6.3 adds Netscape cookie file parsing and internal header replacement via -H

     • -b/--cookie now parses Netscape-style cookie files, allowing scripts to inherit browser session cookies.
     • -H/--header can now replace internal headers by specifying the same header name.

     2 details in Everything

140. 6.2 Oct 21, 1999 · release notes

     curl 6.2 adds --stderr redirect and HTTP header case-insensitivity

     • --stderr now supports redirecting the stderr stream to stdout or a file.
     • HTTP headers are now parsed case insensitive.

     2 details in Everything

141. 5.11 Aug 25, 1999 · release notes

     curl 5.11 adds file:// protocol support and improves cookie handling

     • Makes cookies work a lot better by replacing duplicate cookie names instead of adding more.

     1 detail in Everything

142. 5.10 Aug 13, 1999 · release notes

     curl 5.10 adds --progress-bar and limited telnet support.

     • Adds -#/--progress-bar flag to display a simple progress meter instead of the standard stats line.
     • Adds limited telnet:// protocol support, rewritten by Linus Nielsen.

     2 details in Everything

143. 5.9.1 Jul 30, 1999 · release notes

     curl 5.9.1 adds FormFree(), fixes long URL following and FTP PASV parsing

     • Adds FormFree() function to correct memory leaks in form data handling
     • Supports longer URLs when following Location: headers
     • Improves FTP reply 227 parser for better PASV command compatibility

     3 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !struct slist is renamed to struct curl_slist
144. 5.9 May 22, 1999 · release notes

     curl 5.9 adds -S/--show-error to display errors even when --silent is active

     • Adds -S / --show-error flag to force error message display regardless of -s/--silent usage

     1 detail in Everything

145. 5.8 May 5, 1999 · release notes

     curl 5.8 adds -z flag to support conditional requests via If-Modified-Since headers

146. 5.7 Apr 20, 1999 · release notes

     curl 5.7 improves header handling by separating them to a file and introduces stdin support for config files via -K -.

     └──▷ BREAKING ON UPGRADE

     • !-D/--dump-header now stores HTTP headers separately in the specified file.
147. 5.4 Jan 7, 1999 · release notes

     curl 5.4 enables PUT for HTTP/HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. file uploads via -t/-T flags

148. 5.3 Dec 21, 1998 · release notes

     curl 5.3 adds -Q/--quote to send arbitrary FTP commands

149. 5.0 Dec 1, 1998 · release notes

     curl 5.0 introduces -F for multipart uploads and a configure script

     • Adds the -F flag to enable HTTP POST with multipart/form-data, allowing file uploads directly from the command line.
     • Adds a configure script to automate build setup and dependency detection.
     • Introduces -B/--ftp-ascii to force ASCII mode for FTP transfers.

     3 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The -h short flag now shows help text; the former function was moved to -M.
150. 4.10 Oct 26, 1998 · release notes

     curl 4.10 introduces -K/--config flag for configuration files

     • Adds the -K and --config flags to read options from a file

     1 detail in Everything

151. 4.6 Jul 3, 1998 · release notes

     curl 4.6 adds -n switch for .netrc parsing and a current speed field to the progress meter

     • Adds -n switch to optionally parse .netrc for login user and password with HTTP enabling user authentication
     • Adds a current speed field to the progress meter showing the average speed over the last 5 seconds

     2 details in Everything

152. 4.2 Apr 15, 1998 · release notes

     curl 4.2 adds SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./https support and HTTP POST via -T flag

     • Adds ssl / ssleay support enabling https:// protocol usage
     • Adds -T flag to send data via HTTP POST

     2 details in Everything

153. 4.0 Mar 20, 1998 · release notes

     curl 4.0 introduces -P for active FTP mode and fixes directory listing bugs

     • Adds -P flag to force FTP PORT command instead of PASV
     • Enables -a flag to append data during FTP uploads

     2 details in Everything

154. 3.2 Dec 1, 1997 · release notes

     curl 3.2 adds -l for FTP list-only and global -m timeout flag

     • Adds -l flag to enable list-only mode when viewing FTP directories
     • Adds global -m option to set max time usage in seconds for all operations

     2 details in Everything

155. 3.0 Nov 1, 1997 · release notes

     The curl predecessor urlget 3.0 adds FTP upload support and new -t, -T, -O, and -h flags.

     • Adds FTP upload capabilities.
     • Adds -h flag to generate help text via the new mkhelp script

     2 details in Everything

156. 2.7 Sep 20, 1997 · release notes

     curl 2.7 adds -f fail-silent flag and HTTP range support via -r

     • Adds fail without output in case of HTTP server errors (return code >=300) via the new -f option
     • Adds -r, ranges to specify which part of a document you want, with only that part returned (HTTP/1.1-servers only)

     2 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Removed the -l option; previously used functionality must be handled via external script using urlget.
157. 2.4 Aug 27, 1997 · release notes

     curl 2.4 introduces a terminal progress meter for large downloads and native HTTP Basic Auth via URL userinfo.

158. 2.3 Aug 21, 1997 · release notes

     curl 2.3 adds output file -o flag, loop mode -l, and URG_HTTP_NOT_FOUND return code

     • Adds -o <file> option to write response body directly to a local file instead of stdout
     • Adds -l looping mode option for fetching multiple split files in sequence
     • Introduces URG_HTTP_NOT_FOUND as a new return code for HTTP 404 responses

     3 details in Everything

159. 2.2 Aug 14, 1997 · release notes

     curl v2.2 introduces the -h flag for HTTP header output and fixes proxy path handling.

     • Adds -h flag to include HTTP response headers in the standard output stream

     1 detail in Everything

160. 2.1 Aug 10, 1997 · release notes

     The curl predecessor urlget 2.1 adds a mute option and exposes return codes for use from other programs.

     • Adds a mute option that suppresses output to stderr.
     • Refactors urlget() to expose full range of return codes for programmatic use

     2 details in Everything

161. 2.0 Aug 1, 1997 · release notes

     curl 2.0 introduces ftp GET support and user+passwd authentication for FTP URLs

     • Adds ftp URL type recognition for performing GET operations
     • Supports user+passwd syntax within FTP URLs to enable authenticated logins

     2 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !Renamed the project from its previous name to urlget
162. 1.2 May 1, 1997 · release notes

     curl v1.2 adds HTTP proxy support and stdout output.

     • Added receive byte counter for monitoring download progress

     1 detail in Everything