Here’s to another curl release!
curl 7.58.0 is the 172nd curl release and it contains, among other things, 82 bug fixes thanks to 54 contributors (22 new). All this done with 131 commits in 56 days.
The bug fix rate is slightly lower than in the last few releases, which I tribute mostly to me having been away on vacation for a month during this release cycle. I retain my position as “committer of the Month” and January 2018 is my 29th consecutive month where I’ve done most commits in the curl source code repository. In total, almost 58% of the commits have been done by me (if we limit the count to all commits done since 2014, I’m at 43%). We now count a total of 545 unique commit authors and 1,685 contributors.
So what’s new this time? (full changelog here)
libssh backend
Introducing the pluggable SSH backend, and libssh is now the new alternative SSH backend to libssh2 that has been supported since late 2006. This change alone brought thousands of new lines of code.
Tell configure to use it with –with-libssh and you’re all set!
The libssh backend work was done by Nikos Mavrogiannopoulos, Tomas Mraz, Stanislav Zidek, Robert Kolcun and Andreas Schneider.
Security
Yet again we announce security issues that we’ve found and fixed. Two of them to be exact:
- We found a problem with how HTTP/2 trailers was handled, which could lead to crashes or even information leakage.
- We addressed a problem for users sending custom Authorization: headers to HTTP servers and who are then redirected to another host that shouldn’t receive those Authorization headers.
Progress bar refresh
A minor thing, but we refreshed the progress bar layout for when no total size is known.
Next?
March 21 is the date set for next release. Unless of course we find an urgent reason to fix and release something before then…