{"id":28482,"date":"2025-11-05T08:04:39","date_gmt":"2025-11-05T07:04:39","guid":{"rendered":"https:\/\/daniel.haxx.se\/blog\/?p=28482"},"modified":"2025-11-05T11:00:48","modified_gmt":"2025-11-05T10:00:48","slug":"curl-8-17-0","status":"publish","type":"post","link":"https:\/\/daniel.haxx.se\/blog\/2025\/11\/05\/curl-8-17-0\/","title":{"rendered":"curl 8.17.0"},"content":{"rendered":"\n<p>Download curl from <a href=\"https:\/\/curl.se\/\">curl.se<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Release presentation<\/h2>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"curl 8.17.0 with Daniel Stenberg\" width=\"474\" height=\"267\" src=\"https:\/\/www.youtube.com\/embed\/OwrMdumEygg?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Numbers<\/h2>\n\n\n\n<p class=\"has-text-align-center\">the 271st release<br>11 changes<br>56 days (total: 10,092)<br>448 bugfixes (total: 12,537)<br>699 commits (total: 36,725)<br>2 new public libcurl function (total: 100)<br>0 new curl_easy_setopt() option (total: 308)<br>1 new curl command line option (total: 273)<br>69 contributors, 35 new (total: 3,534)<br>22 authors, 5 new (total: 1,415)<br>1 security fixes (total: 170)<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Security<\/h2>\n\n\n\n<p><a href=\"https:\/\/curl.se\/docs\/CVE-2025-10966.html\">CVE-2025-10966<\/a>: missing SFTP host verification with wolfSSH. curl&#8217;s code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Changes<\/h2>\n\n\n\n<p>We drop support for several things this time around:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>drop Heimdal support<\/li>\n\n\n\n<li>drop the winbuild build system<\/li>\n\n\n\n<li>drop support for Kerberos FTP<\/li>\n\n\n\n<li>drop support for wolfSSH<\/li>\n<\/ul>\n\n\n\n<p>And then we did some other smaller changes:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>up the minimum libssh2 requirement to 1.9.0<\/li>\n\n\n\n<li>add a <a href=\"https:\/\/curl.se\/libcurl\/c\/curl_multi_notify_enable.html\">notifications API<\/a> to the multi interface<\/li>\n\n\n\n<li>expand to use 6 characters per size in the progress meter<\/li>\n\n\n\n<li>support Apple SecTrust &#8211; use the native CA store<\/li>\n\n\n\n<li>add <code><a href=\"https:\/\/curl.se\/docs\/manpage.html#--knownhosts\">--knownhosts<\/a><\/code> to the command line tool<\/li>\n\n\n\n<li><a href=\"https:\/\/curl.se\/wcurl\/\">wcurl<\/a>: import v2025.11.04<\/li>\n\n\n\n<li>write-out: make <code>%header{}<\/code> able to output <em>all<\/em> occurrences of a header<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Bugfixes<\/h2>\n\n\n\n<p>We set a new project record this time with no less than <a href=\"https:\/\/curl.se\/ch\/\">448 documented bugfixes<\/a> since the previous release.<\/p>\n\n\n\n<p>The release presentation mentioned above discusses some of the perhaps most significant ones.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Coming next<\/h2>\n\n\n\n<p>There a small set of pull-requests waiting to get merged, but other than that our future is not set and we greatly appreciate your feedback, submitted issues and provided pull-requests to guide us.<\/p>\n\n\n\n<p>If this release happens to include an annoying regression, there might be a patch release already next week. If we are lucky and it doesn&#8217;t, then we aim for a 8.18.0 release in the early January 2026.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Download curl from curl.se. Release presentation Numbers the 271st release11 changes56 days (total: 10,092)448 bugfixes (total: 12,537)699 commits (total: 36,725)2 new public libcurl function (total: 100)0 new curl_easy_setopt() option (total: 308)1 new curl command line option (total: 273)69 contributors, 35 new (total: 3,534)22 authors, 5 new (total: 1,415)1 security fixes (total: 170) Security CVE-2025-10966: missing &hellip; <a href=\"https:\/\/daniel.haxx.se\/blog\/2025\/11\/05\/curl-8-17-0\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">curl 8.17.0<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":5,"featured_media":28543,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[33,95],"class_list":["post-28482","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-curl","tag-curl-and-libcurl","tag-release"],"_links":{"self":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts\/28482","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/comments?post=28482"}],"version-history":[{"count":7,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts\/28482\/revisions"}],"predecessor-version":[{"id":28549,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts\/28482\/revisions\/28549"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/media\/28543"}],"wp:attachment":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/media?parent=28482"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/categories?post=28482"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/tags?post=28482"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}