30 of 40 on in the package: ALTSVCBROTLICOOKIESDICTDOCSEXAMPLESFTPGOPHERGSSAPI_BASEHTTPHTTP2IDNIMAPIPFSIPV6LIBSSH2MQTTNTLMOPENSSLPOP3PROXYPSLRTSPSMTPSTATICTELNETTFTPTHREADED_RESOLVERWEBSOCKETZSTDShow the 10 options that are off
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 8.23.0.
Fixed (55)
Show 55 fixed
VuXML entries whose affected range the packaged version has left.
maintainer-feedback? ftp/curl: Add HTTP/3 Support (preliminary diff)
New
2026-04-08
Commits (435)
Peter Pentchev (roam) · 7.15.5
Update to cURL 7.15.5 and integrate Scot Hetzel's patch for really making OpenSSL support optional. Now OpenSSL and GnuTLS are on level ground, both controlled by the OPTIONS setting. Fortunately, it turned out that the curl_multi_socket() API change does not affect any of the ports that use ftp/curl.
PR: 102871, 103126
Submitted by: pav, vd, Scot Hetzel <swhetzel@gmail.com>
Add an explicit knob for c-ares support now that we have Daniel's version of the ares library in the ports tree. The knob defaults to "off" since it conflicts with curl's IPv6 support - which is now also configurable via its own knob. PORTREVISION not bumped since there is no change in the default package build - if enough people consider asynchronous DNS resolving to be good, it could become the
Move IDN related ports from devel to dns category:
devel/libidn -> dns/libidn
devel/p5-Net-LibIDN -> dns/p5-Net-LibIDN
Approved by: both maintainers
Repocopy by: marcus
Update to 7.15.0, which contains a security fix, among other changes.
PR: 87393
Submitted by: Vasil Dimov <vd@datamax.bg>
Security: http://curl.haxx.se/docs/security.html#BID15102
Add libidn support, configurable with the WITH/WITHOUT_LIBIDN knob. Add debugging support via the WITH_CURL_DEBUG knob.
Properly use LC_ALL=C instead of LANG=C to run the test suite
(thanks Fujishima-san!)
Update to curl-7.12.3 (yes, we skipped 7.12.2 for various reasons). Explicitly disable libidn support so that it is not even probed if libidn is installed; I will look into enabling it after some more testing.
Testing paid off on: ref4 (lib/select.c), sledge (lib/sendf.c)
Fix the plist in the non-SSL case - curl-ca-bundle.crt is not installed. Bump PORTREVISION.
PR: 64667
Submitted by: Marius Strobl <marius@alchemy.franken.de>
Fix LP64 bugs and bump PORTREVISION. This still detects the bogus gethostbyaddr_r() "implementation" in libc, which may be causing problems in certain cases.
Use ports/security/openssl/Makefile.ssl instead of USE_OPENSSL to prevent conflicts between the base system and port OpenSSL libraries. Bump PORTREVISION.
Reported by: Stephen Cravey <clists@www.gotbrains.org>
Submitted by: Scot Hetzel <hetzels@westbend.net>
Update to curl-7.10.3. There is a minor problem with the lib503 and lib504 tests on some FreeBSD versions, but the major bulk of the functionality is there, and it is still an improvement over 7.10.2 :)
Not functionally tested on: ia64; there is no spoon.. er.. perl5 on
pluto1.FreeBSD.org for the present.
Update to 7.9.8.
For some reason, this segfaults badly on sparc64, or at least on the
only sparc64 machine that I have access to (thanks mike!). I'll deal
with this later; for the present, let the x86 and Alpha users benefit
from the new cURL features and bugfixes :)
PR: 39873
Submitted by: Ying-Chih Kuo <yckuo@yckuo.org>
Fix a segfault in an IPv4-only case - realloc() may really, well, "reallocate" memory even when the programmer only asks for a resizing of the region.
Reported by: Steve Ames <steve@energistic.com>
While I'm here, change the way SSL header and library paths are handled
to avoid specifically referencing /usr/lib and /usr/include; while
-STABLE's GCC shrugs this off, GCC 3.1 whines loudly about an explicit
-I/usr/include (and rightly so, IMHO).
Now that the pkg_install tools know how to handle symlinks, unbreak the cURL package - include libcurl.so in the packing list so that pkg_add(1) makes it visible to other packages.
Bump PORTREVISION for this (definitely package-related) change.
PR: ports/34491
Submitted by: Tom Payne <twp20@cam.ac.uk>
Update to 7.9.2. Add a vendor patch (from the cURL CVS repository) to make it compile. Remove the GNU make dependency.
PR: 32815
Submitted by: Joseph Scott <joseph@randomnetworks.com> and naddy
Apologies to: Joseph Scott and Christian Weisberger <naddy@FreeBSD.org>
Update to 7.9.1, add a 'test' target to run the curl suite tests. Note: some of those seem to intermitently fail on my system, no idea why. Nuke the commented-out USE_AUTOMAKE and a no-longer-needed post-configure substitution in some Makefiles.
Update to 7.8.1, which should, among other changes, fix the POST bug in cURL/PHP interaction.
Build with SSL by default, change the knob name to WITHOUT_SSL.
Submitted by: sf
Update to 7.8, which is needed by www/mod_php4 now. Disable use of automake - the configuration framework was updated for use with autoconf and automake newer than the ones in the Ports collection, and breaks with those. Besides, the pregenerated configure script in the distribution Does The Right Thing(tm) anyway.
Reviewed by: dirk, knu
Update to 7.7.3, with fingers crossed hoping the minor API change does not break dependent ports.
PR: 27900
Submitted by: Jos Backus <josb@cncdsl.com>
Reviewed by: knu (maintainer of ftp/ruby-curl)
Silence by: dirk (maintainer of www/mod_php4)
Update the WWW line; curl has been at curl.haxx.se for quite some time now; I've even changed the MASTER_SITE in the Makefile, just not here.. oops.
Submitted by: Daniel Stenberg <daniel@haxx.se>