The latest version of the popular data transfer tool enhances security and optimizes performance.
The cURL project, one of the most widely used data transfer tools in development and system administration, has released version 8.12, featuring the removal of the Rust-based Hyper backend and multiple security and performance improvements.
Hyper was an experimental backend designed to improve memory safety using Rust. However, due to low adoption and a lack of developer interest, it has now been removed. Initially developed with sponsored support, Hyper failed to gain traction, leading cURL’s maintainers to discontinue its support.
Key Features of cURL 8.12
Besides dropping the Hyper backend, this release introduces several key improvements:
- Enhanced OpenSSL support, allowing the use of keys and certificates from a PKCS#11 provider.
- SSL session import/export capabilities via the ssls-export feature.
- QUIC 0RTT support for GnuTLS using CURLSSLOPT_EARLYDATA.
- Optimized build system, with updates to autotools and CMake for improved compatibility and efficiency.
- Security and stability fixes, addressing vulnerabilities in cookie management, integer overflow issues, and HTTPS connection errors.
Impact of Hyper Removal
Hyper was initially introduced as a safer alternative to cURL’s traditional C-based backend, aiming to mitigate memory-related security risks. However, it never gained widespread adoption, and no developers stepped forward to maintain the code.
Daniel Stenberg, the creator and lead maintainer of cURL, explained that the decision to remove Hyper was based on its lack of demand and ongoing maintenance challenges. “Keeping features that have neither user demand nor active support only adds unnecessary complexity to the codebase,” Stenberg stated.
Availability and Download
The new cURL 8.12 release is now available for download on the official project website. Developers and system administrators can access the full changelog and improvements at https://curl.se/ch/8.12.0.html.
This release reinforces cURL’s commitment to performance optimization, modern security standards, and reliable data transfer capabilities across network environments.
