This file is indexed.

/usr/lib/R/site-library/curl/NEWS is in r-cran-curl 3.1-2.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
3.1
 - Fix potential memory bug in curl() when doubling the buffer is insufficient.
 - Windows: update to libcurl 7.56.1, restore support for libssh2.
 - Added unit test for curl_echo() to post large multipart data.
 - Fix IDN unit test error "string has forbidden bi-directional properties"

3.0
 - MAJOR CHANGE ON WINDOWS: On Windows 7 / 2008-R2 and up we switch from OpenSSL to native Windows SSL
   (secure channel). Therefore curl now uses certificates from the windows certificate manager.
   This enables users on corporate/government networks to connect through enterprise proxies and such.
   On Windows Vista/2008 and older (including CRAN) we still use OpenSSL to guarantee TLS 1.1/1.2 support.
 Other changes:
 - Windows: updated libcurl to v7.56.0 with dual SSL and native IDN/SSPI
 - multi_add() and curl_fetch_multi() gain an optional 'data' callback parameter
 - New function multi_fdset() returns the file descriptors of a multi pool
 - Add CURLOPT_PROXYAUTH = CURLAUTH_ANY to default handle settings

2.8.1
 - Windows: switch back to OpenSSL instead of SecureChannel because Windows 2008 (CRAN) does not
   support TLS 1.1 and TLS 1.2 which is required for many servers now.

2.8 (unpublished)
 - Windows: EXPERIMENTAL: on R 3.5+ curl now uses SecureChannel instead of OpenSSL for https.
 - Windows: updated libcurl to v7.54.1 with native windows IDN. Dropped nghttp2 and rtmp support.
 - Windows: nslookup() now uses IdnToAscii() for non-ascii domains
 - Add IDN unit tests on supported platforms
 - Error messages from libcurl include more detail when available (via CURLOPT_ERRORBUFFER)
 - Set a default CURLOPT_READFUNCTION because libcurls default can cause R to freeze
 - Fix a bug for empty forms and/or empty form-fields (+ added unit tests for this)
 - The 'multi_run()' function gains a parameter 'poll' to return immediately when a request completes.
 - Disable 'Expect: 100-continue' for POST requests (deprecated in libcurl)
 - Fix two rchk PROTECT warnings (thanks to Tomas Kalibera)

2.7
 - New function parse_headers_list() to parse response headers into named list
 - nslookup() gains a parameter 'multi' to return multiple matches
 - Automatically set 'POSTFIELDSIZE_LARGE' when setting 'POSTFIELDS' or 'COPYPOSTFIELDS' to raw vector
 - Do not crash when passing invalid objects as handles
 - Workaround for empty forms, i.e. calling handle_setform() with no arguments

2.6
 - nslookup() gains a parameter ipv4_only = TRUE (fixes unit test on Mavericks)

2.5
 - Add curl_echo() function for easy testing
 - Add support for curlopt_xferinfofunction, used in curl_echo()
 - Automatically set curlopt_noprogress = 0 when setting one of the progress functions
 - Automatically use XFERINFOFUNCTION vs PROGRESSFUNCTION depending on libcurl version
 - Default User-Agent is now: options("HTTPUserAgent")
 - Requests will now abort if progress/xferinfo callback raises an error
 - Open a connection with mode 'f' to skip stop_for_status() during open()

2.4
 - Windows: update libcurl to 7.53.1 with libssl 1.0.2k
 - New form_data() function to POST form with string/raw values with custom conten-type
 - Fix busy waiting for curl_fetch_stream()
 - Tweaks for open(con, blocking = FALSE)
 - Switch memcpy() to memmove() to please valgrind
 - Assert that curl() connection is only opened in read mode

2.3
 - All interruptable handles now use a global pool to share connections. Fixes #79.
 - Enable interruptable interface by default, even in non-interactive mode.
 - Update libcurl on Windows to 7.51.0
 - Unit tests now try serveral httpbin mirrors in case one goes down
 - Support open(con, blocking = FALSE) and isIncomplete() for curl() connections
 - Switch curl_fetch_stream to non-blocking implementation

2.2
 - Fixed bug in multi that did not actually enable or disable multiplexing.
 - Switch unit tests to HTTP/2 server to get HTTP/2 testing coverage
 - Fix big endian build on GLIBC systems (tnx Aurelien Jarno and Andreas Tille)

2.1
 - If libcurl >= 7.47 and was built --with-nghttp2, automatically enable HTTP/2
   on HTTPS connections (matches behavior of 'curl' cmd util)
 - Upgrade to libcurl 7.50.3 (--with-nghttp2) on Windows (Adds HTTP/2 support)
 - Fix a unit test that would fail on fast servers

2.0
 - New multi interface for concurrent async requests!
 - Updated vignette with simple multi examples
 - Export handle_data() to get handle state

1.2
 - Fix for getaddrinfo GNU extension on some unix platforms

1.1
 - Fix ASAN warning in curl.c (reference after free)

1.0
 - Fix for FreeBSD
 - Simplify handle refCount system
 - Better handle locking to prevent using/modifying open handles
 - Make unit tests always close connection to prevent 'unused connection' warnings
 - Add support for interruptions in curl_download()

0.9.7
 - The non-blocking download method is now only used in interactive mode
 - Use options(curl_interrupt = TRUE) to force nonblocking in non-interactive mode
 - Updated libcurl on windows to 7.47.1. This should fix IPv6 problems.
 - Update the curl_symbols table to 7.48

0.9.6
 - Use non-blocking code in curl_fetch_memory to support user interruptions.
 - Configure script no longer assumes bash so it works on OpenBSD.
 - Fix for Snow Leopard CRAN build server.
 - Added has_internet() function.

0.9.5
 - Added nslookup() as cross-platform alternative to nsl()

0.9.4
 - Move the creation of the option table to ./R/options.R
 - The curl_options() function gains an argument to filter by name
 - Properly invoke winhttp.def file in Makevars.win (required for new toolchain)

0.9.3
 - Refactor configure script to use pkg-config
 - Use the preprocessor to extract CURLOPT symbols during install
 - Don't use setInternet2() in R > 3.2.2

0.9.2
 - Optimization for windows to make realloc in curl_fetch_memory faster
 - Updated the curl_symbols table to 7.43
 - Updated the static libraries on Windows:
    * libcurl 7.43.0
    * openssl 1.0.2d
    * libssh2 1.6.0
    * libiconv 1.14-5
    * libidn 1.31-1
 - New functions for Windows: ie_proxy_info and ie_get_proxy_for_url

0.9.1
 - Convert url argument to utf8 strings in escape/unescape
 - Endian fix for BSD systems
 - Add support for setting curlopt_xxx_large options

0.9
 - Fix for very old versions of libcurl (RHEL 5)
 - Do not convert paths to UTF-8 (only URLs)
 - Improve error message for unknown options

0.8
 - Fix for curl() character reader to invert byte-order on big endian architectures.

0.7
 - Rename the C function 'fetch' to 'fetchdata' because of Solaris conflict.
 - Move warning about missing CA bundle on Windows to onAttach.

0.6
 - Validation of SSL certificates is now enabled by default if a bundle is available.
 - Major rewrite to support configurable and reusable handles
 - Added new_handle, handle_setopt, handle_setheaders, handle_setform, handle_reset, etc.
 - Added curl_fetch interfaces for httr
 - Add ie_proxy_settings to get system proxy configuration on windows

0.5
 - Check for CURLM_CALL_MULTI_PERFORM to support very old versions of libcurl

0.4
 - Fixed a memory bug that could cause R to crash
 - Add curl_escape, curl_unescape
 - Add curl_version and curl_options

0.3
 - Add curl_download function
 - More efficient use of realloc
 - Fix for older versions of libcurl (e.g. Snow Leopard)
 - Add support for user interrupts while downloading (ESC or CTRL+C)
 - Fixed bug that caused GC to corrupt connection object
 - Refactoring and cleanup

0.2
  - add support for recycling connections

0.1
  - initial release