Here's an update for curl to 7.16.4:
http://www.dickman.org/openbsd/ports_net_curl_7.16.4.patch
Recent changes are as follows:
Fixed in 7.16.4 - July 10 2007
Changes:
* added CURLOPT_NEW_FILE_PERMS and CURLOPT_NEW_DIRECTORY_PERMS
* improved hashing of sockets for the multi_socket API
* ftp kerberos5 support added
Bugfixes:
* adjusted how libcurl treats HTTP 1.1 responses without
content-lenth or chunked encoding
* fixed the 10-at-a-time.c example
* FTP over SOCKS proxy
* improved error messages on SCP upload failures
* security flaw in which libcurl failed to properly reject some
outdated or not yet valid server certificates when built with GnuTLS
Fixed in 7.16.3 - June 25 2007
Changes:
* added curl_multi_socket_action()
* deprecated curl_multi_socket()
* uses less memory in non-pipelined use cases
* CURLOPT_HTTP200ALIASES matched transfers assume HTTP 1.0 compliance
* more than one test harness can run at the same time without conflict
* SFTP now supports quote commands before a transfer
* CURLMOPT_MAXCONNECTS added to curl_multi_setopt()
* upload resume works for file:// URLs
* asynchronous name resolves now require c-ares 1.4.0 or later
* added SOCKS test cases
* CURLOPT_FTP_CREATE_MISSING_DIRS and --ftp-create-dirs now work
for SFTP operations as well
Bugfixes:
* if2up too long interface name memory leak
* test case 534 started to fail 2007-04-13 due to the existance of
a new host on the net with the same silly domain the test was using
for a host which was supposed not to exist.
* test suite SSL certificate works better with newer stunnel
* internal progress meter update frequency back to once per second
* avoid some unnecessary calls to function gettimeofday
* a double-free in the SSL-layer
* GnuTLS free of NULL credentials
* NSS-fix for closing down SSL
* bad warning from configure when gnutls was selected
* compilation on VMS 64-bit mode
* SCP/SFTP downloads could hang on the last bytes of a transfer
* curl_easy_duphandle() crash
* curl -V / curl_version*() works even when GnuTLS is used on a
system without a good random source
* curl_multi_socket() not "noticing" newly added handles
* lack of Content-Length and chunked encoding now requires HTTP
1.1 as well to be treated as without response body
* connection cache growth in multi handles
* better handling of out of memory conditions
* overwriting an uploaded file with sftp now truncates it first
* SFTP quote commands chmod, chown, chgrp can now set a value of 0
* TFTP connect timouts less than 5 seconds
* improved curl -w for TFTP transfers
* memory leak when failed OpenSSL certificate CN field checking
* memory leak when OpenSSL failed PKCS #12 parsing
* FPL-SSL when built with NSS
* out-of-boundary write in Curl_select()
* -s/--silent can now be used to toggle off the silence again
* builds fine on 64bit HP-UX
* multi interface HTTP CONNECT glitch
* list FTP root directories when login dir is not root
* no longer slows down when getting very many URLs on the same command line
* lock share before decreasing dirty counter
* no-body FTP requests on re-used connections