gmane.comp.web.curl.announce

395 articles on record, showing the most recent 50.

[SECURITY ADVISORIES] for curl 8.21.0
Wed, 24 Jun 2026 08:08:57 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #395
[RELEASE] curl 8.21.0
Wed, 24 Jun 2026 08:05:00 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #394
[ADVISORY] curl: CVE-2026-7168: cross-proxy Digest auth state leak
Wed, 29 Apr 2026 08:01:29 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #393
[ADVISORY] curl: CVE-2026-7009: OCSP stapling bypass with Apple SecTrust
Wed, 29 Apr 2026 08:01:23 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #392
[ADVISORY] curl: CVE-2026-6429: netrc credential leak with reused proxy connection
Wed, 29 Apr 2026 08:01:19 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #391
[ADVISORY] curl: CVE-2026-6276: stale custom cookie host causes cookie leak
Wed, 29 Apr 2026 08:01:15 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #390
[ADVISORY] curl: CVE-2026-6253: proxy credentials leak over redirect-to proxy
Wed, 29 Apr 2026 08:01:10 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #389
[ADVISORY] curl: CVE-2026-5773: wrong reuse of SMB connection
Wed, 29 Apr 2026 08:01:05 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #388
[ADVISORY] curl: CVE-2026-5545: wrong reuse of HTTP Negotiate connection
Wed, 29 Apr 2026 08:01:00 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #387
[ADVISORY] curl: CVE-2026-4873: connection reuse ignores TLS requirement
Wed, 29 Apr 2026 08:00:52 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #386
[RELEASE] curl 8.20.0
Wed, 29 Apr 2026 08:00:33 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #385
[ADVISORY] curl: CVE-2026-3805: use after free in SMB connection reuse
Wed, 11 Mar 2026 07:54:50 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #384
[ADVISORY] curl: CVE-2026-3784: wrong proxy connection reuse with credentials
Wed, 11 Mar 2026 07:54:47 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #383
[ADVISORY] curl: CVE-2026-3783: token leak with redirect and netrc
Wed, 11 Mar 2026 07:54:44 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #382
[ADVISORY] curl: CVE-2026-1965: bad reuse of HTTP Negotiate connection
Wed, 11 Mar 2026 07:54:38 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #381
[RELEASE] curl 8.19.0
Wed, 11 Mar 2026 07:54:29 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #380
[rc] curl 8.19.0-rc3
Fri, 27 Feb 2026 09:43:46 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #379
[rc] curl 8.19.0-rc2
Sat, 21 Feb 2026 11:59:46 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #378
[release candidate] curl 8.19.0-rc1
Thu, 12 Feb 2026 09:30:55 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #377
[ADVISORY] curl CVE-2025-15224: libssh key passphrase bypass without agent set
Wed, 7 Jan 2026 08:09:43 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #376
[ADVISORY] curl CVE-2025-15079: libssh global knownhost override
Wed, 7 Jan 2026 08:09:40 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #375
[ADVISORY] curl CVE-2025-14819: OpenSSL partial chain store policy bypass
Wed, 7 Jan 2026 08:09:36 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #374
[ADVISORY] curl CVE-2025-14524: bearer token leak on cross-protocol redirect
Wed, 7 Jan 2026 08:09:30 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #373
[ADVISORY] curl CVE-2025-14017: broken TLS options for threaded LDAPS
Wed, 7 Jan 2026 08:09:18 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #372
[ADVISORY] curl CVE-2025-13034: No QUIC certificate pinning with GnuTLS
Wed, 7 Jan 2026 08:09:12 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #371
[RELEASE] curl 8.18.0
Wed, 7 Jan 2026 08:09:00 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #370
Release candidate 3: curl 8.18.0-rc3
Sat, 27 Dec 2025 10:27:56 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #369
Release candidate 2: curl 8.18.0-rc2
Mon, 15 Dec 2025 07:56:40 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #368
Release candidate 1: curl 8.18.0-rc1 and FEATURE FREEZE
Sat, 6 Dec 2025 14:32:42 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #367
[SECURITY ADVISORY] curl: missing SFTP host verification with wolfSSH
Wed, 5 Nov 2025 08:14:12 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #366
[RELEASE] curl 8.17.0
Wed, 5 Nov 2025 08:12:26 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #365
[SECURITY ADVISORY] wcurl path traversal with percent-encoded slashes
Tue, 4 Nov 2025 09:42:02 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #364
Release candidate 3: curl 8.17.0-rc3
Wed, 29 Oct 2025 07:50:56 +0100 (CET)
Daniel Stenberg via curl-announce <[email protected]> • #363
Release candidate 2: curl 8.17.0-rc2
Mon, 20 Oct 2025 09:00:19 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #362
Release candidate 1: curl 8.17.0-rc1
Sat, 11 Oct 2025 15:52:55 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #361
[SECURITY ADVISORY] curl: CVE-2025-10148: predictable WebSocket mask
Wed, 10 Sep 2025 07:54:30 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #360
[SECURITY ADVISORY] curl: CVE-2025-9086: Out of bounds read for cookie path
Wed, 10 Sep 2025 07:53:14 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #359
[RELEASE] curl 8.16.0
Wed, 10 Sep 2025 07:51:12 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #358
Release candidate 3: curl 8.16.0-rc3
Wed, 3 Sep 2025 08:45:53 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #357
Release candidate 2: curl 8.16.0-rc2
Mon, 25 Aug 2025 22:59:10 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #356
Release candidate 1: curl 8.16.0-rc1
Mon, 18 Aug 2025 07:59:57 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #355
[RELEASE] curl 8.15.0
Wed, 16 Jul 2025 08:34:48 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #354
Release candidate 3: curl 8.15.0-rc3
Wed, 9 Jul 2025 13:40:50 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #353
Release candidate 2: curl 8.15.0-rc2
Mon, 30 Jun 2025 13:39:24 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #352
Release candidate 1: curl 8.15.0-rc1
Sat, 21 Jun 2025 11:55:36 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #351
[SECURITY AVISORY] curl: CVE-2025-5399: WebSocket endless loop
Wed, 4 Jun 2025 07:52:47 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #350
[RELEASE] curl and libcurl 8.14.1
Wed, 4 Jun 2025 07:51:54 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #349
[SECURITY ADVISORY] curl: No QUIC certificate pinning with wolfSSL
Wed, 28 May 2025 07:49:44 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #348
[SECURITY ADVISORY] curl: QUIC certificate check skip with wolfSSL
Wed, 28 May 2025 07:49:41 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #347
[RELEASE] curl and libcurl 8.14.0
Wed, 28 May 2025 07:49:32 +0200 (CEST)
Daniel Stenberg via curl-announce <[email protected]> • #346