Search
Items tagged with: curl
We got this question about adding support for the NETRC environment variable to #curl - because it currently does not support it.
Curious about the prevalence of this environment variable in existing tools I decided to, yeah, Google it...
Welcome to #curl 8.15.0 rc1 => curl.se/rc/
Try it. Test it. Report all problems. But don't run it in production.
tool: Implement non-blocking STDIN read on Windows by denandz · Pull Request #17572 · curl/curl
Implements a seperate read thread for STDIN on Windows when curl is run with -T/--upload-file . This uses a similar technique to the nmap/ncat project, spawning a seperate thread which creates a lo...GitHub
docs: fix broken link in INSTALL.md by v0idnz · Pull Request #17654 · curl/curl
In INSTALL.md file, the link that points to CURL-DISABLE was broken, so I fixed this issue changing the link from only "CURL-DISABLE.md" to "https://github.com/curl/curl/blob/master/...GitHub
ftp: Fix prequotes for a directory in URL by Bartek14 · Pull Request #17616 · curl/curl
Allow prequotes to be sent after curl has changed the working directory, just before the listing command if the URL is a directory. FTP state machine is updated with the new FTP_LIST_PREQUOTE state...GitHub
Ubuntu Server Seed Changes for 25.10
What follows is a public spec related to the Ubuntu Server seeds. It does not contain specific definitions about seeds, how they relate to the ISOs, nor a long history. It is an implementation spec to show changes planned for 25.10.Ubuntu Community Hub
curlmin
Remove unnecessary headers, cookies, and query parameters from a #curl command while ensuring the response remains the same.
GitHub - noperator/curlmin: Remove unnecessary headers, cookies, and query parameters from a curl command while ensuring the response remains the same.
Remove unnecessary headers, cookies, and query parameters from a curl command while ensuring the response remains the same. - noperator/curlminGitHub
So today it is Friday the 13th and apparently I should have stayed in my bed.
Just spent way too much time troubleshooting why the curl requests I got from Firefox by using "copy request to cUrl" did not work. Turns out it is a Firefox bug. For unknown reason it adds a caret "^" before each parameter separator in the query string in the curl request, breaking everything. 😞
bugzilla.mozilla.org/show_bug.…
#firefox #curl #development #bug #fridaythe13th
1970351 - Copy as cURL (POSIX) adds ^ in front of query params separator (^&)
ASSIGNED (hmanilla) in DevTools - Netmonitor. Last updated 2025-06-12.bugzilla.mozilla.org
Of course you include a #curl command line when you want to show the billionth repository on GitHub.
openssl: enable readahead and increase read buffer size (improves download speed) by edwintorok · Pull Request #17548 · curl/curl
I ran strace on curl and noticed that it is doing a lot of very short reads, of exactly 5 bytes, followed by a larger read. strace Before recvfrom(4, "\27\3\3@\30", 5, 0, NULL, NULL) = 5 ...GitHub
Starting in June 2025, #curl only supports TLS libraries that supports TLS 1.3
daniel.haxx.se/blog/2025/06/11…
Dropping some TLS laggards
In the curl project we have a long tradition of supporting a range of different third party libraries that provide similar functionality.daniel.haxx.se
"download time is reduced by ~13%" (for #curl)
... by adding some odd #OpenSSL functions we didn't know existed.
github.com/curl/curl/pull/1754…
openssl: enable readahead and increase read buffer size (improves download speed) by edwintorok · Pull Request #17548 · curl/curl
I ran strace on curl and noticed that it is doing a lot of very short reads, of exactly 5 bytes, followed by a larger read. strace Before recvfrom(4, "\27\3\3@\30", 5, 0, NULL, NULL) = 5 ...GitHub
#curl 8.14.1 with Daniel Stenberg
curl 8.14.1 with Daniel Stenberg
Daniel talks about the security vulnerability and some of the bugfixes that were merged this time around.YouTube
#curl 8.14.1 is out
daniel.haxx.se/blog/2025/06/04…
Thanks to Calvin Ruocco, Dan Fandrich, Daniel Stenberg, denandz on github, Ethan Everett, Jacob Mealey, Jeremy Drake, Jeroen Ooms, John Bampton, Kadambini Nema, Michael Kaufmann, Rasmus Melchior Jacobsen, Ray Satiro, Samuel Henrique, Stefan Eissing, Viktor Szakats, x-xiang on github, Yedaya Katsman, Yuyi Wang, z2_
curl 8.14.1
This is a patch-release done only a week since the previous version with no changes merged only bugfixes. Because some of the regressions in 8.14.0 were a little too annoying to leave unattended for a full cycle.daniel.haxx.se
dllmain: exclude from Cygwin builds by jeremyd2019 · Pull Request #17528 · curl/curl
On Cygwin, it is unsafe to call POSIX functions from DllMain, which OPENSSL_thread_stop does. Additionally, it should be unnecessary as OpenSSL uses pthread_key_create to register a thread destruc...GitHub
There is apparently a #curl version you can install with winget on Windows.
But who makes it and who decides how to build it? I don't know. And it isn't easy to figure that out either.
github.com/curl/curl/issues/17…
Windows build (winget) has no HTTP/2.0 support · Issue #17504 · curl/curl
I did this Tried to download a resource with --http2 parameter. I expected the following The Windows build, available via winget (winget install cURL.cURL), has neither HTTP/2 nor HTTP/3 (QUIC) sup...GitHub
Are you interested in helping out to make a Network.framework SSL backend for #curl?
The Secure Transport one is going away and this could be a new way to use the native Apple system.
But code does not write itself. There is an embryo started, but it needs love.
github.com/curl/curl/pull/1750…
lib: add Network.framework SSL backend by conradev · Pull Request #17506 · curl/curl
Hi everyone! I started working on a Network.framework backend for curl a bit ago. I had a few motivations for writing this: Wanting to use curl with system SSL without compiling anything on iOS/wa...GitHub
Referring sites for visitors to #curl's GitHub repository over the last 14 days.
Interesting I think.
FTP is quite unique in the #curl collection of protocols due to its (weird) mandatory use of a separate TCP connection for the data transfer (and the fact that it can be setup in either direction, client to server or server to client) . It is complicated for users, for sysadmins and it is a complication in source code and internal curl TCP management as well.
So yeah, it also keeps causing us headaches to this day.
Circa five years ago the browsers dropped FTP support.
#curl still supports it. In 2024, 23% of curl users said they used FTP within the past two years.
My post from April 2020:
daniel.haxx.se/blog/2020/04/15…
curl is not removing FTP
FTP is going out of style. The Chrome team has previously announced that they are deprecating and removing support for FTP. Mozilla also announced their plan for the deprecation of FTP in Firefox.daniel.haxx.se
Decomplexification - making #curl use simpler code
daniel.haxx.se/blog/2025/05/29…
Decomplexification
(Clearly a much better word than simplification.) I believe we generally accept the truth that we should write simple and easy to read code in order to make it harder to create bugs and cause security problems.daniel.haxx.se
How to build #curl against Apple's LibreSSL:
github.com/jeroen/apple-libres…
GitHub - jeroen/apple-libressl-sdk: Missing sdk files to link to LibreSSL and nghttp2 on MacOS
Missing sdk files to link to LibreSSL and nghttp2 on MacOS - GitHub - jeroen/apple-libressl-sdk: Missing sdk files to link to LibreSSL and nghttp2 on MacOSGitHub
891 persons have already responded to the #curl survey 2025. If you have not, please consider donating a few minutes of your time and help us out!
daniel.haxx.se/blog/2025/05/19…
The curl user survey 2025 is up
Yes! curl user survey 2025 The time has come for you to once again do your curl community duty. Run over and fill in the curl user survey and tell us about how you use curl etc.daniel.haxx.se
How can #OpenSource and #security be interconnected?
What will be the future of funding the open source-dependent public digital infrastructure?
These and many other questions will guide the discussion of our panelists:
🔸@bagder from #cURL
🔸@melanierieback from @ros
🔸Matteo Mole from @EuropeanCyber SecurityOrganisation
🔸Nicholas Gates from @OpenForumEurope
🔸Mirko Boehm from #TheLinuxFoundation
Join the webinar : europeanopensource.academy/for…
The two #curl CVEs we publish today are both rated medium and affect QUIC connections when curl is built to use wolfSSL
Hiroki Kurosawa reported both and he is rewarded 2540 USD for each from the curl bug-bounty.
With these two, the total bug-bounty payout from #curl now exceeds 90,000 USD over the last few years.
(thanks to IBB for sponsoring our bug-bounty program!)
#curl 8.14.0 is here with new stuff, bugfixes and two security advisories.
Live-streamed presentation at 08:00 UTC today.
daniel.haxx.se/blog/2025/05/28…
curl 8.14.0
Welcome to another curl release. Release presentation At 8:00 UTC (10:00 CEST), I do a live-streamed release presentation over at Twitch where I talk about all that is new in this release.daniel.haxx.se
I chatted with @bagder about #Curl and the recent #AI happenings
It's always fun talking to Daniel, and I think there's a lot of good ideas in this one, especially on how to approach AI fueled contributions that aren't slop. And even suggestions on how to deal with slop contributions :)
opensourcesecurity.io/2025/202…
Curl vs AI with Daniel Stenberg
Daniel Stenberg, the maintainer of Curl, discusses the increase in AI security reports that are wasting the time of maintainers. We discuss Curl’s new policy of banning the bad actors while establishing some pretty sane AI usage guidelines.Josh Bressers (Open Source Security)