#curl CVEs as JSON, an update: curl.se/mail/lib-2023-05/0006.…
I consider this pretty thorough...
Search
Items tagged with: curl
Solar Designer took "the #curl case" to the oss-security list to discuss how to treat our vulnerability notifications going forward: openwall.com/lists/oss-securit…
Welcome François Michel as #curl committer 1136: github.com/curl/curl/pull/1106…
Disable quiche pacing while is not actually performed by curl by francoismichel · Pull Request #11068 · curl/curl
Hi, Just a one-line commit that disables pacing in the quiche library as currently curl does not perform pacing when sending the QUIC packets. When pacing is enabled, quiche assumes that packet are...GitHub
All CVEs a specific #curl release is vulnerable to, in easy machine parseable JSON? Sure, we got you covered. Example: curl.se/docs/vuln-7.88.0.json
All existing #curl CVEs are now available as #JSON: curl.se/docs/vuln.json
All individual issues are also available as JSON, like for example CVE-2023-27538 like this: curl.se/docs/CVE-2023-27538.js…
Enjoy!
I could use some help to make the #curl CVEs as JSON format as good as we possibly can: github.com/curl/curl-www/pull/…
docs/vuln.json by bagder · Pull Request #237 · curl/curl-www
Generate and provide CVE information in JSON format Sample: vuln.txt Interested in feedback on all details of this.GitHub
Welcome YX Hao as #curl committer 1135: github.com/curl/curl/pull/1097…
cf-socket: turn off IPV6_V6ONLY on Windows if it is supported by lifenjoiner · Pull Request #10975 · curl/curl
It makes support for IPv4-mapped IPv6 addresses. IPV6_V6ONLY refs: https://en.wikipedia.org/wiki/IPv6#IPv4-mapped_IPv6_addresses https://github.com/golang/go/blob/master/src/net/ipsock_posix.go htt...GitHub
deleting system32\curl.exe daniel.haxx.se/blog/2023/04/24… - Let me tell you a story about how Windows users are deleting files from their installation and as a consequence end up in tears. #curl
Fellow #curl friends have seen them before, but the slides from my keynote today are now available here: slideshare.net/bagder/curl-ope…
curl - openfourm europe.pdf
Daniel Stenberg's keynote at the Openforum Europe event "Open Source Driving the European Digital Decade" on April 18, 2023www.slideshare.net
I'll bring some #curl stickers to the open forum event tomorrow as well. If you see me there, ask me for one. I'll keynote.
openforumeurope.org/event/oss-…
Open Source Driving the European Digital Decade | Sweden
Due to high demand to participate, we only accept registrations for in-person to a waiting list. The event will be live streamed. On 18 April, 2023, OpenForum Europe, the Swedish […]OpenForum Europe
Welcome Colman Mbuya as #curl committer 1134: github.com/curl/curl/pull/1096…
Update CURLOPT_PROXY_SSL_VERIFYPEER.3 by colman-mbuya · Pull Request #10968 · curl/curl
Fix minor grammar mistake in libcurl docsGitHub
#curl command line option number 251 is upon us: github.com/curl/curl/pull/1092…
curl: add --proxy-http2 by bagder · Pull Request #10926 · curl/curl
For trying HTTP/2 with an HTTPS proxy.GitHub
We need 770 more stars on the #curl github repo before I can make another celebration image with beer (daniel.haxx.se/blog/2021/04/06…) github.com/curl/curl
GitHub - curl/curl: A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, T
A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP...GitHub
Again NVD lists the wrong info for a #curl advisory in nvd.nist.gov/vuln/detail/CVE-2… which now has the ripple effect that #Debian also lists the wrong versions as affected, in security-tracker.debian.org/tr…
I wish more orgs just read our canonical sources instead.
Great documentation!
Are there planned EOLs for older #curl versions? If so, having these information here might be useful for others: endoflife.date/
What do you think?
Home
Check end-of-life, support schedule, and release timelines for more than 200 products at one place.endoflife.date
I often use the #curl release table to lookup versions and then tell users asking for help actually how old their curl version actually is.... curl.se/docs/releases.html
Welcome Josh McCullough as #curl committer 1133: github.com/curl/curl/pull/1094…
fix typo in http2 by JoshMcCullough · Pull Request #10940 · curl/curl
A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS…GitHub
Welcome Biswapriyo Nath as #curl committer 1132: github.com/curl/curl/pull/1091…
http2: Remove unused Curl_http2_strerror function declaration by Biswa96 · Pull Request #10912 · curl/curl
Curl_http2_strerror was renamed to http2_strerror in 05b100aee247bb9bec8e9a1b0166496aa4248d1c and then http2_strerror was removed in 5808a0d0f5ea0399d4a2a22285f78c66f302c173 This also fixes the fo...GitHub
Welcome SuperIlu @dec_hl as #curl committer 1131: github.com/curl/curl/pull/1091…
fix compilation for MS-DOS/DJGPP by SuperIlu · Pull Request #10910 · curl/curl
This change fixed #10905 for me. curl is compiled with mbedTLS. The change was briefly tested with https://github.com/SuperIlu/DOStodon and seems to work.GitHub
Welcome Ali Khodkar as #curl committer 1130: github.com/curl/curl/pull/1089…
Update write-out.d:typo fix , merging 10892 & 10893 by AliKhodkar · Pull Request #10897 · curl/curl
A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS…GitHub
Daniel’s weekly report April 7, 2023
lists.haxx.se/pipermail/daniel…
#trurl, webinar, #curl, #Fossified
lists.haxx.se/pipermail/daniel…
#trurl, webinar, #curl, #Fossified
April 6 at 10:00 PST (19:00 CEST) @icing and me run a webinar titled "All Things QUIC" about HTTP/3 and #QUIC with #curl and #wolfSSL. Sign up here: us02web.zoom.us/webinar/regist… - I will also live-stream the event on twitch.tv/curlhacker
Welcome! You are invited to join a webinar: All Things QUIC. After registering, you will receive a confirmation email about joining the webinar.
Join us to hear from QUIC expert Stefan Eissing, and cURL founder and lead developer Daniel Stenberg and learn about all things QUIC.Zoom
Bloomberg sponsors curl with 10K USD
url: mastodon.social/@bagder/110102…
discussions: news.ycombinator.com/item?id=3…
48 minutes ago|26 points|3 comments
summary: Bloomberg has donated $10,000 to sponsor #curl, according to a tweet by daniel:// stenberg://.
Bloomberg sponsors #curl with 10K USD. Thank you!daniel.haxx.se/blog/2023/03/28…
Welcome Jim King as #curl committer 1129: github.com/curl/curl/pull/1032…
openssl: interop with AWS-LC by jeking3 · Pull Request #10320 · curl/curl
This pull request adds support for building against AWS-LC. AWS-LC is a BoringSSL/OpenSSL derivative. For more information see https://github.com/awslabs/aws-lc/ This is my first PR into curl - pl...GitHub
Welcome dengjfzh as #curl committer 1128: github.com/curl/curl/pull/1080…
rtsp: skip the malformed RTSP interleaved frame data by dengjfzh · Pull Request #10808 · curl/curl
Some IP camera send malformed RTSP interleaved frames sometimes, which can cause curl_easy_perform return 1 (CURLE_UNSUPPORTED_PROTOCOL). This commit attempts to skip clearly incorrect RTSP interle...GitHub
pre-notification dilemmas:
daniel.haxx.se/blog/2023/03/29… - I will not tell the distros mailing list about pending #curl security vulnerabilities anymore. As requested.
daniel.haxx.se/blog/2023/03/29… - I will not tell the distros mailing list about pending #curl security vulnerabilities anymore. As requested.
Tell me your thoughts around this idea that we make #curl able to output URL components: curl.se/mail/archive-2023-03/0…
Welcome Arne Soete as #curl committer 1127: github.com/curl/curl/pull/1085…
tests: update tests/httpd references to tests/http by asoete · Pull Request #10854 · curl/curl
tests/httpd was renamed to tests/http in #10654. This patch updates some references in the READMEGitHub
Three hours of #curl development from today, in two parts: youtu.be/GGZ2zt6BJI4 and youtu.be/pV73XQZQBf4
curl development with Daniel, March 28 2023 (part 1/2)
Merging pull-requests. mostly my own but also a few others. Merged a few pull-requests into the website and some talks about docs and how the website is done...YouTube
I'll add some new command line features for #curl this afternoon on the live-stream. Starting in 20 minutes at twitch.tv/curlhacker The idea is to add -w "variables" that can output parts of the used URL.
curlhacker - Twitch
I'm Daniel Stenberg, maintainer and lead developer in the curl project. I stream curl related stuff. Release presentations, curl development and related topics.Twitch
Welcome Ronan Pigott as #curl committer 1126: github.com/curl/curl/pull/1084…
docs/cmdline-opts: document the dotless config path by rpigott · Pull Request #10849 · curl/curl
The real xdg config path is $XDG_CONFIG_HOME/curlrc, without the dot. The dotless name seems preferable, so let's match the documentation to the behavior. curl 8.0.1 doesn't seem to care about $XD...GitHub