Reporting a „possible memory leak“ in a 7 year old curl version, because the RSS jumps from 6.2 to 7 MB once.

Could be.

But, dear reporter, we can only try our best to be a better curl *today*. There is no changing the past (hence the name).

We outstretch our hands to you! Come and live with us in the present! Let the ancestors rest and rejoyce among the living!

curlmin

Remove unnecessary headers, cookies, and query parameters from a #curl command while ensuring the response remains the same.

https://github.com/noperator/curlmin

So today it is Friday the 13th and apparently I should have stayed in my bed.

Just spent way too much time troubleshooting why the curl requests I got from Firefox by using "copy request to cUrl" did not work. Turns out it is a Firefox bug. For unknown reason it adds a caret "^" before each parameter separator in the query string in the curl request, breaking everything.

https://bugzilla.mozilla.org/show_bug.cgi?id=1970351

Of course you include a #curl command line when you want to show the billionth repository on GitHub.

https://mastodon.social/@film_girl/114666857574839958

Welcome Edwin Török as #curl commit author 1377: https://github.com/curl/curl/pull/17548

Starting in June 2025, #curl only supports TLS libraries that supports TLS 1.3

https://daniel.haxx.se/blog/2025/06/11/dropping-some-tls-laggards/

5,000 game titles has been released so far *this year* on Steam - that use #curl

Almost 30%.

"download time is reduced by ~13%" (for #curl)

... by adding some odd #OpenSSL functions we didn't know existed.

https://github.com/curl/curl/pull/17548

oldest #curl version in a bug report filed today, and we're not even at 9am yet: 7.4 years

Today is another day with customer products getting flashed with dedicated system images, to validate a new version getting prepared, and to validate the upgrade path from previous versions.

Thanks to #curl author @bagder (and #curl contributors overall!), the procedure is quite easy and can be done over the network.

Full story, written 2 years ago but still valid today: https://debamax.com/blog/2023/02/06/groundhog-day-reflashing-made-easy/

This week has been a lot about #curl for me for various reasons. There were discussions about gemini in a DeltaChat group and someone linked the article @bagder wrote https://daniel.haxx.se/blog/2023/05/28/the-gemini-protocol-seen-by-this-http-client-person/

I'm also playing around with Linux From Scratch so I had to learn about how to build curl myself and the dependencies needed.

Also decided to read about the CVE on hackerone that was reported lately https://hackerone.com/reports/3168039

And to round things off check what's new in version 8.14.1 https://www.twitch.tv/curlhacker

#curl 8.14.1 with Daniel Stenberg

https://youtu.be/vpz7_NMGY6s

How does #curl connect to which host when doing HTTP? First draft.

I dare to claim that few software projects, open or closed, do better, more detailed and more specific security advisories than #curl does.

If there ever is any detail around a #curl CVE you miss or you find an error in, I hope you tell us.

#curl 8.14.1 is out

https://daniel.haxx.se/blog/2025/06/04/curl-8-14-1/

Thanks to Calvin Ruocco, Dan Fandrich, Daniel Stenberg, denandz on github, Ethan Everett, Jacob Mealey, Jeremy Drake, Jeroen Ooms, John Bampton, Kadambini Nema, Michael Kaufmann, Rasmus Melchior Jacobsen, Ray Satiro, Samuel Henrique, Stefan Eissing, Viktor Szakats, x-xiang on github, Yedaya Katsman, Yuyi Wang, z2_

Welcome Jeremy Drake as #curl commit author 1376: https://github.com/curl/curl/pull/17528