Repository navigation

Upgrade curl to curl-8_21_0 (CVE-2026-8924, CVE-2026-9079) - #40

Closed

fadedreamz wants to merge 539 commits into

masterfrom

cve/curl-curl-8_21_0

Closed

Upgrade curl to curl-8_21_0 (CVE-2026-8924, CVE-2026-9079)#40
fadedreamz wants to merge 539 commits into
masterfrom
cve/curl-curl-8_21_0

This pull request is big! We're only showing the most recent 250 commits

Commits on Jun 2, 2026
- gtls: verify OCSP response signature in gtls_verify_ocsp_status
  
  MegaManSec
  authored and
  bagder
  committed
  be6c4ee
- tidy-up: use test/example domains more
  vszakats
  committed
  89683e0
- RELEASE-NOTES: synced
  bagder
  committed
  a4313f1
- github: Add AI usage warning to issue, doc and PR templates
  jay
  committed
  74f18f2
- schannel: use fopen instead CreateFile
  
  Vasiliy-Kkk
  authored and
  jay
  committed
  a794673
- gtls: minor fixes and improvements
  vszakats
  committed
  2932b7f
- hsts.md: mention multiple curl invokes effect
  bagder
  committed
  5d178de
- vquic: moving related things into subdir
  
  icing
  authored and
  bagder
  committed
  22d9794
- GHA: bump 2 GitHub Actions
  
  dependabot[bot]
  authored and
  vszakats
  committed
  fb6be54
Commits on Jun 3, 2026
- cookie: refactor parse_cookie_header
  bagder
  committed
  6730081
- tool_parsecfg: refactor parseconfig()
  bagder
  committed
  cf79192
- urlapi: simplify urlget_url somewhat
  bagder
  committed
  ef8f685
- top-complexity: drop threshold to 50
  bagder
  committed
  fda48a5
- tests: add `cookies` feature to some tests
  MarcelRaad
  committed
  75a94f3
Commits on Jun 4, 2026
- BINDINGS: Update Hollywood link
  
  afalkenhahn
  authored and
  jay
  committed
  3d721a1
Commits on Jun 5, 2026
- VULN-DISCLOSURE-POLICY.md: emphasize comm as a human
  bagder
  committed
  c32427d
- quic: count zero length packets against max
  
  icing
  authored and
  bagder
  committed
  56eca2a
- libssh2: use non-deprecated `libssh2_knownhost_addc()`
  vszakats
  committed
  3c7d136
- libssh2: do not use deprecated macros when unavailable
  vszakats
  committed
  5c9ac36
- libssh2: sync version check with INTERNALS.md
  vszakats
  committed
  cb30754
- tidy-up: drop stray casts for allocated pointers
  vszakats
  committed
  1b8f4db
- libssh2: replace macro names with non-misspelled alternatives
  vszakats
  committed
  0c8c6f4
- vquic: drop stray casts for `iovec.iov_len`
  vszakats
  committed
  982e19f
- tidy-up: miscellaneous
  vszakats
  committed
  d3e9a81
Commits on Jun 6, 2026
- schannel_verify: simplify CryptQueryObject use
  
  Vasiliy-Kkk
  authored and
  jay
  committed
  3b9f097
- http: reject spurious CR bytes in headers
  bagder
  committed
  c3c2cfb
- CURLOPT_CHUNK_BGN_FUNCTION: target is there for symlinks only
  bagder
  committed
  f7f1666
- CURLOPT_PINNEDPUBLICKEY.md: does not apply for other origins
  bagder
  committed
  38b72f3
- ftplistparser: clear strings.target if not symlink
  bagder
  committed
  317bf7e
Commits on Jun 7, 2026
- progress: fx CURLINFO time reporting
  
  icing
  authored and
  bagder
  committed
  fbcf10a
- CURLOPT_PORT.md: use stronger language
  bagder
  committed
  c4c1284
- tool: warn when --ssl and --ftp-ssl-control override each other
  bagder
  committed
  7bb7b2c
- CURLOPT_DISALLOW_USERNAME_IN_URL: is for CURLOPT_URL only
  bagder
  committed
  e2cb3cc
- RELEASE-NOTES: synced
  bagder
  committed
  1a1ec74
- lib1587: drop redundant includes
  vszakats
  committed
  9c1ebea
- urlapi: fix memleaks on error in `parse_hostname_login()`
  vszakats
  committed
  7c34365
Commits on Jun 8, 2026
- Revert "url: remove ssh_config_matches"
  bagder
  committed
  0618ffe
- var: use a dedicated pointer for the alloc
  bagder
  committed
  9b69cfb
- setopt: claer the "custom" CA booleans when set to NULL
  bagder
  committed
  5df33ef
- libssh2: save non-standard port to `known_hosts`
  vszakats
  committed
  39d5cea
- runtests: allow skipping tests on torture, use for test 357
  vszakats
  committed
  cdce246
- GHA: update dependency pizlonator/fil-c to v0.679
  
  renovate[bot]
  authored and
  vszakats
  committed
  a89fd1f
- _ENVIRONMENT.md. Windows does case insensitive env variables
  bagder
  committed
  ff70868
- CURLOPT_DOH_URL.md: does not inherit proxy options
  bagder
  committed
  e786a4e
- netrc: remember and check filename loaded
  
  icing
  authored and
  bagder
  committed
  435fb96
- ssl native_ca_store: always reinit
  
  icing
  authored and
  bagder
  committed
  d69bfad
- chunked: reject invalid bytes in trailer
  
  alhudz
  authored and
  bagder
  committed
  7de0a7e
- checksrc-all.pl: do not check files multiple times
  vszakats
  committed
  2dfd265
Commits on Jun 9, 2026
- pytest: close file handles after use, and two minor tidy-ups
  vszakats
  committed
  8145476
- urlapi: URL decode hostname before IP address normalization
  bagder
  committed
  04afd16
- digest: escape control codes too
  bagder
  committed
  a2b943b
- resolve: Mention in error that IP address is expected
  
  yedayak
  authored and
  bagder
  committed
  7b9d74a
- pytest: close file handles after use (cont.), and tidy-ups
  vszakats
  committed
  cb4465b
- docs: returned header size reflects HTTP/1-style format
  vszakats
  committed
  b9b2c0c
- peer.h: fix typo in comment
  bagder
  committed
  fb9a520
- ws: make pong sending lazy
  
  icing
  authored and
  bagder
  committed
  849317f
- tidy-up: miscellaneous
  vszakats
  committed
  952b044
- cookie: tailmatch the domains for secure override
  bagder
  committed
  e66b81a
- cf-socket: store errno from do_connect in ctx->error
  
  yedayak
  authored and
  bagder
  committed
  feb609f
- pytest: fix remaining code checker warnings
  vszakats
  committed
  4aa8cc3
- unit1675: fix potential memory leak on dynbuf fail path
  vszakats
  committed
  bbb226b
- pytest: add comment to empty except branch
  vszakats
  committed
  9dcc57b
- tidy-up: use uppercase `TRUE`/`FALSE` where missing
  vszakats
  committed
  847aac0
- pytest: use `Optional[]`, adjust whitespace
  vszakats
  committed
  056dcd9
- smbserver: check impacket presence differently
  vszakats
  committed
  cb4b3e7
- sigv4: URL encode the user name in the header
  bagder
  committed
  c7cba2f
- http-proxy: verify CONNECT response headers
  
  alhudz
  authored and
  bagder
  committed
  62b118c
- psl: require libpsl 0.16.0 (2016-12-10) or greater
  vszakats
  committed
  e37417e
- GHA: update dependency openssl/openssl to v4.0.1
  
  renovate[bot]
  authored and
  vszakats
  committed
  d8c97b0
- tidy-up: drop redundant `!= NULL` syntax
  vszakats
  committed
  59213ab
- tidy-up: drop redundant `== NULL` syntax
  vszakats
  committed
  014be82
- tests: enhance names, remove duplicates
  bagder
  committed
  4ead428
- hsts: duplicate live HSTS data in curl_easy_duphandle
  
  whatchamacallem
  authored and
  bagder
  committed
  084ceb6
- RELEASE-NOTES: synced
  bagder
  committed
  ce53f90
- smbserver: update internal id generation for Python 3
  vszakats
  committed
  2864e99
- appveyor: bump 3 VS2022 jobs to VS2026
  vszakats
  committed
  81cdf4d
Commits on Jun 10, 2026
- tests: restore 1030 and 611
  bagder
  committed
  3f10553
- digest: flush state on origin or credential change
  bagder
  committed
  5c6b488
- test 527: bring back, not a dupe
  bagder
  committed
  4fcf9c8
- ngtcp2: share common functionality
  
  icing
  authored and
  bagder
  committed
  f924489
- GHA: update ruff from v0.15.12 to v0.15.16
  
  renovate[bot]
  authored and
  vszakats
  committed
  f5cf508
- GHA: update awslabs/aws-lc from v1.73.0 to v5.0.0
  
  renovate[bot]
  authored and
  vszakats
  committed
  a6cece5
- mqtt: return error on truncated Remaining Length
  bagder
  committed
  ae2986c
- build: enable `-Wformat-signedness`, fix issues found
  vszakats
  committed
  2f3fa47
- tidy-up: drop stray comparisons with literal zero
  vszakats
  committed
  97aed9c
- connect: turn conn_get_first_origin into static
  bagder
  committed
  a6971ce
- CURLOPT_WRITEFUNCTION.md: mention redirects
  bagder
  committed
  7409680
Commits on Jun 11, 2026
- digest: flush proxy state on proxy or credential change
  
  alhudz
  authored and
  bagder
  committed
  7ec2514
- cf-socket: make Curl_addr2string static
  
  icing
  authored and
  bagder
  committed
  30c9c79
- cf-ip-happy: update documentation
  
  icing
  authored and
  bagder
  committed
  946306b
- h3proxy: no stream userdata
  
  icing
  authored and
  bagder
  committed
  8a867c2
- SECURITY-ADVISORY.md: expand
  bagder
  committed
  9d93d4a
- multi: remove a stale comment
  bagder
  committed
  9cf6b70
- CURLINFO_CONTENT_LENGTH_UPLOAD_T.md: expand
  bagder
  committed
  b7c9229
- content_encoding: fix non-last chunked rejection
  bagder
  committed
  2b336e6
- cf-ip-happy.c: minor comment typo
  bagder
  committed
  f763847
- CURLOPT_WRITEFUNCTION.md: remove stray reference to HSTS
  bagder
  committed
  08ae71f
- http_digest: return better error
  bagder
  committed
  7f45bb8
- GHA/windows: bump Cygwin Action and adjust version number
  vszakats
  committed
  663b156
- GHA: update debian:bookworm-slim Docker digest to 96e378d
  
  renovate[bot]
  authored and
  vszakats
  committed
  c0d433d
- asyn-thrdd: add IPv6 guards
  
  sourceturner
  authored and
  vszakats
  committed
  04a85a1
- tidy-up: miscellaneous
  vszakats
  committed
  2a606c6
- tidy-up: add spaces around equal operators where missing
  vszakats
  committed
  e35ba09
- runtests: fix tests for curl builds with embedded CA bundle
  vszakats
  committed
  8b1be77
- telnet: fix error message typos
  vszakats
  committed
  bcb2890
- GHA/distcheck: fix parsing the download page
  vszakats
  committed
  0cd0a64
- tests: add the "--resolve" keyword to tests that lack it
  
  fabiankeil
  authored and
  bagder
  committed
  244834d
- libtests: add and use tutil_throwaway_cb
  bagder
  committed
  c5b6b74
- RELEASE-NOTES: synced
  bagder
  committed
  c37b398
- GHA/distcheck: use `https://curl.se/info`
  vszakats
  committed
  b3bc61a
- lib695, lib757: fix truncated newline in error messages
  vszakats
  committed
  abdfa2b
Commits on Jun 12, 2026
- GHA: drop `brew update` from all jobs
  vszakats
  committed
  d77b4b7
- checksrc: silence `-b` option debug message
  vszakats
  committed
  410f3ca
- config2setopts: use default protocol properly
  bagder
  committed
  ab3bb8c
- runtests: error out on duplicate test names
  bagder
  committed
  8664a9f
- GHA/distcheck: switch to parse `info.json`
  vszakats
  committed
  fb24412
- AmigaOS: curl_setup.h avoid explicit_bzero with clib2
  
  boingball
  authored and
  vszakats
  committed
  982e2e8
- mailmap: Darren Banfi
  bagder
  committed
  5b9263e
- runtests: exit hard on duplicate test name
  bagder
  committed
  a1db900
- telnet: fix old copy-paste typo in variable name
  vszakats
  committed
  4f53234
- schannel: fix https proxy for client cert and certinfo
  
  icing
  authored and
  jay
  committed
  7d8c68a
- AmigaOS: fix build fallouts, re-add to CI
  vszakats
  committed
  7c51a33
- socket: introduce `SOCK_EAGAIN()` and use it
  vszakats
  committed
  879a151
- build: enable `-Wlogical-op` picky warning for GCC 4.4+
  vszakats
  committed
  c951368
- lib: transfer origin and proxy handling
  
  icing
  authored and
  bagder
  committed
  73daec6
- telnet: drop redundant interim variables
  vszakats
  committed
  bb837dd
Commits on Jun 13, 2026
- sspi: free libcurl allocated memory with curlx_free
  bagder
  committed
  8d3c4fe
Commits on Jun 14, 2026
- ldap: base64 encode binary LDIF values with WinLDAP
  
  SaudAlshareef
  authored and
  bagder
  committed
  6b78264
- socks_sspi: invalid response length is a fatal error
  bagder
  committed
  fb83911
- socket: use name `sockerr` for socket error variables
  vszakats
  committed
  fe2df80
- telnet: drop an `int` cast no longer necessary
  vszakats
  committed
  ba16b83
- krb5_sspi: fix error message on `DecryptMessage()` fail
  vszakats
  committed
  c61f007
- perl: switch from backticks to `qx()`
  vszakats
  committed
  9972f70
- tests/servers: do not interpret `unlink()` retval as `errno`
  vszakats
  committed
  d9ea8cd
- rtspd: sync up sleep loop with sws
  vszakats
  committed
  945938d
- servers: minor socket error handling fixes
  vszakats
  committed
  9002d33
- servers: drop single-use interim result variables
  vszakats
  committed
  f1b1919
- smb: integer overflow proof a size check
  bagder
  committed
  c4cb676
- socks_sspi: store socks5_gssapi_enctype
  bagder
  committed
  5bff1c3
- tidy-up: miscellaneous
  vszakats
  committed
  0ffab25
Commits on Jun 15, 2026
- cmake/FindGSS: fix comment, adjust custom flavor property name
  vszakats
  committed
  43c685f
- tidy-up: prefer spelling 'flavor', where missing
  vszakats
  committed
  9061302
- urlapi: refactor and simplify curl_url_set
  bagder
  committed
  79a2416
- libtests: prefer `sizeof()` over `strlen()`, fix potential OOB read in 1591
  vszakats
  committed
  a6d9783
- servers: fix error message if unix socket path is not a socket
  vszakats
  committed
  e70f8eb
- servers: drop unix socket path attribute check on Windows
  vszakats
  committed
  03bc93b
- transfer: adapt Curl_xfer_is_secure()
  
  icing
  authored and
  bagder
  committed
  8cc3fed
- servers: mask to `S_IFMT` in unix socket path attribute check
  vszakats
  committed
  0882e39
- VULN-DISCLOSURE-POLICY: non-released code
  bagder
  committed
  b0d733e
- checksrc: detect and warn for (void)!
  bagder
  committed
  9f25dce
- src/test: avoid (void)! constructs
  bagder
  committed
  c8d8f08
- cf-capsule: complete filter
  
  icing
  authored and
  bagder
  committed
  7333f66
- verify-release: verify more thoroughly with git
  bagder
  committed
  6ce7404
- servers: accept `unlink()` failing due to the file missing
  vszakats
  committed
  7d09426
- lib668: do not assume null-terminator in test input data
  vszakats
  committed
  8932063
- cf-setup: own source file
  
  icing
  authored and
  bagder
  committed
  f497b25
- ratelimits: use minimal burst rate
  
  icing
  authored and
  bagder
  committed
  eb6d1e0
- servers: accept `lstat()` failing due to the file missing
  vszakats
  committed
  0dae3b2
- curl_formdata: fix to pass long where missing, document `CURLFORM_NAMELENGTH`
  vszakats
  committed
  adb606e
- winldap: avoid NULL pointer deref on `ldap_get_dn()` fail
  vszakats
  committed
  46ba384
- servers: fix off-by-3 OOB write for large `loghex()` inputs
  vszakats
  committed
  5687d21
- servers: silence `-Wunused-result` with pragma
  vszakats
  committed
  526d3b8
- tls: wolfssl: fixes for PQC key shares
  
  Frauschi
  authored and
  bagder
  committed
  50ffc35
- cookie: use origin scheme for secure context check
  
  Daviey
  authored and
  bagder
  committed
  b9702f8
- cf-https-connect: do not engage on proxy origin
  
  icing
  authored and
  bagder
  committed
  bb72413
- verify-release: don't unpack in git repo
  bagder
  committed
  7f57aee
- setopt: mark function argument as unused *properly*
  bagder
  committed
  5d1ac48
- perl: `|| die` -> `or die`
  vszakats
  committed
  678e639
Commits on Jun 16, 2026
- tool_writeout: fix %time{} output for %s
  bagder
  committed
  e0c6f4d
- servers: deduplicate `storerequest()` across two servers
  vszakats
  committed
  c2b050e
- url: connection credentials origin
  
  icing
  authored and
  bagder
  committed
  bd10924
- _URL.md: remove the zone-id mention
  bagder
  committed
  b56cb3b
- GHA: update google/boringssl to v0.20260616.0
  
  renovate[bot]
  authored and
  bagder
  committed
  1bb75af
- perl: `open... || ` -> `open... or` (cont.)
  vszakats
  committed
  be8f243
- cmake/FindGSS: prioritize MIT over GNU in pkg-config detection
  vszakats
  committed
  aacb90b
- CI: improve labeler tag detection
  dfandrich
  committed
  6125d5d
- configure: tidy up `OPT_APPLE_SECTRUST` initialization
  vszakats
  committed
  528c05a
- GHA: bump pip cryptography from 46.0.7 to 48.0.1
  
  dependabot[bot]
  authored and
  vszakats
  committed
  73d0609
- cf-dns: pass peer for result lookups
  
  icing
  authored and
  bagder
  committed
  92db819
- RELEASE-NOTES: synced
  bagder
  committed
  7806fb3
Commits on Jun 17, 2026
- creds: create with empty user+pass
  
  icing
  authored and
  bagder
  committed
  74ac8e7
- libtest: unify on easy_setopt macro
  bagder
  committed
  39caaff
- dns-httpsrr-lookup: use origin, not peer
  
  icing
  authored and
  bagder
  committed
  8c3ef95
- http: for basic+digest auth, do not engage on empty user+passwd
  
  icing
  authored and
  bagder
  committed
  d2886c5
- first.h reflow
  vszakats
  committed
  60381b2
- src: sync nghttp2 versions checks with current requirements
  vszakats
  committed
  4abe47e
- INTERNALS.md: document minimum nghttp3 and ngtcp2 versions
  vszakats
  committed
  bdb1773
- GHA/windows: do `apt-get update` in clang-tidy cross-build job again
  vszakats
  committed
  0ffd2e7
- GHA/linux: allow more time for `apt.repos.intel.com` install
  vszakats
  committed
  4e07b37
- GHA: sync apt-get code between workflows/jobs
  vszakats
  committed
  766969b
- GHA/linux: give more time for `apt-get install`
  vszakats
  committed
  e8b7677
- cmake: simplify `LINK_ONLY` imported target extraction
  vszakats
  committed
  174cafb
- GHA/macos: enable krb5 in an autotools job
  vszakats
  committed
  a36e979
- cmake/FindGSS: drop "MIT Unknown" version value, related tidy ups
  vszakats
  committed
  6db0ba2
- cmake/FindGSS: drop CMake <3.16 compatibility logic
  vszakats
  committed
  e136694
Commits on Jun 18, 2026
- url: don't log bits.close state
  
  yedayak
  authored and
  bagder
  committed
  9ccc80b
- cookie: reject control octets in file-loaded cookies
  
  alhudz
  authored and
  bagder
  committed
  4a86af9
- RELEASE-PROCEDURE.md: update coming relese dates
  bagder
  committed
  abad1c9
- multi: xfers_really_alive
  
  icing
  authored and
  bagder
  committed
  f0be417
- GHA/linux: drop arm runner home attribute workaround (fixed upstream)
  vszakats
  committed
  af94731
- GHA/http3-linux: simplify setting `CC`/`CXX` envs
  vszakats
  committed
  6079ff3
- GHA/linux: use default GCC compiler, drop `CC`/`CXX` envs
  vszakats
  committed
  2d70c81
- docs/VERIFY: expand with more things we do
  bagder
  committed
  a7e35c9
- pingpong: reject nul byte in server response line
  
  alhudz
  authored and
  bagder
  committed
  2f8fb98
- GHA/linux: bump analyzer job to gcc-16, and ubuntu-26.04
  vszakats
  committed
  5a2af80
- CURLMOPT_SOCKETFUNCTION.md: this sends *all* file descriptors
  bagder
  committed
  b71d3d9
- openssl: do not mix OpenSSL int result with `CURLcode` variable
  vszakats
  committed
  39628c5
- curl_multi_assign.md: clarify lifetime
  bagder
  committed
  595d052
- GHA: bump analyzer/sanitizer jobs to clang-22, and ubuntu-26.04
  vszakats
  committed
  adb4edd
- MANUAL.md: update `apt-key` example
  vszakats
  committed
  c972583
- GHA/http3-linux: bump to ubuntu-26.04
  vszakats
  committed
  950a30d
- smb: constify `strchr()` result variable
  vszakats
  committed
  e44f1a1
- cookie: check __Secure- and __Host- case sensitively when read from file
  
  alhudz
  authored and
  bagder
  committed
  fdd6ba3
- GHA: separate pytype from other checkers and pips
  vszakats
  committed
  139ce4d
- GHA: fix Linux triplet passed to `CMAKE_C_COMPILER_TARGET`
  vszakats
  committed
  8f5e4f0
- GHA: re-sync Linux CMake triplet with autotools builds
  vszakats
  committed
  2a993e2
Commits on Jun 19, 2026
- runtests: drop orphaned, no-op `-k` option
  vszakats
  committed
  04305a3
- vquic: fix `-Wunused-parameter` with proxies disabled
  vszakats
  committed
  93e2341
- GHA: update dependency cloudflare/quiche to v0.29.2
  
  renovate[bot]
  authored and
  vszakats
  committed
  94962a9
- KNOWN_BUGS.md: drop outdated CMake issues
  vszakats
  committed
  acdeb7f
- setopt: refactor setopt_cptr into smaller helper functions
  bagder
  committed
  52fa8d9
Commits on Jun 20, 2026
- INSTALL-CMAKE.md: document CMake environment variables
  vszakats
  committed
  372401f
Commits on Jun 21, 2026
- setopt: make CURLOPT_KEYPASSWD work for SSH-only builds
  bagder
  committed
  0d6e594
Commits on Jun 22, 2026
- cd2nroff: handle TLS together with other protocols
  bagder
  committed
  cb7efe1
- proxy: fix automatic tunnel mode with "connect to host"
  
  mkauf
  authored and
  bagder
  committed
  810d953
- websockets: buffer ugprade data at connection level
  
  icing
  authored and
  bagder
  committed
  8ed285f
- doh: cap the maximum TTL to 24 hours
  bagder
  committed
  e8e3af2
- doh: stricter HTTPS RNAME parsing
  bagder
  committed
  ab779d4
- libssh2: code and infof/trace cleanups
  
  icing
  authored and
  bagder
  committed
  d638eac
- HTTP3.md: update quiche build
  
  icing
  authored and
  bagder
  committed
  c5d0e93
- setopt: cleanup the length check for COPYPOSTFIELDS handling
  bagder
  committed
  c35e2cb
- libssh2: fix to return error code on missing parameter
  vszakats
  committed
  2735ef3
- libssh2: drop stray double-negative from `strncmp()` result
  vszakats
  committed
  b3675fe
- setopt: return error if received `curl_blob->data` is NULL
  vszakats
  committed
  f7d4e11
- appveyor: pass `--proto-redir =https` option
  vszakats
  committed
  d824266
- peer: fix ipv6 detection
  
  icing
  authored and
  bagder
  committed
  be1d976
- CURLOPT_SSLVERSION.md: drop stray space from 'SSLv*', 'TLSv*'
  vszakats
  committed
  5735540
- tidy-up: make 'CA' uppercase, where missing
  vszakats
  committed
  b0d0f16
- doh: drop redundant `curlx_dyn_free()` call in `doh_probe_done()`
  vszakats
  committed
  560dc29
- cmake: add pre-fills for DragonFly BSD and MidnightBSD
  vszakats
  committed
  364d6c1
- GHA/windows: settle on windows-2025 image name
  vszakats
  committed
  621176c
Commits on Jun 23, 2026
- RELEASE-PROCEDURE.md: typo
  bagder
  committed
  7e37510
- GHA/linux: bump pizlonator/fil-c to v0.680, fixup quoting
  vszakats
  committed
  7826739
- test 679: add a quoted string name in a netrc test
  bagder
  committed
  9adc32a
- GHA/non-native: BSD overhaul, test more autotools, bump versions
  vszakats
  committed
  bf29c3e
Commits on Jun 24, 2026
- THANKS: added names from 8.21.0 release
  bagder
  committed
  ec37b02
- VERSIONS: 8.21.0 release
  bagder
  committed
  9187ef7
- RELEASE-NOTES: synced
  bagder
  committed
  68720b4
Commits on Aug 6, 2026
- Merge upstream curl-8_21_0 into master
  cve-libcurl-updater
  committed
  310f165
Commits on Aug 19, 2026
- unitytls: follow curl 8.21.0 ssl_primary_config / ssl_peer changes
  cve-libcurl-updater
  committed
  b316b76

Commits

Commits on Jun 2, 2026

Commits on Jun 3, 2026

Commits on Jun 4, 2026

Commits on Jun 5, 2026

Commits on Jun 6, 2026

Commits on Jun 7, 2026

Commits on Jun 8, 2026

Commits on Jun 9, 2026

Commits on Jun 10, 2026

Commits on Jun 11, 2026

Commits on Jun 12, 2026

Commits on Jun 13, 2026

Commits on Jun 14, 2026