BSD Ports

net/curl 8.23.0 OpenBSD

transfer files with FTP, HTTP, HTTPS, etc.

System
OpenBSD
Repository
OpenBSD ports
Maintainer
Christian Weisgerber <[email protected]>
Last update
Commit
e0d08d8089
Categories
net

Description

curl is a command line tool for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, MQTT, POP3, POP3S, RTSP, SMTP, SMTPS, TELNET, TFTP, and WS. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies, user+password authentication (Basic, Digest, NTLM, Negotiate, ...), file transfer resume, proxy tunneling and a busload of other useful tricks.

In the other systems

SystemPortVersion
OpenBSDnet/curl8.23.0
FreeBSDftp/curl8.23.0
NetBSDwww/curl8.22.0
DragonFlyftp/curl8.14.1

Install

Binary package:

pkg_add curl

From the ports tree:

cd /usr/ports/net/curl && make install

Dependencies

Build dependencies 4
Run dependencies 3

Commit history 2

DateCommitCreditsLog message
e0d08d8089 naddy net/curl: update to 8.23.0
Includes fixes for CVE-2026-87863: HSTS response erases persisted entries CVE-2026-87862: HSTS cache import drops longer-lived child CVE-2026-87861: cross-origin reuse of a Negotiate connection CVE-2026-86414: leaking host credentials to HTTP proxy CVE-2026-86413: Negotiate credentials sent to redirected origin CVE-2026-86412: server-set cookie erases cookie jar CVE-2026-92392: HTTP/2 upload Use-After-Free CVE-2026-92391: curl_mime_free stack overflow by recursion CVE-2026-92390: -J no-clobber guarantee bypassed with 103 early hints CVE-2026-92389: TFTP direction confusion CVE-2026-92388: FTP wildcard write callback mixup CVE-2026-92387: never-ending loop via server response omission CVE-2026-92386: server-set cookie aborts cookie jar load …
af56f6c9f3 naddy net/curl: update to 8.22.0
Changes: * hardening: add API guards * TLS: drop support for TLS-SRP Includes fixes for CVE-2026-18924: HTTP/2 server push UAF CVE-2026-19931: Negotiate ambient user conn reuse CVE-2026-80230: OpenSSL pinning bypass CVE-2026-80255: secure cookie attribute bypass with tab