[Daniel's week] December 27, 2025

[Daniel Stenberg]

Hello,

Another short one, but here it comes...

## slow

I'm taking it slowly over the Christmas and Near years period. Much less
activity than usual. I will be back to full speed in 2026.

## 2025 summary

I published A look back on 2025 with a curl angle [1].

## hackerone

Another nine suspected curl vulnerability submissions landed on us this week.
One was confirmed and is now the fifth (!) pending CVE announcement for
January 7. Some of these issues took a substantial amount of time to debunk.

AI is now almost always used, which in almost every case makes the report much
longer and larger than necessary. The weekly record I believe was a 736 line
report that could've been summarized in 20.

So. Much. Wasted. Time.

## rc3

I shippped the final release candiate today for the pending curl release [3].
The release cycle is extended one week this time around so I modified the rc
scheduling a little bit to avoid Christmas.

We received excellent feedback from the git project on rc2 changes and a
header unfolding regression that should now be fixed correctly again.

## stickers

I had reason to investigate my curl sticker inventory which made me realize I
don't actually have enough for FOSDEM. The last few years I have given away
seveal thousand curl stickers each FOSDEM and I want to be prepered to allow
this to happen again in 2026. In the past we have used Stickermule for this,
but due to them having made some seriously bad decisions I had to look for a
new suppllier. The new batch is purchases from the Sweden based sticker app
[2].

## Coming up

- another slow week

## Links

[1] = https://daniel.haxx.se/blog/2025/12/23/a-curl-2025-review/
[2] = https://stickerapp.se
[3] = https://curl.se/rc/

-- 

  / daniel.haxx.se