[Daniel's week] August 23, 2026

[Daniel Stenberg]

Hey

A little later and a little shorter than usual, but another week went by.

## security

Some reports trickle in but the speed  is rather low and no new 
vulnerabilities have been confirmed since last week.

## backports

I spent the week backporting 93(!) vulnerability fixes into three separate 
curl release branches - with a little help from Stefan. The plan is to release 
these three new Rock-solid curl [1] releases after the pending curl 8.22.0 
release. Three release branches that ship older curl releases, fully 
security-patched: 8.14.2 (36 vulnerabilities fixed) , 8.16.1 (36 
vulnerabilities fixed) and 8.20.1 (21 vulnerabilities fixed). Plus of course 
if we get more reported before September 2... These backports will be 
available for customers only.

## performance tests

The performance tests have developed slightly as well, as we soon reach the 
first thousand performance tests. The graphs triggered some further 
optimizations this week and the Curl_easy struct is now about 34% smaller[2] 
than what it was in the 8.21.0 release!

## Coming up

- curl 8.22.0-rc3 ships Wednesday

## Links

[1] = https://rock-solid.curl.dev/
[2] = https://curl.se/perf/#easy-handle

-- 

  / daniel.haxx.se