From daniel at haxx.se Fri Oct 9 22:24:12 2026 From: daniel at haxx.se (Daniel Stenberg) Date: Fri, 9 Oct 2026 22:24:12 +0200 (CEST) Subject: [Daniel's week] October 9, 2026 Message-ID: # October 9, 2026 ## Vacation It is probably a sign of me growing old or something, but during my vacation last week I managed to not open my laptop even once. I did keep up with most of the emails on my phone so I at least had a pretty good idea of what was going on, but I made a deliberate effort to not respond or participate unless something special required it. It was good and refreshing. I had a great week. ## security We keep getting hammered by vulnerability reports and I wrote a blog post this week saying they were twenty-two [2] and a mention of the pending severity HIGH issue. A few days later, we are at twenty-four. This is a new curl record for a single release cycle. This cycle is even two weeks shorter than normal. There are also no real indications that the wave is over anytime soon. This week I made the backports for all these issues into the three living Rock-solid curl [3] branches to be able to announce updates for all of them at the same day we do the full curl release: October 14. I have received slightly more interest and curiosity in Rock-soilid curl recently as the volume of vulnerabilities has kept increasing. ## blab I attended the Netnod Tech Meeting 2026 in Stockholm in person this Tuesday and I talked about high volume vulnerability detection with AI in front of maybe two hundred peeps at his lovely event. Met some old and few friends. ## rc3 This week we shipped the third and final curl 8.23.0 release candidate [1]. ## coming up - Wednesday: curl 8.23.0 release - Wednesday: Rock-solid curl 8.14.3, 8.16.2, 8.20.2 releases - Wednesday: curl release video live-stream on Twitch ## Links [1] = https://curl.se/rc/ [2] = https://daniel.haxx.se/blog/2026/10/07/twenty-two-pending-curl-vulnerabilities/ [3] = https://rock-solid.curl.dev/ -- / daniel.haxx.se