[Daniel's week] October 9, 2026

[Daniel Stenberg]

# October 9, 2026

## Vacation

It is probably a sign of me growing old or something, but during my vacation 
last week I managed to not open my laptop even once. I did keep up with most 
of the emails on my phone so I at least had a pretty good idea  of what was 
going on, but I made a deliberate effort to not respond or participate unless 
something special required it. It was good and refreshing. I had a great week.

## security

We keep getting hammered by vulnerability reports and I wrote a blog post this 
week saying they were twenty-two [2] and a mention of the pending severity 
HIGH issue. A few days later, we are at twenty-four. This is a new curl record 
for a single release cycle. This cycle is even two weeks shorter than normal. 
There are also no real indications that the wave is over anytime soon.

This week I made the backports for all these issues into the three living 
Rock-solid curl [3] branches to be able to announce updates for all of them at 
the same day we do the full curl release: October 14. I have received slightly 
more interest and curiosity in Rock-soilid curl recently as the volume of 
vulnerabilities has kept increasing.

## blab

I attended the Netnod Tech Meeting 2026 in Stockholm in person this Tuesday 
and I talked about high volume vulnerability detection with AI in front of 
maybe two hundred peeps at his lovely event. Met some old and few friends.

## rc3

This week we shipped the third and final curl 8.23.0 release candidate [1].

## coming up

- Wednesday: curl 8.23.0 release
- Wednesday: Rock-solid curl 8.14.3, 8.16.2, 8.20.2 releases
- Wednesday: curl release video live-stream on Twitch

## Links

[1] = https://curl.se/rc/
[2] = https://daniel.haxx.se/blog/2026/10/07/twenty-two-pending-curl-vulnerabilities/
[3] = https://rock-solid.curl.dev/

-- 

  / daniel.haxx.se