curl 8.21.0 has been released as the 275th release, featuring 6 changes, 276 bugfixes, and a record-breaking 18 security vulnerability fixes in a single release. The security fixes include 4 medium-severity CVEs (SASL double-free, auth state leaks, proxy password leak) and 14 low-severity CVEs covering issues like wrong connection reuse, UAF bugs, SSH host validation, and memory exhaustion. New features include named globs support, HTTP/3 proxy CONNECT and MASQUE CONNECT-UDP support, and SHA256 host public key support via libssh. Planned future removals include NTLM, SMB, TLS-SRP support, and local crypto implementations. The next release is scheduled for September 2.
7.5K Impressions