[SECURITY ADVISORY] curl: No QUIC certificate pinning with wolfSSL

2025-05-27 Thread Daniel Stenberg via curl-users
No QUIC certificate pinning with wolfSSL Project curl Security Advisory, May 28 2025 - [Permalink](https://curl.se/docs/CVE-2025-5025.html) VULNERABILITY - libcurl supports *pinning* of the server certificate public key for HTTPS transfers. D

[SECURITY ADVISORY] curl: QUIC certificate check skip with wolfSSL

2025-05-27 Thread Daniel Stenberg via curl-users
QUIC certificate check skip with wolfSSL Project curl Security Advisory, May 28 2025 - [Permalink](https://curl.se/docs/CVE-2025-4947.html) VULNERABILITY - libcurl accidentally skips the certificate verification for QUIC connections when conn

[RELEASE] curl and libcurl 8.14.0

2025-05-27 Thread Daniel Stenberg via curl-users
Hello, I'm happy to once again announce that we have shipped a new curl release. curl 8.14.0 is uploaded and is as always available at https://curl.se Enjoy! curl and libcurl 8.14.0 Public curl releases: 267 Command line options: 269 curl_easy_setopt() options: 308 Publ