Cyber Security News

Curl 8.15.0 Officially Released: 233 Bugs Fixed in Major Update

Curl, the ubiquitous command-line tool and library for transferring data with URLs, has reached version 8.15.0 with a landmark release that addresses more than 230 bugs and streamlines its internal architecture.

Officially launched today at 10:00 CEST (08:00 UTC) in a live-streamed presentation on Twitch, this release marks the project’s 269th iteration and reaffirms its dedication to stability, performance, and community collaboration.

In a departure from previous, longer development cycles, the curl team implemented a tighter four-to-six-week schedule for 8.15.0.

Despite the accelerated pace, maintainers identified and resolved 233 distinct bug reports—an average of nearly six fixes per day over the 42-day sprint—bringing the total documented bug resolutions across all curl versions to over 12,200.

Although only a single new change was formally logged in the merge tracker, developers invested extensive effort under the hood to harden existing functionality and retire obsolete code paths.

One of the most significant architectural shifts in this release is the removal of support for Apple’s Secure Transport API and the lightweight BearSSL library.

By deprecating these backends, the curl project reduces maintenance overhead and encourages users to consolidate around the more robust and widely tested OpenSSL, Secure Channel on Windows, and other major TLS providers.

This strategic pruning streamlines the build process, cuts down on conditional code, and positions future versions to adopt cutting-edge security measures without carrying legacy compatibility burdens.

While no new public libcurl functions, curl_easy_setopt options, or command-line flags were introduced in 8.15.0, the project remains rich with 96 public API calls, 308 easy_setopt options, and a palette of 269 CLI switches.

The absence of new features in this minor release underscores the team’s prioritization of reliability and polishing over expansion. Likewise, security patches did not feature in this cycle; the last vulnerability fix in curl was addressed in release 8.14.4.

Contribution statistics for 8.15.0 highlight the vibrancy of the curl community. Of the 57 contributors who participated, 29 were newcomers making their first impact on the codebase.

Meanwhile, 37 distinct authors committed changes, 16 of whom joined the project this cycle.

In total, 334 commits pushed 35,572 cumulative alterations to the repository, steadily advancing curl’s code quality and feature set since its inception.

As curl 8.15.0 becomes available for download across all supported platforms, users and integrators are encouraged to upgrade promptly to benefit from these robustness improvements.

Full source packages, binaries, and detailed changelogs can be found on the official curl website.

With its relentless drive to squash bugs and simplify code, curl continues to solidify its reputation as a rock-solid tool in the network engineer’s and developer’s toolbox.

Stay Updated on Daily Cybersecurity News . Follow us on Google News, LinkedIn, and X.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago