CVE and update status of the FreeBSD ports tree3,298 unaddressed CVEs in 671 portsAll times are CET
Port details

ftp/curl 8.23.0

Command line tool and library for transferring data with URLs

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 8.23.0
Upstream
up to date
Last update
to 8.23.0 · 1c19f23423
Quarterly
2026Q4: 8.23.0 · last MFH 0b6d7a71f4
WWW
https://curl.se/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install curl
installs 8.23.0 from latest; from quarterly (2026Q4) 8.23.0
Port
# cd /usr/ports/ftp/curl && make install clean
# make -C /usr/ports/ftp/curl config  # change options first
Size
1.9 MiB download · 5.7 MiB installed
Depends on
archivers/brotli 1.2.1,1, archivers/zstd 1.5.7_2, dns/libidn2 2.3.8, dns/libpsl 0.23.3, security/libssh2 1.11.1_1,3, www/libnghttp2 1.70.0
License
MIT
Options
30 of 40 on in the package: ALTSVC BROTLI COOKIES DICT DOCS EXAMPLES FTP GOPHER GSSAPI_BASE HTTP HTTP2 IDN IMAP IPFS IPV6 LIBSSH2 MQTT NTLM OPENSSL POP3 PROXY PSL RTSP SMTP STATIC TELNET TFTP THREADED_RESOLVER WEBSOCKET ZSTD
Show the 10 options that are off
CARES DEBUG GNUTLS GSSAPI_MIT GSSAPI_NONE LDAP LDAPS LIBSSH LIBUV WOLFSSL

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 168.23.08.22.0–
FreeBSD 158.23.08.22.0–
FreeBSD 148.23.08.22.08.23.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 158.23.08.22.0–
FreeBSD 148.23.08.22.08.23.0

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 8.23.0.

Fixed (55)

Show 55 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
298586maintainer-feedback? ftp/curl: support Rustls for TLSNew2026-09-18
297733maintainer-feedback? ftp/curl: Multiple options are missing IMPLIESNew2026-08-22
297732maintainer-feedback? ftp/curl: Multiple options are missing dependencies for unit testsNew2026-08-22
294115maintainer-feedback? ftp/curl: Incorrect dependency for libssh and libssh2 after b889b19eb5e30e1c77d57d0e43977b4af9a0cbb5New2026-05-15
288123maintainer-feedback? ftp/curl: Add HTTP/3 Support (preliminary diff)New2026-04-08

Commits (435)

John Marino (marino) · 7.50.1
ftp/curl: Remove redundant ports SSL + base GSSAPI check

If one tries to use the base gssapi with SSL from ports, gssapi.mk
will add an IGNORE entry.

Suggested by:	mat
5f2c34b863
John Marino (marino) · 7.50.1
LibreSSL checks: Check for libressl-devel option too

Approved by:	SSL blanket
5e0773b87a
Mark Felder (feld) · 7.50.1
ftp/curl: Update to 7.50.1

PR:		211575
MFH:		2016Q3
Security:	CVE-2016-5419
Security:	CVE-2016-5420
Security:	CVE-2016-5421
4ec371b27c
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.49.1
- Update to 7.49.1

Changes:	http://curl.haxx.se/changes.html
5490165e73
Mathieu Arnold (mat) · 7.49.0
Make it possible to have bsd.default-versions.mk included before any other bsd.*.mk file.

Restore the way ftp/curl was working before.

With hat:	portmgr
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D6921
fd95fdbe01
Mathieu Arnold (mat) · 7.49.0
Unbreak.

Sponsored by:	Absolight
208853dd74
Mathieu Arnold (mat) · 7.49.0
Fix when PORTSDIR doesn't exist at that point. (Which, I think, doesn't happen outside of portsnap's infrastructure).

Sponsored by:	Absolight
d402fcb48d
Mathieu Arnold (mat) · 7.49.0
Fix usage of WITH_OPENSSL_BASE, WITH_OPENSSL_PORT and OPENSSL_PORT.

WITH_OPENSSL_* can't be set after bsd.port.pre.mk.
Fold all other usage into using SSL_DEFAULT == foo

PR:		210149
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	The FreeBSD Foundation, Absolight
Differential Revision:	https://reviews.freebsd.org/D6577
5b55a8a53e
Dmitry Marakasov (amdmi3) · 7.49.0
Remove NLS, DOCS, EXAMPLES and IPV6 from OPTIONS_DEFAULT, they are enabled by default anyway and don't need to be listed

Approved by:	portmgr blanket
c86e9d9724
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.49.0
- Update to 7.49.0 - Fix shebang

Changes:	http://curl.haxx.se/changes.html
058292829e
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.48.0_2
- Update to 0.13.0 - Bump PORTREVISION for dns/libpsl shlib change

Changes:	https://github.com/rockdaboot/libpsl/blob/master/NEWS
848eb75b28
Mathieu Arnold (mat) · 7.48.0_1
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.

With hat:	portmgr
Sponsored by:	Absolight
4e1b79a0a6
Tijl Coosemans (tijl) · 7.48.0_1
- Update security/gnutls to 3.4.10. - Rename the LIBDANE option DANE because that's the name of the protocol   supported by libgnutls-dane and gnutls-cli.  Also clarify the option   description. - Add an IDN option. - libgnutls-openssl has been removed in 3.4.  Some ports used this library   in their LIB_DEPENDS but no port actually required it. - Some old API functions have been removed.  Ports t

net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.

www/hydra: Mark BROKEN.  This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.

PR:		207768
Exp-run by:	antoine
Approved by:	portmgr (antoine)
6bc6f3a9e0
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.48.0
- Update to 7.48.0

Changes:	http://curl.haxx.se/changes.html
a545499856
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.47.1
- Fix build with RTMP enabled

PR:		207513
Submitted by:	Alexandr Matveev <timon@timon.net.nz>
465b634bd8
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.47.1
- Update to 7.47.1

Changes:	http://curl.haxx.se/changes.html
5b1654593e
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.47.0
- Add METALINK option

PR:		205875
Submitted by:	Matthieu Volat <mazhe@alkumuna.eu>
2f376f89ab
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.47.0
- Remove GSSAPI_*_DESC
fb3100e560
Niclas Zeising (zeising) · 7.47.0
Update to 7.47.0

PR:		206756
Submitted by:	zeising
Approved by:	ports-secteam (miwi)
MFH:		2016Q1
Security:	CVE-2016-0755
ad6321ab88
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.46.0_2
- Add PSL option

Sponsored by:	PortsCamp Taiwan
26b7f9b547
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.46.0_2
- Simplify Makefile:   - Use USES=localbase unconditionally   - Use *_CONFIGURE_{ENABLE,WITH} - Bump PORTREVISION for package change

Differential Revision:	https://reviews.FreeBSD.org/D4757
PR:		205804
Exp-run by:	antoine
Accepted by:	bapt (portmgr)
65d56b3826
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.46.0_1
- Use gmake for zsh completions - Bump PORTREVISION for package change
ab7fd32beb
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.46.0
- Update to 7.46.0

Changes:	http://curl.haxx.se/changes.html
bc2a4109b1
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.45.0
- Use USES=localbase
96bdaa30ee
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.45.0
- Update to 7.45.0 - Add LICENSE_FILE

Changes:	http://curl.haxx.se/changes.html
6e2f3c091e
Dmitry Marakasov (amdmi3) · 7.44.0
Do not provide empty do-test target for perl5-using ports

perl5's do-test: target should only be enabled when USE_PERL5=configure
or USE_PERL5=modbuild* are used, otherwise it'll end up being empty
and will prevent other tests from running.

Remove NO_PERL5_TEST as it isn't really needed after this fix.

Approved by:	mat, sunpoet
Differential Revision:	D3830
9a33f6f65c
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.44.0
- Add NO_PERL5_TEST - Convert to new test framework - Convert to new options target helper - Cosmetic change
4d27d8a0bb
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.44.0
- Convert to new options dependency helper
97890963e0
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.44.0
- Update to 7.44.0

Changes:	http://curl.haxx.se/changes.html
044820ca45
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.43.0_3
- Adjust default GSSAPI option:   - GSSAPI_NONE if OpenSSL/LibreSSL from ports will be used instead of OpenSSL from base system   - GSSAPI_BASE if otherwise - Bump PORTREVISION for package change

Suggested by:	tijl
a7d4640be4
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.43.0_2
- Fix multi handles - Bump PORTREVISION for package change

PR:		201147
Submitted by:	grembo
Obtained from:	https://github.com/bagder/curl/commit/903b6e05565bf826b4194447864288642214b094
7fd883616c
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.43.0_1
- Rework OpenSSL/LibreSSL check
dfed6cbc69
Bryan Drewery (bdrewery) · 7.43.0_1
Be more explicit about which setting to use.

PR:		200555
8ddd0dea46
Bryan Drewery (bdrewery) · 7.43.0_1
Try to improve the wording for the GSSAPI+OpenSSL IGNORE in r390499.

PR:		200555
ccb85da3cb
Bryan Drewery (bdrewery) · 7.43.0_1
Prevent building a broken curl when using the openssl port when GSSAPI_BASE set.

Without this curl would link to both /usr/lib/libssl.so and /usr/local/lib/libssl.so
resulting in a crash at runtime.

Bump revision as current builds are broken at runtime and need to be rebuilt.

PR:		200555
Submitted by:	truckman
Approved by:	maintainer timeout
da907e5cb7
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.43.0
- Update to 7.43.0 - Update HTTP2 option - Update DOCS

Changes:	http://curl.haxx.se/changes.html
6855a05570
Tijl Coosemans (tijl) · 7.42.1_1
- Update security/polarssl13 to 1.3.11 - Patch a Makefile so regular make install works - Replace a patch with MAKE_ENV - Bump dependent ports

PR:		200816
98cdddb183
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.42.1
- Remove trailing space - Regenerate patch files with makepatch:
2e0f54f95a
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.42.1
- Fix typo

Reported by:	Scott Bennett <bennett@sdf.org>
6d5b6b77ba
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.42.1
- Reword GSSAPI_BASE_DESC for explicit Kerberos requirement
04d964c0a9
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.42.1
- Update to 7.42.1

Changes:	http://curl.haxx.se/changes.html
9d31fa37a7
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.42.0
- Fix OPTIONS_DEFAULT

Notified by:	antoine
007a889dfd
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.42.0
- Fix OPTIONS_DEFAULT: remove SSL - Add WOLFSSL option - Cosmetic change
edb5f7f1b8
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.42.0
- Fix build without NTLM

Reference:	https://github.com/bagder/curl/commit/fd9d3a1ef1f7b1cb5812d04bad07818efc6f3b3a
f73231bc24
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.42.0
- Update to 7.42.0

Changes:	http://curl.haxx.se/changes.html
6ca4a18b8c
Tijl Coosemans (tijl) · 7.41.0
Specify library version when depending on libpolarssl and switch ports to PolarSSL 1.3 when they fail to build with 1.2.
95b155ef70
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.41.0
- Disable SSLv2_client_method
48cfe58ce3
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.41.0
- Add IGNORE for LibreSSL

PR:		198397 (based on)
Submitted by:	Bernard Spil <spil.oss@gmail.com>
3ce84e9871
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.41.0
- Use USES=gssapi - Adjust options:   - Change GSSAPI from radio to single   - Rename HEIMDAL_PORT to GSSAPI_HEIMDAL   - Rename KRB5_PORT to GSSAPI_MIT   - Add GSSAPI_NONE
72ff3b0338
Sunpoet Po-Chuan Hsieh (sunpoet) · 7.41.0
- Remove CYASSL option until upstream supports WolfSSL (new name of CyaSSL)
69d1b49a0d