CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

ftp/curl 8.23.0

Command line tool and library for transferring data with URLs

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 8.23.0
Upstream
up to date
Last update
to 8.23.0 · 1c19f23423
Quarterly
2026Q4: 8.23.0 · last MFH 0b6d7a71f4
WWW
https://curl.se/
Links
cgit · VuXML

Install

Package
# pkg install curl
installs 8.23.0 from latest; from quarterly (2026Q4) 8.23.0
Port
# cd /usr/ports/ftp/curl && make install clean
# make -C /usr/ports/ftp/curl config  # change options first
Size
1.9 MiB download · 5.7 MiB installed
Depends on
archivers/brotli 1.2.1,1, archivers/zstd 1.5.7_2, dns/libidn2 2.3.8, dns/libpsl 0.23.3, security/libssh2 1.11.1_1,3, www/libnghttp2 1.70.0
License
MIT
Options
30 of 40 on in the package: ALTSVC BROTLI COOKIES DICT DOCS EXAMPLES FTP GOPHER GSSAPI_BASE HTTP HTTP2 IDN IMAP IPFS IPV6 LIBSSH2 MQTT NTLM OPENSSL POP3 PROXY PSL RTSP SMTP STATIC TELNET TFTP THREADED_RESOLVER WEBSOCKET ZSTD
Show the 10 options that are off
CARES DEBUG GNUTLS GSSAPI_MIT GSSAPI_NONE LDAP LDAPS LIBSSH LIBUV WOLFSSL

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 168.23.08.22.0–
FreeBSD 158.23.08.22.0–
FreeBSD 148.23.08.22.08.23.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 158.23.08.22.0–
FreeBSD 148.23.08.22.08.23.0

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 8.23.0.

Fixed (55)

Show 55 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (5) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
298586maintainer-feedback? ftp/curl: support Rustls for TLSNew2026-09-18
297733maintainer-feedback? ftp/curl: Multiple options are missing IMPLIESNew2026-08-22
297732maintainer-feedback? ftp/curl: Multiple options are missing dependencies for unit testsNew2026-08-22
294115maintainer-feedback? ftp/curl: Incorrect dependency for libssh and libssh2 after b889b19eb5e30e1c77d57d0e43977b4af9a0cbb5New2026-05-15
288123maintainer-feedback? ftp/curl: Add HTTP/3 Support (preliminary diff)New2026-04-08

Commits (435)

Peter Pentchev (roam) · 7.7.2
Update to 7.7.2

Submitted by:	olgeni
49940140f1
Peter Pentchev (roam) · 7.7.1
Remove two dead sites that the distfile checking scripts complained about
6be54e7a43
Peter Pentchev (roam) · 7.7.1
Update to 7.7.1, which, among other new features, fixes the HTTP-PROXY/IPv6 interplay.

Submitted by:	olgeni
3b2ff2fb18
Peter Pentchev (roam) · 7.6.1
Update to 7.6.1.  Besides a couple of bugfixes (most notably to the HTTP PUT resume), this version has a couple of new features, too - including IPv6 support, submitted by Jun-ichiro "itojun" Hagino. (Yes, this is itojun@FreeBSD.org :)
995fd7afee
Peter Pentchev (roam) · 7.6
Update to 7.6 and format the MAN3 list better.
8d5c82e7f9
Peter Pentchev (roam) · 7.5.2
Update to 7.5.2.
fa4eb6bd13
Peter Pentchev (roam) · 7.5.1
Update to 7.5.1 - a bugfix release mainly for a -o outfname parsing bug, where bad things would happen if the output filename was longer than the fetched URL.
9f12f6dc2a
Peter Pentchev (roam) · 7.5
Update to version 7.5.
0ab2a52b68
Peter Pentchev (roam) · 7.4.2
Take over maintainership

Approved by:	kris (former maintainer)
a08cc887be
Kris Kennaway (kris) · 7.4.2
Upgrade to curl 7.4.2
d965c15208
Kris Kennaway (kris) · 7.4.1
Update to curl 7.4.1. Adds Kerberos support.

Submitted by:	Peter Pentchev <roam@orbitel.bg>
a33d198437
Kris Kennaway (kris) · 7.2.1
Oops, I forgot to commit this patch to make WITH_SSL compile again.
d024aa704f
Kris Kennaway (kris) · 7.2.1
Update all ports using OpenSSL and RSA to work without rsaref since it is no longer required. Apologies to the various maintainers whom I did not yet hear back from, but the ports freeze is coming up in a few hours and I will be verifying all of these ports on a 4.1 machine myself to catch any problems.
e088a4f458
Kris Kennaway (kris) · 7.2.1
Upgrade to curl 7.2.1

Submitted by:	Peter Pentchev <roam@orbitel.bg>
2c9f48dec6
Kris Kennaway (kris) · 6.5.2
Add a manpage to MAN1

Submitted by:	bento
290fde7650
Michael Haro (mharo) · 6.5.2
whitespace nits
9647ca36cd
Jeremy Lea (reg) · 6.5.2
Standardize all user defined options to the booleans WITH_FOO and WITHOUT_FOO.  Begin the process of reserving these prefixes for user defined options.

No comment by:	ports
877b8a533b
Michael Haro (mharo) · 6.5.2
PORTNAME/PORTVERSION stuff
343c80d542
Kris Kennaway (kris)
Update WWW

Submitted by:	author
4ff6fbf96a
Kris Kennaway (kris)
Update to curl 6.5.2
cb7ac6ac51
Kris Kennaway (kris)
Upgrade to curl 6.3, USE_OPENSSL and actually make USE_SSL compile in SSL support.

PR:		ports/14280
Assisted by:    Jim Bloom <bloom@acm.org>
e53282941a
Dirk Froemberg (dirk)
Change dependencies from static to shared openssl libraries, because openssl also builds shared libraries, now.
acf3546644
Kris Kennaway (kris)
Upgrade to curl 6.1
c19aaee54d
Michael Haro (mharo)
FreeBSD.ORG -> FreeBSD.org

Prompted by PR:  13476, 13477
Submitted by:  KATO Tsuguru
65ab34a667
David E. O'Brien (obrien)
Change Id->FreeBSD.
9a9ac6ba9d
Satoshi Asami (asami)
Change "net" -> "ftp".
779e91cb05
Tim Vanderhoek (hoek)
Commit #3/4 to enforce caps, no period.

FWIW, checkout of these things took 5+hrs, staying on the local
.freebsd.org net w/o hitting the 'net at all.

As promised,

$ time cvs ci
real    67m51.701s
user    0m1.250s
sys     0m5.345s
dd9ff05a6a
Dirk Froemberg (dirk)
include ${PREFIX}/include/openssl due to openssl upgrade.
6aff0c1f7b
Kris Kennaway (kris)
Upgrade to v5.9

PR:	11837
0ffce1d572
Seiichirou Hiraoka (flathill)
Update to 5.8

PR: ports/11527
Submitted by: cpiazza@home.net
c7390666dd
Michael Haro (mharo)
WWW:  This is definately the daemon's work.  In Chuck we trust.
5b9355a3b1
Michael Haro (mharo)
Update curl from 5.5 to 5.5.1 and remove ftp.all.de - seems to be gone

PR:		11160
Submitted by:	Chris Piazza cpiazza@home.net
44d132853b
Dirk Froemberg (dirk)
Remove the last remaining dependency to SSLeay. Use openssl instead.

OK'ed by:	Kris Kennaway <kkennawa@physics.adelaide.edu.au> (maintainer)
5bd303f602
David E. O'Brien (obrien)
There is no need for "USE_AUTOCONF" when "GNU_CONFIGURE" will work just fine.
6da5921587
Bill Fumerola (billf)
curl is a client to get documents/files from servers, using any of the supported protocols. The command is designed to work without user interaction or any kind of interactivity.

curl offers a busload of useful tricks like proxy support, user
authentication, ftp upload, HTTP post, SSL (https:) connections, file
transfer resume and more.

PR:		ports/9079
Submitted By:	Neil Blakey-Milner <nbm@rucus.ru.ac.za>
		Kris Kennaway <kkenn@rebel.net.au>

This port replaces ports/www/urlget
bb0aa544ae