Bug 2491199
| Summary: | Consider adding HTTP/3 support to libcurl-minimal | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Alex Haydock <alex> |
| Component: | curl | Assignee: | Jan Macku <jamacku> |
| Status: | CLOSED WONTFIX | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | low | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 44 | CC: | jamacku, jmigacz, kdudka, lzaoral, msekleta, paul, tim, vmihalko |
| Target Milestone: | --- | Keywords: | RFE |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2026-07-31 06:41:34 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Alex Haydock
2026-06-21 16:43:41 UTC
We recently added support for HTTP/3 to the curl RPM[1]. I understand your point, but I would like to wait a bit to see how many issues and CVEs it might bring. The original idea behind curl minimal subpackages is still valid. Curl is by default available in every image, so we want as minimal a footprint as possible to avoid excessive amounts of CVEs (especially in an era when everybody is trying to use AI to find new vulnerabilities). I'll close this issue for now. [1] - https://src.fedoraproject.org/rpms/curl/pull-request/61 |