repository=https://github.com/curl/curl
vulnerable_commit=f8992b6a177a2ccfb5dc04137088534bad68681c
fixed_commit=95c1e8915dce64606bd753fd47fc0bd236e31cd6
--- vulnerable curl -V ---
curl 8.22.0-DEV (Linux) libcurl/8.22.0-DEV zlib/1.3.1 brotli/1.2.0 zstd/1.5.7 libidn2/2.3.8 libpsl/0.21.2 libssh2/1.11.1 nghttp2/1.68.0 OpenLDAP/2.6.10
Release-Date: [unreleased]
Protocols: dict file ftp gopher http imap ipfs ipns ldap mqtt pop3 rtsp scp sftp smtp telnet tftp ws
Features: alt-svc AsynchDNS brotli HTTP2 IDN IPv6 Largefile libz PSL threadsafe UnixSockets zstd
--- vulnerable ldd ---
	linux-vdso.so.1 (0x00007ffef9ba3000)
	libcurl.so.4 => /pruva/project-cache/cve-2026-82209/build-vulnerable/lib/libcurl.so.4 (0x000078ae43131000)
	libz.so.1 => /usr/lib/x86_64-linux-gnu/libz.so.1 (0x000078ae4310e000)
	libc.so.6 => /usr/lib/x86_64-linux-gnu/libc.so.6 (0x000078ae42eed000)
	libssh2.so.1 => /usr/lib/x86_64-linux-gnu/libssh2.so.1 (0x000078ae42ea1000)
	libidn2.so.0 => /usr/lib/x86_64-linux-gnu/libidn2.so.0 (0x000078ae42e7f000)
	libldap.so.2 => /usr/lib/x86_64-linux-gnu/libldap.so.2 (0x000078ae42e1a000)
	liblber.so.2 => /usr/lib/x86_64-linux-gnu/liblber.so.2 (0x000078ae42e09000)
	libbrotlidec.so.1 => /usr/lib/x86_64-linux-gnu/libbrotlidec.so.1 (0x000078ae42dfa000)
	libzstd.so.1 => /usr/lib/x86_64-linux-gnu/libzstd.so.1 (0x000078ae42d37000)
	libnghttp2.so.14 => /usr/lib/x86_64-linux-gnu/libnghttp2.so.14 (0x000078ae42d0d000)
	libpsl.so.5 => /usr/lib/x86_64-linux-gnu/libpsl.so.5 (0x000078ae42cf8000)
	/lib64/ld-linux-x86-64.so.2 (0x000078ae4327d000)
	libcrypto.so.3 => /usr/lib/x86_64-linux-gnu/libcrypto.so.3 (0x000078ae426dc000)
	libunistring.so.5 => /usr/lib/x86_64-linux-gnu/libunistring.so.5 (0x000078ae424f5000)
	libsasl2.so.2 => /usr/lib/x86_64-linux-gnu/libsasl2.so.2 (0x000078ae424da000)
	libssl.so.3 => /usr/lib/x86_64-linux-gnu/libssl.so.3 (0x000078ae423cc000)
	libbrotlicommon.so.1 => /usr/lib/x86_64-linux-gnu/libbrotlicommon.so.1 (0x000078ae423a9000)
--- fixed curl -V ---
curl 8.22.0-DEV (Linux) libcurl/8.22.0-DEV zlib/1.3.1 brotli/1.2.0 zstd/1.5.7 libidn2/2.3.8 libpsl/0.21.2 libssh2/1.11.1 nghttp2/1.68.0 OpenLDAP/2.6.10
Release-Date: [unreleased]
Protocols: dict file ftp gopher http imap ipfs ipns ldap mqtt pop3 rtsp scp sftp smtp telnet tftp ws
Features: alt-svc AsynchDNS brotli HTTP2 IDN IPv6 Largefile libz PSL threadsafe UnixSockets zstd
--- fixed ldd ---
	linux-vdso.so.1 (0x00007fffaafd9000)
	libcurl.so.4 => /pruva/project-cache/cve-2026-82209/build-fixed/lib/libcurl.so.4 (0x000074cb2a1fd000)
	libz.so.1 => /usr/lib/x86_64-linux-gnu/libz.so.1 (0x000074cb2a1da000)
	libc.so.6 => /usr/lib/x86_64-linux-gnu/libc.so.6 (0x000074cb29fb9000)
	libssh2.so.1 => /usr/lib/x86_64-linux-gnu/libssh2.so.1 (0x000074cb29f6d000)
	libidn2.so.0 => /usr/lib/x86_64-linux-gnu/libidn2.so.0 (0x000074cb29f4b000)
	libldap.so.2 => /usr/lib/x86_64-linux-gnu/libldap.so.2 (0x000074cb29ee6000)
	liblber.so.2 => /usr/lib/x86_64-linux-gnu/liblber.so.2 (0x000074cb29ed5000)
	libbrotlidec.so.1 => /usr/lib/x86_64-linux-gnu/libbrotlidec.so.1 (0x000074cb29ec6000)
	libzstd.so.1 => /usr/lib/x86_64-linux-gnu/libzstd.so.1 (0x000074cb29e03000)
	libnghttp2.so.14 => /usr/lib/x86_64-linux-gnu/libnghttp2.so.14 (0x000074cb29dd9000)
	libpsl.so.5 => /usr/lib/x86_64-linux-gnu/libpsl.so.5 (0x000074cb29dc4000)
	/lib64/ld-linux-x86-64.so.2 (0x000074cb2a349000)
	libcrypto.so.3 => /usr/lib/x86_64-linux-gnu/libcrypto.so.3 (0x000074cb297a8000)
	libunistring.so.5 => /usr/lib/x86_64-linux-gnu/libunistring.so.5 (0x000074cb295c1000)
	libsasl2.so.2 => /usr/lib/x86_64-linux-gnu/libsasl2.so.2 (0x000074cb295a6000)
	libssl.so.3 => /usr/lib/x86_64-linux-gnu/libssl.so.3 (0x000074cb29498000)
	libbrotlicommon.so.1 => /usr/lib/x86_64-linux-gnu/libbrotlicommon.so.1 (0x000074cb29475000)