RE: Is there anything for the outdated curl.exe? CVE-2022-43552

Bill Mercer via curl-users <[email protected]>
Newsgroups gmane.comp.web.curl.general
Message-ID <BN8PR15MB29137773C62E6DE60B71ECE7BB929@BN8PR15MB2913.namprd15.prod.outlook.com>
> > Also , if I install the latest version of CURL from
> > https://curl.se/windows/ , will it cause any problems?
> 
> If you overwrite/delete the old one I suspect it might, yes.

MS considers their copy of curl to be part of the OS so updating it would require changing permissions and Defender will probably complain about it, but if you drop a newer version of curl in a folder that's higher in your path, it will run first.  That's what I do. 

It doesn't prevent someone from running the older version, so it's not really a security measure, but it's better than nothing. 


-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-users
Etiquette:   https://curl.se/mail/etiquette.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.