Re: Update to cURL?

Daniel Macks <[email protected]> Wed, 22 Nov 2023 01:54:51 -0500

Newsgroups	gmane.os.apple.fink.general
Message-ID	<[email protected]>

I pushed the version update. Tested fine for me on 10.13. I also cleaned up a bit that could have led to inconsistent build results. Thanks for letting us know! Obviously important to have lots of eyes on security things and get them fixed ASAP. If you have further improvements, feel free to submit a patch. I think danielj has been inactive for a while, so the mailing list or the github trackers are best.

dan

On 11/21/23, 9:44 PM, "Scott Hannahs via Fink-users" <[email protected]> wrote:

Daniel,
There is a severe security flaw in curl. This has a rushed update to 8.4.0 to fix this.https://www.securityweek.com/patches-prepared-for-probably-worst-curl-vulnerability/

I know that curl is part of the core fink but I have an updated .info file to update curl to the 8.4.0. It works and passes all tests on MacOS 13.6 and Xcode 15.0.1. However I don’t have earlier systems to test this on at the moment. However, the patch is designed to accommodate the change in directory structure for newer systems.

Is it acceptable to submit this patch or would you like to review it or propose your own. This is a little rushed, but security in such a fundamental component seems important to me.

-Scott

Dr. Scott Hannahs, Director of Scientific Instrumentation and Operations
Personal Gender Pronouns: he, him, his
FSU Distinguished University Scholar
National High Magnetic Field Laboratory, Florida State University
https://nationalmaglab.org/staff/?name=ScottHannahs

"OS X: because making Unix user-friendly was easier than debugging Windows."

_______________________________________________
Fink-users mailing list
[email protected]
List archive:
https://sourceforge.net/p/fink/mailman/fink-users/
Subscription management:
https://lists.sourceforge.net/lists/listinfo/fink-users