From: "Paul Smedley" Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTP id 11700590 for gnuports@2rosenthals.com; Fri, 03 Jan 2025 15:50:09 -0500 Received: from secmgr-va.randr ([192.168.200.201]:44449 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtp (Exim 4.97.1) (envelope-from ) id 1tTocK-0000000076Y-1IoB for gnuports@2rosenthals.com; Fri, 03 Jan 2025 15:50:00 -0500 Received: from vps.smedley.id.au ([142.171.106.2]:35078) by mail2.2rosenthals.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.97.1) (envelope-from ) id 1tTocH-000000004W0-09zB for gnuports@2rosenthals.com; Fri, 03 Jan 2025 15:49:57 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=smedley.id.au; s=default; t=1735937396; bh=S9pSedKOVMTxca1UgZilBwLvmLBTHdfcVwf3ldmEGZQ=; h=Date:Subject:To:References:From:In-Reply-To:From; b=PVhB0NTTzRAqh86VzqUjlzKoY//pu8yj27JOW9PjK9dWmhsMD1Wlc020MEj/v48pK 8C8wkdS0twOyR5TAX4hNjOzhZ5/rR9BYYGwFOmML1h1hZbyA+KQQm60KL+Odv0QYfJ 5beP+vaMilWx3D0VYLvNQBmGNumXDWfi3CZjpLHbue6YjOhGtSqwGTST+aSOswGBwN YEWfIgBJ+kgJePNR2yIy1QObL2aYGtZtcvrZ/e8Wzw/ZOIYuRK/jyTMa98teSqR51Q N6/MdQbpCchyMGJwpvYd5yJT7GcfK9IZvoSIhWrUffK1648uo8cQEOiNoV9RfQn0q8 cmAbLtFFh6r0A== Received: from [IPV6:2400:a848:4041:0:24b7:34d8:4237:c728] (unknown [IPv6:2400:a848:4041:0:24b7:34d8:4237:c728]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (prime256v1)) (No client certificate requested) by vps.smedley.id.au (Postfix) with ESMTPSA id 015742003E for ; Sat, 4 Jan 2025 07:19:55 +1030 (ACDT) Message-ID: Date: Sat, 4 Jan 2025 07:19:52 +1030 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [GNU Ports] cURL vulnerabilities To: GNU Ports for eCS Mailing List References: <3adea6bc-e344-47bd-8970-3a6bcbc6f9a0@smedley.id.au> Content-Language: en-US In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hey again, On 4/1/25 07:17, Lewis G Rosenthal wrote: > Hi... > > On 01/03/25 03:21 pm, Paul Smedley wrote: >> Hi Again, >> >> On 4/1/25 06:38, Paul Smedley wrote: >>> Hey Lewis, >>> >>> On 4/1/25 04:24, Lewis G Rosenthal wrote: >>>> Trying to build 8.11.1 (latest), I didn't get very far (nothing >>>> useful). Before I dive into it, I was just wondering if anyone else >>>> had had any greater success. 7.75.0 seems quite outdated for >>>> something with security implications. >>>> >>> I got configure to run, let's see if I get a curl.exe >>> >> Untested.... https://smedley.id.au/tmp/curl-8.11.1-os2-20250104.zip >> > > :-D > > Somehow, every time I ask a question here, someone actually does the > work for me. The upside is I get what I want, but the downside is that > my own skills don't get any better. LOL > > Thanks, Paul. I'll give this a whirl right now and see what we get. > If you prefer... https://smedley.id.au/curl-8.11.1-os2-20250104b.zip has a curl4.dll rather than being statically linked, so should be able to be used with other apps. What issues were you having building it? Cheers, Paul