From: "Dave Yeo" Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTP id 11710114 for gnuports@2rosenthals.com; Fri, 03 Jan 2025 19:28:42 -0500 Received: from secmgr-va.randr ([192.168.200.201]:46049 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtp (Exim 4.97.1) (envelope-from ) id 1tTs1m-000000005Am-1WSO for gnuports@2rosenthals.com; Fri, 03 Jan 2025 19:28:31 -0500 Received: from mail-pl1-f182.google.com ([209.85.214.182]:44239) by mail2.2rosenthals.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.97.1) (envelope-from ) id 1tTs1f-000000007Hy-1xu9 for gnuports@2rosenthals.com; Fri, 03 Jan 2025 19:28:24 -0500 Received: by mail-pl1-f182.google.com with SMTP id d9443c01a7336-2163dc5155fso175406455ad.0 for ; Fri, 03 Jan 2025 16:28:23 -0800 (PST) X-SASI-Hits: BODYTEXTP_SIZE_3000_LESS 0.000000, BODY_SIZE_1500_1599 0.000000, BODY_SIZE_2000_LESS 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_7BIT 0.000000, DATE_TZ_NA 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, KNOWN_MTA_TFX 0.000000, LEGITIMATE_SIGNS 0.000000, MSGID_SAMEAS_FROM_HEX_844412 0.100000, MSG_THREAD 0.000000, NO_CTA_URI_FOUND 0.000000, NO_URI_HTTPS 0.000000, REFERENCES 0.000000, SENDER_NO_AUTH 0.000000, SUSP_DH_NEG 0.000000, SXL_IP_PROXY_RCVD 0.500000, SXL_IP_SPAM_RCVD 0.500000, SXL_IP_TFX_WM 0.000000, USER_AGENT 0.000000, WEBMAIL_SOURCE 0.000000, __ANY_URI 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __CT 0.000000, __CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FRAUD_WEBMAIL 0.000000, __FRAUD_WEBMAIL_FROM 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_GMAIL 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_HEADER 0.000000, __FUR_RDNS_GMAIL 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HEADER_ORDER_FROM 0.000000, __IMP_FROM_FREEMAIL 0.000000, __IN_REP_TO 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MOZILLA_USER_AGENT 0.000000, __MSGID_HEX_844412 0.000000, __NO_HTML_TAG_RAW 0.000000, __PHISH_SPEAR_STRUCTURE_1 0.000000, __RDNS_WEBMAIL 0.000000, __REFERENCES 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_MAILTO 0.000000, __URI_NO_WWW 0.000000, __URI_NS 0.000000, __USER_AGENT 0.000000, __X_GM_MESSAGE_STATE 0.000000, __X_GOOGLE_DKIM_SIGNATURE 0.000000, __X_GOOGLE_SMTP_SOURCE 0.000000, __YOUTUBE_RCVD 0.000000 X-SASI-Probability: 13% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2025.1.3.235446 X-SASI-Hits: BODYTEXTP_SIZE_3000_LESS 0.000000, BODY_SIZE_1500_1599 0.000000, BODY_SIZE_2000_LESS 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_7BIT 0.000000, DATE_TZ_NA 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, KNOWN_MTA_TFX 0.000000, LEGITIMATE_SIGNS 0.000000, MSGID_SAMEAS_FROM_HEX_844412 0.100000, MSG_THREAD 0.000000, NO_CTA_URI_FOUND 0.000000, NO_URI_HTTPS 0.000000, REFERENCES 0.000000, SENDER_NO_AUTH 0.000000, SUSP_DH_NEG 0.000000, SXL_IP_PROXY_RCVD 0.500000, SXL_IP_SPAM_RCVD 0.500000, SXL_IP_TFX_WM 0.000000, USER_AGENT 0.000000, WEBMAIL_SOURCE 0.000000, __ANY_URI 0.000000, __BODY_NO_MAILTO 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __CT 0.000000, __CTE 0.000000, __CT_TEXT_PLAIN 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FRAUD_WEBMAIL 0.000000, __FRAUD_WEBMAIL_FROM 0.000000, __FROM_DOMAIN_NOT_IN_BODY 0.000000, __FROM_GMAIL 0.000000, __FROM_NAME_NOT_IN_BODY 0.000000, __FUR_HEADER 0.000000, __FUR_RDNS_GMAIL 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HEADER_ORDER_FROM 0.000000, __IMP_FROM_FREEMAIL 0.000000, __IN_REP_TO 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MOZILLA_USER_AGENT 0.000000, __MSGID_HEX_844412 0.000000, __NO_HTML_TAG_RAW 0.000000, __PHISH_SPEAR_STRUCTURE_1 0.000000, __RDNS_WEBMAIL 0.000000, __REFERENCES 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_MAILTO 0.000000, __URI_NO_WWW 0.000000, __URI_NS 0.000000, __USER_AGENT 0.000000, __X_GM_MESSAGE_STATE 0.000000, __X_GOOGLE_DKIM_SIGNATURE 0.000000, __X_GOOGLE_SMTP_SOURCE 0.000000, __YOUTUBE_RCVD 0.000000 X-SASI-Probability: 13% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2025.1.3.235446 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1735950502; x=1736555302; darn=2rosenthals.com; h=content-transfer-encoding:in-reply-to:mime-version:user-agent:date :message-id:from:references:to:subject:from:to:cc:subject:date :message-id:reply-to; bh=W3meboz5w9AiFonpZETpT5qGlR+3jActvjOXFQYXkFY=; b=I0zOwRjf3khGdBsnnMnYHZN0t02B1ABcx/ewXfo296JBUE+hlDddLVcrHskT8hBn/t 0XLgsnSSK5xNxnbCpgf+QBKz+XbKVW/qGWK2KOeH6+zwjNVESGXdWr+jiMEUpu46y4b0 ENIA2Zrc1f9s9ukTrLBdPdObEcucZkU9LsOVZb7LeedvrDSc0Y0UBXKEFfGWuY8EBFj9 n285gAA36q/+/dmX57i+DW3JN2zljyDIFbm4WYWQExobF0HPqhOkQeYPGJOtPwORWNyZ Z3nGAbhEOXuhUV5Ao32mGHT0Atf8JH7KlxoAkLvOSoX3CQ/6coBEgAeQq8of74RYxkQS 0jyw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1735950502; x=1736555302; h=content-transfer-encoding:in-reply-to:mime-version:user-agent:date :message-id:from:references:to:subject:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=W3meboz5w9AiFonpZETpT5qGlR+3jActvjOXFQYXkFY=; b=XewKWXzxBzNzkATHnNVei6jiwNlFPAX8P9JF6cqVBPmAA2xF7k+U1VFRFetD94d8dH sJL8K1ztn4pAoR8ZpWoq0tNIUnxzJLfAYKw2B6vamulfWBZr2d3kVEEyLdspwpL/XYzD vGjgsu6MDRgQwm7RqYCvO+Bn94Eifne3iNbiQpzu2bZwKNUzQi9knOkCVl5Muo44ZXPg Zcln30BosZEDtYGwSj1v+BA8rMTfIAEt1z2mq+fBTVct0TrFoo61y94Jol0N9pwRe/v6 gHvXdDAyYshL3vPyHu1tYfZ0EnjUQig7smCUKnsJfyTUGAsb3kWjQAT1CwnSZhzk8zWA ar1A== X-Gm-Message-State: AOJu0YyBtNCKqAmRu7dGjbmkR9QoY/gGyh7ehjqJ8fCtjRBqBmGqn3O/ 8M9qAk30W3NMrjqaKZ2+LTis9xpflakqy31zJgAW0cpGyshff3AkSxiEPAqY X-Gm-Gg: ASbGncvlF6R/rquq1Eh6Nr77Evj+MpmYm4MZ4QiVoc9mDrpKG1XPFVQ3OfF/iPrXzyD f8By1gP8Lrzjaniz2Ggu8bEZGp8Q/gq6U+AKVkuAkFzG92zeyO8wXlDMR/QXUUg7nQvhwsprVi3 hbX63PkBkYNjaSFdF/KnzyJty1pvqoquXXXXVd0eNf7TlCgBBK58d0Lk7nEj1s9j5YFkuHlMc/y uc4tywDPy4iiqPozAGjILEO X-Google-Smtp-Source: AGHT+IHNRkLgQUOkHpyxuwkbLmpw3nPxp10BAndFKUBnRyJdcfHgLJ7S2M+iBwAPKWEmNAx9WWGaoA== X-Received: by 2002:a05:6a21:3181:b0:1d9:78c:dcf2 with SMTP id adf61e73a8af0-1e5e082e7abmr73824841637.43.1735950502222; Fri, 03 Jan 2025 16:28:22 -0800 (PST) Return-Path: Received: from [192.168.0.105] ([207.194.98.11]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-72aad8faf9esm27721837b3a.144.2025.01.03.16.28.21 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Fri, 03 Jan 2025 16:28:21 -0800 (PST) Subject: Re: [GNU Ports] cURL vulnerabilities To: GNU Ports for eCS Mailing List References: Message-ID: Date: Fri, 3 Jan 2025 16:28:20 -0800 User-Agent: Mozilla/5.0 (OS/2; Warp 4.5; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit On 01/03/25 12:08 PM, Paul Smedley wrote: > Hey Lewis, > > On 4/1/25 04:24, Lewis G Rosenthal wrote: >> Trying to build 8.11.1 (latest), I didn't get very far (nothing >> useful). Before I dive into it, I was just wondering if anyone else >> had had any greater success. 7.75.0 seems quite outdated for something >> with security implications. >> > I got configure to run, let's see if I get a curl.exe OS/2 patches by Silvan, commit 7a46ee88d15a4e232205c76f2cecfb3237960470 (HEAD -> master-os2, origin/mast er-os2, origin/HEAD) Author: SilvanScherrer Date: Fri Mar 12 15:19:40 2021 +0100 follow win for textmode open commit 4f5abcb324b2f442599538e45faaadfbb5b1d3f4 Author: SilvanScherrer Date: Fri Mar 12 15:19:02 2021 +0100 disable pipe usage commit 57b1732864ea3f6f56b0f856c6255493d3a174be Author: SilvanScherrer Date: Fri Mar 12 15:18:21 2021 +0100 fix some /etc vs /@unixroot/etc path commit 061591ba5d00c1e65900256c1b0ef4c4156311b3 Author: SilvanScherrer Date: Wed Mar 10 11:48:26 2021 +0100 add libcx functions in configure and fix build breaks because of it commit ac7472c5dd048781f1625d960181525d9e9636f2 Author: SilvanScherrer Date: Wed Mar 10 11:47:03 2021 +0100 fix a imho upstream bug commit 97ba44efc3aa3243df9ec2f9e01f5147f71c3730 Author: SilvanScherrer Date: Wed Mar 10 11:32:17 2021 +0100 add libcx header to have url.c built Dave