[138124] trunk/dports/net/curl/Portfile

[ryandesign at macports.org]

Revision: 138124
          https://trac.macports.org/changeset/138124
Author:   ryandesign at macports.org
Date:     2015-06-29 15:02:47 -0700 (Mon, 29 Jun 2015)
Log Message:
-----------
curl: disable idn support by default, as recommended by the developer of curl, because it may be a security vulnerability

Modified Paths:
--------------
    trunk/dports/net/curl/Portfile

Modified: trunk/dports/net/curl/Portfile
===================================================================
--- trunk/dports/net/curl/Portfile	2015-06-29 21:44:55 UTC (rev 138123)
+++ trunk/dports/net/curl/Portfile	2015-06-29 22:02:47 UTC (rev 138124)
@@ -31,12 +31,11 @@
 if {${name} eq ${subport}} {
     PortGroup                   muniversal 1.0
 
-    revision                    0
+    revision                    1
 
     depends_build               port:pkgconfig
 
-    depends_lib                 port:libidn \
-                                port:zlib
+    depends_lib                 port:zlib
 
     patchfiles                  patch-curl.h.diff \
                                 yosemite-libtool.patch
@@ -44,6 +43,7 @@
     configure.args              --enable-ipv6 \
                                 --without-gnutls \
                                 --without-gssapi \
+                                --without-libidn \
                                 --without-libmetalink \
                                 --without-librtmp \
                                 --without-libssh2 \
@@ -55,7 +55,6 @@
                                 --disable-ares \
                                 --disable-ldap \
                                 --disable-ldaps \
-                                --with-libidn \
                                 --with-zlib=${prefix}
 
     configure.env               PKG_CONFIG_PATH=${prefix}
@@ -137,6 +136,15 @@
         configure.args-replace  --without-nghttp2 --with-nghttp2
     }
 
+    variant idn description {Enable support for internationalized domain names (IDN)} {
+        depends_lib-append      port:libidn
+        configure.args-replace  --without-libidn --with-idn
+        notes-append "
+            Enabling support for internationalized domain names may be a security risk. See\
+            http://curl.haxx.se/mail/lib-2015-06/0143.html\
+        "
+    }
+
     variant metalink description {Support Metalink XML download description files} {
         depends_lib-append      port:libmetalink
         configure.args-replace  --without-libmetalink --with-libmetalink=${prefix}
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.macosforge.org/pipermail/macports-changes/attachments/20150629/348603a3/attachment.html>