[MacPorts] #55197: curl: +idn variant ineffective, curl now supports only libidn2
MacPorts
noreply at macports.org
Sun Oct 29 20:43:25 UTC 2017
#55197: curl: +idn variant ineffective, curl now supports only libidn2
---------------------+------------------------
Reporter: dbevans | Owner: ryandesign
Type: defect | Status: new
Priority: Normal | Milestone:
Component: ports | Version:
Keywords: | Port: curl
---------------------+------------------------
curl some time ago switched support for IDN from libidn to libidn2 using
--with-idn2 rather than --with-idn. This change was prompted by
CVE-2016-8625.
See
[https://github.com/curl/curl/commit/9c91ec778104ae3b744b39444d544e82d5ee9ece
#diff-67e997bcfdac55191033d57a16d1408a idn: switch to libidn2 use and
IDNA2008 support]
As a consequence, the current +idn variant is ineffective and curl will
link with libidn2 if it is available regardless of variant settings.
Suggest updating the +idn variant to use libidn2 and --with-idn2.
--
Ticket URL: <https://trac.macports.org/ticket/55197>
MacPorts <https://www.macports.org/>
Ports system for macOS
More information about the macports-tickets
mailing list