[MacPorts] #55197: curl: +idn variant ineffective, curl now supports only libidn2

MacPorts noreply at macports.org
Sun Oct 29 20:43:25 UTC 2017


#55197: curl: +idn variant ineffective, curl now supports only libidn2
---------------------+------------------------
 Reporter:  dbevans  |      Owner:  ryandesign
     Type:  defect   |     Status:  new
 Priority:  Normal   |  Milestone:
Component:  ports    |    Version:
 Keywords:           |       Port:  curl
---------------------+------------------------
 curl some time ago switched support for IDN from libidn to libidn2 using
 --with-idn2 rather than --with-idn.  This change was prompted by
 CVE-2016-8625.

 See
 [https://github.com/curl/curl/commit/9c91ec778104ae3b744b39444d544e82d5ee9ece
 #diff-67e997bcfdac55191033d57a16d1408a idn: switch to libidn2 use and
 IDNA2008 support]

 As a consequence, the current +idn variant is ineffective and curl will
 link with libidn2 if it is available regardless of variant settings.

 Suggest updating the +idn variant to use libidn2 and --with-idn2.

--
Ticket URL: <https://trac.macports.org/ticket/55197>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list