Re: [security] Update www/curl to version 7.43.0

[Alistair Crooks <alistaircrooks%gmail.com@localhost>]

Not really, the information came to me from a private list for another
project, and I don't feel comfortable sharing that without the
sender's permission.

I'll ask around

Best,
Alistair

On 14 July 2015 at 02:04, Thomas Klausner <wiz%netbsd.org@localhost> wrote:
> On Mon, Jun 29, 2015 at 09:41:18AM -0700, Alistair Crooks wrote:
>> Despite the fact that the freeze is now over, I've been informed that
>> there are problems with curl 7.43.0 caching "Content-Length" between
>> requests on the same connection. Probably best to wait for a fixed
>> version to come from upstream.
>
> Can you please give more details?
>
> Upstream doesn't seem to consider this a serious and/or new problem,
> otherwise they would have provided an updated version by now.
>  Thomas