RetroBBS - comp.sys.tandem - ITUGLIB Update: Curl 8.5.0 Available

ITUGLIB Update: Curl 8.5.0 Available

<6e0d49ca-29cc-477a-b399-ee5fcf1f078en@googlegroups.com>

https://www.rocksolidbbs.com/computers/article-flat.php?id=788&group=comp.sys.tandem#788

X-Received: by 2002:a05:620a:2ea:b0:770:7460:c3f6 with SMTP id a10-20020a05620a02ea00b007707460c3f6mr2618qko.6.1701903500354;
Wed, 06 Dec 2023 14:58:20 -0800 (PST)
X-Received: by 2002:a9d:404a:0:b0:6d8:7659:87c0 with SMTP id
o10-20020a9d404a000000b006d8765987c0mr1133212oti.5.1701903500060; Wed, 06 Dec
2023 14:58:20 -0800 (PST)
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.sys.tandem
Date: Wed, 6 Dec 2023 14:58:19 -0800 (PST)
Injection-Info: google-groups.googlegroups.com; posting-host=2607:fea8:3fa9:4200:ad2d:24a1:4eaf:e903;
posting-account=6VebZwoAAAAgrpUtsowyjrKRLNlqxnXo
NNTP-Posting-Host: 2607:fea8:3fa9:4200:ad2d:24a1:4eaf:e903
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <6e0d49ca-29cc-477a-b399-ee5fcf1f078en@googlegroups.com>
Subject: ITUGLIB Update: Curl 8.5.0 Available
From: rsbecker@nexbridge.com (Randall)
Injection-Date: Wed, 06 Dec 2023 22:58:20 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Received-Bytes: 1971

by: Randall - Wed, 6 Dec 2023 22:58 UTC

Hi Everyone,

Curl 8.5.0 is now available on the ITUGLIB website. This release fixes a bunch of issues, including two CVEs:

https://curl.se/docs/CVE-2023-46218.html - cookie mixed case PSL bypass

https://curl.se/docs/CVE-2023-46219.html - HSTS long file name clears contents

Release notes are at: https://curl.se/changes.html

The builds for Curl are for J-series and L-series, for OpenSSL 3.0/1, 1.1.1, and 1.0.2. Note that 1.1.1 and 1.0.2 are not supported unless you have an extended support contract with OpenSSL. There is no build yet for OpenSSL 3.2 as this release does not work yet on NonStop. Once it does, we will start building Curl for that release series. Note that OpenSSL 3.0 and 3.1 DLLs are binary compatible, so you can use either with the Curl OpenSSL 3.0 builds.

Regards,
Randall Becker
On Behalf of the ITUGLIB Technical Committee

core error - bus dumped

computers / comp.sys.tandem / ITUGLIB Update: Curl 8.5.0 Available

Subject	Author
ITUGLIB Update: Curl 8.5.0 Available	Randall