I pushed an update to #DOStodon (the #Mastodon client for MS-DOS):
- Updated #curl to 8.13.0
- Updated #mbedTLS to 3.6.3
- Fixed #win32 version (works on #WinXP or newer), DLLs were missing
Grab it at https://github.com/SuperIlu/DOStodon
Screenshot is showing the win32 version running on Win10.
#Javascript #RetroComputing #MSDOS #CreativeCoding #MastodonClient #FreeDOS #DJGPP #DOjS
We got this "HIGH security problem" reported for #curl earlier today:
"The -o / --output parameter in cURL does not restrict or sanitize file paths. When passed relative traversal sequences (e.g., ../../), cURL writes files outside the current working directory, allowing arbitrary file overwrite. In automated or privileged environments (CI/CD, root containers), this leads to Remote Code Execution (RCE), privilege escalation, and supply chain risk."
Never a dull moment.
📰 Apareceram notícias sobre o pacote curl, ao atualizá-lo hoje no #Debian #sid (unstable) e que achei interessantes compartilhar. É o anúncio de alterações importantes, aparentemente entrando em efeito agora e iniciadas alguns meses atrás pelos mantenedores, em suma:Oh, nice. Just found a #curl to #golang http request converter: https://mholt.github.io/curl-to-go/
