Re: git: c63a8f65afe1 - main - ftp/curl: Update to 7.87.0

From: Michael Gmelin <grembo_at_freebsd.org>
Date: Thu, 19 Jan 2023 08:46:22 UTC

> On 19. Jan 2023, at 09:35, Antoine Brodin <antoine@freebsd.org> wrote:
> On Fri, Dec 30, 2022 at 9:08 AM Po-Chuan Hsieh <sunpoet@freebsd.org> wrote:
>> 
>> The branch main has been updated by sunpoet:
>> 
>> URL: https://cgit.FreeBSD.org/ports/commit/?id=c63a8f65afe14e82338fac73a1a5b21648d49388
>> 
>> commit c63a8f65afe14e82338fac73a1a5b21648d49388
>> Author:     Po-Chuan Hsieh <sunpoet@FreeBSD.org>
>> AuthorDate: 2022-12-30 08:40:01 +0000
>> Commit:     Po-Chuan Hsieh <sunpoet@FreeBSD.org>
>> CommitDate: 2022-12-30 09:04:09 +0000
>> 
>>    ftp/curl: Update to 7.87.0
>> 
>>    - Update WWW
>>    - Disable CA_BUNDLE option by default
>> 
>>    ca_root_nss is not needed since we have caroot in the base system.
>> 
>>    Changes:        https://curl.se/changes.html
>>    Security:       CVE-2022-43551, CVE-2022-43552
> 
> Hi,
> 
> This breaks git on the package builders,  please revert.

The problem isn’t caused by the update of curl, but by disabling CA_BUNDLE by default (which disabled CONFIGURE_WITH=ca-bundle=…)