Follow-up Comment #6, bug #24321 (project freeciv): As ssl is included only as dependency of full curl, we are not directly affected. It's probably not even possible to trigger freeciv to use libcurl in a way where ssl functionality would be used. Further mitigations include the fact that it acts as client side only - user would need to request malicious metaserver or modpack download URL to be used, and not the server being attackable by outsiders.
Freeciv-3.0 is going to use msys2 based solution, in 2.6 it's only experimental. _______________________________________________________ Reply to this item at: <http://gna.org/bugs/?24321> _______________________________________________ Message sent via/by Gna! http://gna.org/ _______________________________________________ Freeciv-dev mailing list Freeciv-dev@gna.org https://mail.gna.org/listinfo/freeciv-dev