curl update to 7.42.1?

[autumnwalker123]

Is there any plan to update the curl package in EasyApache from 7.38 to 7.42.1 (latest)?

Currently having major issues with my cPanel server due to the disablement of sslv3 protocol to mitigate POODLE.

 

[cPanelMichael]

Hello,

There's no specific time frame available for the inclusion of a newer version of cURL with EasyApache at this time, but the following thread should help if you want to use your own custom version (unsupported):

https://forums.cpanel.net/threads/curl-with-asynchdns.365092/

Thank you.

 

[autumnwalker123]

Makes me nervous to run a custom build which is unsupported.

Recommendation on how to best mitigate POODLE and keep sslv3 enabled?

 

[cPanelMichael]

You may find the following thread helpful:

https://forums.cpanel.net/threads/s...ay-ckb-how-to-adjust-cipher-protocols.432641/

However, I'm not sure you will be able to keep SSLv3 enabled and still pass PCI compliance tests.

Thank you.

 

[autumnwalker123]

Ended up forcing the upgrade via the instructions in this thread: https://forums.cpanel.net/threads/curl-with-asynchdns.365092/

Unfortunately my problems still persist. I'm following up (again) with the software vendor for the app which is causing the problem.