Switching curl from CB to OS version

[bertvandepoel]

Like many of you, we have several DirectAdmin installations that historically used the curl version supplied by CustomBuild. This has, since curl was pulled from CustomBuild, resulted in a lot of messages like "cURL 7.84.0 to OS update is available.". With the upcoming very serious security issue in curl (see

https://twitter.com/x/status/1709103920914526525

and https://github.com/curl/curl/discussions/12026 ), we are worried that the custombuild curl and libcurl are still being used on our DirectAdmin installations and that PHP is still build against them. We've therefore been looking into how we could purge the CustomBuild version of curl and fully switch to the OS version (which will receive updates for this security issue for sure).

Has anyone figured out how to do this yet? We can't seem to find anything conclusive on the forums and it's not explained anywhere in documentation (or my googling skills are very bad, that's also an option). Any help would be greatly appreciated!

 

[exlhost]

Hello

Just run the cURL 7.84.0 to OS update available with CB and it will install latest availble curl version of youre OS.

 

[bertvandepoel]

That's what I expected. But when we run "da build curl", it acts as if that's not a valid command and prints the help information with all the different commands that exist. Is there some other command you're using to perform this update?

 

[Ohm J]

I'm not sure how DA migrate from compiler script into OS version.

but if you update DA to latest version, It should migrate curl too. ( If they still support to migrate from compiler script into OS version). if your server doesn't get migrate CURL with lastest DA. I suggest create support ticket to let DA Team migrate for you.

 

[bertvandepoel]

We're using lifetime datacenter licenses. Maybe that's why it didn't migrate automatically when we did da update?

 

[Ohm J]

Nope, this will get automatics migration. maybe you leave your server without update from version to version. that's why you don't get migrate, due they already remove migration system(maybe).

I have datacenter license on one server and migrate without issued.

Version 1.645 | Directadmin Docs

DirectAdmin Knowledge Base

docs.directadmin.com

 

[bertvandepoel]

Weird, this never happened to us when we updated. Is there a way to manually trigger this?

 

[Ohm J]

Use evolution skin and trying goto custombuild UI page and see there have any update curl to OS version or not. if not ( I guest DA already remove migration system.

So I don't know how to cleanup this. Because just install OS version doesn't meant it automatic remove compiler CURL.

 

[bertvandepoel]

That helped. Turns out there's a secret command that's not listed in the option for da build, namely "da build doMigrateToSystemCurl". Weird that it's not listed at all there nor in any DirectAdmin documentation. I hope this helps many others too!