If you use brew’s curl on macOS, are you really using it? I installed and had curl setup a couple of years ago. Today it appears that curl was now pointing to Apple’s version, which has this issue (https://daniel.haxx.se/blog/2024/03/08/the-apple-curl-security-incident-12604/). Looks like brew doesn’t add a symlink for curl to /opt/homebrew/bin. Running `ln -s /opt/homebrew/opt/curl/bin/curl /opt/homebrew/bin` resolved the issue.
Conversation
Notices
-
Embed this notice
Out of Control :laravel: 🇨🇦 (outofcontrol@phpc.social)'s status on Friday, 19-Apr-2024 01:43:37 JST Out of Control :laravel: 🇨🇦
-
Embed this notice
Angry Sun (sun@shitposter.world)'s status on Friday, 19-Apr-2024 01:43:33 JST Angry Sun
@feld @outofcontrol homebrew puts things in a different path if it's a thing that would conflict with a version provided by the OS -
Embed this notice
feld (feld@bikeshed.party)'s status on Friday, 19-Apr-2024 01:43:34 JST feld
@outofcontrol I admit it's super weird that it isn't in the normal homebrew bin PATH by default -
Embed this notice
Out of Control :laravel: 🇨🇦 (outofcontrol@phpc.social)'s status on Friday, 19-Apr-2024 01:43:35 JST Out of Control :laravel: 🇨🇦
@feld But, if curl was installed as a dependancy there is a lot of text there, and the message could be missed.
-
Embed this notice
feld (feld@bikeshed.party)'s status on Friday, 19-Apr-2024 01:43:36 JST feld
@outofcontrol if you read the output when installing curl it says:
If you need to have curl first in your PATH, run:
echo 'export PATH="/opt/homebrew/opt/curl/bin:$PATH"' >> ~/.zshrc -
Embed this notice
Angry Sun (sun@shitposter.world)'s status on Friday, 19-Apr-2024 01:55:08 JST Angry Sun
@feld @outofcontrol I don't have an explanation, I just read that somewhere -
Embed this notice
feld (feld@bikeshed.party)'s status on Friday, 19-Apr-2024 01:55:09 JST feld
@sun @outofcontrol that's not always the case. a quick example is python3:
/usr/bin/python3
/opt/homebrew/bin/python3 -
Embed this notice
Pete Wright (pete_wright@nlogic.systems)'s status on Friday, 19-Apr-2024 03:06:01 JST Pete Wright
@feld @outofcontrol @sun
i never trusted brew - i've had to help too many developers fix up their environments after brew got too crafty for its own good. fortunately pkgsrc/pkgin works really well on macOS and pretty much every other unix. -
Embed this notice
Angry Sun (sun@shitposter.world)'s status on Friday, 19-Apr-2024 03:06:01 JST Angry Sun
@pete_wright @feld @outofcontrol hey thats me! -
Embed this notice
feld (feld@bikeshed.party)'s status on Friday, 19-Apr-2024 03:06:02 JST feld
@outofcontrol @sun brew can't put anything in /usr/bin because it's completely readonly now on modern Macs :)
> sudo touch /usr/bin/testing
Password:
touch: /usr/bin/testing: Operation not permitted -
Embed this notice
Out of Control :laravel: 🇨🇦 (outofcontrol@phpc.social)'s status on Friday, 19-Apr-2024 03:06:04 JST Out of Control :laravel: 🇨🇦
@feld brew never puts anything in /usr/bin directly, and /opt/homebrew/bin are all symlinks:
/opt/homebrew/bin/python3 -> ../Cellar/python@3.12/3.12.2_1/bin/python3
vs
/opt/homebrew/bin/curl -> ../Cellar/curl/8.7.1/bin/curlBut, I suspect @sun is correct to some degree, that brew won’t override OS installs automatically, and will want you to work for it.
Also just a guess on my part :)
-
Embed this notice