pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/pkgsrc-2017Q4]: pkgsrc/www/curl Pullup ticket #5721 - requested by maya



details:   https://anonhg.NetBSD.org/pkgsrc/rev/6f384a6597e3
branches:  pkgsrc-2017Q4
changeset: 373163:6f384a6597e3
user:      spz <spz%pkgsrc.org@localhost>
date:      Fri Mar 16 21:16:19 2018 +0000

description:
Pullup ticket #5721 - requested by maya
www/curl: security update

Revisions pulled up:
- www/curl/Makefile                                             1.194
- www/curl/PLIST                                                1.68
- www/curl/distinfo                                             1.142

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Wed Mar 14 07:44:24 UTC 2018

   Modified Files:
        pkgsrc/www/curl: Makefile PLIST distinfo

   Log Message:
   curl: update to 7.59.0.

   Curl and libcurl 7.59.0

   This release includes the following changes:

    o curl: add --proxy-pinnedpubkey [10]
    o added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T [13]
    o CURLOPT_RESOLVE: Add support for multiple IP addresses per entry [37]
    o Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS [37]
    o Add new tool option --happy-eyeballs-timeout-ms [37]
    o Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA [39]

   This release includes the following bugfixes:

    o openldap: check ldap_get_attribute_ber() results for NULL before using [50]
    o FTP: reject path components with control codes [51]
    o readwrite: make sure excess reads don't go beyond buffer end [52]
    o lib555: drop text conversion and encode data as ascii codes [1]
    o lib517: make variable static to avoid compiler warning
    o lib544: sync ascii code data with textual data [1]
    o GSKit: restore pinnedpubkey functionality [2]
    o darwinssl: Don't import client certificates into Keychain on macOS [3]
    o parsedate: fix date parsing for systems with 32 bit long [4]
    o openssl: fix pinned public key build error in FIPS mode [5]
    o SChannel/WinSSL: Implement public key pinning [6]
    o cookies: remove verbose "cookie size:" output
    o progress-bar: don't use stderr explicitly, use bar->out [7]
    o Fixes for MSDOS
    o build: open VC15 projects with VS 2017
    o curl_ctype: private is*() type macros and functions [8]
    o configure: set PATH_SEPARATOR to colon for PATH w/o separator [9]
    o winbuild: make linker generate proper PDB [11]
    o curl_easy_reset: clear digest auth state [12]
    o curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6 [14]
    o range: commonize FTP and FILE range handling [15]
    o progress-bar docs: update to match implementation [16]
    o fnmatch: do not match the empty string with a character set
    o fnmatch: accept an alphanum to be followed by a non-alphanum in char set [17]
    o build: fix termios issue on android cross-compile [18]
    o getdate: return -1 for out of range [19]
    o formdata: use the mime-content type function [20]
    o time-cond: fix reading the file modification time on Windows [21]
    o build-openssl.bat: Extend VC15 support to include Enterprise and Professional
    o build-wolfssl.bat: Extend VC15 support to include Enterprise and Professional
    o openssl: Don't add verify locations when verifypeer=0
    o fnmatch: optimize processing of consecutive *s and ?s pattern characters [22]
    o schannel: fix compiler warnings [23]
    o content_encoding: Add "none" alias to "identity" [24]
    o get_posix_time: only check for overflows if they can happen
    o http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING [25]
    o README: language fix [26]
    o sha256: build with OpenSSL < 0.9.8 [27]
    o smtp: fix processing of initial dot in data [28]
    o --tlsauthtype: works only if libcurl is built with TLS-SRP support [29]
    o tests: new tests for http raw mode [30]
    o libcurl-security.3: man page discussion security concerns when using libcurl
    o curl_gssapi: make sure this file too uses our *printf()
    o BINDINGS: fix curb link (and remove ruby-curl-multi)
    o nss: use PK11_CreateManagedGenericObject() if available [31]
    o travis: add build with iconv enabled [32]
    o ssh: add two missing state names [33]
    o CURLOPT_HEADERFUNCTION.3: mention folded headers
    o http: fix the max header length detection logic [34]
    o header callback: don't chop headers into smaller pieces [35]
    o CURLOPT_HEADER.3: clarify problems with different data sizes
    o curl --version: show PSL if the run-time lib has it enabled
    o examples/sftpuploadresume: resume upload via CURLOPT_APPEND [36]
    o Return error if called recursively from within callbacks [38]
    o sasl: prefer PLAIN mechanism over LOGIN
    o winbuild: Use CALL to run batch scripts [40]
    o curl_share_setopt.3: connection cache is shared within multi handles
    o winbuild: Use macros for the names of some build utilities [41]
    o projects/README: remove reference to dead IDN link/package [42]
    o lib655: silence compiler warning [43]
    o configure: Fix version check for OpenSSL 1.1.1
    o docs/MANUAL: formfind.pl is not accessible on the site anymore [44]
    o unit1309: fix warning on Windows x64 [45]
    o unit1307: proper cleanup on OOM to fix torture tests
    o curl_ctype: fix macro redefinition warnings
    o build: get CFLAGS (including -werror) used for examples and tests [46]
    o NO_PROXY: fix for IPv6 numericals in the URL [47]
    o krb5: use nondeprecated functions [48]
    o winbuild: prefer documented zlib library names [49]
    o http2: mark the connection for close on GOAWAY [53]
    o limit-rate: kick in even before "limit" data has been received [54]
    o HTTP: allow "header;" to replace an internal header with a blank one [55]
    o http2: verbose output new MAX_CONCURRENT_STREAMS values
    o SECURITY: distros' max embargo time is 14 days
    o curl tool: accept --compressed also if Brotli is enabled and zlib is not
    o WolfSSL: adding TLSv1.3 [56]
    o checksrc.pl: add -i and -m options
    o CURLOPT_COOKIEFILE.3: "-" as file name means stdin


   To generate a diff of this commit:
   cvs rdiff -u -r1.193 -r1.194 pkgsrc/www/curl/Makefile
   cvs rdiff -u -r1.67 -r1.68 pkgsrc/www/curl/PLIST
   cvs rdiff -u -r1.141 -r1.142 pkgsrc/www/curl/distinfo

diffstat:

 www/curl/Makefile |   4 ++--
 www/curl/PLIST    |   8 +++++++-
 www/curl/distinfo |  10 +++++-----
 3 files changed, 14 insertions(+), 8 deletions(-)

diffs (80 lines):

diff -r b2d277d6b030 -r 6f384a6597e3 www/curl/Makefile
--- a/www/curl/Makefile Mon Mar 12 12:36:39 2018 +0000
+++ b/www/curl/Makefile Fri Mar 16 21:16:19 2018 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.190.2.1 2018/01/24 19:43:13 bsiegert Exp $
+# $NetBSD: Makefile,v 1.190.2.2 2018/03/16 21:16:19 spz Exp $
 
-DISTNAME=      curl-7.58.0
+DISTNAME=      curl-7.59.0
 CATEGORIES=    www
 MASTER_SITES=  https://curl.haxx.se/download/
 EXTRACT_SUFX=  .tar.bz2
diff -r b2d277d6b030 -r 6f384a6597e3 www/curl/PLIST
--- a/www/curl/PLIST    Mon Mar 12 12:36:39 2018 +0000
+++ b/www/curl/PLIST    Fri Mar 16 21:16:19 2018 +0000
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.66.2.1 2018/01/24 19:43:13 bsiegert Exp $
+@comment $NetBSD: PLIST,v 1.66.2.2 2018/03/16 21:16:19 spz Exp $
 bin/curl
 bin/curl-config
 include/curl/curl.h
@@ -26,6 +26,7 @@
 man/man3/CURLINFO_COOKIELIST.3
 man/man3/CURLINFO_EFFECTIVE_URL.3
 man/man3/CURLINFO_FILETIME.3
+man/man3/CURLINFO_FILETIME_T.3
 man/man3/CURLINFO_FTP_ENTRY_PATH.3
 man/man3/CURLINFO_HEADER_SIZE.3
 man/man3/CURLINFO_HTTPAUTH_AVAIL.3
@@ -147,6 +148,7 @@
 man/man3/CURLOPT_FTP_USE_EPSV.3
 man/man3/CURLOPT_FTP_USE_PRET.3
 man/man3/CURLOPT_GSSAPI_DELEGATION.3
+man/man3/CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS.3
 man/man3/CURLOPT_HEADER.3
 man/man3/CURLOPT_HEADERDATA.3
 man/man3/CURLOPT_HEADERFUNCTION.3
@@ -252,6 +254,8 @@
 man/man3/CURLOPT_REFERER.3
 man/man3/CURLOPT_REQUEST_TARGET.3
 man/man3/CURLOPT_RESOLVE.3
+man/man3/CURLOPT_RESOLVER_START_DATA.3
+man/man3/CURLOPT_RESOLVER_START_FUNCTION.3
 man/man3/CURLOPT_RESUME_FROM.3
 man/man3/CURLOPT_RESUME_FROM_LARGE.3
 man/man3/CURLOPT_RTSP_CLIENT_CSEQ.3
@@ -313,6 +317,7 @@
 man/man3/CURLOPT_TIMEOUT.3
 man/man3/CURLOPT_TIMEOUT_MS.3
 man/man3/CURLOPT_TIMEVALUE.3
+man/man3/CURLOPT_TIMEVALUE_LARGE.3
 man/man3/CURLOPT_TLSAUTH_PASSWORD.3
 man/man3/CURLOPT_TLSAUTH_TYPE.3
 man/man3/CURLOPT_TLSAUTH_USERNAME.3
@@ -400,6 +405,7 @@
 man/man3/libcurl-env.3
 man/man3/libcurl-errors.3
 man/man3/libcurl-multi.3
+man/man3/libcurl-security.3
 man/man3/libcurl-share.3
 man/man3/libcurl-symbols.3
 man/man3/libcurl-thread.3
diff -r b2d277d6b030 -r 6f384a6597e3 www/curl/distinfo
--- a/www/curl/distinfo Mon Mar 12 12:36:39 2018 +0000
+++ b/www/curl/distinfo Fri Mar 16 21:16:19 2018 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.140.2.1 2018/01/24 19:43:13 bsiegert Exp $
+$NetBSD: distinfo,v 1.140.2.2 2018/03/16 21:16:19 spz Exp $
 
-SHA1 (curl-7.58.0.tar.bz2) = 42fff9f33ad4ed9e797ee1e7c0a3cda7f8dff7ff
-RMD160 (curl-7.58.0.tar.bz2) = 61d5e9f5165f4bbeac3b81de55f27561d90a7c86
-SHA512 (curl-7.58.0.tar.bz2) = 853b945fbfe87e8dcf2186d8cc6609681b9ed3727f9f075bb434d5df07dcccc633fdf30795f6d5956e3355a5cf94a3780e4a3603b08cbd0368e44103de27085b
-Size (curl-7.58.0.tar.bz2) = 2891868 bytes
+SHA1 (curl-7.59.0.tar.bz2) = 0dd78aa857342b85b90bd6b0a53f6aee3516cb13
+RMD160 (curl-7.59.0.tar.bz2) = 48e5c291285d46753e4bab1c720c98dc91a0a16f
+SHA512 (curl-7.59.0.tar.bz2) = 9b5586f443a3c9fed947debce86861a8dea0fbf59bf8838cfd72a0884f13073630cf9d369b5535a059d122decd738c652705567752517f5cb11148cc16f693fb
+Size (curl-7.59.0.tar.bz2) = 2904158 bytes
 SHA1 (patch-configure) = ba8abac55f11a53d07235e57d21ce5b32a421902
 SHA1 (patch-curl-config.in) = 363359665985cc14f36ddf47fc3480f1200e3533
 SHA1 (patch-lib_hostcheck.c) = 8e772d3f91cdafae17281cc19004269ece0cf308



Home | Main Index | Thread Index | Old Index