CVS commit: pkgsrc/www/curl

["Leonardo Taccari" <leot%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   leot
Date:           Wed May 22 08:57:58 UTC 2019

Modified Files:
        pkgsrc/www/curl: Makefile PLIST distinfo
        pkgsrc/www/curl/patches: patch-configure

Log Message:
curl: Update to 7.65.0

pkgsrc changes:
 - Remove patch-configure test(1) `==' -> `=' hunk applied upstream

Changes:
7.65.0
------
This release includes the following changes:

 o CURLOPT_DNS_USE_GLOBAL_CACHE: removed
 o CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
 o pipelining: removed

This release includes the following bugfixes:

 o CVE-2019-5435: Integer overflows in curl_url_set
 o CVE-2019-5436: tftp: use the current blksize for recvfrom()
 o --config: clarify that initial : and = might need quoting
 o AppVeyor: enable testing for WinSSL build
 o CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
 o CURLOPT_ADDRESS_SCOPE: fix range check and more
 o CURLOPT_CAINFO.3: with Schannel, you want Windows 8 or later
 o CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
 o CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
 o CURL_MAX_INPUT_LENGTH: largest acceptable string input size
 o Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
 o INTERNALS: Add code highlighting
 o OS400/ccsidcurl: replace use of Curl_vsetopt
 o OpenSSL: Report -fips in version if OpenSSL is built with FIPS
 o README.md: fix no-consecutive-blank-lines Codacy warning
 o VC15 project: remove MinimalRebuild
 o VS projects: use Unicode for VC10+
 o WRITEFUNCTION: add missing set_in_callback around callback
 o altsvc: Fix building with cookies disabled
 o auth: Rename the various authentication clean up functions
 o base64: build conditionally if there are users
 o build-openssl.bat: Fixed support for OpenSSL v1.1.0+
 o build: fix "clarify calculation precedence" warnings
 o checksrc.bat: ignore snprintf warnings in docs/examples
 o cirrus: Customize the disabled tests per FreeBSD version
 o cleanup: remove FIXME and TODO comments
 o cmake: avoid linking executable for some tests with cmake 3.6+
 o cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
 o cmake: rename CMAKE_USE_DARWINSSL to CMAKE_USE_SECTRANSP
 o cmake: set SSL_BACKENDS
 o configure: avoid unportable `==' test(1) operator
 o configure: error out if OpenSSL wasn't detected when asked for
 o configure: fix default location for fish completions
 o cookie: Guard against possible NULL ptr deref
 o curl: make code work with protocol-disabled libcurl
 o curl: report error for "--no-" on non-boolean options
 o curl_easy_getinfo.3: fix minor formatting mistake
 o curlver.h: use parenthesis in CURL_VERSION_BITS macro
 o docs/BUG-BOUNTY: bug bounty time
 o docs/INSTALL: fix broken link
 o docs/RELEASE-PROCEDURE: link to live iCalendar
 o documentation: Fix several typos
 o doh: acknowledge CURL_DISABLE_DOH
 o doh: disable DOH for the cases it doesn't work
 o examples: remove unused variables
 o ftplistparser: fix LGTM alert "Empty block without comment"
 o hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
 o http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
 o http: acknowledge CURL_DISABLE_HTTP_AUTH
 o http: mark bundle as not for multiuse on < HTTP/2 response
 o http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
 o http_negotiate: do not treat failure of gss_init_sec_context() as fatal
 o http_ntlm: Corrected the name of the include guard
 o http_ntlm_wb: Handle auth for only a single request
 o http_ntlm_wb: Return the correct error on receiving an empty auth message
 o lib509: add missing include for strdup
 o lib557: initialize variables
 o makedebug: Fix ERRORLEVEL detection after running where.exe
 o mbedtls: enable use of EC keys
 o mime: acknowledge CURL_DISABLE_MIME
 o multi: improved HTTP_1_1_REQUIRED handling
 o netrc: acknowledge CURL_DISABLE_NETRC
 o nss: allow fifos and character devices for certificates
 o nss: provide more specific error messages on failed init
 o ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
 o ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
 o openssl: mark connection for close on TLS close_notify
 o openvms: Remove pre-processor for SecureTransport
 o openvms: Remove pre-processors for Windows
 o parse_proxy: use the URL parser API
 o parsedate: disabled on CURL_DISABLE_PARSEDATE
 o pingpong: disable more when no pingpong protocols are enabled
 o polarssl_threadlock: remove conditionally unused code
 o progress: acknowledge CURL_DISABLE_PROGRESS_METER
 o proxy: acknowledge DISABLE_PROXY more
 o resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
 o revert "multi: support verbose conncache closure handle"
 o sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
 o sasl: only enable if there's a protocol enabled using it
 o scripts: fix typos
 o singleipconnect: show port in the verbose "Trying ..." message
 o smtp: fix compiler warning
 o socks5: user name and passwords must be shorter than 256
 o socks: fix error message
 o socksd: new SOCKS 4+5 server for tests
 o spnego_gssapi: fix return code on gss_init_sec_context() failure
 o ssh-libssh: remove unused variable
 o ssh: define USE_SSH if SSH is enabled (any backend)
 o ssh: move variable declaration to where it's used
 o test1002: correct the name
 o test2100: Fix typos in test description
 o tests/server/util: fix Windows Unicode build
 o tests: Run global cleanup at end of tests
 o tests: make Impacket (SMB server) Python 3 compatible
 o tool_cb_wrt: fix bad-function-cast warning
 o tool_formparse: remove redundant assignment
 o tool_help: Warn if curl and libcurl versions do not match
 o tool_help: include <strings.h> for strcasecmp
 o transfer: fix LGTM alert "Comparison is always true"
 o travis: add an osx http-only build
 o travis: allow builds on branches named "ci"
 o travis: install dependencies only when needed
 o travis: update some builds do Xenial
 o travis: updated mesalink builds
 o url: always clone the CUROPT_CURLU handle
 o url: convert the zone id from a IPv6 URL to correct scope id
 o urlapi: add CURLUPART_ZONEID to set and get
 o urlapi: increase supported scheme length to 40 bytes
 o urlapi: require a non-zero host name length when parsing URL
 o urlapi: stricter CURLUPART_PORT parsing
 o urlapi: strip off zone id from numerical IPv6 addresses
 o urlapi: urlencode characters above 0x7f correctly
 o vauth/cleartext: update the PLAIN login to match RFC 4616
 o vauth/oauth2: Fix OAUTHBEARER token generation
 o vauth: Fix incorrect function description for Curl_auth_user_contains_domain
 o vtls: fix potential ssl_buffer stack overflow
 o wildcard: disable from build when FTP isn't present
 o winbuild: Support MultiSSL builds
 o xattr: skip unittest on unsupported platforms


To generate a diff of this commit:
cvs rdiff -u -r1.208 -r1.209 pkgsrc/www/curl/Makefile
cvs rdiff -u -r1.74 -r1.75 pkgsrc/www/curl/PLIST
cvs rdiff -u -r1.151 -r1.152 pkgsrc/www/curl/distinfo
cvs rdiff -u -r1.5 -r1.6 pkgsrc/www/curl/patches/patch-configure

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/curl/Makefile
diff -u pkgsrc/www/curl/Makefile:1.208 pkgsrc/www/curl/Makefile:1.209
--- pkgsrc/www/curl/Makefile:1.208      Sun Mar 31 20:41:29 2019
+++ pkgsrc/www/curl/Makefile    Wed May 22 08:57:58 2019
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.208 2019/03/31 20:41:29 leot Exp $
+# $NetBSD: Makefile,v 1.209 2019/05/22 08:57:58 leot Exp $
 
-DISTNAME=      curl-7.64.1
+DISTNAME=      curl-7.65.0
 CATEGORIES=    www
 MASTER_SITES=  https://curl.haxx.se/download/
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/www/curl/PLIST
diff -u pkgsrc/www/curl/PLIST:1.74 pkgsrc/www/curl/PLIST:1.75
--- pkgsrc/www/curl/PLIST:1.74  Sun Mar 31 20:41:29 2019
+++ pkgsrc/www/curl/PLIST       Wed May 22 08:57:58 2019
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.74 2019/03/31 20:41:29 leot Exp $
+@comment $NetBSD: PLIST,v 1.75 2019/05/22 08:57:58 leot Exp $
 bin/curl
 bin/curl-config
 include/curl/curl.h
@@ -199,6 +199,7 @@ man/man3/CURLOPT_LOW_SPEED_TIME.3
 man/man3/CURLOPT_MAIL_AUTH.3
 man/man3/CURLOPT_MAIL_FROM.3
 man/man3/CURLOPT_MAIL_RCPT.3
+man/man3/CURLOPT_MAXAGE_CONN.3
 man/man3/CURLOPT_MAXCONNECTS.3
 man/man3/CURLOPT_MAXFILESIZE.3
 man/man3/CURLOPT_MAXFILESIZE_LARGE.3

Index: pkgsrc/www/curl/distinfo
diff -u pkgsrc/www/curl/distinfo:1.151 pkgsrc/www/curl/distinfo:1.152
--- pkgsrc/www/curl/distinfo:1.151      Sun Mar 31 20:41:29 2019
+++ pkgsrc/www/curl/distinfo    Wed May 22 08:57:58 2019
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.151 2019/03/31 20:41:29 leot Exp $
+$NetBSD: distinfo,v 1.152 2019/05/22 08:57:58 leot Exp $
 
-SHA1 (curl-7.64.1.tar.xz) = a7242098aebf31107bd4765f3d54456953dba141
-RMD160 (curl-7.64.1.tar.xz) = e53f8e3279d351de1fba7de1fea3126cdd59bf50
-SHA512 (curl-7.64.1.tar.xz) = 1629ba154691bf9d936e0bce69ec8fb54991a40d34bc16ffdfb117f91e3faa93164154fc9ae9043e963955862e69515018673b7239f2fd625684a59cdd1db81c
-Size (curl-7.64.1.tar.xz) = 2385360 bytes
-SHA1 (patch-configure) = a1674c54b3a8803f84c6b5a7ddd5e79df2b20896
+SHA1 (curl-7.65.0.tar.xz) = abb21258bbedf5cccf65e827c770792e234a70bb
+RMD160 (curl-7.65.0.tar.xz) = 70b34e5b313128e4a1990a597d7b4ddfdae25e9c
+SHA512 (curl-7.65.0.tar.xz) = 032c065c1d4bd07ba028625f8fab6a09e7cb8505a5f19339b3abdee5a9cda7d091c11f075fe3fc227d082690a66c558c770a4cd9fb17b52acc13794976a770c5
+Size (curl-7.65.0.tar.xz) = 2392324 bytes
+SHA1 (patch-configure) = 10bcbbb3288ade64f46cbf99a8aa56fee70a7eea
 SHA1 (patch-curl-config.in) = 363359665985cc14f36ddf47fc3480f1200e3533

Index: pkgsrc/www/curl/patches/patch-configure
diff -u pkgsrc/www/curl/patches/patch-configure:1.5 pkgsrc/www/curl/patches/patch-configure:1.6
--- pkgsrc/www/curl/patches/patch-configure:1.5 Sun Mar 31 20:41:29 2019
+++ pkgsrc/www/curl/patches/patch-configure     Wed May 22 08:57:58 2019
@@ -1,4 +1,4 @@
-$NetBSD: patch-configure,v 1.5 2019/03/31 20:41:29 leot Exp $
+$NetBSD: patch-configure,v 1.6 2019/05/22 08:57:58 leot Exp $
 
 - Builtin krb5-config in platforms such as solaris do not support
   the gssapi option, and need an explicit -lgss
@@ -158,12 +158,3 @@ $NetBSD: patch-configure,v 1.5 2019/03/3
          ;;
       esac
    fi
-@@ -22252,7 +22255,7 @@ fi
- 
- { $as_echo "$as_me:${as_lineno-$LINENO}: checking whether to enable Amiga native SSL/TLS (AmiSSL)" >&5
- $as_echo_n "checking whether to enable Amiga native SSL/TLS (AmiSSL)... " >&6; }
--if test "$HAVE_PROTO_BSDSOCKET_H" == "1"; then
-+if test "$HAVE_PROTO_BSDSOCKET_H" = "1"; then
-   if test -z "$ssl_backends" -o "x$OPT_AMISSL" != xno; then
-     ssl_msg=
-     if test "x$OPT_AMISSL" != "xno"; then