CVS commit: pkgsrc/www/curl

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Mar 20 07:45:57 UTC 2023

Modified Files:
        pkgsrc/www/curl: Makefile distinfo

Log Message:
curl: update to 8.0.0.

Exactly one month since the previous release, we are happy to give
you curl 8.0.0 released on curl’s official 25th birthday.

This a major version number bump but without any ground-breaking
changes or fireworks. We decided it was about time to reset the
minor number down to more a manageable level and doing it exactly
on curl’s 25th birthday made it extra fun. There is no API nor ABI
break in this version.

We disclose six new vulnerabilities today, five of them at severity
Low and one of them at Medium.

CVE-2023-27533: TELNET option IAC injection
CVE-2023-27534: SFTP path ~ resolving discrepancy
CVE-2023-27535: FTP too eager connection reuse
CVE-2023-27536: GSS delegation too eager connection re-use
CVE-2023-27537: HSTS double-free
CVE-2023-27538: SSH connection too eager reuse still


To generate a diff of this commit:
cvs rdiff -u -r1.266 -r1.267 pkgsrc/www/curl/Makefile
cvs rdiff -u -r1.189 -r1.190 pkgsrc/www/curl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/curl/Makefile
diff -u pkgsrc/www/curl/Makefile:1.266 pkgsrc/www/curl/Makefile:1.267
--- pkgsrc/www/curl/Makefile:1.266      Mon Feb 20 08:25:57 2023
+++ pkgsrc/www/curl/Makefile    Mon Mar 20 07:45:57 2023
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.266 2023/02/20 08:25:57 adam Exp $
+# $NetBSD: Makefile,v 1.267 2023/03/20 07:45:57 wiz Exp $
 
-DISTNAME=      curl-7.88.1
+DISTNAME=      curl-8.0.0
 CATEGORIES=    www
 MASTER_SITES=  https://curl.se/download/
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/www/curl/distinfo
diff -u pkgsrc/www/curl/distinfo:1.189 pkgsrc/www/curl/distinfo:1.190
--- pkgsrc/www/curl/distinfo:1.189      Mon Feb 20 08:25:57 2023
+++ pkgsrc/www/curl/distinfo    Mon Mar 20 07:45:57 2023
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.189 2023/02/20 08:25:57 adam Exp $
+$NetBSD: distinfo,v 1.190 2023/03/20 07:45:57 wiz Exp $
 
-BLAKE2s (curl-7.88.1.tar.xz) = a200bfcfb9366d53f45b5ecf74365175547053a06fef46f637531dd89147d988
-SHA512 (curl-7.88.1.tar.xz) = b8d30c52a6d1c3e272608a7a8db78dfd79aef21330f34d6f1df43839a400e13ac6aac72a383526db0b711a70ecbec89a3b934677d7ecf5094fd64d3dbcb3492f
-Size (curl-7.88.1.tar.xz) = 2581032 bytes
+BLAKE2s (curl-8.0.0.tar.xz) = ce3983cb10f87772bc18ad86476aff143a1b0278439b17cc00352215261fea17
+SHA512 (curl-8.0.0.tar.xz) = 7141e0e2ed065ba14a7fd7e080bc78cadfcf0c7e4054384f17bfbe24caa0bf512d1feaac89dabb9bebc30c2ba40e78ea4e77ac16ce07515f1e9d6b0f05098c9c
+Size (curl-8.0.0.tar.xz) = 2576600 bytes
 SHA1 (patch-configure) = ae123a94fa84ef99dfc1dadd596ac86ef0d143fe
 SHA1 (patch-curl-config.in) = a58c777fc1a0a087776e62ed2e2a1e0a339716df