From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <development+bounces-738-archive=lists.ipfire.org@lists.ipfire.org>
Received: from mail02.haj.ipfire.org (localhost [127.0.0.1])
	by mail02.haj.ipfire.org (Postfix) with ESMTP id 4bmD3W6MlBz37Dm
	for <archive@lists.ipfire.org>; Mon, 21 Jul 2025 21:26:15 +0000 (UTC)
Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature ECDSA (secp384r1)
	 client-signature RSA-PSS (4096 bits))
	(Client CN "mail01.haj.ipfire.org", Issuer "R11" (verified OK))
	by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4bmD3P4724z34Lw
	for <development@lists.ipfire.org>; Mon, 21 Jul 2025 21:26:09 +0000 (UTC)
Received: from [127.0.0.1] (localhost [127.0.0.1])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
	(No client certificate requested)
	by mail01.ipfire.org (Postfix) with ESMTPSA id 4bmD3M6mwRz5H4;
	Mon, 21 Jul 2025 21:26:07 +0000 (UTC)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org;
	s=202003ed25519; t=1753133168;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:cc:mime-version:mime-version:
	 content-transfer-encoding:content-transfer-encoding:
	 in-reply-to:in-reply-to:references:references;
	bh=lb6j5eZyiLtJkszK0MktXF5cVP3KjElmWgUr1/XXDoM=;
	b=o18Om5m06+e2OIhSzNdVCgAJ2OSFOAzBUhKl3TuIbvtt5M4ssEnUTuTBWS6q++gz9uMLup
	Bi7wGl0t8FUK3VBA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa;
	t=1753133168;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:cc:mime-version:mime-version:
	 content-transfer-encoding:content-transfer-encoding:
	 in-reply-to:in-reply-to:references:references;
	bh=lb6j5eZyiLtJkszK0MktXF5cVP3KjElmWgUr1/XXDoM=;
	b=UCnX9+vnBzxWaEgf4pEZ3EW49DZO2loKlygNk91oWK9U5P0JxTlfWzad7UGjjC4mPe4Y7q
	rHlM2JWI9Vf+jlv7B8BooxrzniFBrRCOPoxTOa4yDoAO/+diOaiU73JE0KR2Fb0h77ZPbJ
	HTnM//Kq2K0/ebt3AjCRVRQOSppAq+GyzeubvhhDqZXm9y4/6vSP/IwoFqj7PYJdyJKxAK
	DU6HVLxuPTpXgSH7b1A1KtWS4dXMWcVoCHKfro+wdehtHLyycr6i2KcfR2gpMx4N5WuNEe
	l4ntPr36fJSzNQCfiMBgLt8t3L7o/ZL02NYRB6Itna7tgdqbC/eTLlW7INRQKg==
From: Adolf Belka <adolf.belka@ipfire.org>
To: development@lists.ipfire.org
Cc: Adolf Belka <adolf.belka@ipfire.org>
Subject: [PATCH] curl: Update to version 8.15.0
Date: Mon, 21 Jul 2025 23:25:55 +0200
Message-ID: <20250721212601.3400729-7-adolf.belka@ipfire.org>
In-Reply-To: <20250721212601.3400729-1-adolf.belka@ipfire.org>
References: <20250721212601.3400729-1-adolf.belka@ipfire.org>
Precedence: list
List-Id: <development.lists.ipfire.org>
List-Subscribe: <https://lists.ipfire.org/>,
 <mailto:development+subscribe@lists.ipfire.org?subject=subscribe>
List-Unsubscribe: <https://lists.ipfire.org/>,
 <mailto:development+unsubscribe@lists.ipfire.org?subject=unsubscribe>
List-Post: <mailto:development@lists.ipfire.org>
List-Help: <mailto:development+help@lists.ipfire.org?subject=help>
Sender: <development@lists.ipfire.org>
Mail-Followup-To: <development@lists.ipfire.org>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

- Update from version 8.14.1 to 8.15.0
- Update of rootfile not required
- Changelog
    8.15.0
	changes:
	 o TLS: remove support for Secure Transport and BearSSL [19]
	bugfixes:
	 o altsvc: accept 'clear' without semicolon as well [190]
	 o asyn-ares: remove redundant NULL check [152]
	 o asyn-thrdd: free the previous name before strdup'ing the new [84]
	 o autotools: detect and link `brotlicommon` library for brotli [130]
	 o autotools: drop `$top_builddir/src` from src header path [23]
	 o autotools: drop headers from src mk-unity rules (fixup) [136]
	 o autotools: drop no longer necessary `--srcdir` unity options [66]
	 o autotools: drop redundant `Makefile.inc` from `EXTRA_DIST` in src [127]
	 o autotools: simplify configuration in tests, examples [47]
	 o bufq: change read/write signatures [120]
	 o bufq: remove the unused Curl_bufq_unwrite function [143]
	 o build: assume `sys/socket.h`, `sys/time.h` on non-Windows (as in
	   `curl/curl.h`) [21]
	 o build: drop `HAVE_SYS_SOCKET_H` and `HAVE_SYS_TIME_H` macros [69]
	 o build: drop explicit curlx from hdr paths, refer headers with `curlx/`
	   prefix [150]
	 o build: drop unused variables in tests
	 o build: fix libcurltool with cmake and tunits, related tidy-ups [138]
	 o build: split `.c` and `.h` file lists in tests [128]
	 o build: stop checking for `sys/stat.h` [146]
	 o build: stubgss tidy-ups (in tests) [137]
	 o build: sync build scripts between client/libtest [49]
	 o build: tidy up `Makefile.inc` use in lib and src [116]
	 o build: tidy up header paths, use srcdir where possible [42]
	 o cf-socket: make socket data_pending a nop [175]
	 o checksrc-all: rewrite in Perl, remove `checksrc.bat` [217]
	 o checksrc: reduce exceptions, apply again to curlx [114]
	 o cmake/FindGSS: fix processing C header path options [160]
	 o cmake/FindGSS: initialize result variables [159]
	 o cmake: `curl_add_clang_tidy_test_target` tidy-ups [185]
	 o cmake: build `stubgss` library for libtests to match autotools [34]
	 o cmake: check USE_WINDOWS_SSPI when adding secur32 to CURL_LIBS [144]
	 o cmake: configure c-ares header directory in project root (was: lib) [106]
	 o cmake: document OpenSSL and ngtcp2 crypto lib custom variables [29]
	 o cmake: drop never propagated C macros [22]
	 o cmake: drop passing redundant `CURL_STATICLIB` in examples and clients [52]
	 o cmake: drop redundant macro from test clients [51]
	 o cmake: drop reference to future variable
	 o cmake: enable soversion by default for OpenHarmony OS [131]
	 o cmake: fix `curl_add_clang_tidy_test_target` when no `-D` option [155]
	 o cmake: fix generator expression in docs/examples [109]
	 o cmake: gather options recursively in `curl_add_clang_tidy_test_target` [156]
	 o cmake: make docs depend on support files [80]
	 o cmake: move `OUTPUT` argument in the `add_custom_command()` line [50]
	 o cmake: omit clang-tidy on internal libs curlu and curltool [64]
	 o cmake: replace `cmakelint` with `cmake-lint` from `cmakelang`, fix issues [20]
	 o cmake: replace the way clang-tidy verifies tests, fix issues found [101]
	 o cmake: simplify handling generated `lib1521.c` in libtests [24]
	 o cmake: sync `target_link_libraries()` order in tests more [44]
	 o cmake: sync tests scripts by using the variable `BUNDLE` [46]
	 o cmake: sync tests scripts with each other and autotools (more) [100]
	 o cmake: use `target_link_options()` when available [43]
	 o config-win32: fix default targets, shorten macro logic [227]
	 o configure: order LDAP after the SSL libraries
	 o connect: drop unused struct member [209]
	 o connection: clarify `transport` [197]
	 o connection: eliminate member `remote_addr` [10]
	 o curl-config: fix whitespace in usage text [122]
	 o curl.h: make CURL_IPRESOLVE_* symbols defined as longs [206]
	 o curl.h: make CURLSSLOPT_* symbols defined as longs [3]
	 o curl.h: remove the "RESERVED" error codes [2]
	 o curl: implement non-blocking STDIN read on Windows [28]
	 o curl: improve non-blocking STDIN performance [129]
	 o curl: remove the global argument from many functions [218]
	 o curl: unify pointer names to global config [219]
	 o curl_get_line: make sure lines end with newline [110]
	 o curl_memory.h: fix to undefine `accept4` [180]
	 o curl_path: make SFTP handle a path like /~ properly. [11]
	 o curlinfo: provide the 'digest' feature [168]
	 o CURLSHOPT_SHARE.md: mention multi-threading requires callbacks [161]
	 o DEPRECATE.md: add VS2005 removal to the list [214]
	 o digest: fix build with disabled digest auth [72]
	 o DISTROS: update NixOS link
	 o docs,tests: fix english grammar "allow to" -> "allow <something> to" [158]
	 o docs/CONTRIBUTE: fix broken link [173]
	 o docs/examples: add ftp-delete.c [5]
	 o docs: beef up examples/websocket.c [189]
	 o docs: fix broken link in CODE_REVIEW.md [67]
	 o docs: fix broken link in INSTALL.md [68]
	 o docs: fix docs for CURLOPT_PREQUOTE after #17616 [70]
	 o docs: fix documentation of connect_only 2 [78]
	 o docs: fix two typos [163]
	 o docs: mention that the netrc file works without port numbers [112]
	 o docs: mention the as-is concept generically [225]
	 o docs: note SSLS-EXPORT feature in -ssl-sessions doc [199]
	 o docs: reflect that delimiter-separated capath is only OpenSSL [135]
	 o docs: sync -tls-earlydata support w/ CURLOPT_SSL_OPTIONS [198]
	 o docs: warn about lifetime in CURLOPT_CLOSESOCKET* [54]
	 o easy: fix comment-documentation [36]
	 o easygetopt: fix curl logo in header comment [167]
	 o firefox-db2pem: avoid use of eval in script [103]
	 o ftp: fix prequotes for a directory in URL [83]
	 o ftplistparser: split parse_unix into sub functions [77]
	 o h2_serverpush: fix file handle leaks reported by clang-tidy [105]
	 o h3: fix query of concurrent streams [220]
	 o http/3: report handshake with version and cipher as for TCP connections [212]
	 o http2: do not delay RST send on aborted transfer [57]
	 o http2: fix var types in is_alive() implementations [222]
	 o http: explicitly ignore parsing errors for Retry-After [98]
	 o http: fix build with cookies and HSTS disabled [124]
	 o http_ntlm: protect against null deref [95]
	 o http_ntlm: remove unreachable code [88]
	 o INSTALL.md: cygwin details and add source code link [4]
	 o ldap: avoid automake caching issues with LDAP library names
	 o ldap: if ldap-lib is sufficient, add it to LIBS.
	 o ldap: initial support for --with-ldap option
	 o lib2082: drop `typedef struct` [118]
	 o lib: address singleuse issues [132]
	 o lib: avoid reusing unclean connection [73]
	 o lib: drop two interim macros in favor of native libcurl API calls [172]
	 o lib: fix unused parameter/function compiler warnings [186]
	 o lib: make `CURLX_SET_BINMODE()` and use it [39]
	 o lib: make `curlx_wait_ms()` and use it [40]
	 o lib: replace scache no-op macros with `#ifdef` [117]
	 o lib: stop `time()` debug overrides at the end of source in altsvc, hsts [211]
	 o lib: unify recv/send function signatures [92]
	 o libcurl-env.md: drop LOGNAME, USER and NTLMUSER [99]
	 o libcurl.m4: fix indentation [194]
	 o libssh2: remove use of 'initialised' for cleanup [208]
	 o libssh: de-complex myssh_statemach_act() [18]
	 o libssh: fix readdir issues [191]
	 o libtests: make test 1503,1504,1505 use the 1502 binary [90]
	 o libtests: more header tidy-ups [224]
	 o libtests: stop building the sames source multiple times [89]
	 o memdebug.h: #undef `fclose` before defining it
	 o memdebug.h: eliminate global macro `CURL_MT_LOGFNAME_BUFSIZE` [178]
	 o memdebug: include in unity batch [63]
	 o memory: stop overriding unused `wcsdup()`/`_wcsdup()` system functions [204]
	 o memory: tidy up `_tcsdup()` override [202]
	 o misc: fix typos [207]
	 o mk-lib1521: replace `printf` with `curl_mprintf` [141]
	 o multi: add dirty bitset [115]
	 o multi: do no expire a blocked transfer [56]
	 o multi: fix polling with pending input [60]
	 o multi: remove careful bounds check as coverity says it is not needed [174]
	 o multi: xfer table/bitset, handle limits [142]
	 o ngtcp2: fix coverity warning about result handling [166]
	 o openssl: enable readahead [91]
	 o openssl: error on SSL_ERROR_SYSCALL [94]
	 o openssl: fix handling of buffered data [82]
	 o openssl: fix openssl engine use [74]
	 o openssl: fix pkcs11 provider available check [154]
	 o os400: upgrade ILE/RPG bindings with latest definitions. [184]
	 o pingpong: on disconnect, check for unflushed pingpong state [12]
	 o projects/build-openssl.bat: remove [223]
	 o pytest test_07_70, weaken early data check [96]
	 o pytest: adapt for runs with openssl-1.1.1
	 o pytest: disable test_07_37 and test_07_36 with openssl's quic [1]
	 o quic: implement CURLINFO_TLS_SSL_PTR [176]
	 o RELEASE-PROCEDURE.md: update docs/VERSIONS [7]
	 o runtests.pl: fix sprintf() using one too many %s [134]
	 o runtests: fix `LD_PRELOAD` detection for cmake-built curl binaries [123]
	 o runtests: support memory-limits per test [193]
	 o rustls: apply memory function overrides, fixing an ECH buffer free [181]
	 o rustls: don't try printing the not provided file [104]
	 o schannel: allow partial chains for manual peer verification [79]
	 o schannel: drop Windows 2000 compatibility logic [26]
	 o scorecard: flame graphs and documentation [165]
	 o SCP/SFTP: avoid busy loop after EAGAIN [8]
	 o scripts: fix to quote the copyright email address [210]
	 o socks: fix query when filter context is null [221]
	 o system.h: remove some macros [6]
	 o test1117: reduce write delays [9]
	 o test1175: fix to run, and fix documentation issues detected [216]
	 o test1222: fix for out-of-tree and no-libcurl-manual builds [215]
	 o test1499, 1599: use `%LOGDIR` [226]
	 o test1499: verify two chunked responses on reused connection [145]
	 o test1596: let test pass after year 2036 [35]
	 o test1706: pass include directory to `managen` for out-of-tree builds [187]
	 o tests/client: drop autotools logic no longer necessary [45]
	 o tests/client: use `curl_mfprintf()` [48]
	 o tests/dnsd: read config from file [85]
	 o tests/http/clients: drop hack and use `curl_setup.h` again [58]
	 o tests/http/clients: move to tests/client [53]
	 o tests/http/requirements: remove multipart [183]
	 o tests/libtest: call `curlx_now_init()` for unit 1399, 2600 (Windows) [76]
	 o tests/libtest: drop `TEST_HANG_TIMEOUT` redefinition hack [108]
	 o tests/libtest: drop a checksrc exception [119]
	 o tests/libtest: use `curltime` from curlx [71]
	 o tests/server/util.c: include netinet/in6.h [113]
	 o tests/server: de-dupe/merge three `sockdaemon()` clones into one [149]
	 o tests/server: drop `memdebug.h` [111]
	 o tests/server: make all global vars/funcs static [41]
	 o tests/server: move memory init to `memptr.c` [140]
	 o tests/servers.pm: add more ways to figure out current user [17]
	 o tests: always make bundles, adapt build and tests [81]
	 o tests: bundle http clients, de-dupe, enable for MSVC [61]
	 o tests: constify, make consts static [139]
	 o tests: drop `BUNDLE_SRC` variable [59]
	 o tests: drop mk-bundle exceptions [25]
	 o tests: drop unused or redundant includes [153]
	 o tests: drop useless "nodist_SOURCES" assignments [93]
	 o tests: fail torture if !valgrind&threaded resolver [31]
	 o tests: fix 1301, 1308 to fail on error [177]
	 o tests: fix `BUNDLE` variable references in `Makefile.am` [125]
	 o tests: make all names < 75 characters long [182]
	 o tests: make individual test sources compile cleanly [107]
	 o tests: make sshserver less verbose [55]
	 o tests: move `curlcheck.h` to libtest as `unitcheck.h` [171]
	 o tests: move GSS-API dynamic stub into debug-mode libcurl [169]
	 o tests: torture: don't duplicate valgrind command [32]
	 o tests: use %b64[] to base64 data [151]
	 o tests: use %b64[] to base64 data in 2056, 2057 [126]
	 o tftpd: use `CURLMIN()` macro [38]
	 o tidy-up: replace `<memdebug.h>` with `"memdebug.h"` (src, units) [147]
	 o tls: remove Curl_ssl false_start [86]
	 o tool1621: drop unused internal libcurl headers [157]
	 o tool_getparam: fix --ftp-pasv [15]
	 o tool_operate: fix return code when --retry is used but not triggered [13]
	 o tool_paramhelp: fix language in comments [196]
	 o top-complexity: lower max allowed complexity threshold to 90 [33]
	 o unit tests: extract "private" prototypes at build time [170]
	 o unit1302: expand the base64 encode/decode tests [148]
	 o url: fix connection lifetime checks [14]
	 o url: fix NULL deref with bad password when no user is provided [87]
	 o urlapi: simplify and split into sub functions [16]
	 o urlapi: use uppercase hex encoding [133]
	 o vauth: move auth structs to conn meta data [30]
	 o vtls: change send/recv signatures of tls backends [65]
	 o vtls: fix a copy-pasted early data comment typo [200]
	 o vtls: log rustls negotiated KEX group name [201]
	 o vtls: prefer ciphersuite to cipher in msgs [203]
	 o vtls: prefer rustls-ffi ciphersuite name API [205]
	 o VULN-DISCLOSURE-POLICY.md: fix typos [164]
	 o VULN-DISCLOSURE-POLICY: all reports should be disclosed [102]
	 o VULN-DISCLOSURE-POLICY: exclude not installed software [121]
	 o VULN-DISCLOSURE-POLICY: minor language polish [162]
	 o warnless: drop parts of the `read`/`write` preprocessor hack (Windows) [37]
	 o warnless: replace `read()`/`write()` wrapper functions with macros
	   (Windows) [75]
	 o windows: drop redundant `curl_wcsdup_callback` callback [188]
	 o windows: fixup `fopen()` in `CURLDEBUG` builds [62]
	 o windows: reduce/stop loading DLLs at runtime [27]
	 o wolfssl: add support for ML_KEM hybrids [195]
	 o ws: drop redundant `CURL_EXTERN` from function definitions [179]
	 o xfer: manage pause bits [97]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/curl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lfs/curl b/lfs/curl
index 2ca1123b2..9671a0cf4 100644
--- a/lfs/curl
+++ b/lfs/curl
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 8.14.1
+VER        = 8.15.0
 
 THISAPP    = curl-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 4ce2277d143084823855b714e86047a94d4c52a686b8d16d9ab76c31168f1a74d63dfa7608cff36706a8a0b9bf9cc611a9b99860b176a227bca580cd95e9cff2
+$(DL_FILE)_BLAKE2 = ae809be87f34d079413129c27e618a6d15c2bf9087fd7e679cefe9b6d8645f0dd092e8c3e1f62b7bd0dffdd0b77e0bc5ac031ffce4e50060ec20b280618c8e68
 
 install : $(TARGET)
 
-- 
2.50.1