From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH] curl: Update to version 7.71.1
Date: Tue, 11 Aug 2020 12:48:34 +0100 [thread overview]
Message-ID: <75FA280A-0699-47B2-A2D9-632AE9716FFA@ipfire.org> (raw)
In-Reply-To: <20200811081558.25891-1-ummeegge@ipfire.org>
[-- Attachment #1: Type: text/plain, Size: 7095 bytes --]
Oh no. More security issues :)
Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org>
> On 11 Aug 2020, at 09:15, Erik Kapfer <ummeegge(a)ipfire.org> wrote:
>
> Several bugfixes and vulnerabilities has been fixed since the current available version 7.64.0 .
>
> For a full overview, the changelog is located in here --> https://curl.haxx.se/changes.html,
> a security problem overview in here --> https://curl.haxx.se/docs/security.html .
>
> Signed-off-by: Erik Kapfer <ummeegge(a)ipfire.org>
> ---
> config/rootfiles/common/curl | 18 +++++++++++++++++-
> lfs/curl | 8 ++++----
> 2 files changed, 21 insertions(+), 5 deletions(-)
>
> diff --git a/config/rootfiles/common/curl b/config/rootfiles/common/curl
> index 1eb9f6f37..68926a0bb 100644
> --- a/config/rootfiles/common/curl
> +++ b/config/rootfiles/common/curl
> @@ -13,7 +13,7 @@ usr/bin/curl
> #usr/lib/libcurl.la
> #usr/lib/libcurl.so
> usr/lib/libcurl.so.4
> -usr/lib/libcurl.so.4.5.0
> +usr/lib/libcurl.so.4.6.0
> #usr/lib/pkgconfig/libcurl.pc
> #usr/share/aclocal/libcurl.m4
> #usr/share/man/man1/curl-config.1
> @@ -60,6 +60,7 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLINFO_REDIRECT_URL.3
> #usr/share/man/man3/CURLINFO_REQUEST_SIZE.3
> #usr/share/man/man3/CURLINFO_RESPONSE_CODE.3
> +#usr/share/man/man3/CURLINFO_RETRY_AFTER.3
> #usr/share/man/man3/CURLINFO_RTSP_CLIENT_CSEQ.3
> #usr/share/man/man3/CURLINFO_RTSP_CSEQ_RECV.3
> #usr/share/man/man3/CURLINFO_RTSP_SERVER_CSEQ.3
> @@ -84,6 +85,7 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE.3
> #usr/share/man/man3/CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE.3
> #usr/share/man/man3/CURLMOPT_MAXCONNECTS.3
> +#usr/share/man/man3/CURLMOPT_MAX_CONCURRENT_STREAMS.3
> #usr/share/man/man3/CURLMOPT_MAX_HOST_CONNECTIONS.3
> #usr/share/man/man3/CURLMOPT_MAX_PIPELINE_LENGTH.3
> #usr/share/man/man3/CURLMOPT_MAX_TOTAL_CONNECTIONS.3
> @@ -100,6 +102,8 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLOPT_ACCEPTTIMEOUT_MS.3
> #usr/share/man/man3/CURLOPT_ACCEPT_ENCODING.3
> #usr/share/man/man3/CURLOPT_ADDRESS_SCOPE.3
> +#usr/share/man/man3/CURLOPT_ALTSVC.3
> +#usr/share/man/man3/CURLOPT_ALTSVC_CTRL.3
> #usr/share/man/man3/CURLOPT_APPEND.3
> #usr/share/man/man3/CURLOPT_AUTOREFERER.3
> #usr/share/man/man3/CURLOPT_BUFFERSIZE.3
> @@ -190,6 +194,7 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLOPT_IOCTLFUNCTION.3
> #usr/share/man/man3/CURLOPT_IPRESOLVE.3
> #usr/share/man/man3/CURLOPT_ISSUERCERT.3
> +#usr/share/man/man3/CURLOPT_ISSUERCERT_BLOB.3
> #usr/share/man/man3/CURLOPT_KEEP_SENDING_ON_ERROR.3
> #usr/share/man/man3/CURLOPT_KEYPASSWD.3
> #usr/share/man/man3/CURLOPT_KRBLEVEL.3
> @@ -201,6 +206,8 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLOPT_MAIL_AUTH.3
> #usr/share/man/man3/CURLOPT_MAIL_FROM.3
> #usr/share/man/man3/CURLOPT_MAIL_RCPT.3
> +#usr/share/man/man3/CURLOPT_MAIL_RCPT_ALLLOWFAILS.3
> +#usr/share/man/man3/CURLOPT_MAXAGE_CONN.3
> #usr/share/man/man3/CURLOPT_MAXCONNECTS.3
> #usr/share/man/man3/CURLOPT_MAXFILESIZE.3
> #usr/share/man/man3/CURLOPT_MAXFILESIZE_LARGE.3
> @@ -246,13 +253,17 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLOPT_PROXY_CAINFO.3
> #usr/share/man/man3/CURLOPT_PROXY_CAPATH.3
> #usr/share/man/man3/CURLOPT_PROXY_CRLFILE.3
> +#usr/share/man/man3/CURLOPT_PROXY_ISSUERCERT.3
> +#usr/share/man/man3/CURLOPT_PROXY_ISSUERCERT_BLOB.3
> #usr/share/man/man3/CURLOPT_PROXY_KEYPASSWD.3
> #usr/share/man/man3/CURLOPT_PROXY_PINNEDPUBLICKEY.3
> #usr/share/man/man3/CURLOPT_PROXY_SERVICE_NAME.3
> #usr/share/man/man3/CURLOPT_PROXY_SSLCERT.3
> #usr/share/man/man3/CURLOPT_PROXY_SSLCERTTYPE.3
> +#usr/share/man/man3/CURLOPT_PROXY_SSLCERT_BLOB.3
> #usr/share/man/man3/CURLOPT_PROXY_SSLKEY.3
> #usr/share/man/man3/CURLOPT_PROXY_SSLKEYTYPE.3
> +#usr/share/man/man3/CURLOPT_PROXY_SSLKEY_BLOB.3
> #usr/share/man/man3/CURLOPT_PROXY_SSLVERSION.3
> #usr/share/man/man3/CURLOPT_PROXY_SSL_CIPHER_LIST.3
> #usr/share/man/man3/CURLOPT_PROXY_SSL_OPTIONS.3
> @@ -283,6 +294,7 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLOPT_RTSP_SESSION_ID.3
> #usr/share/man/man3/CURLOPT_RTSP_STREAM_URI.3
> #usr/share/man/man3/CURLOPT_RTSP_TRANSPORT.3
> +#usr/share/man/man3/CURLOPT_SASL_AUTHZID.3
> #usr/share/man/man3/CURLOPT_SASL_IR.3
> #usr/share/man/man3/CURLOPT_SEEKDATA.3
> #usr/share/man/man3/CURLOPT_SEEKFUNCTION.3
> @@ -303,10 +315,12 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/CURLOPT_SSH_PUBLIC_KEYFILE.3
> #usr/share/man/man3/CURLOPT_SSLCERT.3
> #usr/share/man/man3/CURLOPT_SSLCERTTYPE.3
> +#usr/share/man/man3/CURLOPT_SSLCERT_BLOB.3
> #usr/share/man/man3/CURLOPT_SSLENGINE.3
> #usr/share/man/man3/CURLOPT_SSLENGINE_DEFAULT.3
> #usr/share/man/man3/CURLOPT_SSLKEY.3
> #usr/share/man/man3/CURLOPT_SSLKEYTYPE.3
> +#usr/share/man/man3/CURLOPT_SSLKEY_BLOB.3
> #usr/share/man/man3/CURLOPT_SSLVERSION.3
> #usr/share/man/man3/CURLOPT_SSL_CIPHER_LIST.3
> #usr/share/man/man3/CURLOPT_SSL_CTX_DATA.3
> @@ -407,6 +421,7 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/curl_multi_info_read.3
> #usr/share/man/man3/curl_multi_init.3
> #usr/share/man/man3/curl_multi_perform.3
> +#usr/share/man/man3/curl_multi_poll.3
> #usr/share/man/man3/curl_multi_remove_handle.3
> #usr/share/man/man3/curl_multi_setopt.3
> #usr/share/man/man3/curl_multi_socket.3
> @@ -415,6 +430,7 @@ usr/lib/libcurl.so.4.5.0
> #usr/share/man/man3/curl_multi_strerror.3
> #usr/share/man/man3/curl_multi_timeout.3
> #usr/share/man/man3/curl_multi_wait.3
> +#usr/share/man/man3/curl_multi_wakeup.3
> #usr/share/man/man3/curl_share_cleanup.3
> #usr/share/man/man3/curl_share_init.3
> #usr/share/man/man3/curl_share_setopt.3
> diff --git a/lfs/curl b/lfs/curl
> index e57bbbf45..34dfe90e8 100644
> --- a/lfs/curl
> +++ b/lfs/curl
> @@ -1,7 +1,7 @@
> ###############################################################################
> # #
> # IPFire.org - A linux based firewall #
> -# Copyright (C) 2007-2018 IPFire Team <info(a)ipfire.org> #
> +# Copyright (C) 2007-2020 IPFire Team <info(a)ipfire.org> #
> # #
> # This program is free software: you can redistribute it and/or modify #
> # it under the terms of the GNU General Public License as published by #
> @@ -24,10 +24,10 @@
>
> include Config
>
> -VER = 7.64.0
> +VER = 7.71.1
>
> THISAPP = curl-$(VER)
> -DL_FILE = $(THISAPP).tar.gz
> +DL_FILE = $(THISAPP).tar.xz
> DL_FROM = $(URL_IPFIRE)
> DIR_APP = $(DIR_SRC)/$(THISAPP)
> TARGET = $(DIR_INFO)/$(THISAPP)
> @@ -40,7 +40,7 @@ objects = $(DL_FILE)
>
> $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
>
> -$(DL_FILE)_MD5 = a026740d599a32bcbbe6e70679397899
> +$(DL_FILE)_MD5 = b54b386057846ce3edd3584b19741569
>
> install : $(TARGET)
>
> --
> 2.20.1
>
prev parent reply other threads:[~2020-08-11 11:48 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-08-11 8:15 Erik Kapfer
2020-08-11 11:48 ` Michael Tremer [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=75FA280A-0699-47B2-A2D9-632AE9716FFA@ipfire.org \
--to=michael.tremer@ipfire.org \
--cc=development@lists.ipfire.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox