From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Tremer To: development@lists.ipfire.org Subject: Re: [PATCH] curl: Update to version 7.71.1 Date: Tue, 11 Aug 2020 12:48:34 +0100 Message-ID: <75FA280A-0699-47B2-A2D9-632AE9716FFA@ipfire.org> In-Reply-To: <20200811081558.25891-1-ummeegge@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3260509935749753001==" List-Id: --===============3260509935749753001== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Oh no. More security issues :) Reviewed-by: Michael Tremer > On 11 Aug 2020, at 09:15, Erik Kapfer wrote: >=20 > Several bugfixes and vulnerabilities has been fixed since the current avail= able version 7.64.0 . >=20 > For a full overview, the changelog is located in here --> https://curl.haxx= .se/changes.html, > a security problem overview in here --> https://curl.haxx.se/docs/security.= html . >=20 > Signed-off-by: Erik Kapfer > --- > config/rootfiles/common/curl | 18 +++++++++++++++++- > lfs/curl | 8 ++++---- > 2 files changed, 21 insertions(+), 5 deletions(-) >=20 > diff --git a/config/rootfiles/common/curl b/config/rootfiles/common/curl > index 1eb9f6f37..68926a0bb 100644 > --- a/config/rootfiles/common/curl > +++ b/config/rootfiles/common/curl > @@ -13,7 +13,7 @@ usr/bin/curl > #usr/lib/libcurl.la > #usr/lib/libcurl.so > usr/lib/libcurl.so.4 > -usr/lib/libcurl.so.4.5.0 > +usr/lib/libcurl.so.4.6.0 > #usr/lib/pkgconfig/libcurl.pc > #usr/share/aclocal/libcurl.m4 > #usr/share/man/man1/curl-config.1 > @@ -60,6 +60,7 @@ usr/lib/libcurl.so.4.5.0 > #usr/share/man/man3/CURLINFO_REDIRECT_URL.3 > #usr/share/man/man3/CURLINFO_REQUEST_SIZE.3 > #usr/share/man/man3/CURLINFO_RESPONSE_CODE.3 > +#usr/share/man/man3/CURLINFO_RETRY_AFTER.3 > #usr/share/man/man3/CURLINFO_RTSP_CLIENT_CSEQ.3 > #usr/share/man/man3/CURLINFO_RTSP_CSEQ_RECV.3 > #usr/share/man/man3/CURLINFO_RTSP_SERVER_CSEQ.3 > @@ -84,6 +85,7 @@ usr/lib/libcurl.so.4.5.0 > #usr/share/man/man3/CURLMOPT_CHUNK_LENGTH_PENALTY_SIZE.3 > #usr/share/man/man3/CURLMOPT_CONTENT_LENGTH_PENALTY_SIZE.3 > #usr/share/man/man3/CURLMOPT_MAXCONNECTS.3 > +#usr/share/man/man3/CURLMOPT_MAX_CONCURRENT_STREAMS.3 > #usr/share/man/man3/CURLMOPT_MAX_HOST_CONNECTIONS.3 > #usr/share/man/man3/CURLMOPT_MAX_PIPELINE_LENGTH.3 > #usr/share/man/man3/CURLMOPT_MAX_TOTAL_CONNECTIONS.3 > @@ -100,6 +102,8 @@ usr/lib/libcurl.so.4.5.0 > #usr/share/man/man3/CURLOPT_ACCEPTTIMEOUT_MS.3 > #usr/share/man/man3/CURLOPT_ACCEPT_ENCODING.3 > #usr/share/man/man3/CURLOPT_ADDRESS_SCOPE.3 > +#usr/share/man/man3/CURLOPT_ALTSVC.3 > +#usr/share/man/man3/CURLOPT_ALTSVC_CTRL.3 > #usr/share/man/man3/CURLOPT_APPEND.3 > #usr/share/man/man3/CURLOPT_AUTOREFERER.3 > #usr/share/man/man3/CURLOPT_BUFFERSIZE.3 > @@ -190,6 +194,7 @@ usr/lib/libcurl.so.4.5.0 > #usr/share/man/man3/CURLOPT_IOCTLFUNCTION.3 > #usr/share/man/man3/CURLOPT_IPRESOLVE.3 > #usr/share/man/man3/CURLOPT_ISSUERCERT.3 > +#usr/share/man/man3/CURLOPT_ISSUERCERT_BLOB.3 > #usr/share/man/man3/CURLOPT_KEEP_SENDING_ON_ERROR.3 > #usr/share/man/man3/CURLOPT_KEYPASSWD.3 > #usr/share/man/man3/CURLOPT_KRBLEVEL.3 > @@ -201,6 +206,8 @@ usr/lib/libcurl.so.4.5.0 > #usr/share/man/man3/CURLOPT_MAIL_AUTH.3 > #usr/share/man/man3/CURLOPT_MAIL_FROM.3 > #usr/share/man/man3/CURLOPT_MAIL_RCPT.3 > +#usr/share/man/man3/CURLOPT_MAIL_RCPT_ALLLOWFAILS.3 > +#usr/share/man/man3/CURLOPT_MAXAGE_CONN.3 > #usr/share/man/man3/CURLOPT_MAXCONNECTS.3 > #usr/share/man/man3/CURLOPT_MAXFILESIZE.3 > #usr/share/man/man3/CURLOPT_MAXFILESIZE_LARGE.3 > @@ -246,13 +253,17 @@ usr/lib/libcurl.so.4.5.0 > #usr/share/man/man3/CURLOPT_PROXY_CAINFO.3 > #usr/share/man/man3/CURLOPT_PROXY_CAPATH.3 > #usr/share/man/man3/CURLOPT_PROXY_CRLFILE.3 > +#usr/share/man/man3/CURLOPT_PROXY_ISSUERCERT.3 > +#usr/share/man/man3/CURLOPT_PROXY_ISSUERCERT_BLOB.3 > #usr/share/man/man3/CURLOPT_PROXY_KEYPASSWD.3 > #usr/share/man/man3/CURLOPT_PROXY_PINNEDPUBLICKEY.3 > #usr/share/man/man3/CURLOPT_PROXY_SERVICE_NAME.3 > #usr/share/man/man3/CURLOPT_PROXY_SSLCERT.3 > #usr/share/man/man3/CURLOPT_PROXY_SSLCERTTYPE.3 > +#usr/share/man/man3/CURLOPT_PROXY_SSLCERT_BLOB.3 > #usr/share/man/man3/CURLOPT_PROXY_SSLKEY.3 > #usr/share/man/man3/CURLOPT_PROXY_SSLKEYTYPE.3 > +#usr/share/man/man3/CURLOPT_PROXY_SSLKEY_BLOB.3 > #usr/share/man/man3/CURLOPT_PROXY_SSLVERSION.3 > #usr/share/man/man3/CURLOPT_PROXY_SSL_CIPHER_LIST.3 > #usr/share/man/man3/CURLOPT_PROXY_SSL_OPTIONS.3 > @@ -283,6 +294,7 @@ usr/lib/libcurl.so.4.5.0 > #usr/share/man/man3/CURLOPT_RTSP_SESSION_ID.3 > #usr/share/man/man3/CURLOPT_RTSP_STREAM_URI.3 > #usr/share/man/man3/CURLOPT_RTSP_TRANSPORT.3 > +#usr/share/man/man3/CURLOPT_SASL_AUTHZID.3 > #usr/share/man/man3/CURLOPT_SASL_IR.3 > #usr/share/man/man3/CURLOPT_SEEKDATA.3 > #usr/share/man/man3/CURLOPT_SEEKFUNCTION.3 > @@ -303,10 +315,12 @@ usr/lib/libcurl.so.4.5.0 > #usr/share/man/man3/CURLOPT_SSH_PUBLIC_KEYFILE.3 > #usr/share/man/man3/CURLOPT_SSLCERT.3 > #usr/share/man/man3/CURLOPT_SSLCERTTYPE.3 > +#usr/share/man/man3/CURLOPT_SSLCERT_BLOB.3 > #usr/share/man/man3/CURLOPT_SSLENGINE.3 > #usr/share/man/man3/CURLOPT_SSLENGINE_DEFAULT.3 > #usr/share/man/man3/CURLOPT_SSLKEY.3 > #usr/share/man/man3/CURLOPT_SSLKEYTYPE.3 > +#usr/share/man/man3/CURLOPT_SSLKEY_BLOB.3 > #usr/share/man/man3/CURLOPT_SSLVERSION.3 > #usr/share/man/man3/CURLOPT_SSL_CIPHER_LIST.3 > #usr/share/man/man3/CURLOPT_SSL_CTX_DATA.3 > @@ -407,6 +421,7 @@ usr/lib/libcurl.so.4.5.0 > #usr/share/man/man3/curl_multi_info_read.3 > #usr/share/man/man3/curl_multi_init.3 > #usr/share/man/man3/curl_multi_perform.3 > +#usr/share/man/man3/curl_multi_poll.3 > #usr/share/man/man3/curl_multi_remove_handle.3 > #usr/share/man/man3/curl_multi_setopt.3 > #usr/share/man/man3/curl_multi_socket.3 > @@ -415,6 +430,7 @@ usr/lib/libcurl.so.4.5.0 > #usr/share/man/man3/curl_multi_strerror.3 > #usr/share/man/man3/curl_multi_timeout.3 > #usr/share/man/man3/curl_multi_wait.3 > +#usr/share/man/man3/curl_multi_wakeup.3 > #usr/share/man/man3/curl_share_cleanup.3 > #usr/share/man/man3/curl_share_init.3 > #usr/share/man/man3/curl_share_setopt.3 > diff --git a/lfs/curl b/lfs/curl > index e57bbbf45..34dfe90e8 100644 > --- a/lfs/curl > +++ b/lfs/curl > @@ -1,7 +1,7 @@ > ###########################################################################= #### > # = # > # IPFire.org - A linux based firewall = # > -# Copyright (C) 2007-2018 IPFire Team = # > +# Copyright (C) 2007-2020 IPFire Team = # > # = # > # This program is free software: you can redistribute it and/or modify = # > # it under the terms of the GNU General Public License as published by = # > @@ -24,10 +24,10 @@ >=20 > include Config >=20 > -VER =3D 7.64.0 > +VER =3D 7.71.1 >=20 > THISAPP =3D curl-$(VER) > -DL_FILE =3D $(THISAPP).tar.gz > +DL_FILE =3D $(THISAPP).tar.xz > DL_FROM =3D $(URL_IPFIRE) > DIR_APP =3D $(DIR_SRC)/$(THISAPP) > TARGET =3D $(DIR_INFO)/$(THISAPP) > @@ -40,7 +40,7 @@ objects =3D $(DL_FILE) >=20 > $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) >=20 > -$(DL_FILE)_MD5 =3D a026740d599a32bcbbe6e70679397899 > +$(DL_FILE)_MD5 =3D b54b386057846ce3edd3584b19741569 >=20 > install : $(TARGET) >=20 > --=20 > 2.20.1 >=20 --===============3260509935749753001==--