Accepting request 1110821 from devel:libraries:c_c++

OBS-URL: https://build.opensuse.org/request/show/1110821
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/curl?expand=0&rev=189

curl-8.2.1.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:dd322f6bd0a20e6cebdfd388f69e98c3d183bed792cf4713c8a7ef498cba4894
-size 2631932

curl-8.2.1.tar.xz.asc

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCgAdFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAmTAuTkACgkQXMkI/bce
-EsKcQggAuOwVxbvwd2ppiLS84k2PelwcEuIB5f7XbZzFE9FsmiQhlwe0jRQ6yuU4
-HqFZj35PFbJlVZ8or6UE+//QdAjPjS8wFAeMTXr3p7yqrMSmQsF+BNqbzw9Wnp5c
-g8IzmyOTEV75FvEA8BhItICTimVTQf5o1JrxfNlUMhqu+ATyDQTfnFsPvnbKN5Mo
-gDIAvB8aDxpKxsmPUKjviBSUvFrdEDUXXhvXXVqat7FX7tEgBeo9AZqOKYxYi6lj
-JGlDMqBZojd89CGhxcQv2YIkYrUOFwMrigWdCXsSJ73YD3eSWkTsvesIU92XUVKW
-Ri2+Sqj3R/qBlW6+OPE3YnFeqfG/+A==
-=b2Q+
------END PGP SIGNATURE-----

curl-8.3.0.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:376d627767d6c4f05105ab6d497b0d9aba7111770dd9d995225478209c37ea63
+size 2641764

curl-8.3.0.tar.xz.asc

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAmUBVMsACgkQXMkI/bce
+EsLSqAf/Su2NkC5/WveXmP4ShKJ/fqO8nJO+YqPo0TOF9o+15iMQY6Y4D0TY4J7F
+EL4s2BCJ3N+mQatyy8vftBIXSBWJE+f/ulCzIpfptx2vA5m1F6rPxpoWgiuaD/xw
+QYaOHoIzIGsPZ9LKse/VWCwJdzvK6Sq731v4YKFr9O3l0f+F++zc04ACq8lJH205
+KYuLKJZfDOjlaozC9uhblpHpf2qgskSvSi5FmzTFlABLcFA4gYTJ3f7dKF0yvMQ2
+SEZm+zN1UTwRHeLU3mP6RCyUvle/8zkZf6+vfJ78OXS7OTt+BcNyHSJOwSl9dmE1
+outJHEDrtt3RU6IDhAFEIT1zL3ifng==
+=xYP1
+-----END PGP SIGNATURE-----

curl.changes

@@ -1,3 +1,64 @@
+-------------------------------------------------------------------
+Wed Sep 13 06:45:33 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 8.3.0: [bsc#1215026, CVE-2023-38039]
+  * Changes:
+    - curl: make %output{} in -w specify a file to write to
+    - gskit: remove
+    - lib: --disable-bindlocal builds curl without local binding support
+    - nss: remove support for this TLS library
+    - tool: add "variable" support
+    - trace: make tracing available in non-debug builds
+    - url: change default value for CURLOPT_MAXREDIRS to 30
+    - urlapi: CURLU_PUNY2IDN - convert from punycode to IDN name
+  * Bugfixes:
+    - altsvc: accept and parse IPv6 addresses in response headers
+    - asyn-ares: reduce timeout to 2000ms
+    - aws-sigv4: canonicalize the query
+    - aws-sigv4: fix having date header twice in some cases
+    - aws-sigv4: handle no-value user header entries
+    - c-hyper: adjust the hyper to curlcode conversion
+    - c-hyper: fix memory leaks in `Curl_http`
+    - cf-haproxy: make CURLOPT_HAPROXY_CLIENT_IP set the *source* IP
+    - cf-socket: log successful interface bind
+    - cmake: add GnuTLS option
+    - cmake: add support for `CURL_DEFAULT_SSL_BACKEND`
+    - cmake: detect `SSL_set0_wbio` in OpenSSL
+    - configure: trust pkg-config when it's used for zlib
+    - configure: use the pkg-config --libs-only-l flag for libssh2
+    - connect: stop halving the remaining timeout when less than 600 ms left
+    - crypto: ensure crypto initialization works
+    - digest: Use hostname to generate spn instead of realm
+    - ftp: fix temp write of ipv6 address
+    - headers: accept leading whitespaces on first response header
+    - http2: fix in h2 proxy tunnel: progress in ingress on sending
+    - http3/ngtcp2: shorten handshake, trace cleanup
+    - http3: quiche, handshake optimization, trace cleanup
+    - http: close the connection after a late 417 is received
+    - http: fix sending of large requests
+    - http: return error when receiving too large header set
+    - lib: fix null ptr derefs and uninitialized vars (h2/h3)
+    - lib: move mimepost data from ->req.p.http to ->state
+    - list-only.d: mention SFTP as supported protocol
+    - ngtcp2: fix handling of large requests
+    - openssl: auto-detect `SSL_R_TLSV13_ALERT_CERTIFICATE_REQUIRED`
+    - openssl: clear error queue after SSL_shutdown
+    - openssl: make aws-lc version support OCSP
+    - openssl: Support async cert verify callback
+    - openssl: switch to modern init for LibreSSL 2.7.0+
+    - openssl: when CURLOPT_SSL_CTX_FUNCTION is registered, init x509 store before
+    - quic: don't set SNI if hostname is an IP address
+    - quiche: adjust quiche `QUIC_IDLE_TIMEOUT` to 60s
+    - quiche: enable quiche to handle timeout events
+    - resolve: use PF_INET6 family lookups when CURL_IPRESOLVE_V6 is set
+    - schannel: verify hostname independent of verify cert
+    - tool_filetime: make -z work with file dates before 1970
+    - tool_operate: allow both SSL_CERT_FILE and SSL_CERT_DIR
+    - tool_operate: make aws-sigv4 not require TLS to be used
+    - transfer: also stop the sending on closed connection
+    - urlapi: fix heap buffer overflow
+    - urlapi: setting a blank URL ("") is not an ok URL
+
 -------------------------------------------------------------------
 Fri Jul 28 08:54:52 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
 

curl.spec

@@ -21,7 +21,7 @@
 # need ssl always for python-pycurl
 %bcond_without openssl
 Name:           curl
-Version:        8.2.1
+Version:        8.3.0
 Release:        0
 Summary:        A Tool for Transferring Data from URLs
 License:        curl