- Update to 8.9.1:

* Security fixes:
    - curl: ASN.1 date parser overread [bsc#1228535, CVE-2024-7264]
  * Bugfixes:
    - cmake: detect 'libssh' via 'pkg-config'
    - cmake: detect 'nettle' when building with GnuTLS
    - connect: fix connection shutdown for event based processing
    - curl: more defensive socket code for --ip-tos
    - CURLOPT_SSL_CTX_FUNCTION.md: mention CA caching
    - CURLSHOPT_SHARE.md: mention sessions/cookies as not thread-safe
    - ftpserver.pl: make POP3 LIST serve content from the test file
    - lib: survive some NULL input args
    - os400: build cli manual.
    - os400: workaround an IBM ASCII run-time library bug
    - transfer: speed limiting fix for 32bit systems
    - vtls: avoid forward declaration in MultiSSL builds
    - x509asn1: unittests and fixes for gtime2str

OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=373

curl-8.9.0.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ff09b2791ca56d25fd5c3f3a4927dce7c8a9dc4182200c487ca889fba1fdd412
-size 2781828

curl-8.9.0.tar.xz.asc

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCgAdFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAmagncYACgkQXMkI/bce
-EsIf4wf/RVl/4hrfHsntyMCoM/SnY/PZlWommcAnfmSff0OAKV6OvtINkPUAyBdg
-T1PGwkbPOLHB93NBFOm7bjSixbNgRL58gR3Rh+kvMKzx7G2Ug/gpWH3c8JHvwsHw
-S4TCjuVGYsAWDn9/3y3qQNypmUMV8tIWslXoya5F9GtrnJEFItQ1efPPIra9nTtx
-9XRrmB2/EUvPsdKmkztNP8NYaEyYDVPst+1HUv8+UdK5GL1wG8rAp2vPiofvHRDe
-l9AiGu+d9U+UuqO8vNhqc46ii+h4Uj8Sk51mNf88TKAhEdKvPUMEaaySQzu23CKr
-TCyqjvRyY12mEGT0bOX2xIsf0C665g==
-=GGbI
------END PGP SIGNATURE-----

curl-8.9.1.tar.xz.asc

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCgAdFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAmap30kACgkQXMkI/bce
+EsKX+wf/brccw5rGTAbmjj7WGBfbAmwrSsDexTXRiEBXT/+qhkWIplN6wdtsZ86I
+tUraaapoyvRKLa3Wxlv9fSF/xXji+5lhO/W9pfWxwZNeSZFiOgKcK/Li4Fx0c7t4
+WpxkAbRvbJreA40BR32qSgnNNjKU5QX/ivf67B1EFL71kgsCW/QczB6mcuxszlkN
+ro39Jb8hDtnAD3hHXrTEaW3lOEgf/Jo/a1Zii3+W3OkW+uZHwzUoqe+HLGHYM2vW
+Q3hBVQaEWmNIwArA73s/kOiFATLthUTvSJO56ebLQJFHJf61cwqSsg2o07i5SqEc
+QlKzV/h7ydbBWdHiSTpCMxue7tLUZw==
+=EiUG
+-----END PGP SIGNATURE-----

curl.changes

@@ -1,3 +1,24 @@
+-------------------------------------------------------------------
+Wed Jul 31 08:20:44 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 8.9.1:
+  * Security fixes:
+    - curl: ASN.1 date parser overread [bsc#1228535, CVE-2024-7264]
+  * Bugfixes:
+    - cmake: detect 'libssh' via 'pkg-config'
+    - cmake: detect 'nettle' when building with GnuTLS
+    - connect: fix connection shutdown for event based processing
+    - curl: more defensive socket code for --ip-tos
+    - CURLOPT_SSL_CTX_FUNCTION.md: mention CA caching
+    - CURLSHOPT_SHARE.md: mention sessions/cookies as not thread-safe
+    - ftpserver.pl: make POP3 LIST serve content from the test file
+    - lib: survive some NULL input args
+    - os400: build cli manual.
+    - os400: workaround an IBM ASCII run-time library bug
+    - transfer: speed limiting fix for 32bit systems
+    - vtls: avoid forward declaration in MultiSSL builds
+    - x509asn1: unittests and fixes for gtime2str
+
 -------------------------------------------------------------------
 Wed Jul 24 07:07:57 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
 

curl.spec

@@ -29,7 +29,7 @@
 %endif
 
 Name:           curl%{?psuffix}
-Version:        8.9.0
+Version:        8.9.1
 Release:        0
 Summary:        A Tool for Transferring Data from URLs
 License:        curl