From cb94451b5b50e362e46035b2b9039b796dc20b9fa8de402e420ab2401945c097 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ismail=20D=C3=B6nmez?= Date: Wed, 14 Jun 2017 08:46:57 +0000 Subject: [PATCH] - Update to 7.54.1 Changes: * curl now shows release date in --version output Bugfixes: * Fixes CVE-2017-9502: default protocol drive letter buffer overflow * openssl: fix memory leak in servercert * curl: set a 100K buffer size by default * nss: do not leak PKCS #11 slot while loading a key * nss: load libnssckbi.so if no other trust is specified * curl: use utimes instead of obsolescent utime when available * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size * curl: non-boolean command line args reject --no- prefixes * telnet: Write full buffer instead of byte-by-byte * curl: remove --environment and tool_writeenv.c * curl: generate the --help output * curl.1: clarify --config * curl.1: mention --oauth2-bearer's argument * ssh: fix memory leak in disconnect due to timeout * redirect: store the "would redirect to" URL when max redirs is reached * file: make speedcheck use current time for checks * urlglob: fix division by zero OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=191 --- curl-7.54.0.tar.lzma | 3 --- curl-7.54.0.tar.lzma.asc | 11 ----------- curl-7.54.1.tar.lzma | 3 +++ curl-7.54.1.tar.lzma.asc | 11 +++++++++++ curl.changes | 26 ++++++++++++++++++++++++++ curl.spec | 2 +- 6 files changed, 41 insertions(+), 15 deletions(-) delete mode 100644 curl-7.54.0.tar.lzma delete mode 100644 curl-7.54.0.tar.lzma.asc create mode 100644 curl-7.54.1.tar.lzma create mode 100644 curl-7.54.1.tar.lzma.asc diff --git a/curl-7.54.0.tar.lzma b/curl-7.54.0.tar.lzma deleted file mode 100644 index 1127f98..0000000 --- a/curl-7.54.0.tar.lzma +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:cd6aa6039f13e0b06e0a93e1b93754f6dc07f444812bb6c32be75a8f28c4070a -size 2084912 diff --git a/curl-7.54.0.tar.lzma.asc b/curl-7.54.0.tar.lzma.asc deleted file mode 100644 index 5e760ad..0000000 --- a/curl-7.54.0.tar.lzma.asc +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQEzBAABCgAdFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAlj2+VgACgkQXMkI/bce -EsL64ggArqbQBdEOW1mDk2+89N7cvUH3D464INWi+E8ub3UZagOy0819VaHw7Zkn -1ijkK5FS/FU97Ep8PHOpgAQgjMBFlolzTgRuv7rQEJLTiD77c85o/c4wMJ5rheXJ -I3hReQUUEO7B+g+aC+qca/pelRdvKw84h9YI1me0yL5+M6rqKuY8kvFhISnTm2q8 -wqGbhTIoeil2nPvTXpKmcNu+3Uvv38luEGxFn+NpiiT1hGWLc82n4aLXISV3sjUu -kBwCop+H3I2/KVIMtJ/BjlDEkgqveHfClIVAaw7J89PhuVXgLQhPhTrNhY6xrs65 -JW0avsaMq7vEkTwY4K4+wfbl07QVJg== -=EHd1 ------END PGP SIGNATURE----- diff --git a/curl-7.54.1.tar.lzma b/curl-7.54.1.tar.lzma new file mode 100644 index 0000000..67724a2 --- /dev/null +++ b/curl-7.54.1.tar.lzma @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2b7af34d4900887e0b4e0a9f545b9511ff774d07151ae4976485060d3e1bdb6e +size 2101798 diff --git a/curl-7.54.1.tar.lzma.asc b/curl-7.54.1.tar.lzma.asc new file mode 100644 index 0000000..2f8307d --- /dev/null +++ b/curl-7.54.1.tar.lzma.asc @@ -0,0 +1,11 @@ +-----BEGIN PGP SIGNATURE----- + +iQEzBAABCgAdFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAllA1CcACgkQXMkI/bce +EsIvtQf8CSC7sFHaJzQY0JqrGQwbtO6DT5OShv1lEHlzg/2KC8/yp94n/U9eBkdt +7/EPnFJ6hY+CVCMSv+LvpEyNTbkqBjwtshlDQTgDiPkSt265Z3qxayITN8fdDZnJ +ylnDb9c1InprXuqLlhbtWILC25ZcC39dQFWIJcsmfd3ylml4VK7Z9tEhEN8W71MR +OaQyqSu9jjO5nTof7dVu2aAhG50EoqjuCKUuYfWIJcEM2Lo4RDnicZNrZaOyxuu2 +EKeE9lmnNejgUzPN1WZ2ySocDdZzdA5CTjAbaRwAXBT840OZSUEqktrR4C2ECrTq +rbhBlEwUKuPNvGpkGymaHf6vQFAqGQ== +=gmuC +-----END PGP SIGNATURE----- diff --git a/curl.changes b/curl.changes index ce040cd..069d637 100644 --- a/curl.changes +++ b/curl.changes @@ -1,3 +1,29 @@ +------------------------------------------------------------------- +Wed Jun 14 08:36:07 UTC 2017 - idonmez@suse.com + +- Update to 7.54.1 + Changes: + * curl now shows release date in --version output + Bugfixes: + * Fixes CVE-2017-9502: default protocol drive letter buffer overflow + * openssl: fix memory leak in servercert + * curl: set a 100K buffer size by default + * nss: do not leak PKCS #11 slot while loading a key + * nss: load libnssckbi.so if no other trust is specified + * curl: use utimes instead of obsolescent utime when available + * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE + * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size + * curl: non-boolean command line args reject --no- prefixes + * telnet: Write full buffer instead of byte-by-byte + * curl: remove --environment and tool_writeenv.c + * curl: generate the --help output + * curl.1: clarify --config + * curl.1: mention --oauth2-bearer's argument + * ssh: fix memory leak in disconnect due to timeout + * redirect: store the "would redirect to" URL when max redirs is reached + * file: make speedcheck use current time for checks + * urlglob: fix division by zero + ------------------------------------------------------------------- Wed Apr 19 08:17:17 UTC 2017 - idonmez@suse.com diff --git a/curl.spec b/curl.spec index df4cec5..df8d20c 100644 --- a/curl.spec +++ b/curl.spec @@ -20,7 +20,7 @@ %bcond_with mozilla_nss %bcond_without testsuite Name: curl -Version: 7.54.0 +Version: 7.54.1 Release: 0 Summary: A Tool for Transferring Data from URLs License: BSD-3-Clause and MIT