pool/curl
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 1087550 from home:pmonrealgonzalez:branches:devel:libraries:c_c++

Browse Source 
* Security fixes:
    - UAF in SSH sha256 fingerprint [bsc#1211230, CVE-2023-28319]
    - siglongjmp race condition [bsc#1211231, CVE-2023-28320]
    - IDN wildcard match [bsc#1211232, CVE-2023-28321]
    - POST-after-PUT confusion [bsc#1211233, CVE-2023-28322]
    - See also: https://curl.se/docs/security.html
    - See full changelog here: https://curl.se/changes.html#8_1_0

OBS-URL: https://build.opensuse.org/request/show/1087550
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/curl?expand=0&rev=334
This commit is contained in:
Pedro Monreal Gonzalez 2023-05-17 11:44:39 +00:00 committed by Git OBS Bridge
parent acc7ff54e6
commit ffa320e2d1
2 changed files with 7 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
curl-8.0.1.tar.xz.asc
View File

@ -1,11 +0,0 @@
-----BEGIN PGP SIGNATURE-----
iQEzBAABCgAdFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAmQYZbIACgkQXMkI/bce
EsIBhQf/WBWHXCc2+NoyjY/AOO0iGhx6ulp1u57AzDCiIpBSbzJYfk6LpmlUcAo+
urAje0GbgTBIjs4oG+Hnr8nSqo05TWuQK43g/4BFcFv3Q8aFX2w3i6x/at9zKULy
yRTAvhyhTXcJsZR+MKWHltHhiO5g/d4P46+OBG7f1sY93ztBiFLdrZhMu5v27RjX
G8sgysXDzZP/VEGEuQsRPNjlQPMsO3ZyOCcUsj+L6u1nWW2Ru1c/7vvGzZtQEONi
fB3X2dX2QUdG7vR1t02aFgjzws01TmBvN0XW2EbDT36IEtngTGlgIXMWGcXQlVyG
6J0DqzOrXntl6HTLHIfHAorrzWvV3A==
=mEwS
-----END PGP SIGNATURE-----

8
curl.changes
View File

@ -2,13 +2,19 @@
Wed May 17 08:13:32 UTC 2023 - David Anes <david.anes@suse.com>
- Update to 8.1.0:
* Security fixes:
- UAF in SSH sha256 fingerprint [bsc#1211230, CVE-2023-28319]
- siglongjmp race condition [bsc#1211231, CVE-2023-28320]
- IDN wildcard match [bsc#1211232, CVE-2023-28321]
- POST-after-PUT confusion [bsc#1211233, CVE-2023-28322]
- See also: https://curl.se/docs/security.html
* Changes:
- curl: add --proxy-http2
- CURLPROXY_HTTPS2: for HTTPS proxy that may speak HTTP/2
- hostip: refuse to resolve the .onion TLD
- tool_writeout: add URL component variables
* Bugfixes:
- Many bugfixes. See full changelog here: https://curl.se/changes.html#8_1_0
- See full changelog here: https://curl.se/changes.html#8_1_0
-------------------------------------------------------------------
Tue Mar 21 08:44:52 UTC 2023 - Pedro Monreal <pmonreal@suse.com>